last executing test programs: 11.996889011s ago: executing program 1 (id=398): socket(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x4008040) sendmsg$alg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="caa15834f4de251e18bb459156f50d1ca083b922b181ae191fe1b917b6caec2e2dab9eca6fb6b75781915701533e5b3f6703d821a8cffda2ef576b9ffac7cfdfa9dd10dc8c09438aa8dd84ad04fc532d2a9d6e5eec3b956c72e2848c36a513cf2e07fef49a173bf87a138920266c0f98e63347ca6459a9e65e144ed3dedff9b318cdc2a1de7ffe1f4deafa4613e4d3", 0x8f}, {&(0x7f0000000200)="4fee6842d2178aa81d43420e5e27fd3930dcecf599544203992f4d3669d6f801597533cb5be0b5dad50d3d8a076af44a56e55d152a4a48e61eb1f7d84a2f1712bd4e6373c7cf4e854306f26acafa97ed2c6f0cec3f246d3410a0290711d69436450bce475bedad778c095f8a87689bde0a4e69d47d956898e24a838c530d648f6a693093fd9723261251d3194f5e", 0x8e}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}], 0x78, 0x80c0}, 0x20000001) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a00009"], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) 11.351251411s ago: executing program 1 (id=409): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi1\x00', 0x8000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x45809000) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000001c0)={0x8, 0x30000, 0x4, 0x1, 0x20, 0x5, 0x1, 0x7f, 0xffffffff, 0x5, 0x80, 0x1c, 0x0, 0x0, 0x0}) 11.252829543s ago: executing program 1 (id=411): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x6b, 0x52, 0x7a, 0x20, 0xbaf, 0xf6, 0xa84a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x32, 0x4, 0x0, 0x60, 0x5a, 0xb8, 0x0, [@generic={0x9, 0x4, "a47c6e072694ef"}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 10.546939444s ago: executing program 1 (id=424): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000280)={0x1ff, 0x7, 0x3, 0x0, 0x6, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xa88, 0x80000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x3, 0x2000000000005}) 10.444624475s ago: executing program 1 (id=425): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @empty}}}}) 10.297823558s ago: executing program 1 (id=428): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x2ff, [0x10005, 0x400], 0x7}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 2.333255383s ago: executing program 4 (id=522): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') pread64(r2, &(0x7f00000024c0)=""/209, 0xd1, 0x8) 1.412406278s ago: executing program 4 (id=527): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000140)={'wlan1\x00'}) 1.365608998s ago: executing program 3 (id=528): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)) 1.317369829s ago: executing program 3 (id=529): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548010203010902120001049570810904006641f392ff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$inet6_sctp(0xa, 0x1, 0x84) 1.192268571s ago: executing program 0 (id=531): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x0, 0x0) 1.061641633s ago: executing program 0 (id=532): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 944.910355ms ago: executing program 0 (id=534): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) 925.705075ms ago: executing program 2 (id=535): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x20300) 906.108276ms ago: executing program 0 (id=536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x8, 0x0, 0x0, 0x0, 0x1400, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback, {[@noop, @cipso={0x86, 0x28, 0x2, [{0x1, 0x6, "0452c131"}, {0x4, 0x12, "3412cc0d8549f293eb2087ab1395a02c"}, {0x7, 0x2}, {0x6, 0x3, 'r'}, {0x7, 0x5, "b9e8f8"}]}]}}}}}, 0x6a) 812.770937ms ago: executing program 4 (id=537): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x4}) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000001240)={0xfe, "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"}) 812.465247ms ago: executing program 4 (id=538): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 760.606018ms ago: executing program 3 (id=539): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @fd, @flat=@handle={0x73682a85, 0x110a, 0x3}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 700.714919ms ago: executing program 3 (id=540): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0xba, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 640.8352ms ago: executing program 0 (id=541): sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40111}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640aae1e40", 0x6}], 0x1}, 0x40080c0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/57, 0x39}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/127, 0x7f}, {&(0x7f0000000400)=""/13, 0xd}], 0x4}, 0x7}], 0x1, 0x1003, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 640.55162ms ago: executing program 3 (id=542): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='pids.events\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 621.02942ms ago: executing program 0 (id=543): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffda1, &(0x7f0000000000)=ANY=[@ANYBLOB="6b0ee4b3d41b1b"]) syz_usb_control_io(r0, 0x0, 0x0) 534.727572ms ago: executing program 3 (id=544): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x41, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000600)={0x20, 0x3, 0x1, "85"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 304.801715ms ago: executing program 2 (id=545): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 300.887335ms ago: executing program 2 (id=546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x45809000) 269.421485ms ago: executing program 4 (id=547): socket(0x2, 0x80805, 0x0) close(0x3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bind$netrom(0xffffffffffffffff, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(0xffffffffffffffff, 0x80) 120.948358ms ago: executing program 2 (id=548): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f00000000c0)={[{@huge_advise}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 120.721438ms ago: executing program 2 (id=549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001a1"], 0xfdef) 9.39054ms ago: executing program 4 (id=550): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 0s ago: executing program 2 (id=551): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 39.469376][ T4022] cgroup: Unknown subsys name 'net' [ 39.719345][ T4022] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 40.052262][ T4022] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 42.161631][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 42.225240][ T4039] chnl_net:caif_netlink_parms(): no params data found [ 42.240346][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 42.256507][ T4035] chnl_net:caif_netlink_parms(): no params data found [ 42.268569][ T4048] chnl_net:caif_netlink_parms(): no params data found [ 42.329638][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.331787][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.334898][ T4043] device bridge_slave_0 entered promiscuous mode [ 42.361674][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.363817][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.366511][ T4043] device bridge_slave_1 entered promiscuous mode [ 42.425428][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.430293][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.472308][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.474464][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.477382][ T4039] device bridge_slave_0 entered promiscuous mode [ 42.481731][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.484436][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.487286][ T4035] device bridge_slave_0 entered promiscuous mode [ 42.490506][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.493821][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.496529][ T4034] device bridge_slave_0 entered promiscuous mode [ 42.508650][ T4043] team0: Port device team_slave_0 added [ 42.516498][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.518525][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.521224][ T4039] device bridge_slave_1 entered promiscuous mode [ 42.524153][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.526266][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.528905][ T4035] device bridge_slave_1 entered promiscuous mode [ 42.531548][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.533972][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.536712][ T4034] device bridge_slave_1 entered promiscuous mode [ 42.540223][ T4043] team0: Port device team_slave_1 added [ 42.555028][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.557039][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.559936][ T4048] device bridge_slave_0 entered promiscuous mode [ 42.595753][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.598960][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.601088][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.609494][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.614203][ T4048] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.616249][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.619071][ T4048] device bridge_slave_1 entered promiscuous mode [ 42.635662][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.640520][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.645115][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.648318][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.650305][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.657830][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.669830][ T4039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.703430][ T4039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.714514][ T4035] team0: Port device team_slave_0 added [ 42.718048][ T4035] team0: Port device team_slave_1 added [ 42.722239][ T4034] team0: Port device team_slave_0 added [ 42.725833][ T4048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.748880][ T4034] team0: Port device team_slave_1 added [ 42.752543][ T4048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.775832][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.777863][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.785217][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.808804][ T4039] team0: Port device team_slave_0 added [ 42.811355][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.814055][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.821886][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.839773][ T4048] team0: Port device team_slave_0 added [ 42.894585][ T4043] device hsr_slave_0 entered promiscuous mode [ 42.932573][ T4043] device hsr_slave_1 entered promiscuous mode [ 42.993633][ T4039] team0: Port device team_slave_1 added [ 43.005002][ T4048] team0: Port device team_slave_1 added [ 43.007236][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.009123][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.016580][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.022041][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.024257][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.031392][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.094524][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.096595][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.103947][ T4039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.114997][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.116962][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.124421][ T4048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.134384][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.136398][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.143785][ T4039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.194323][ T4035] device hsr_slave_0 entered promiscuous mode [ 43.232717][ T4035] device hsr_slave_1 entered promiscuous mode [ 43.272447][ T4035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.274780][ T4035] Cannot create hsr debugfs directory [ 43.276853][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.278792][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.286466][ T4048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.374427][ T4034] device hsr_slave_0 entered promiscuous mode [ 43.432493][ T4034] device hsr_slave_1 entered promiscuous mode [ 43.472353][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.474592][ T4034] Cannot create hsr debugfs directory [ 43.574383][ T4039] device hsr_slave_0 entered promiscuous mode [ 43.612539][ T4039] device hsr_slave_1 entered promiscuous mode [ 43.652307][ T4039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.654422][ T4039] Cannot create hsr debugfs directory [ 43.714400][ T4048] device hsr_slave_0 entered promiscuous mode [ 43.768756][ T4048] device hsr_slave_1 entered promiscuous mode [ 43.802382][ T4048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.804645][ T4048] Cannot create hsr debugfs directory [ 43.882781][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 43.892277][ T4025] Bluetooth: hci0: command 0x0409 tx timeout [ 43.894212][ T4025] Bluetooth: hci1: command 0x0409 tx timeout [ 43.896116][ T4025] Bluetooth: hci3: command 0x0409 tx timeout [ 43.972436][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 44.064320][ T4043] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.119423][ T4043] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.164621][ T4043] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.214937][ T4043] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.276286][ T4035] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 44.325123][ T4035] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.354519][ T4035] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.385057][ T4035] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.472994][ T4039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.515612][ T4039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.579666][ T4039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.640558][ T4039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.721465][ T4034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.765042][ T4034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.804868][ T4034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.866314][ T4034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.958618][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.985437][ T4048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.005295][ T4048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.058792][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.066329][ T4048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.110158][ T4048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.163695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.167413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.170068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.173590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.195734][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.201218][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.217005][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.220023][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.223809][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.225969][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.229053][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.261325][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.264832][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.267560][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.269606][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.275589][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.278756][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.281607][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.286028][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.288047][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.306524][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.309757][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.314339][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.317222][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.319887][ T568] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.321920][ T568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.358985][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.362989][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.366084][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.383712][ T4039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.387421][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.390160][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.395102][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.406281][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.423859][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.426995][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.434314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.437264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.440044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.444966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.448966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.454363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.464707][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.467594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.479693][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.492014][ T4039] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.495829][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.499127][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.502557][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.505219][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.515291][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.528095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.531232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.534262][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.536373][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.538774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.543103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.556684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.559638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.570744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.576585][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.578660][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.581188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.586515][ T4048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.604755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.607686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.610456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.617330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.620094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.628126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.630847][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.633309][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.640507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.646210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.648856][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.650949][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.656375][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.662774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.670264][ T4048] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.674373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.680305][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.692494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.696898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.700075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.721739][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.733650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.735923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.738206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.741648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.750994][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.753096][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.755935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.758941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.761835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.770670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.781725][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.785810][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.788594][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.790617][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.805688][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.818882][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.823146][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.826518][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.829604][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.834211][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.848823][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.851732][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.855845][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.858836][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.861824][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.870234][ T4039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.876106][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.889241][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.891925][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.895382][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.898177][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.900351][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.917351][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.920591][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.927904][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.931125][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.935604][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.938818][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.945999][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.948847][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.960036][ T4048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.964347][ T4103] Bluetooth: hci3: command 0x041b tx timeout [ 45.966209][ T4103] Bluetooth: hci1: command 0x041b tx timeout [ 45.967964][ T4103] Bluetooth: hci0: command 0x041b tx timeout [ 45.969653][ T4103] Bluetooth: hci2: command 0x041b tx timeout [ 45.973488][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.980193][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.983627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.986542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.017707][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.020622][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.034239][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.053153][ T4103] Bluetooth: hci4: command 0x041b tx timeout [ 46.064475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.067286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.076302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.083011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.105442][ T4043] device veth0_vlan entered promiscuous mode [ 46.134728][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.137083][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.156080][ T4043] device veth1_vlan entered promiscuous mode [ 46.188539][ T4039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.239022][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.241840][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.245653][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.247895][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.269062][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.271512][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.275723][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.291724][ T4048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.300971][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.304289][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.307231][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.310203][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.317413][ T4043] device veth0_macvtap entered promiscuous mode [ 46.326753][ T4043] device veth1_macvtap entered promiscuous mode [ 46.335988][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.339773][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.343764][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.346879][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.395696][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.398907][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.402037][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.405598][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.408761][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.411652][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.416789][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.421572][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.425953][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.430224][ T4035] device veth0_vlan entered promiscuous mode [ 46.461068][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.468526][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.471638][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.475974][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.478902][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.481780][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.485644][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.488928][ T4039] device veth0_vlan entered promiscuous mode [ 46.506200][ T4043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.508965][ T4043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.511601][ T4043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.516471][ T4043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.521663][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.525439][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.528399][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.531492][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.549239][ T4034] device veth0_vlan entered promiscuous mode [ 46.561078][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.564368][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.579879][ T4035] device veth1_vlan entered promiscuous mode [ 46.591603][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.594814][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.600157][ T4048] device veth0_vlan entered promiscuous mode [ 46.609285][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.611901][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.622596][ T4039] device veth1_vlan entered promiscuous mode [ 46.639031][ T4034] device veth1_vlan entered promiscuous mode [ 46.668094][ T4048] device veth1_vlan entered promiscuous mode [ 46.688337][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.691406][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.695114][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.698102][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.700868][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.705830][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.708864][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.716164][ T4035] device veth0_macvtap entered promiscuous mode [ 46.725760][ T4035] device veth1_macvtap entered promiscuous mode [ 46.773312][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.777670][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.786325][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.789187][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.797170][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.800016][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.804685][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.807526][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.819720][ T4034] device veth0_macvtap entered promiscuous mode [ 46.828594][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.831675][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.841785][ T568] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.847532][ T4039] device veth0_macvtap entered promiscuous mode [ 46.851688][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.856012][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.859233][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.866912][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.869994][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.876359][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.892721][ T568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.895054][ T568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.899419][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.902900][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.906192][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.914733][ T4048] device veth0_macvtap entered promiscuous mode [ 46.923878][ T4039] device veth1_macvtap entered promiscuous mode [ 46.933863][ T4034] device veth1_macvtap entered promiscuous mode [ 46.940527][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.946852][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.951049][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.958182][ T4048] device veth1_macvtap entered promiscuous mode [ 46.971217][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.976200][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.979126][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.981981][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.985953][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.988998][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.005569][ T4035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.008337][ T4035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.010898][ T4035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.015459][ T4035] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.026235][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.029288][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.043552][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.046514][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.050942][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.064379][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.067407][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.070124][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.075570][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.079792][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.094783][ T4145] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 47.096817][ T4145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.110597][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.112730][ T4145] vhci_hcd vhci_hcd.0: Device attached [ 47.115118][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.118210][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.121189][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.130456][ T4145] udc-core: couldn't find an available UDC or it's busy [ 47.132810][ T4145] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.141519][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.146481][ T4146] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 47.150183][ T148] vhci_hcd: stop threads [ 47.151827][ T148] vhci_hcd: release socket [ 47.151878][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.153906][ T148] vhci_hcd: disconnect device [ 47.158121][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.161068][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.166736][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.169673][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.174894][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.183426][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.186448][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.201160][ T4039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.204506][ T4039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.206814][ T4039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.209231][ T4039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.223875][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.226997][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.229790][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.235552][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.238328][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.241308][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.244983][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.247967][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.253294][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.267319][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.270271][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.273983][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.276918][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.279817][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.283901][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.288107][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.293122][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.296726][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.299697][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.304433][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.319614][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.331463][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.334936][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.337816][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.340492][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.346692][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.349577][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.352941][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.357149][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.369380][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.372907][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.383030][ T4048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.385462][ T4048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.387903][ T4048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.390212][ T4048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.396725][ T4034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.399228][ T4034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.401605][ T4034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.405026][ T4034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.462859][ T4134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.466288][ T4134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.469670][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.558388][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.571187][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.586255][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.593967][ T4134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.596222][ T4134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.596742][ T435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.599249][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.600536][ T435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.613752][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.639692][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.655245][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.670494][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.729094][ T435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.731415][ T435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.740644][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.777001][ T4134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.794683][ T4134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.800244][ T568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.803168][ T568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.806422][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.809638][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.955924][ T4162] udc-core: couldn't find an available UDC or it's busy [ 47.957964][ T4162] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.043368][ T4103] Bluetooth: hci2: command 0x040f tx timeout [ 48.045258][ T4103] Bluetooth: hci0: command 0x040f tx timeout [ 48.050761][ T4103] Bluetooth: hci1: command 0x040f tx timeout [ 48.054451][ T4151] udc-core: couldn't find an available UDC or it's busy [ 48.056455][ T4151] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.073205][ T4103] Bluetooth: hci3: command 0x040f tx timeout [ 48.132748][ T4116] Bluetooth: hci4: command 0x040f tx timeout [ 48.150194][ T4036] Bluetooth: Wrong link type (-71) [ 48.176299][ T4171] udc-core: couldn't find an available UDC or it's busy [ 48.179392][ T4171] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.238277][ T4174] udc-core: couldn't find an available UDC or it's busy [ 48.240360][ T4174] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.302401][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 48.542223][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 48.740238][ T4040] Bluetooth: Wrong link type (-22) [ 48.749543][ T4185] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 48.822619][ T25] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 48.828757][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.831126][ T25] usb 1-1: Product: syz [ 48.838055][ T25] usb 1-1: Manufacturer: syz [ 48.840762][ T4189] udc-core: couldn't find an available UDC or it's busy [ 48.841829][ T25] usb 1-1: SerialNumber: syz [ 48.844443][ T4189] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.850383][ T4189] udc-core: couldn't find an available UDC or it's busy [ 48.860633][ T4189] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.868466][ T25] usb 1-1: config 0 descriptor?? [ 48.915676][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 48.996328][ T4191] serio: Serial port pty26 [ 49.859766][ T4206] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 49.861551][ T4206] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 49.869823][ T4206] vhci_hcd vhci_hcd.0: Device attached [ 49.885874][ T4210] udc-core: couldn't find an available UDC or it's busy [ 49.887461][ T4206] udc-core: couldn't find an available UDC or it's busy [ 49.888027][ T4210] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.896145][ T4206] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.913614][ T4207] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 49.920623][ T568] vhci_hcd: stop threads [ 49.922401][ T568] vhci_hcd: release socket [ 49.932750][ T568] vhci_hcd: disconnect device [ 50.059974][ T4203] udc-core: couldn't find an available UDC or it's busy [ 50.062286][ T4203] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.139183][ T4116] Bluetooth: hci3: command 0x0419 tx timeout [ 50.141399][ T4116] Bluetooth: hci0: command 0x0419 tx timeout [ 50.143558][ T4116] Bluetooth: hci2: command 0x0419 tx timeout [ 50.202259][ T4116] Bluetooth: hci4: command 0x0419 tx timeout [ 50.531844][ T4215] udc-core: couldn't find an available UDC or it's busy [ 50.558890][ T4215] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.608642][ T4219] udc-core: couldn't find an available UDC or it's busy [ 50.610841][ T4219] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.834965][ T4224] netlink: 'syz.2.35': attribute type 33 has an invalid length. [ 50.837387][ T4224] netlink: 152 bytes leftover after parsing attributes in process `syz.2.35'. [ 51.428180][ T4036] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 51.431194][ T4036] CPU: 0 PID: 4036 Comm: kworker/u5:1 Not tainted 5.15.188-syzkaller #0 [ 51.433552][ T4036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.436460][ T4036] Workqueue: hci0 hci_rx_work [ 51.437807][ T4036] Call trace: [ 51.438734][ T4036] dump_backtrace+0x0/0x43c [ 51.440022][ T4036] show_stack+0x2c/0x3c [ 51.441190][ T4036] __dump_stack+0x30/0x40 [ 51.442440][ T4036] dump_stack_lvl+0xf8/0x160 [ 51.443782][ T4036] dump_stack+0x1c/0x5c [ 51.445061][ T4036] sysfs_create_dir_ns+0x22c/0x24c [ 51.446557][ T4036] kobject_add_internal+0x590/0xc54 [ 51.448036][ T4036] kobject_add+0x134/0x1f8 [ 51.449323][ T4036] device_add+0x3f0/0xf94 [ 51.450532][ T4036] hci_conn_add_sysfs+0xbc/0x1cc [ 51.451983][ T4036] le_conn_complete_evt+0x9a4/0x11bc [ 51.453656][ T4036] hci_le_meta_evt+0x85c/0x3010 [ 51.455038][ T4036] hci_event_packet+0xd10/0x11bc [ 51.456431][ T4036] hci_rx_work+0x1cc/0x880 [ 51.457710][ T4036] process_one_work+0x79c/0x1140 [ 51.458954][ T4247] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 51.459077][ T4036] worker_thread+0x8f4/0x101c [ 51.461077][ T4247] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.462481][ T4036] kthread+0x374/0x454 [ 51.465740][ T4036] ret_from_fork+0x10/0x20 [ 51.467061][ C0] vkms_vblank_simulate: vblank timer overrun [ 51.476501][ T4036] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 51.480263][ T4036] Bluetooth: hci0: failed to register connection device [ 51.485410][ T4253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.50'. [ 51.489281][ T4253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.50'. [ 51.494954][ T4247] vhci_hcd vhci_hcd.0: Device attached [ 51.497290][ T4253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.50'. [ 51.556750][ T4247] udc-core: couldn't find an available UDC or it's busy [ 51.570795][ T4247] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.579960][ T4248] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 51.583784][ T435] vhci_hcd: stop threads [ 51.585121][ T435] vhci_hcd: release socket [ 51.586514][ T435] vhci_hcd: disconnect device [ 51.831098][ T4271] udc-core: couldn't find an available UDC or it's busy [ 51.849548][ T4271] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.212318][ T25] gspca_stk1135: reg_w 0x352 err -71 [ 52.214957][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 52.216812][ T25] gspca_stk1135: Sensor write failed [ 52.218521][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 52.220335][ T25] gspca_stk1135: Sensor write failed [ 52.221825][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 52.224817][ T25] gspca_stk1135: Sensor read failed [ 52.226443][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 52.228254][ T25] gspca_stk1135: Sensor read failed [ 52.229785][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 52.231536][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 52.233378][ T25] gspca_stk1135: Sensor read failed [ 52.234827][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 52.236559][ T25] gspca_stk1135: Sensor read failed [ 52.238070][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 52.239856][ T25] gspca_stk1135: Sensor write failed [ 52.241379][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 52.243555][ T25] gspca_stk1135: Sensor write failed [ 52.245098][ T25] stk1135: probe of 1-1:0.0 failed with error -71 [ 52.250478][ T25] usb 1-1: USB disconnect, device number 2 [ 52.501494][ T4284] udc-core: couldn't find an available UDC or it's busy [ 52.504838][ T4284] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.560579][ T4288] binder: 4287:4288 tried to acquire reference to desc 0, got 1 instead [ 52.567674][ T4087] binder: release 4287:4288 transaction 5 out, still active [ 52.570050][ T4087] binder: undelivered TRANSACTION_COMPLETE [ 52.571736][ T4087] binder: undelivered TRANSACTION_COMPLETE [ 52.576772][ T25] binder: send failed reply for transaction 5, target dead [ 52.579557][ T25] binder: undelivered transaction 6, process died. [ 52.670970][ T4297] udc-core: couldn't find an available UDC or it's busy [ 52.673291][ T4297] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.694029][ T4280] udc-core: couldn't find an available UDC or it's busy [ 52.696043][ T4280] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.825230][ T4305] udc-core: couldn't find an available UDC or it's busy [ 52.827371][ T4305] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.038383][ T4307] binder: 4306:4307 tried to acquire reference to desc 0, got 1 instead [ 53.042474][ T4307] binder: 4306:4307 got transaction with too large buffer [ 53.044837][ T4307] binder: 4306:4307 transaction failed 29201/-22, size 112-24 line 3349 [ 53.047792][ T4025] binder: undelivered TRANSACTION_ERROR: 29201 [ 53.077382][ T4309] binder: 4308:4309 tried to acquire reference to desc 0, got 1 instead [ 53.081073][ T4025] binder: undelivered TRANSACTION_COMPLETE [ 53.090461][ T4025] binder: undelivered transaction 16, process died. [ 53.255605][ T4317] binder: 4316:4317 tried to acquire reference to desc 0, got 1 instead [ 53.259127][ T4317] binder: 4316:4317 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 53.263699][ T4317] binder: 4317 RLIMIT_NICE not set [ 53.265302][ T4317] binder: 4317 RLIMIT_NICE not set [ 53.267270][ T4317] binder: 4316:4317 got reply transaction with bad transaction stack, transaction 25 has target 4316:4317 [ 53.270668][ T4317] binder: 4316:4317 transaction failed 29201/-71, size 0-0 line 2837 [ 53.274149][ T4025] binder: release 4316:4317 transaction 25 out, still active [ 53.276236][ T4025] binder: undelivered TRANSACTION_COMPLETE [ 53.280126][ T4025] binder: undelivered TRANSACTION_ERROR: 29201 [ 53.286285][ T4080] binder: release 4316:4317 transaction 25 in, still active [ 53.288438][ T4080] binder: send failed reply for transaction 25, target dead [ 53.311401][ T4320] udc-core: couldn't find an available UDC or it's busy [ 53.319895][ T4320] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.358369][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 53.537751][ T4326] udc-core: couldn't find an available UDC or it's busy [ 53.539829][ T4326] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.548788][ T4323] device syzkaller1 entered promiscuous mode [ 53.602834][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 53.850916][ T4328] udc-core: couldn't find an available UDC or it's busy [ 53.857669][ T4328] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.896187][ T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 53.898946][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.901174][ T25] usb 1-1: Product: syz [ 53.903008][ T4328] input: syz1 as /devices/virtual/input/input2 [ 53.907550][ T25] usb 1-1: Manufacturer: syz [ 53.908917][ T25] usb 1-1: SerialNumber: syz [ 53.925842][ T25] usb 1-1: config 0 descriptor?? [ 54.004862][ T4330] udc-core: couldn't find an available UDC or it's busy [ 54.006835][ T4330] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.182511][ T25] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 54.216345][ T4334] rtc-efi rtc-efi.0: write status is 3 [ 54.249386][ T4336] udc-core: couldn't find an available UDC or it's busy [ 54.251634][ T4336] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.560875][ T4338] netlink: 104 bytes leftover after parsing attributes in process `syz.1.73'. [ 54.702377][ T25] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 54.706692][ T25] usb 1-1: USB disconnect, device number 3 [ 54.811702][ T4354] udc-core: couldn't find an available UDC or it's busy [ 54.814327][ T4354] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.039400][ T4363] binder: 4362:4363 tried to acquire reference to desc 0, got 1 instead [ 55.071060][ T4363] binder: 4362:4363 sending u0000000000000002 node 32, cookie mismatch 0000000000000000 != 0000000000000030 [ 55.085764][ T4363] binder: 4362:4363 transaction failed 29201/-22, size 72-24 line 3225 [ 55.098155][ T4087] binder: undelivered TRANSACTION_ERROR: 29201 [ 55.327901][ T26] audit: type=1326 audit(55.270:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.1.85" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4e50ba8 code=0x0 [ 55.478843][ T4377] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 55.682214][ T1535] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 55.923412][ T1535] usb 1-1: Using ep0 maxpacket: 16 [ 55.976661][ T4392] udc-core: couldn't find an available UDC or it's busy [ 55.981196][ T4392] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.042718][ T1535] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.045667][ T1535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 56.048786][ T1535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 56.061498][ T1535] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 56.069668][ T1535] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.097086][ T4313] Set syz1 is full, maxelem 65536 reached [ 56.162355][ T1535] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 56.165093][ T1535] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 56.167889][ T1535] usb 1-1: Manufacturer: syz [ 56.180979][ T1535] usb 1-1: config 0 descriptor?? [ 56.199970][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.226712][ T25] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.349291][ T4402] udc-core: couldn't find an available UDC or it's busy [ 56.362430][ T4402] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.442686][ T1535] Registered IR keymap rc-hauppauge [ 56.532171][ T1535] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 56.535146][ T1535] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 56.562194][ T1535] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 56.600270][ T1535] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 56.614713][ T1535] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input3 [ 56.655260][ T1535] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 56.683533][ T1535] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 56.712360][ T1535] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 56.746553][ T1535] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 56.777237][ T1535] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 56.803541][ T1535] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 56.838090][ T1535] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 56.862399][ T1535] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 56.893658][ T1535] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 56.922452][ T1535] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 56.954540][ T1535] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 56.956873][ T1535] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 56.968808][ T4426] udc-core: couldn't find an available UDC or it's busy [ 56.969437][ T4427] udc-core: couldn't find an available UDC or it's busy [ 56.970787][ T4426] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.974189][ T4427] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.011947][ T4425] device syzkaller1 entered promiscuous mode [ 57.279661][ T4435] Zero length message leads to an empty skb [ 57.376205][ T4441] udc-core: couldn't find an available UDC or it's busy [ 57.378257][ T4441] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.500574][ T4446] netlink: 48 bytes leftover after parsing attributes in process `syz.3.114'. [ 57.694603][ T25] libceph: connect (1)[c::]:6789 error -101 [ 57.696789][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 57.702930][ T25] libceph: connect (1)[c::]:6789 error -101 [ 57.705307][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 57.709885][ T4459] binder: BINDER_SET_CONTEXT_MGR already set [ 57.711897][ T4459] binder: 4457:4459 ioctl 4018620d 20000040 returned -16 [ 57.715391][ T4459] binder: tried to use weak ref as strong ref [ 57.717484][ T4459] binder: 4457:4459 Acquire 1 refcount change on invalid ref 0 ret -22 [ 57.720218][ T4459] binder: 4457:4459 got transaction to invalid handle, 1 [ 57.723499][ T4459] binder: 4457:4459 transaction failed 29201/-22, size 104-4224 line 2917 [ 57.728201][ T4096] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.754753][ T4464] udc-core: couldn't find an available UDC or it's busy [ 57.756947][ T4464] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.963373][ T4464] udc-core: couldn't find an available UDC or it's busy [ 57.963783][ T1535] libceph: connect (1)[c::]:6789 error -101 [ 57.965444][ T4464] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.968434][ T1535] libceph: mon0 (1)[c::]:6789 connect error [ 58.391664][ T4096] usb 1-1: USB disconnect, device number 4 [ 58.483706][ T1535] libceph: connect (1)[c::]:6789 error -101 [ 58.485544][ T1535] libceph: mon0 (1)[c::]:6789 connect error [ 58.505553][ T4455] ceph: No mds server is up or the cluster is laggy [ 58.512035][ T4460] ceph: No mds server is up or the cluster is laggy [ 58.514930][ T1535] libceph: connect (1)[c::]:6789 error -101 [ 58.518196][ T1535] libceph: mon0 (1)[c::]:6789 connect error [ 58.728897][ T4487] udc-core: couldn't find an available UDC or it's busy [ 58.741196][ T4487] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.856307][ T4492] netlink: 224 bytes leftover after parsing attributes in process `syz.1.132'. [ 59.040966][ T4500] binder: 4499:4500 tried to acquire reference to desc 0, got 1 instead [ 59.061336][ T1535] binder: undelivered TRANSACTION_COMPLETE [ 59.086846][ T1535] binder: undelivered transaction 43, process died. [ 59.201590][ T4507] udc-core: couldn't find an available UDC or it's busy [ 59.210833][ T4507] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.500667][ T4515] udc-core: couldn't find an available UDC or it's busy [ 59.508500][ T4515] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.797064][ T4513] udc-core: couldn't find an available UDC or it's busy [ 59.799155][ T4513] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.192996][ T4541] udc-core: couldn't find an available UDC or it's busy [ 60.195037][ T4541] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.341875][ T4545] udc-core: couldn't find an available UDC or it's busy [ 60.351124][ T4545] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.401427][ T4541] udc-core: couldn't find an available UDC or it's busy [ 60.407062][ T4541] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.539432][ T4549] udc-core: couldn't find an available UDC or it's busy [ 60.541536][ T4549] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.908367][ T4553] udc-core: couldn't find an available UDC or it's busy [ 60.915334][ T4553] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.967258][ T4556] udc-core: couldn't find an available UDC or it's busy [ 60.969671][ T4556] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.086549][ T4566] udc-core: couldn't find an available UDC or it's busy [ 61.088922][ T4566] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.541877][ T4586] udc-core: couldn't find an available UDC or it's busy [ 61.550282][ T4586] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.555766][ T4588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.167'. [ 61.645335][ T4593] udc-core: couldn't find an available UDC or it's busy [ 61.650228][ T4593] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.653026][ T4594] udc-core: couldn't find an available UDC or it's busy [ 61.655040][ T4594] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.681527][ T4596] udc-core: couldn't find an available UDC or it's busy [ 61.690448][ T4596] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.203806][ T4602] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 62.409091][ T25] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 62.682002][ T4621] befs: (nullb0): invalid magic header [ 62.690236][ T4623] udc-core: couldn't find an available UDC or it's busy [ 62.697486][ T4623] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.802518][ T25] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 62.805178][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.818792][ T25] usb 1-1: config 0 descriptor?? [ 62.914036][ T4623] udc-core: couldn't find an available UDC or it's busy [ 62.916004][ T4623] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 63.015660][ T4629] udc-core: couldn't find an available UDC or it's busy [ 63.018092][ T4629] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 63.072371][ T25] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 63.275515][ T4636] udc-core: couldn't find an available UDC or it's busy [ 63.277608][ T4636] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 63.507648][ T4642] udc-core: couldn't find an available UDC or it's busy [ 63.509816][ T4642] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 63.646972][ T4648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 63.678213][ T4651] netlink: 104 bytes leftover after parsing attributes in process `syz.3.196'. [ 63.722457][ T4642] udc-core: couldn't find an available UDC or it's busy [ 63.724739][ T4642] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 63.810918][ T4658] udc-core: couldn't find an available UDC or it's busy [ 63.813209][ T4658] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 63.845555][ T4660] udc-core: couldn't find an available UDC or it's busy [ 63.848012][ T4660] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 63.943324][ T25] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 63.946970][ T25] asix: probe of 1-1:0.0 failed with error -71 [ 63.960955][ T25] usb 1-1: USB disconnect, device number 5 [ 64.009411][ T4668] process 'syz.1.202' launched './file0' with NULL argv: empty string added [ 64.353442][ T4685] binder: 4684:4685 tried to acquire reference to desc 0, got 1 instead [ 64.356760][ T4685] binder: 4684:4685 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 64.359151][ T4685] binder: 4684:4685 got reply transaction with no transaction stack [ 64.363888][ T4685] binder: 4684:4685 transaction failed 29201/-71, size 0-0 line 2822 [ 64.367149][ T4025] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.372974][ T4025] Bluetooth: hci4: command 0x0411 tx timeout [ 64.410066][ T4690] netlink: 104 bytes leftover after parsing attributes in process `syz.4.212'. [ 64.563518][ T4705] udc-core: couldn't find an available UDC or it's busy [ 64.566261][ T4705] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 64.639557][ T4710] udc-core: couldn't find an available UDC or it's busy [ 64.641719][ T4710] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 64.782194][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 65.022229][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 65.105934][ T4712] rtc-efi rtc-efi.0: write status is 3 [ 65.139112][ T4714] udc-core: couldn't find an available UDC or it's busy [ 65.141251][ T4714] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 65.143528][ T25] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 65.145793][ T25] usb 1-1: config 179 has no interface number 0 [ 65.147494][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 65.150521][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 65.181861][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 65.185542][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 65.188808][ T25] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 65.200794][ T25] usb 1-1: config 179 interface 65 has no altsetting 0 [ 65.203363][ T25] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 65.218494][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.234312][ T4720] udc-core: couldn't find an available UDC or it's busy [ 65.236556][ T4720] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 65.267553][ T25] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input4 [ 65.295631][ T4723] netlink: 'syz.2.226': attribute type 29 has an invalid length. [ 65.298113][ T4723] netlink: 'syz.2.226': attribute type 29 has an invalid length. [ 65.314493][ T4723] netlink: 'syz.2.226': attribute type 29 has an invalid length. [ 65.472378][ T4089] usb 1-1: USB disconnect, device number 6 [ 65.483232][ T4089] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 65.710642][ T4730] udc-core: couldn't find an available UDC or it's busy [ 65.713104][ T4730] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 65.847907][ T4736] udc-core: couldn't find an available UDC or it's busy [ 65.850185][ T4736] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.065485][ T4742] udc-core: couldn't find an available UDC or it's busy [ 66.068955][ T4742] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.244422][ T4744] binder: 4743 invalid dec weak, ref 54 desc 0 s 1 w 0 [ 66.278478][ T4742] udc-core: couldn't find an available UDC or it's busy [ 66.280572][ T4742] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.310010][ T4749] udc-core: couldn't find an available UDC or it's busy [ 66.312041][ T4749] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.312207][ T4025] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 66.394859][ T4754] udc-core: couldn't find an available UDC or it's busy [ 66.397014][ T4754] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.552304][ T4025] usb 1-1: Using ep0 maxpacket: 16 [ 66.615388][ T4754] udc-core: couldn't find an available UDC or it's busy [ 66.617929][ T4754] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.659884][ T4758] udc-core: couldn't find an available UDC or it's busy [ 66.661987][ T4758] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.672464][ T4025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 66.807075][ T4760] udc-core: couldn't find an available UDC or it's busy [ 66.809051][ T4760] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.832322][ T4025] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 66.835264][ T4025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.837532][ T4025] usb 1-1: Product: syz [ 66.838882][ T4025] usb 1-1: Manufacturer: syz [ 66.840196][ T4025] usb 1-1: SerialNumber: syz [ 66.860710][ T4025] usb 1-1: config 0 descriptor?? [ 66.893400][ T4762] netlink: 60 bytes leftover after parsing attributes in process `syz.4.245'. [ 66.896375][ T4762] netlink: 60 bytes leftover after parsing attributes in process `syz.4.245'. [ 66.900085][ T4762] netlink: 60 bytes leftover after parsing attributes in process `syz.4.245'. [ 66.905370][ T4762] udc-core: couldn't find an available UDC or it's busy [ 66.905375][ T4025] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 66.907593][ T4762] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.910199][ T4025] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 67.340474][ T4771] udc-core: couldn't find an available UDC or it's busy [ 67.342832][ T4771] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.552387][ T4025] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 67.709362][ T4781] udc-core: couldn't find an available UDC or it's busy [ 67.711630][ T4781] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.872354][ T4783] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.255'. [ 68.259325][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 68.302210][ T4025] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 68.305118][ T4025] em28xx 1-1:0.0: board has no eeprom [ 68.367017][ T4816] udc-core: couldn't find an available UDC or it's busy [ 68.369309][ T4816] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 68.444374][ T4818] netlink: 176 bytes leftover after parsing attributes in process `syz.4.272'. [ 68.547657][ T4824] udc-core: couldn't find an available UDC or it's busy [ 68.549829][ T4824] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 68.642261][ T4025] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 68.644566][ T4025] em28xx 1-1:0.0: dvb set to bulk mode. [ 68.647306][ T4087] em28xx 1-1:0.0: Binding DVB extension [ 68.653411][ T4025] usb 1-1: USB disconnect, device number 7 [ 68.655753][ T4025] em28xx 1-1:0.0: Disconnecting em28xx [ 68.685771][ T4087] em28xx 1-1:0.0: Registering input extension [ 68.688202][ T4025] em28xx 1-1:0.0: Closing input extension [ 68.703481][ T4025] em28xx 1-1:0.0: Freeing device [ 69.017789][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a844fd6e: rx timeout, send abort [ 69.351678][ T4851] udc-core: couldn't find an available UDC or it's busy [ 69.358117][ T4851] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.387620][ T4853] udc-core: couldn't find an available UDC or it's busy [ 69.389937][ T4853] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.422342][ T1535] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 69.521480][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a844fd6e: abort rx timeout. Force session deactivation [ 69.596500][ T4853] udc-core: couldn't find an available UDC or it's busy [ 69.598545][ T4853] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.645262][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.647861][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.792345][ T1535] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.795542][ T1535] usb 1-1: config 0 interface 0 has no altsetting 0 [ 69.952508][ T1535] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 69.955105][ T1535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.957308][ T1535] usb 1-1: Product: syz [ 69.960295][ T4858] device syzkaller1 entered promiscuous mode [ 69.962643][ T1535] usb 1-1: Manufacturer: syz [ 69.966366][ T1535] usb 1-1: SerialNumber: syz [ 69.976989][ T1535] usb 1-1: config 0 descriptor?? [ 70.014267][ T1535] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 70.028151][ T1535] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 70.052510][ T1535] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 70.055226][ T1535] usb 1-1: media controller created [ 70.077642][ T1535] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 70.159360][ T4865] udc-core: couldn't find an available UDC or it's busy [ 70.177438][ T4865] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 70.182632][ T1535] DVB: Unable to find symbol tda10046_attach() [ 70.184358][ T1535] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 70.186961][ T1535] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 70.355779][ T4874] udc-core: couldn't find an available UDC or it's busy [ 70.357858][ T4874] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 70.368024][ T4876] device syzkaller1 entered promiscuous mode [ 70.521630][ T4878] binder: 4877:4878 tried to acquire reference to desc 0, got 1 instead [ 70.528752][ T4089] binder: release 4877:4878 transaction 59 out, still active [ 70.530926][ T4089] binder: undelivered TRANSACTION_COMPLETE [ 70.550101][ T4089] binder: send failed reply for transaction 59, target dead [ 70.605565][ T4880] udc-core: couldn't find an available UDC or it's busy [ 70.609228][ T4880] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 70.759075][ T4882] binder: 4881:4882 tried to acquire reference to desc 0, got 1 instead [ 70.767613][ T4882] binder: 4881:4882 parent offset not aligned correctly. [ 70.769800][ T4882] binder: 4881:4882 transaction failed 29201/-22, size 112-24 line 3331 [ 70.779579][ T4882] binder: 4881:4882 ioctl 4c82 0 returned -22 [ 70.781767][ T4096] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.102253][ T1535] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 71.111393][ T1535] usb 1-1: USB disconnect, device number 8 [ 71.130309][ T4892] ax25_connect(): syz.1.305 uses autobind, please contact jreuter@yaina.de [ 71.163490][ T4893] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 71.165387][ T4893] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 71.173703][ T4893] vhci_hcd vhci_hcd.0: Device attached [ 71.176560][ T4893] udc-core: couldn't find an available UDC or it's busy [ 71.178501][ T4893] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 71.196639][ T4893] udc-core: couldn't find an available UDC or it's busy [ 71.198689][ T4893] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 71.221686][ T4894] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 71.224207][ T148] vhci_hcd: stop threads [ 71.225439][ T148] vhci_hcd: release socket [ 71.226694][ T148] vhci_hcd: disconnect device [ 71.516448][ T4904] udc-core: couldn't find an available UDC or it's busy [ 71.518912][ T4904] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 72.120370][ T4929] tmpfs: Unknown parameter 'usrquota' [ 72.134973][ T4929] capability: warning: `syz.0.319' uses deprecated v2 capabilities in a way that may be insecure [ 72.627012][ T4947] udc-core: couldn't find an available UDC or it's busy [ 72.634868][ T4947] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 72.689415][ T4952] udc-core: couldn't find an available UDC or it's busy [ 72.691409][ T4952] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 72.852776][ T4956] udc-core: couldn't find an available UDC or it's busy [ 72.859023][ T4956] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 73.501381][ T4993] udc-core: couldn't find an available UDC or it's busy [ 73.511577][ T4993] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 73.542257][ T1535] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 73.603978][ T4998] binder: 4997:4998 tried to acquire reference to desc 0, got 1 instead [ 73.632761][ T4998] binder: 4997:4998 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 73.642496][ T4998] binder: 4998 RLIMIT_NICE not set [ 73.644085][ T4998] binder: 4998 RLIMIT_NICE not set [ 73.654178][ T4998] binder: 4998 RLIMIT_NICE not set [ 73.655934][ T4998] binder: 4997:4998 got transaction with invalid offsets ptr [ 73.668341][ T4998] binder: 4997:4998 transaction failed 29201/-14, size 0-240 line 3124 [ 73.671033][ T4998] binder: send failed reply for transaction 69 to 4997:4998 [ 73.693031][ T4096] binder: undelivered TRANSACTION_ERROR: 29190 [ 73.694900][ T4096] binder: undelivered TRANSACTION_COMPLETE [ 73.696522][ T4096] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.783510][ T1535] usb 1-1: Using ep0 maxpacket: 16 [ 73.898815][ T5006] binder: 5005:5006 tried to acquire reference to desc 0, got 1 instead [ 73.902534][ T1535] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 73.904748][ T1535] usb 1-1: config 0 has no interface number 0 [ 73.915611][ T5006] binder: 5005:5006 got transaction with invalid parent offset or type [ 73.918214][ T5006] binder: 5005:5006 transaction failed 29201/-22, size 112-24 line 3286 [ 73.925883][ T4116] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.972020][ T5011] udc-core: couldn't find an available UDC or it's busy [ 73.985762][ T5011] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.040769][ T5014] udc-core: couldn't find an available UDC or it's busy [ 74.049513][ T5014] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.064912][ T1535] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 74.067652][ T1535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.069829][ T1535] usb 1-1: Product: syz [ 74.070982][ T1535] usb 1-1: Manufacturer: syz [ 74.077197][ T1535] usb 1-1: SerialNumber: syz [ 74.089843][ T1535] usb 1-1: config 0 descriptor?? [ 74.126053][ T1535] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 74.141205][ T26] audit: type=1326 audit(74.080:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.3.358" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb16a4ba8 code=0x0 [ 74.309579][ T5021] udc-core: couldn't find an available UDC or it's busy [ 74.311704][ T5021] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.523010][ T5023] udc-core: couldn't find an available UDC or it's busy [ 74.525216][ T5023] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.562405][ T1535] gspca_spca1528: reg_w err -71 [ 74.583185][ T5025] udc-core: couldn't find an available UDC or it's busy [ 74.585508][ T5025] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.592267][ T1535] spca1528: probe of 1-1:0.1 failed with error -71 [ 74.596663][ T1535] usb 1-1: USB disconnect, device number 9 [ 74.768696][ T21] cfg80211: failed to load regulatory.db [ 74.791430][ T5025] udc-core: couldn't find an available UDC or it's busy [ 74.793591][ T5025] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.880344][ T5027] udc-core: couldn't find an available UDC or it's busy [ 74.884460][ T5027] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 75.039509][ T5031] udc-core: couldn't find an available UDC or it's busy [ 75.047956][ T5031] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 75.194973][ T5036] nbd0: detected capacity change from 0 to 8589934592 [ 75.200106][ T227] block nbd0: Send control failed (result -89) [ 75.202308][ T227] block nbd0: Request send failed, requeueing [ 75.205041][ T4040] block nbd0: Receive control failed (result -32) [ 75.205514][ T227] block nbd0: Dead connection, failed to find a fallback [ 75.209154][ T227] block nbd0: shutting down sockets [ 75.211435][ T227] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.215278][ T227] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.218121][ T227] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.221558][ T227] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.224254][ T227] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.227267][ T227] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.229782][ T227] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.233041][ T227] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.236488][ T227] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.239373][ T227] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.241850][ T227] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.245022][ T227] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.247765][ T227] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.250924][ T227] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.253831][ T227] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.256876][ T227] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.259020][ T4026] ldm_validate_partition_table(): Disk read failed. [ 75.261327][ T227] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.264468][ T227] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.267969][ T149] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.271110][ T149] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.274617][ T4026] Dev nbd0: unable to read RDB block 0 [ 75.276806][ T4026] nbd0: unable to read partition table [ 75.313504][ T4026] ldm_validate_partition_table(): Disk read failed. [ 75.355401][ T5040] udc-core: couldn't find an available UDC or it's busy [ 75.367858][ T5040] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 75.371560][ T4026] Dev nbd0: unable to read RDB block 0 [ 75.389597][ T4026] nbd0: unable to read partition table [ 75.944273][ T5057] udc-core: couldn't find an available UDC or it's busy [ 75.946286][ T5057] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 76.269113][ T5076] udc-core: couldn't find an available UDC or it's busy [ 76.271127][ T5076] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 76.515559][ T5087] udc-core: couldn't find an available UDC or it's busy [ 76.517897][ T5087] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 76.837479][ T5090] binder: 5089:5090 ioctl 400c620e 0 returned -14 [ 77.046284][ T5102] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 77.060191][ T5102] cramfs: wrong magic [ 77.171472][ T5109] udc-core: couldn't find an available UDC or it's busy [ 77.182793][ T5109] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 77.436602][ T5117] Restarting kernel threads ... done. [ 77.458219][ T5121] udc-core: couldn't find an available UDC or it's busy [ 77.460247][ T5121] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 77.810940][ T5136] udc-core: couldn't find an available UDC or it's busy [ 77.819488][ T5136] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 78.027999][ T5136] udc-core: couldn't find an available UDC or it's busy [ 78.030101][ T5136] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 78.080654][ T5145] binder: 5144:5145 tried to acquire reference to desc 0, got 1 instead [ 78.084795][ T5145] binder: 5144:5145 sending u0000000000000002 node 83, cookie mismatch 0000000000000000 != 0000000000000030 [ 78.085890][ T5147] udc-core: couldn't find an available UDC or it's busy [ 78.088067][ T5145] binder: 5144:5145 transaction failed 29201/-22, size 72-24 line 3225 [ 78.095341][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.097800][ T5147] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 78.203526][ T4040] block nbd0: Receive control failed (result -32) [ 78.218960][ T5152] block nbd0: shutting down sockets [ 78.397072][ T5165] device syzkaller1 entered promiscuous mode [ 78.532266][ T4087] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 78.549830][ T5174] udc-core: couldn't find an available UDC or it's busy [ 78.552544][ T5174] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 78.687957][ T5183] binder: 5182:5183 tried to acquire reference to desc 0, got 1 instead [ 78.697473][ T5183] binder: 5182:5183 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 78.706455][ T5183] binder: 5183 RLIMIT_NICE not set [ 78.707935][ T5183] binder: 5183 RLIMIT_NICE not set [ 78.709784][ T5183] binder: 5183 RLIMIT_NICE not set [ 78.727545][ T4025] binder: undelivered TRANSACTION_COMPLETE [ 78.960480][ T5198] udc-core: couldn't find an available UDC or it's busy [ 78.968900][ T4087] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.970370][ T5198] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 78.971913][ T4087] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 78.988452][ T4087] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 78.991146][ T4087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.013608][ T4087] usb 1-1: config 0 descriptor?? [ 79.156036][ T5209] device syzkaller1 entered promiscuous mode [ 79.241297][ T5213] udc-core: couldn't find an available UDC or it's busy [ 79.246082][ T5213] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.287981][ T5215] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 79.452357][ T5213] udc-core: couldn't find an available UDC or it's busy [ 79.454346][ T5213] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.819328][ T5248] udc-core: couldn't find an available UDC or it's busy [ 79.821565][ T5248] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.002564][ T5255] udc-core: couldn't find an available UDC or it's busy [ 80.004722][ T5255] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.020104][ T5256] binder: 5253:5256 tried to acquire reference to desc 0, got 1 instead [ 80.029853][ T5256] binder: 5253:5256 got transaction with invalid data ptr [ 80.033446][ T5256] binder: 5253:5256 transaction failed 29201/-14, size 72-24 line 3186 [ 80.036483][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.625081][ T5277] udc-core: couldn't find an available UDC or it's busy [ 80.627137][ T5277] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.796466][ T5282] udc-core: couldn't find an available UDC or it's busy [ 80.799020][ T5282] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.932208][ T4025] Bluetooth: hci5: command 0x1003 tx timeout [ 80.935591][ T4036] Bluetooth: hci5: sending frame failed (-49) [ 81.082699][ T568] wlan1: Trigger new scan to find an IBSS to join [ 81.119447][ T568] nci: nci_rx_work: unknown MT 0x4 [ 81.265221][ T4025] usb 1-1: USB disconnect, device number 10 [ 81.333256][ T5298] udc-core: couldn't find an available UDC or it's busy [ 81.335545][ T5298] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 81.792395][ T4025] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 81.980585][ T5340] udc-core: couldn't find an available UDC or it's busy [ 81.988046][ T5340] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.107297][ T5351] udc-core: couldn't find an available UDC or it's busy [ 82.110391][ T5351] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.182638][ T4025] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.185798][ T4025] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 82.188788][ T4025] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.201005][ T4025] usb 1-1: config 0 descriptor?? [ 82.244745][ T4025] pwc: Askey VC010 type 2 USB webcam detected. [ 82.462311][ T4025] pwc: send_video_command error -71 [ 82.464009][ T4025] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 82.466318][ T4025] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 82.476369][ T4025] usb 1-1: USB disconnect, device number 11 [ 82.566953][ T5369] udc-core: couldn't find an available UDC or it's busy [ 82.569100][ T5369] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.662470][ T5371] udc-core: couldn't find an available UDC or it's busy [ 82.665646][ T5371] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.877722][ T5371] udc-core: couldn't find an available UDC or it's busy [ 82.879782][ T5371] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.012326][ T4087] Bluetooth: hci5: command 0x1001 tx timeout [ 83.014154][ T4036] Bluetooth: hci5: sending frame failed (-49) [ 83.052178][ T4025] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 83.115057][ T5377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.482'. [ 83.117727][ T5377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.482'. [ 83.133233][ T5377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.482'. [ 83.141525][ T5377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.482'. [ 83.177999][ T5381] autofs4:pid:5381:autofs_fill_super: called with bogus options [ 83.403621][ T4087] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 83.406674][ T4087] Bluetooth: hci0: Injecting HCI hardware error event [ 83.409809][ T4049] Bluetooth: hci0: hardware error 0x00 [ 83.411633][ T5395] udc-core: couldn't find an available UDC or it's busy [ 83.432381][ T5395] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.451859][ T5398] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 83.467629][ T4025] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.470602][ T4025] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 83.478897][ T4025] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.499483][ T4025] usb 1-1: config 0 descriptor?? [ 83.551363][ T4025] pwc: Askey VC010 type 2 USB webcam detected. [ 83.569015][ T4036] Bluetooth: Wrong link type (-71) [ 83.778052][ T5412] ax25_connect(): syz.4.496 uses autobind, please contact jreuter@yaina.de [ 83.830542][ T5414] udc-core: couldn't find an available UDC or it's busy [ 83.841240][ T5414] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.961108][ T5418] udc-core: couldn't find an available UDC or it's busy [ 83.966468][ T5418] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.986791][ T4025] pwc: recv_control_msg error -32 req 02 val 2b00 [ 84.005628][ T5420] udc-core: couldn't find an available UDC or it's busy [ 84.007732][ T5420] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.024046][ T4025] pwc: recv_control_msg error -32 req 02 val 2700 [ 84.072261][ T4025] pwc: recv_control_msg error -32 req 02 val 2c00 [ 84.125313][ T568] wlan1: Trigger new scan to find an IBSS to join [ 84.133615][ T4025] pwc: recv_control_msg error -32 req 04 val 1000 [ 84.192253][ T4025] pwc: recv_control_msg error -32 req 04 val 1300 [ 84.252258][ T4025] pwc: recv_control_msg error -32 req 04 val 1400 [ 84.292247][ T4025] pwc: recv_control_msg error -32 req 02 val 2000 [ 84.342986][ T4025] pwc: recv_control_msg error -32 req 02 val 2100 [ 84.382589][ T4025] pwc: recv_control_msg error -32 req 04 val 1500 [ 84.413540][ T5425] udc-core: couldn't find an available UDC or it's busy [ 84.415751][ T5425] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.422278][ T4025] pwc: recv_control_msg error -32 req 02 val 2500 [ 84.482301][ T4025] pwc: recv_control_msg error -32 req 02 val 2400 [ 84.521638][ T5427] binder: 5426:5427 tried to acquire reference to desc 0, got 1 instead [ 84.527173][ T5427] binder: 5426:5427 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 84.530765][ T5427] binder: 5427 RLIMIT_NICE not set [ 84.532390][ T4025] pwc: recv_control_msg error -32 req 02 val 2600 [ 84.539996][ T5427] binder: 5427 RLIMIT_NICE not set [ 84.541960][ T5427] binder: 5427 RLIMIT_NICE not set [ 84.545545][ T5427] binder: 5426:5427 BC_FREE_BUFFER u0000000020ffd000 no match [ 84.568175][ T1535] binder: undelivered TRANSACTION_COMPLETE [ 84.570004][ T1535] binder: undelivered TRANSACTION_COMPLETE [ 84.571708][ T1535] binder: undelivered transaction 104, process died. [ 84.797310][ T4025] pwc: recv_control_msg error -71 req 02 val 2800 [ 84.822309][ T4025] pwc: recv_control_msg error -71 req 04 val 1100 [ 84.852321][ T4025] pwc: recv_control_msg error -71 req 04 val 1200 [ 84.857622][ T4025] pwc: Registered as video11. [ 84.859967][ T4025] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 84.880542][ T4025] usb 1-1: USB disconnect, device number 12 [ 85.049325][ T568] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:07:01 [ 85.082198][ T4116] Bluetooth: hci5: command 0x1009 tx timeout [ 85.705903][ T1535] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 85.737972][ T5462] udc-core: couldn't find an available UDC or it's busy [ 85.739963][ T5462] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.946396][ T1535] usb 1-1: Using ep0 maxpacket: 32 [ 86.066159][ T1535] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 86.068965][ T1535] usb 1-1: config 0 has no interface number 0 [ 86.070700][ T1535] usb 1-1: config 0 interface 23 has no altsetting 0 [ 86.245979][ T1535] usb 1-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad [ 86.248791][ T1535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.251001][ T1535] usb 1-1: Product: syz [ 86.258892][ T1535] usb 1-1: Manufacturer: syz [ 86.260149][ T1535] usb 1-1: SerialNumber: syz [ 86.275531][ T1535] usb 1-1: config 0 descriptor?? [ 86.317703][ T5469] udc-core: couldn't find an available UDC or it's busy [ 86.321050][ T5469] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.534509][ T5469] udc-core: couldn't find an available UDC or it's busy [ 86.536604][ T5469] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.548622][ T1535] kaweth 1-1:0.23: Firmware present in device. [ 86.742270][ T1535] kaweth 1-1:0.23: Statistics collection: 0 [ 86.744080][ T1535] kaweth 1-1:0.23: Multicast filter limit: 0 [ 86.745728][ T1535] kaweth 1-1:0.23: MTU: 0 [ 86.746990][ T1535] kaweth 1-1:0.23: Read MAC address 00:00:00:00:00:00 [ 87.045528][ T530] Bluetooth: (null): Invalid header checksum [ 87.047571][ T530] Bluetooth: (null): Invalid header checksum [ 87.069741][ T5476] udc-core: couldn't find an available UDC or it's busy [ 87.074285][ T5476] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.402405][ T1535] kaweth 1-1:0.23: Error setting receive filter [ 87.404480][ T1535] kaweth: probe of 1-1:0.23 failed with error -5 [ 87.412622][ T1535] usb 1-1: USB disconnect, device number 13 [ 87.687989][ T5482] udc-core: couldn't find an available UDC or it's busy [ 87.692830][ T5482] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.718100][ T5483] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 87.800327][ T5489] udc-core: couldn't find an available UDC or it's busy [ 87.816318][ T5489] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.926315][ T5491] tipc: Started in network mode [ 87.928172][ T5491] tipc: Node identity d6af944f2c, cluster identity 4711 [ 87.930478][ T5491] tipc: Enabled bearer , priority 0 [ 87.939596][ T5490] tipc: Resetting bearer [ 87.999612][ T5490] tipc: Disabling bearer [ 88.210636][ T5501] udc-core: couldn't find an available UDC or it's busy [ 88.214724][ T5501] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.270270][ T5503] device syzkaller1 entered promiscuous mode [ 88.297444][ T5507] udc-core: couldn't find an available UDC or it's busy [ 88.299852][ T5507] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.360185][ T5509] binder: 5508:5509 tried to acquire reference to desc 0, got 1 instead [ 88.374451][ T5509] binder: 5508:5509 got transaction with invalid fd, -1 [ 88.376809][ T5509] binder: 5508:5509 transaction failed 29201/-9, size 72-24 line 3262 [ 88.380244][ T4116] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.421907][ T5511] binder: 5510:5511 tried to acquire reference to desc 0, got 1 instead [ 88.427692][ T5511] binder: 5510:5511 got transaction with invalid offsets ptr [ 88.436867][ T5511] binder: 5510:5511 transaction failed 29201/-22, size 112-24 line 3417 [ 88.439925][ T4116] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.576494][ T5519] udc-core: couldn't find an available UDC or it's busy [ 88.578647][ T5519] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.764606][ T4116] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 89.052256][ T4116] usb 1-1: Using ep0 maxpacket: 32 [ 89.127038][ T5534] udc-core: couldn't find an available UDC or it's busy [ 89.129209][ T5534] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 89.144818][ T5532] [ 89.145530][ T5532] ====================================================== [ 89.147497][ T5532] WARNING: possible circular locking dependency detected [ 89.149529][ T5532] 5.15.188-syzkaller #0 Not tainted [ 89.151127][ T5532] ------------------------------------------------------ [ 89.153329][ T5532] syz.4.550/5532 is trying to acquire lock: [ 89.155144][ T5532] ffff0000ef0b8d20 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xbb4/0x1584 [ 89.158078][ T5532] [ 89.158078][ T5532] but task is already holding lock: [ 89.160344][ T5532] ffff0000c478d6f8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x830/0x10f0 [ 89.163303][ T5532] [ 89.163303][ T5532] which lock already depends on the new lock. [ 89.163303][ T5532] [ 89.166522][ T5532] [ 89.166522][ T5532] the existing dependency chain (in reverse order) is: [ 89.169412][ T5532] [ 89.169412][ T5532] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 89.171809][ T5532] _raw_spin_lock+0xb0/0x10c [ 89.173380][ T5532] __inet_hash+0xd0/0x858 [ 89.174839][ T5532] inet6_hash+0x74/0x9c [ 89.176269][ T5532] inet_csk_listen_start+0x1e4/0x2c8 [ 89.178037][ T5532] inet_listen+0x290/0x694 [ 89.179639][ T5532] __sys_listen+0x198/0x21c [ 89.181137][ T5532] __arm64_sys_listen+0x5c/0x74 [ 89.182746][ T5532] invoke_syscall+0x98/0x2b8 [ 89.184290][ T5532] el0_svc_common+0x138/0x258 [ 89.185922][ T5532] do_el0_svc+0x58/0x14c [ 89.187452][ T5532] el0_svc+0x78/0x1e0 [ 89.188814][ T5532] el0t_64_sync_handler+0xcc/0xe4 [ 89.190527][ T5532] el0t_64_sync+0x1a0/0x1a4 [ 89.192035][ T5532] [ 89.192035][ T5532] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 89.194440][ T5532] __lock_acquire+0x2928/0x651c [ 89.195883][ T5532] lock_acquire+0x1f4/0x620 [ 89.197379][ T5532] mptcp_diag_get_info+0x1fc/0x868 [ 89.199042][ T5532] inet_sk_diag_fill+0xbb4/0x1584 [ 89.200699][ T5532] mptcp_diag_dump+0xb5c/0x10f0 [ 89.202341][ T5532] __inet_diag_dump+0x1dc/0x350 [ 89.204030][ T5532] inet_diag_dump+0x4c/0x5c [ 89.205528][ T5532] netlink_dump+0x49c/0xab4 [ 89.207140][ T5532] __netlink_dump_start+0x480/0x6f0 [ 89.208773][ T5532] inet_diag_handler_cmd+0x190/0x268 [ 89.210551][ T5532] sock_diag_rcv_msg+0x168/0x390 [ 89.212049][ T5532] netlink_rcv_skb+0x208/0x3c4 [ 89.213623][ T5532] sock_diag_rcv+0x3c/0x54 [ 89.215029][ T5532] netlink_unicast+0x60c/0x89c [ 89.216567][ T5532] netlink_sendmsg+0x6e8/0x9cc [ 89.218150][ T5532] sock_write_iter+0x23c/0x31c [ 89.219719][ T5532] do_iter_readv_writev+0x3a0/0x4f8 [ 89.221396][ T5532] do_iter_write+0x1c4/0x670 [ 89.222992][ T5532] do_writev+0x1e0/0x380 [ 89.224330][ T5532] __arm64_sys_writev+0x80/0x94 [ 89.225824][ T5532] invoke_syscall+0x98/0x2b8 [ 89.227318][ T5532] el0_svc_common+0x138/0x258 [ 89.228769][ T5532] do_el0_svc+0x58/0x14c [ 89.230127][ T5532] el0_svc+0x78/0x1e0 [ 89.231456][ T5532] el0t_64_sync_handler+0xcc/0xe4 [ 89.233070][ T5532] el0t_64_sync+0x1a0/0x1a4 [ 89.234426][ T5532] [ 89.234426][ T5532] other info that might help us debug this: [ 89.234426][ T5532] [ 89.237247][ T5532] Possible unsafe locking scenario: [ 89.237247][ T5532] [ 89.239355][ T5532] CPU0 CPU1 [ 89.240908][ T5532] ---- ---- [ 89.242417][ T5532] lock(&h->lhash2[i].lock); [ 89.243733][ T5532] lock(sk_lock-AF_INET6); [ 89.245742][ T5532] lock(&h->lhash2[i].lock); [ 89.247839][ T5532] lock(sk_lock-AF_INET6); [ 89.249157][ T5532] [ 89.249157][ T5532] *** DEADLOCK *** [ 89.249157][ T5532] [ 89.251433][ T5532] 6 locks held by syz.4.550/5532: [ 89.252398][ T4116] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 89.252819][ T5532] #0: ffff8000162b72a8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x2c/0x54 [ 89.255150][ T4116] usb 1-1: config 0 has no interface number 0 [ 89.257889][ T5532] #1: ffff8000162b7168 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x214/0x390 [ 89.262502][ T5532] #2: ffff0000cd89d690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x108/0x6f0 [ 89.265536][ T5532] #3: ffff80001638e248 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x170/0x350 [ 89.268368][ T5532] #4: ffff800014351360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 89.270993][ T5532] #5: ffff0000c478d6f8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x830/0x10f0 [ 89.273803][ T5532] [ 89.273803][ T5532] stack backtrace: [ 89.275329][ T5532] CPU: 1 PID: 5532 Comm: syz.4.550 Not tainted 5.15.188-syzkaller #0 [ 89.277804][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.280519][ T5532] Call trace: [ 89.281444][ T5532] dump_backtrace+0x0/0x43c [ 89.282881][ T5532] show_stack+0x2c/0x3c [ 89.284060][ T5532] __dump_stack+0x30/0x40 [ 89.285279][ T5532] dump_stack_lvl+0xf8/0x160 [ 89.286612][ T5532] dump_stack+0x1c/0x5c [ 89.287809][ T5532] print_circular_bug+0x148/0x1b0 [ 89.289163][ T5532] check_noncircular+0x240/0x2d4 [ 89.290500][ T5532] __lock_acquire+0x2928/0x651c [ 89.291947][ T5532] lock_acquire+0x1f4/0x620 [ 89.293214][ T5532] mptcp_diag_get_info+0x1fc/0x868 [ 89.294620][ T5532] inet_sk_diag_fill+0xbb4/0x1584 [ 89.295976][ T5532] mptcp_diag_dump+0xb5c/0x10f0 [ 89.297284][ T5532] __inet_diag_dump+0x1dc/0x350 [ 89.298546][ T5532] inet_diag_dump+0x4c/0x5c [ 89.299805][ T5532] netlink_dump+0x49c/0xab4 [ 89.301036][ T5532] __netlink_dump_start+0x480/0x6f0 [ 89.302548][ T5532] inet_diag_handler_cmd+0x190/0x268 [ 89.303976][ T5532] sock_diag_rcv_msg+0x168/0x390 [ 89.305377][ T5532] netlink_rcv_skb+0x208/0x3c4 [ 89.306791][ T5532] sock_diag_rcv+0x3c/0x54 [ 89.307995][ T5532] netlink_unicast+0x60c/0x89c [ 89.309359][ T5532] netlink_sendmsg+0x6e8/0x9cc [ 89.310682][ T5532] sock_write_iter+0x23c/0x31c [ 89.312004][ T5532] do_iter_readv_writev+0x3a0/0x4f8 [ 89.313457][ T5532] do_iter_write+0x1c4/0x670 [ 89.314725][ T5532] do_writev+0x1e0/0x380 [ 89.315886][ T5532] __arm64_sys_writev+0x80/0x94 [ 89.317204][ T5532] invoke_syscall+0x98/0x2b8 [ 89.318538][ T5532] el0_svc_common+0x138/0x258 [ 89.319893][ T5532] do_el0_svc+0x58/0x14c [ 89.321074][ T5532] el0_svc+0x78/0x1e0 [ 89.322361][ T5532] el0t_64_sync_handler+0xcc/0xe4 [ 89.323797][ T5532] el0t_64_sync+0x1a0/0x1a4 [ 89.325724][ T5532] BUG: sleeping function called from invalid context at net/core/sock.c:3283 [ 89.328186][ T5532] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5532, name: syz.4.550 [ 89.330653][ T5532] INFO: lockdep is turned off. [ 89.331882][ T5532] Preemption disabled at: [ 89.331893][ T5532] [] mptcp_diag_dump+0x830/0x10f0 [ 89.334989][ T5532] CPU: 1 PID: 5532 Comm: syz.4.550 Not tainted 5.15.188-syzkaller #0 [ 89.337151][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.339878][ T5532] Call trace: [ 89.340810][ T5532] dump_backtrace+0x0/0x43c [ 89.342069][ T5532] show_stack+0x2c/0x3c [ 89.343250][ T5532] __dump_stack+0x30/0x40 [ 89.344470][ T5532] dump_stack_lvl+0xf8/0x160 [ 89.345837][ T5532] dump_stack+0x1c/0x5c [ 89.346980][ T5532] ___might_sleep+0x358/0x4d4 [ 89.348261][ T5532] __might_sleep+0x98/0x124 [ 89.349616][ T5532] __lock_sock_fast+0x3c/0xec [ 89.350940][ T5532] mptcp_diag_get_info+0x204/0x868 [ 89.352432][ T5532] inet_sk_diag_fill+0xbb4/0x1584 [ 89.353869][ T5532] mptcp_diag_dump+0xb5c/0x10f0 [ 89.355268][ T5532] __inet_diag_dump+0x1dc/0x350 [ 89.356598][ T5532] inet_diag_dump+0x4c/0x5c [ 89.357901][ T5532] netlink_dump+0x49c/0xab4 [ 89.359393][ T5532] __netlink_dump_start+0x480/0x6f0 [ 89.360999][ T5532] inet_diag_handler_cmd+0x190/0x268 [ 89.362423][ T5532] sock_diag_rcv_msg+0x168/0x390 [ 89.363765][ T5532] netlink_rcv_skb+0x208/0x3c4 [ 89.365080][ T5532] sock_diag_rcv+0x3c/0x54 [ 89.366439][ T5532] netlink_unicast+0x60c/0x89c [ 89.367769][ T5532] netlink_sendmsg+0x6e8/0x9cc [ 89.369093][ T5532] sock_write_iter+0x23c/0x31c [ 89.370450][ T5532] do_iter_readv_writev+0x3a0/0x4f8 [ 89.371948][ T5532] do_iter_write+0x1c4/0x670 [ 89.373275][ T5532] do_writev+0x1e0/0x380 [ 89.374427][ T5532] __arm64_sys_writev+0x80/0x94 [ 89.375768][ T5532] invoke_syscall+0x98/0x2b8 [ 89.377042][ T5532] el0_svc_common+0x138/0x258 [ 89.378382][ T5532] do_el0_svc+0x58/0x14c [ 89.379545][ T5532] el0_svc+0x78/0x1e0 [ 89.380631][ T5532] el0t_64_sync_handler+0xcc/0xe4 [ 89.382020][ T5532] el0t_64_sync+0x1a0/0x1a4 [ 89.493821][ T4116] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 89.496653][ T4116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.498932][ T4116] usb 1-1: Product: syz [ 89.500126][ T4116] usb 1-1: Manufacturer: syz [ 89.501473][ T4116] usb 1-1: SerialNumber: syz [ 89.504944][ T4116] usb 1-1: config 0 descriptor?? [ 89.544782][ T4116] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 90.113507][ T4116] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 90.117897][ T4116] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 90.495484][ T4116] usb 1-1: USB disconnect, device number 14 [ 90.512149][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 90.518010][ T4116] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 90.524723][ T4116] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 90.528501][ T4116] quatech2 1-1:0.51: device disconnected