last executing test programs: 6m14.609469418s ago: executing program 2 (id=3130): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb10000a8880088a84803", 0x10000, 0x0, &(0x7f0000000140), 0x14) 5m43.862285868s ago: executing program 3 (id=3228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x8054) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x8d}, {0x2, 0x4, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 5m42.222376921s ago: executing program 3 (id=3233): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x32, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000380)='net/rt_acct\x00') close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) socket$inet6(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3}, './file0/file0\x00'}) 5m35.914991516s ago: executing program 3 (id=3246): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8000) read(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(r1, &(0x7f0000019340)='net/snmp6\x00') pread64(r4, &(0x7f0000000200)=""/102385, 0x18ff1, 0xffffffffe) 5m34.569348727s ago: executing program 3 (id=3248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000004e350000000000006507000002000000070700004a0000000f75000000000000bf540000"], 0x0}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) 5m32.092221594s ago: executing program 3 (id=3250): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m31.783351118s ago: executing program 3 (id=3251): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x8040480) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) 5m25.877169051s ago: executing program 2 (id=3133): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000080)={0x77359400}, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 5m23.868139586s ago: executing program 2 (id=3266): io_cancel(0x0, 0xfffffffffffffffe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x5) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 5m22.315171795s ago: executing program 2 (id=3269): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8000) read(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(r1, &(0x7f0000019340)='net/snmp6\x00') pread64(r4, &(0x7f0000000200)=""/102385, 0x18ff1, 0xffffffffe) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000001c0)=""/148) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x9, 0xffffffffffffffff, 'id1\x00'}) ioctl$COMEDI_UNLOCK(r6, 0x6406) recvmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x5a}, 0x20) 5m19.62754889s ago: executing program 2 (id=3271): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m18.562927954s ago: executing program 2 (id=3272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x70b}, 0x14}}, 0x0) 5m16.463783156s ago: executing program 32 (id=3251): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x8040480) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) 5m2.968833913s ago: executing program 33 (id=3272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x70b}, 0x14}}, 0x0) 1m42.56859341s ago: executing program 6 (id=4168): r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003b40), 0x0, 0x40000140, 0x0) 1m42.109286865s ago: executing program 6 (id=4170): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 1m40.549622991s ago: executing program 6 (id=4173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x2, 0x6, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5}, 0x48) 1m39.654011837s ago: executing program 6 (id=4175): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="88010000", @ANYRES16, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1m39.414748058s ago: executing program 6 (id=4176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003800), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x44000) 1m39.124082173s ago: executing program 6 (id=4179): writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1c}], 0x1, 0x0, 0x45, 0x4002}, 0x4000004) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000440), 0x0, &(0x7f0000000480)={0x0, 0x3938700}, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r2, 0x2285, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x12002, 0x3348a}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x2, 0x8, 0x8}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) syz_open_dev$vim2m(0x0, 0x4, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000001c0), &(0x7f0000000500), 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x1, 0x0, 0x1, 0x1, 0xa, 0x1ff, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 1m37.34508542s ago: executing program 4 (id=4181): syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = socket(0x10, 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8943, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000240)=0x8) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf4) getsockopt$inet6_int(r6, 0x29, 0x46, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m32.916430424s ago: executing program 0 (id=4187): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="88010000", @ANYRES16, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1m31.788728162s ago: executing program 0 (id=4190): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m27.479681569s ago: executing program 0 (id=4194): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x9001}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m24.427757634s ago: executing program 0 (id=4196): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, 0x0, 0x4) 1m22.817708697s ago: executing program 34 (id=4179): writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1c}], 0x1, 0x0, 0x45, 0x4002}, 0x4000004) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000440), 0x0, &(0x7f0000000480)={0x0, 0x3938700}, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r2, 0x2285, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x12002, 0x3348a}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x2, 0x8, 0x8}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) syz_open_dev$vim2m(0x0, 0x4, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000001c0), &(0x7f0000000500), 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x1, 0x0, 0x1, 0x1, 0xa, 0x1ff, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 1m22.611695285s ago: executing program 0 (id=4199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x34, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 1m22.577487685s ago: executing program 4 (id=4202): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000008000700000000000500020007000000"], 0x58}}, 0x0) 1m22.253486754s ago: executing program 4 (id=4204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000004e350000000000006507000002000000070700004a0000000f"], 0x0}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) 1m21.97301664s ago: executing program 4 (id=4206): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m21.374407689s ago: executing program 0 (id=4208): socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8, 0x80, 0x9, 0x80002e4, {{0x5, 0x4, 0x0, 0xe, 0x14, 0x63, 0x0, 0x10, 0x29, 0x0, @multicast2, @multicast2}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m18.379619771s ago: executing program 4 (id=4213): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m14.550742953s ago: executing program 4 (id=4219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x80004, {0x0, 0x0, 0x0, r7, {}, {0x4, 0xb}, {0x2, 0x8}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m4.322122774s ago: executing program 35 (id=4208): socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8, 0x80, 0x9, 0x80002e4, {{0x5, 0x4, 0x0, 0xe, 0x14, 0x63, 0x0, 0x10, 0x29, 0x0, @multicast2, @multicast2}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 59.485733934s ago: executing program 36 (id=4219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x80004, {0x0, 0x0, 0x0, r7, {}, {0x4, 0xb}, {0x2, 0x8}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 32.083201368s ago: executing program 1 (id=4269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4c}, 0x94) 32.051294578s ago: executing program 5 (id=4270): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xab, @loopback, 0x1}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x2000, 0x0) 30.781795433s ago: executing program 1 (id=4271): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000001f40)={0xf9a0000, 0x545e, 0xfff, 0xffffffffffffffff, 0x0, 0x0}) 27.187853014s ago: executing program 1 (id=4272): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x34, r4, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10}]}, 0x34}}, 0x4000) connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x24040004) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 27.187543158s ago: executing program 5 (id=4273): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 26.763316333s ago: executing program 5 (id=4274): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x9, 0x8}, 0x8) 20.670641881s ago: executing program 1 (id=4275): socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r6, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x141040, 0x42) 18.838721238s ago: executing program 5 (id=4276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) io_uring_setup(0x592d, &(0x7f0000000100)={0x0, 0xde19, 0x3080, 0x1, 0x48}) 18.838148801s ago: executing program 5 (id=4277): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000340)) timer_create(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 18.528463591s ago: executing program 1 (id=4278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4c}, 0x94) 17.120270106s ago: executing program 1 (id=4279): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000240), 0x0, 0x1000, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000001f00)) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000100)=ANY=[@ANYBLOB]) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x27dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x38013, 0x1922b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x9}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) 17.081507389s ago: executing program 5 (id=4280): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0)=0x9, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gretap0\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) 155.340844ms ago: executing program 37 (id=4279): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000240), 0x0, 0x1000, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000001f00)) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000100)=ANY=[@ANYBLOB]) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x27dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x38013, 0x1922b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x9}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) 0s ago: executing program 38 (id=4280): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0)=0x9, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gretap0\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) kernel console output (not intermixed with test programs): rno=0 [ 411.189845][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.189913][ T50] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 411.189938][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.245750][ T50] usb 5-1: config 0 descriptor?? [ 411.397971][T13550] hsr_slave_0: entered promiscuous mode [ 411.415583][T13550] hsr_slave_1: entered promiscuous mode [ 411.418311][T13550] debugfs: 'hsr0' already exists in 'hsr' [ 411.418338][T13550] Cannot create hsr debugfs directory [ 411.521303][ T50] usbhid 5-1:0.0: can't add hid device: -71 [ 411.521446][ T50] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 411.556034][ T50] usb 5-1: USB disconnect, device number 2 [ 411.811086][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3073'. [ 412.052340][ T50] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 412.135605][T13696] fuse: Unknown parameter 'fd0x0000000000000003' [ 412.212139][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 412.216434][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.216486][ T50] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 412.216509][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.270711][ T50] usb 5-1: config 0 descriptor?? [ 412.289975][ T50] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 412.327643][ T50] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 412.430182][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3076'. [ 412.595676][T13550] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.010525][T13714] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3080'. [ 414.024927][T13714] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3080'. [ 414.054880][ T5808] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 414.096395][T13550] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.187203][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3082'. [ 414.216049][T13722] fuse: Unknown parameter 'fd0x0000000000000003' [ 414.235395][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3083'. [ 414.447585][T13550] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.183910][ T5808] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 418.184189][ T5808] Bluetooth: hci0: Injecting HCI hardware error event [ 418.186999][ T61] Bluetooth: hci0: hardware error 0x00 [ 418.280063][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'. [ 418.555964][ T50] usb 5-1: USB disconnect, device number 3 [ 418.563703][ T50] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 419.839228][T13550] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.377726][ T61] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 420.769015][T13550] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 420.827982][T13550] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 420.886112][T13550] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 420.919772][T13550] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 422.653374][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3107'. [ 422.852467][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3108'. [ 422.924533][T13801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3108'. [ 425.263659][T13550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.418963][T13550] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.554034][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.554212][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.607813][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.608865][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.449619][T13550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.557151][T13550] veth0_vlan: entered promiscuous mode [ 427.590535][T13550] veth1_vlan: entered promiscuous mode [ 428.869150][T13838] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3118'. [ 429.183112][T13550] veth0_macvtap: entered promiscuous mode [ 429.228914][T13550] veth1_macvtap: entered promiscuous mode [ 429.584902][T13550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.596854][T13550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.615283][ T3578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.616435][ T3578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.616483][ T3578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.616523][ T3578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.826933][ T4154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.826954][ T4154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.515560][ T1263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.515581][ T1263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.847379][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 436.924458][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 436.958663][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 436.973151][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 436.986357][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 436.992557][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 442.421646][ T61] Bluetooth: hci1: command tx timeout [ 443.263145][T13905] chnl_net:caif_netlink_parms(): no params data found [ 445.238269][ T5808] Bluetooth: hci1: command tx timeout [ 445.288994][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.289168][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.691884][T13956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3152'. [ 447.407389][ T5808] Bluetooth: hci1: command tx timeout [ 447.900779][T13979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.204489][T13905] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.204647][T13905] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.205064][T13905] bridge_slave_0: entered allmulticast mode [ 448.212622][T13905] bridge_slave_0: entered promiscuous mode [ 448.237442][T13905] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.237644][T13905] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.237948][T13905] bridge_slave_1: entered allmulticast mode [ 448.251199][T13905] bridge_slave_1: entered promiscuous mode [ 448.415925][T13990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3161'. [ 448.443484][ T5980] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 448.805361][ T5980] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 448.805398][ T5980] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 448.805440][ T5980] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 448.805463][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.869958][T13981] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 448.920372][ T5980] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 448.932566][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3162'. [ 449.412094][ T5808] Bluetooth: hci1: command tx timeout [ 452.585513][T13905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.654677][T13905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.888673][ T5882] usb 5-1: USB disconnect, device number 4 [ 453.161500][T13905] team0: Port device team_slave_0 added [ 453.215994][T13905] team0: Port device team_slave_1 added [ 453.739658][T14010] ufs: You didn't specify the type of your ufs filesystem [ 453.739658][T14010] [ 453.739658][T14010] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 453.739658][T14010] [ 453.739658][T14010] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 453.739703][T14010] ufs: ufstype=old is supported read-only [ 454.278209][T13905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.278229][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.278256][T13905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.280848][T13905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.280863][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.280891][T13905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.677084][T14027] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 454.677113][T14027] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 454.677215][T14027] vhci_hcd vhci_hcd.0: Device attached [ 454.942061][ T5980] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 455.267039][T14028] vhci_hcd: connection reset by peer [ 455.832061][ T1263] vhci_hcd: stop threads [ 455.832081][ T1263] vhci_hcd: release socket [ 455.848885][T14039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3172'. [ 455.893011][ T1263] vhci_hcd: disconnect device [ 456.332611][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3176'. [ 456.502700][T13905] hsr_slave_0: entered promiscuous mode [ 456.504302][T13905] hsr_slave_1: entered promiscuous mode [ 456.532891][T13905] debugfs: 'hsr0' already exists in 'hsr' [ 456.532921][T13905] Cannot create hsr debugfs directory [ 457.359138][T14073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3190'. [ 457.664805][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3196'. [ 457.723634][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3196'. [ 457.787163][ T990] IPVS: starting estimator thread 0... [ 457.933262][T14091] IPVS: using max 9 ests per chain, 21600 per kthread [ 458.231188][T14099] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 458.231219][T14099] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 458.236127][T14099] vhci_hcd vhci_hcd.0: Device attached [ 459.286199][T13905] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.342098][T14100] vhci_hcd: connection closed [ 459.392473][ T3578] vhci_hcd: stop threads [ 459.392500][ T3578] vhci_hcd: release socket [ 459.392589][ T3578] vhci_hcd: disconnect device [ 459.963700][T13905] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.497539][ T5980] vhci_hcd: vhci_device speed not set [ 460.933367][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3212'. [ 461.050483][T13905] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.354291][T14145] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 461.354369][T14145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 461.357153][T14145] vhci_hcd vhci_hcd.0: Device attached [ 461.982754][T14146] vhci_hcd: connection closed [ 462.046565][ T37] vhci_hcd: stop threads [ 462.046619][ T37] vhci_hcd: release socket [ 462.527787][ T37] vhci_hcd: disconnect device [ 462.770159][T14160] fuse: Unknown parameter 'user_id00000000000000000000' [ 462.862271][T13905] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.427817][T14171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.708166][T14187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3229'. [ 465.543806][T13905] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.546191][T13905] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 466.752466][T13905] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 467.153109][T13905] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 467.982290][T14210] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 467.982342][T14210] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 467.982375][T14210] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 468.139707][ T38] audit: type=1800 audit(1760563469.657:46): pid=14210 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.3236" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 468.369486][T14226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3238'. [ 468.375722][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3238'. [ 470.045772][T13905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.098522][T13905] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.223605][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.223755][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.325313][ T4154] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.325515][ T4154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.979757][T13905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.472285][T13905] veth0_vlan: entered promiscuous mode [ 475.500069][T13905] veth1_vlan: entered promiscuous mode [ 476.195468][T13905] veth0_macvtap: entered promiscuous mode [ 476.244385][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 476.247431][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 476.265908][T13905] veth1_macvtap: entered promiscuous mode [ 476.296876][T13905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.332997][T13905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.348688][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.349262][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.349540][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.349582][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.589924][T14269] ceph: No mds server is up or the cluster is laggy [ 476.610478][ T3118] libceph: connect (1)[c::]:6789 error -101 [ 476.610675][ T3118] libceph: mon0 (1)[c::]:6789 connect error [ 477.589739][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 477.589887][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 478.137986][T14273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.885610][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.885633][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.796710][T14127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.796733][T14127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.824621][T14296] libceph: connect (1)[c::]:6789 error -101 [ 480.824806][T14296] libceph: mon0 (1)[c::]:6789 connect error [ 480.904753][T14296] libceph: connect (1)[b::]:6789 error -101 [ 480.904965][T14296] libceph: mon0 (1)[b::]:6789 connect error [ 481.095408][ T50] libceph: connect (1)[c::]:6789 error -101 [ 481.095635][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 481.174707][ T50] libceph: connect (1)[b::]:6789 error -101 [ 481.174921][ T50] libceph: mon0 (1)[b::]:6789 connect error [ 481.592905][T14297] ceph: No mds server is up or the cluster is laggy [ 481.609017][T14301] ceph: No mds server is up or the cluster is laggy [ 481.610654][ T50] libceph: connect (1)[c::]:6789 error -101 [ 481.610868][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 482.782496][T14296] libceph: connect (1)[b::]:6789 error -101 [ 482.782713][T14296] libceph: mon0 (1)[b::]:6789 connect error [ 484.137605][T14325] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 486.283081][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 486.285881][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 486.288608][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 486.289861][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 486.291698][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 488.753465][ T5808] Bluetooth: hci3: command tx timeout [ 489.623542][T14332] chnl_net:caif_netlink_parms(): no params data found [ 489.914340][T14332] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.914517][T14332] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.914730][T14332] bridge_slave_0: entered allmulticast mode [ 489.916823][T14332] bridge_slave_0: entered promiscuous mode [ 489.919778][T14332] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.919923][T14332] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.920075][T14332] bridge_slave_1: entered allmulticast mode [ 489.929177][T14332] bridge_slave_1: entered promiscuous mode [ 490.126864][T14332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.131699][T14332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.737381][T14332] team0: Port device team_slave_0 added [ 490.749397][T14332] team0: Port device team_slave_1 added [ 490.772147][ T5808] Bluetooth: hci3: command tx timeout [ 491.273465][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 491.293276][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 491.294574][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 491.296386][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 491.297672][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.835031][T14368] overlayfs: failed to clone upperpath [ 492.543897][T14332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.543915][T14332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.543945][T14332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.573300][T14332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.573320][T14332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.573353][T14332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.022195][ T61] Bluetooth: hci3: command tx timeout [ 493.634045][ T61] Bluetooth: hci2: command tx timeout [ 493.676956][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3281'. [ 494.071203][T14380] pim6reg: entered allmulticast mode [ 494.182225][ T5980] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 494.217709][T14332] hsr_slave_0: entered promiscuous mode [ 494.218738][T14332] hsr_slave_1: entered promiscuous mode [ 494.219460][T14332] debugfs: 'hsr0' already exists in 'hsr' [ 494.219478][T14332] Cannot create hsr debugfs directory [ 494.332596][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 494.352447][ T5980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.360806][ T5980] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 494.360826][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.360840][ T5980] usb 5-1: Product: syz [ 494.360850][ T5980] usb 5-1: Manufacturer: syz [ 494.360860][ T5980] usb 5-1: SerialNumber: syz [ 494.371409][ T5980] usb 5-1: config 0 descriptor?? [ 494.586618][ T5980] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 494.586639][ T5980] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -22) [ 494.732887][ T5980] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 495.097027][ T61] Bluetooth: hci3: command tx timeout [ 495.389721][ T1165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.652297][ T61] Bluetooth: hci2: command tx timeout [ 495.708425][ T9] usb 5-1: USB disconnect, device number 5 [ 495.837829][ T1165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.938544][T14373] pim6reg: left allmulticast mode [ 496.257086][ T1165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.508299][T14332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.658301][T14403] fuse: Unknown parameter 'fd0x0000000000000004' [ 496.766532][ T1165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.989512][T14405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3291'. [ 497.254799][T14332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.511562][T14332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.556465][T14364] chnl_net:caif_netlink_parms(): no params data found [ 497.732257][ T61] Bluetooth: hci2: command tx timeout [ 499.319464][T14332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.694176][ T1165] bridge_slave_1: left allmulticast mode [ 499.704448][ T1165] bridge_slave_1: left promiscuous mode [ 499.708614][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.793522][ T1165] bridge_slave_0: left allmulticast mode [ 499.793547][ T1165] bridge_slave_0: left promiscuous mode [ 499.793828][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.820466][ T61] Bluetooth: hci2: command tx timeout [ 500.245752][T14431] fuse: Unknown parameter 'fd0x0000000000000004' [ 501.602778][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.682995][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.707463][ T1165] bond0 (unregistering): Released all slaves [ 501.899138][T14364] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.899301][T14364] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.899555][T14364] bridge_slave_0: entered allmulticast mode [ 501.906503][T14364] bridge_slave_0: entered promiscuous mode [ 501.914256][T14364] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.914455][T14364] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.914728][T14364] bridge_slave_1: entered allmulticast mode [ 501.918337][T14364] bridge_slave_1: entered promiscuous mode [ 503.829803][T14442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3303'. [ 503.960803][T14364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.989413][T14364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.596847][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 504.630491][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 504.639767][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 504.647113][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 504.661118][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 504.745487][T14455] fuse: Unknown parameter 'fd0x0000000000000004' [ 504.927805][T14364] team0: Port device team_slave_0 added [ 506.163266][T14457] syz.4.3309 (14457): drop_caches: 2 [ 506.450361][T14364] team0: Port device team_slave_1 added [ 506.715023][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3311'. [ 506.865271][ T61] Bluetooth: hci4: command tx timeout [ 507.523371][T14332] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 507.560943][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.561018][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.483109][ T1165] hsr_slave_0: left promiscuous mode [ 508.526235][ T1165] hsr_slave_1: left promiscuous mode [ 508.529755][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.529874][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.588214][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.588245][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.740142][ T1165] veth1_macvtap: left promiscuous mode [ 508.740424][ T1165] veth0_macvtap: left promiscuous mode [ 508.740731][ T1165] veth1_vlan: left promiscuous mode [ 508.741084][ T1165] veth0_vlan: left promiscuous mode [ 508.933929][ T61] Bluetooth: hci4: command tx timeout [ 510.415097][T14500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3322'. [ 511.012648][ T61] Bluetooth: hci4: command tx timeout [ 512.886366][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 513.032930][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 513.098968][ T61] Bluetooth: hci4: command tx timeout [ 515.124975][T14332] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 515.320466][T14332] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 515.378490][T14364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.378509][T14364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.378537][T14364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.385663][T14332] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 515.505948][T14364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.505965][T14364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.505993][T14364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.107251][ T5980] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 516.293139][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 516.296910][ T5980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.301028][ T5980] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 516.301048][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.301062][ T5980] usb 5-1: Product: syz [ 516.301072][ T5980] usb 5-1: Manufacturer: syz [ 516.301082][ T5980] usb 5-1: SerialNumber: syz [ 516.383896][ T5980] usb 5-1: config 0 descriptor?? [ 516.605664][ T5980] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 516.605696][ T5980] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -22) [ 516.969034][T14364] hsr_slave_0: entered promiscuous mode [ 516.970543][T14364] hsr_slave_1: entered promiscuous mode [ 516.971539][T14364] debugfs: 'hsr0' already exists in 'hsr' [ 516.971563][T14364] Cannot create hsr debugfs directory [ 517.065013][ T5980] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 517.117985][ T5980] usb 5-1: USB disconnect, device number 6 [ 518.675535][T14583] No control pipe specified [ 519.119512][ T1165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.260622][T14448] chnl_net:caif_netlink_parms(): no params data found [ 519.465564][T14602] No control pipe specified [ 519.535919][ T1165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.016450][ T1165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.413379][ T1165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.577616][T14364] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 520.782282][T14364] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 520.809517][T14448] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.809706][T14448] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.810191][T14448] bridge_slave_0: entered allmulticast mode [ 520.813732][T14448] bridge_slave_0: entered promiscuous mode [ 520.819740][T14364] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 520.854184][T14448] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.854401][T14448] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.854599][T14448] bridge_slave_1: entered allmulticast mode [ 520.857611][T14448] bridge_slave_1: entered promiscuous mode [ 520.865268][T14364] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 521.239120][T14639] No control pipe specified [ 521.257223][T14448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.300400][T14448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.571228][T14332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.658176][T14448] team0: Port device team_slave_0 added [ 521.740062][T14448] team0: Port device team_slave_1 added [ 522.084470][T14661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.198328][T14448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.198345][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.198371][T14448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.215479][T14448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.215498][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.215526][T14448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.237080][T14332] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.384252][ T1165] bridge_slave_1: left allmulticast mode [ 522.384281][ T1165] bridge_slave_1: left promiscuous mode [ 522.386627][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.474187][ T1165] bridge_slave_0: left allmulticast mode [ 522.474217][ T1165] bridge_slave_0: left promiscuous mode [ 522.474480][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.496761][T14670] netlink: 'syz.0.3370': attribute type 1 has an invalid length. [ 523.520270][T14686] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 523.520367][T14686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 523.523297][T14686] vhci_hcd vhci_hcd.0: Device attached [ 523.952668][ T31] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 524.270591][T14687] vhci_hcd: connection reset by peer [ 524.290975][ T3619] vhci_hcd: stop threads [ 524.291031][ T3619] vhci_hcd: release socket [ 524.294793][ T3619] vhci_hcd: disconnect device [ 525.613223][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.672962][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.716305][ T1165] bond0 (unregistering): Released all slaves [ 525.741295][T14670] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 525.920695][T14672] veth3: entered promiscuous mode [ 525.997954][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.998068][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.211138][T14702] overlayfs: failed to clone upperpath [ 528.181533][T14448] hsr_slave_0: entered promiscuous mode [ 528.190785][T14448] hsr_slave_1: entered promiscuous mode [ 528.199921][T14448] debugfs: 'hsr0' already exists in 'hsr' [ 528.199949][T14448] Cannot create hsr debugfs directory [ 528.569105][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.569374][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.982271][T14715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.092720][ T31] vhci_hcd: vhci_device speed not set [ 529.122378][ T1165] hsr_slave_0: left promiscuous mode [ 529.166810][ T1165] hsr_slave_1: left promiscuous mode [ 529.187720][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.187749][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.233216][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.233246][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.309022][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3388'. [ 529.364809][ T1165] veth1_macvtap: left promiscuous mode [ 529.364925][ T1165] veth0_macvtap: left promiscuous mode [ 529.365219][ T1165] veth1_vlan: left promiscuous mode [ 529.366331][ T1165] veth0_vlan: left promiscuous mode [ 532.357690][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 532.633099][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 535.542515][T14729] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 535.542796][T14729] overlayfs: failed to clone lowerpath [ 535.850720][T14738] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3393'. [ 536.367828][T14364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.628710][T14762] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 536.628924][T14762] overlayfs: failed to clone lowerpath [ 536.907403][T14364] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.033305][T14448] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 537.083996][T14448] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 537.228103][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.230759][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.317248][T14448] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 537.577357][T14448] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 537.778523][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.780223][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.226384][T14332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.875898][T14332] veth0_vlan: entered promiscuous mode [ 538.941531][T14448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.984492][T14332] veth1_vlan: entered promiscuous mode [ 539.208375][T14448] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.487347][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.487561][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.589492][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3412'. [ 539.661690][ T4154] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.681758][ T4154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.847147][T14332] veth0_macvtap: entered promiscuous mode [ 539.913607][T14332] veth1_macvtap: entered promiscuous mode [ 540.269728][T14332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.486651][T14332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.570444][ T1178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.593054][ T3547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.618261][T14364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.622391][ T3547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.639906][ T3547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.509031][T14038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.509047][T14038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.876833][ T3619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.876851][ T3619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.989601][T14448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.875953][T14364] veth0_vlan: entered promiscuous mode [ 543.044508][T14364] veth1_vlan: entered promiscuous mode [ 543.403633][T14364] veth0_macvtap: entered promiscuous mode [ 543.417043][T14364] veth1_macvtap: entered promiscuous mode [ 543.566341][T14364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.611099][T14364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.716954][T14037] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.717739][T14037] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.719210][T14037] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.720678][T14037] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.348615][ T4154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.348638][ T4154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.619005][T14448] veth0_vlan: entered promiscuous mode [ 545.899084][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.899107][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.909414][T14448] veth1_vlan: entered promiscuous mode [ 546.225310][T14448] veth0_macvtap: entered promiscuous mode [ 546.250109][T14448] veth1_macvtap: entered promiscuous mode [ 546.382706][T14448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.473237][T14448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.531965][ T3619] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.536066][ T3619] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.536873][ T3619] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.537029][ T3619] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.550022][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.550045][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.719480][T14934] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3431'. [ 548.085995][ T4154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.086017][ T4154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.312130][T14845] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 549.480313][T14845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.480365][T14845] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 549.480397][T14845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.568894][T14845] usb 5-1: config 0 descriptor?? [ 550.100080][T14845] usbhid 5-1:0.0: can't add hid device: -71 [ 550.100220][T14845] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 550.131043][T14845] usb 5-1: USB disconnect, device number 7 [ 550.932185][T14845] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 551.112710][T14845] usb 5-1: Using ep0 maxpacket: 32 [ 551.115170][T14845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.115219][T14845] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 551.115256][T14845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.140220][T14845] usb 5-1: config 0 descriptor?? [ 551.156772][T14845] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 551.286646][T14845] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 551.796457][T14993] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 551.816483][T14993] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 551.819667][T14993] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 551.838930][T14993] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 551.839768][T14993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 553.032167][ T3118] usb 5-1: USB disconnect, device number 8 [ 553.238366][ T3118] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 553.506818][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.892135][ T61] Bluetooth: hci1: command tx timeout [ 554.211515][ T38] audit: type=1326 audit(1760563555.887:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15047 comm="syz.5.3461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef3f2ceec9 code=0x0 [ 554.503414][T14992] chnl_net:caif_netlink_parms(): no params data found [ 555.907347][T14992] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.909498][T14992] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.909766][T14992] bridge_slave_0: entered allmulticast mode [ 555.943672][T14992] bridge_slave_0: entered promiscuous mode [ 555.973734][ T61] Bluetooth: hci1: command tx timeout [ 556.021374][T14992] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.021517][T14992] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.021778][T14992] bridge_slave_1: entered allmulticast mode [ 556.050250][T14992] bridge_slave_1: entered promiscuous mode [ 556.177976][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.506260][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.034161][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.349864][T14992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.403945][T14992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.062813][T14993] Bluetooth: hci1: command tx timeout [ 558.435176][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.018613][T14992] team0: Port device team_slave_0 added [ 559.048452][T14992] team0: Port device team_slave_1 added [ 559.376121][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.230572][T14993] Bluetooth: hci1: command tx timeout [ 560.299381][T15121] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 560.299412][T15121] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 560.299426][T15121] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 560.617013][T15126] ufs: You didn't specify the type of your ufs filesystem [ 560.617013][T15126] [ 560.617013][T15126] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 560.617013][T15126] [ 560.617013][T15126] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 560.617053][T15126] ufs: ufstype=old is supported read-only [ 560.818783][T14992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.818800][T14992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.818825][T14992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.834061][T14992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.834082][T14992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.834115][T14992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.208375][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3480'. [ 561.627402][T14992] hsr_slave_0: entered promiscuous mode [ 561.628890][T14992] hsr_slave_1: entered promiscuous mode [ 561.630044][T14992] debugfs: 'hsr0' already exists in 'hsr' [ 561.630069][T14992] Cannot create hsr debugfs directory [ 564.120661][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'. [ 564.126286][T15168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3497'. [ 566.519721][T14992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.104842][T14992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.644222][T14992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.153508][T15247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3527'. [ 568.221845][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3527'. [ 568.354198][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.355713][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.076861][T14992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.296443][T15231] ufs: You didn't specify the type of your ufs filesystem [ 569.296443][T15231] [ 569.296443][T15231] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 569.296443][T15231] [ 569.296443][T15231] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 569.296499][T15231] ufs: ufstype=old is supported read-only [ 569.402243][T14845] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 569.555949][T14845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.556002][T14845] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 569.556025][T14845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.582844][T14845] usb 5-1: config 0 descriptor?? [ 569.824402][T14845] usbhid 5-1:0.0: can't add hid device: -71 [ 569.824540][T14845] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 569.839469][T14845] usb 5-1: USB disconnect, device number 9 [ 570.352086][T14845] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 570.370271][T14992] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 570.502172][T14845] usb 5-1: Using ep0 maxpacket: 32 [ 570.502736][T14992] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 570.504532][T14845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.504575][T14845] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 570.504608][T14845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.557048][T14845] usb 5-1: config 0 descriptor?? [ 570.574798][T14845] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 570.597403][T14845] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 570.829465][T14992] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 571.829380][T14992] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 572.336718][T14992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.374800][T14992] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.402175][ T4154] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.402402][ T4154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.438531][ T4154] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.438844][ T4154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.008988][ T990] usb 5-1: USB disconnect, device number 10 [ 573.033674][ T990] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 573.294714][T14992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.442681][T14992] veth0_vlan: entered promiscuous mode [ 573.492647][T14992] veth1_vlan: entered promiscuous mode [ 573.846801][T14992] veth0_macvtap: entered promiscuous mode [ 573.874703][T14992] veth1_macvtap: entered promiscuous mode [ 574.936508][T14992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.058231][T14992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.322058][T14038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.354975][ T3547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.355276][ T3547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.355569][ T3547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.894582][T15374] netlink: 'syz.5.3568': attribute type 12 has an invalid length. [ 575.894604][T15374] netlink: 'syz.5.3568': attribute type 29 has an invalid length. [ 575.894619][T15374] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3568'. [ 576.172467][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.172489][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.374677][T15388] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 576.541252][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.541273][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.576510][T15424] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 577.576634][T15424] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 577.577167][T15424] vhci_hcd vhci_hcd.0: Device attached [ 577.996138][T14845] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 578.307622][T15427] vhci_hcd: connection reset by peer [ 578.437189][T14127] vhci_hcd: stop threads [ 578.437245][T14127] vhci_hcd: release socket [ 578.437704][T14127] vhci_hcd: disconnect device [ 579.025687][T15423] netlink: 'syz.1.3583': attribute type 12 has an invalid length. [ 579.025712][T15423] netlink: 'syz.1.3583': attribute type 29 has an invalid length. [ 579.025727][T15423] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3583'. [ 580.986019][ T990] libceph: connect (1)[c::]:6789 error -101 [ 580.986232][ T990] libceph: mon0 (1)[c::]:6789 connect error [ 580.989844][T14296] libceph: connect (1)[b::]:6789 error -101 [ 580.990044][T14296] libceph: mon0 (1)[b::]:6789 connect error [ 581.056995][T15458] ceph: No mds server is up or the cluster is laggy [ 581.057372][T15461] ceph: No mds server is up or the cluster is laggy [ 581.242383][ T990] libceph: connect (1)[c::]:6789 error -101 [ 581.242520][ T990] libceph: mon0 (1)[c::]:6789 connect error [ 582.376526][T15508] overlayfs: failed to resolve './file1/file0': -2 [ 583.242194][T14845] vhci_hcd: vhci_device speed not set [ 583.274755][T15494] ufs: You didn't specify the type of your ufs filesystem [ 583.274755][T15494] [ 583.274755][T15494] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 583.274755][T15494] [ 583.274755][T15494] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 583.274797][T15494] ufs: ufstype=old is supported read-only [ 583.676973][T15545] netlink: 'syz.5.3619': attribute type 12 has an invalid length. [ 583.676994][T15545] netlink: 'syz.5.3619': attribute type 29 has an invalid length. [ 583.677008][T15545] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3619'. [ 584.468407][ T38] audit: type=1804 audit(1760563586.107:48): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="iou-wrk-15572" name="file0" dev="ramfs" ino=46328 res=1 errno=0 [ 586.205601][T15601] overlayfs: failed to resolve './file1/file0': -2 [ 586.485380][ T38] audit: type=1326 audit(1760563588.157:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15606 comm="syz.0.3637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ce914eec9 code=0x0 [ 587.562052][T14296] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 587.724876][T14296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.724929][T14296] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 587.724952][T14296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.834049][T14296] usb 2-1: config 0 descriptor?? [ 588.092228][T14296] usbhid 2-1:0.0: can't add hid device: -71 [ 588.092378][T14296] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 588.114756][T14296] usb 2-1: USB disconnect, device number 2 [ 588.179056][T15638] overlayfs: failed to resolve './file1/file0': -2 [ 588.652131][T14296] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 588.679587][ T38] audit: type=1326 audit(1760563590.357:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15652 comm="syz.5.3652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef3f2ceec9 code=0x0 [ 588.822686][T14296] usb 2-1: Using ep0 maxpacket: 32 [ 588.833036][T14296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.833093][T14296] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 588.833121][T14296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.917570][T14296] usb 2-1: config 0 descriptor?? [ 588.966746][T14296] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 588.997099][T14296] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 591.258934][T15686] overlayfs: failed to resolve './file1/file0': -2 [ 591.985101][ T990] usb 2-1: USB disconnect, device number 3 [ 592.073698][ T38] audit: type=1326 audit(1760563593.747:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15705 comm="syz.5.3666" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef3f2ceec9 code=0x0 [ 592.109401][ T990] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 596.768590][T15783] ufs: You didn't specify the type of your ufs filesystem [ 596.768590][T15783] [ 596.768590][T15783] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 596.768590][T15783] [ 596.768590][T15783] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 596.768634][T15783] ufs: ufstype=old is supported read-only [ 597.839374][T15829] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 597.839413][T15829] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 597.845163][T15829] vhci_hcd vhci_hcd.0: Device attached [ 598.162743][ T10] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 598.237936][T15831] vhci_hcd: connection reset by peer [ 598.536949][ T37] vhci_hcd: stop threads [ 598.537010][ T37] vhci_hcd: release socket [ 598.538243][ T37] vhci_hcd: disconnect device [ 601.507840][T15871] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 601.507902][T15871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 601.510392][T15871] vhci_hcd vhci_hcd.0: Device attached [ 601.942576][T15872] vhci_hcd: connection closed [ 602.045369][T15874] vhci_hcd: stop threads [ 602.045423][T15874] vhci_hcd: release socket [ 602.046531][T15874] vhci_hcd: disconnect device [ 603.250542][ T10] vhci_hcd: vhci_device speed not set [ 604.093402][T15902] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3732'. [ 607.399496][T15937] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3746'. [ 609.067421][ T5980] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 609.167452][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3758'. [ 609.338596][ T5980] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 609.338634][ T5980] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 609.338676][ T5980] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 609.338699][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.672496][T15955] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 609.817561][ T5980] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 614.368604][T14993] Bluetooth: hci3: command 0x0406 tx timeout [ 614.385676][ T31] usb 6-1: USB disconnect, device number 2 [ 614.910988][T14935] udevd[14935]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.452036][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 617.392089][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 617.686204][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 617.686243][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 617.686272][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 617.686288][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.698791][T16010] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 617.750335][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.304272][ T50] usb 5-1: USB disconnect, device number 11 [ 620.343234][T16059] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 620.343284][T16059] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 620.343305][T16059] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 620.423552][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3792'. [ 620.990013][T16071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.092320][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 622.277759][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 622.277800][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 622.277842][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 622.277865][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.357426][T16084] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 622.372136][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 625.825941][ T31] usb 6-1: USB disconnect, device number 3 [ 628.432182][ T3118] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 628.586165][ T3118] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 628.586205][ T3118] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 628.586254][ T3118] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 628.586279][ T3118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.690430][T16125] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 628.756627][ T3118] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 629.662939][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.663018][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.915827][ T10] usb 5-1: USB disconnect, device number 12 [ 632.024311][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 632.182004][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 632.184648][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 632.184818][ T31] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 632.184845][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.207116][ T31] usb 2-1: config 0 descriptor?? [ 632.691428][ T31] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 632.776048][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 632.870065][T16173] fuse: Bad value for 'fd' [ 633.074202][ T31] usb 2-1: USB disconnect, device number 4 [ 633.187769][T16174] ufs: You didn't specify the type of your ufs filesystem [ 633.187769][T16174] [ 633.187769][T16174] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 633.187769][T16174] [ 633.187769][T16174] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 633.187828][T16174] ufs: ufstype=old is supported read-only [ 633.205961][ T5882] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 633.389258][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.389306][ T5882] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 633.389329][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.427269][ T5882] usb 6-1: config 0 descriptor?? [ 633.706622][ T5882] usbhid 6-1:0.0: can't add hid device: -71 [ 633.706758][ T5882] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 633.746496][ T5882] usb 6-1: USB disconnect, device number 4 [ 633.900879][ T38] audit: type=1326 audit(1760563635.577:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16186 comm="syz.4.3843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f651b55eec9 code=0x0 [ 635.262040][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 635.414948][ T31] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 635.414983][ T31] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 635.415022][ T31] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 635.415043][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.479568][T16198] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 635.496333][ T31] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 640.174445][ T31] usb 6-1: USB disconnect, device number 5 [ 640.255121][T15714] udevd[15714]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 640.732466][ T38] audit: type=1326 audit(1760563642.407:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16229 comm="syz.5.3861" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef3f2ceec9 code=0x0 [ 640.822050][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 640.974150][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.974189][ T31] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 640.974206][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.047495][ T31] usb 5-1: config 0 descriptor?? [ 641.305326][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 641.305427][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 641.363527][ T31] usb 5-1: USB disconnect, device number 13 [ 641.898857][ T990] libceph: connect (1)[b::]:6789 error -101 [ 641.899013][ T990] libceph: mon0 (1)[b::]:6789 connect error [ 642.152576][ T990] libceph: connect (1)[b::]:6789 error -101 [ 642.152812][ T990] libceph: mon0 (1)[b::]:6789 connect error [ 642.428239][T16254] ufs: You didn't specify the type of your ufs filesystem [ 642.428239][T16254] [ 642.428239][T16254] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 642.428239][T16254] [ 642.428239][T16254] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 642.428295][T16254] ufs: ufstype=old is supported read-only [ 642.654743][T16247] ceph: No mds server is up or the cluster is laggy [ 642.682247][ T990] libceph: connect (1)[b::]:6789 error -101 [ 642.682448][ T990] libceph: mon0 (1)[b::]:6789 connect error [ 643.037902][ T38] audit: type=1326 audit(1760563644.717:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16269 comm="syz.5.3876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef3f2ceec9 code=0x0 [ 643.105286][T16276] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3877'. [ 646.078135][T16337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3898'. [ 647.653479][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3903'. [ 648.376103][ T3118] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 648.544622][ T3118] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 648.544656][ T3118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.577430][ T3118] usb 1-1: config 0 descriptor?? [ 648.591257][ T3118] cp210x 1-1:0.0: cp210x converter detected [ 649.027584][ T3118] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 649.163119][ T3118] usb 1-1: cp210x converter now attached to ttyUSB0 [ 649.264921][ T3118] usb 1-1: USB disconnect, device number 2 [ 649.331539][ T3118] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 649.601033][ T3118] cp210x 1-1:0.0: device disconnected [ 649.680805][T16383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3917'. [ 651.909903][T16423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3928'. [ 652.732799][ T5980] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 652.905537][ T5980] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 652.905636][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.076525][ T5980] usb 6-1: config 0 descriptor?? [ 653.229383][ T5980] cp210x 6-1:0.0: cp210x converter detected [ 653.524169][ T5980] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 653.524441][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 653.524585][ T5980] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 653.524601][ T5980] cp210x 6-1:0.0: GPIO initialisation failed: -32 [ 653.596573][ T5980] usb 6-1: cp210x converter now attached to ttyUSB0 [ 653.640065][ T5980] usb 6-1: USB disconnect, device number 6 [ 653.859376][ T5980] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 653.860240][ T5980] cp210x 6-1:0.0: device disconnected [ 654.746623][ T5882] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 654.930896][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 654.942840][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 654.942892][ T5882] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 654.942916][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.983995][ T5882] usb 1-1: config 0 descriptor?? [ 655.293865][ T5882] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 655.460639][ T31] usb 1-1: USB disconnect, device number 3 [ 655.902101][ T5882] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 656.064689][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 656.088084][ T5882] usb 2-1: config 0 has no interfaces? [ 656.090173][ T5882] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 656.090201][ T5882] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 656.090222][ T5882] usb 2-1: Manufacturer: syz [ 656.174341][ T5882] usb 2-1: config 0 descriptor?? [ 656.800501][T16484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3951'. [ 659.072797][ T5882] usb 2-1: USB disconnect, device number 5 [ 660.619276][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3972'. [ 661.629060][T16548] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 661.629085][T16548] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 661.629146][T16548] vhci_hcd vhci_hcd.0: Device attached [ 661.889687][T14296] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 662.436758][T16549] vhci_hcd: connection reset by peer [ 662.439249][ T985] vhci_hcd: stop threads [ 662.439265][ T985] vhci_hcd: release socket [ 662.440194][ T985] vhci_hcd: disconnect device [ 663.082137][T16569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3982'. [ 663.987845][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3985'. [ 665.260877][T16598] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 665.260905][T16598] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 665.260992][T16598] vhci_hcd vhci_hcd.0: Device attached [ 665.532038][ T3118] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 666.007769][T16599] vhci_hcd: connection reset by peer [ 666.020091][ T12] vhci_hcd: stop threads [ 666.020109][ T12] vhci_hcd: release socket [ 666.020180][ T12] vhci_hcd: disconnect device [ 666.294442][T16606] netlink: 'syz.4.3996': attribute type 12 has an invalid length. [ 666.294465][T16606] netlink: 'syz.4.3996': attribute type 29 has an invalid length. [ 666.294475][T16606] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3996'. [ 666.811253][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3999'. [ 667.002123][T14296] vhci_hcd: vhci_device speed not set [ 667.989154][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4006'. [ 668.642089][T16643] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 668.642116][T16643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 668.642198][T16643] vhci_hcd vhci_hcd.0: Device attached [ 668.882180][T14845] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 669.274008][T16644] vhci_hcd: connection reset by peer [ 669.278703][ T3619] vhci_hcd: stop threads [ 669.278718][ T3619] vhci_hcd: release socket [ 669.278789][ T3619] vhci_hcd: disconnect device [ 669.374381][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4013'. [ 670.708330][ T3118] vhci_hcd: vhci_device speed not set [ 671.527159][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4027'. [ 671.582273][T14296] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 671.742027][T14296] usb 1-1: Using ep0 maxpacket: 8 [ 671.759995][T14296] usb 1-1: unable to get BOS descriptor or descriptor too short [ 671.788271][T14296] usb 1-1: config 127 has an invalid interface number: 47 but max is 0 [ 671.788303][T14296] usb 1-1: config 127 has no interface number 0 [ 671.788343][T14296] usb 1-1: config 127 interface 47 has no altsetting 0 [ 671.847888][T14296] usb 1-1: New USB device found, idVendor=041e, idProduct=405b, bcdDevice=7d.aa [ 671.847921][T14296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.847942][T14296] usb 1-1: Product: syz [ 671.847957][T14296] usb 1-1: Manufacturer: syz [ 671.847972][T14296] usb 1-1: SerialNumber: syz [ 672.189175][T14296] gspca_main: vc032x-2.14.0 probing 041e:405b [ 672.198648][T14296] gspca_vc032x: reg_r err -71 [ 672.198683][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198694][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198704][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198712][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198722][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198731][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198740][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198748][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198757][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198766][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198774][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198783][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198793][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198802][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198811][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198819][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198829][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198839][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198847][T14296] gspca_vc032x: I2c Bus Busy Wait 00 [ 672.198856][T14296] gspca_vc032x: Unknown sensor... [ 672.198947][T14296] vc032x 1-1:127.47: probe with driver vc032x failed with error -22 [ 672.352722][T14296] usb 1-1: USB disconnect, device number 4 [ 672.553182][T16701] mmap: syz.1.4028 (16701) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 673.062059][T14296] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 673.235551][T14296] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 673.235584][T14296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.306188][T14296] usb 6-1: config 0 descriptor?? [ 673.434945][T14296] cp210x 6-1:0.0: cp210x converter detected [ 674.028845][T14845] vhci_hcd: vhci_device speed not set [ 674.224725][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4032'. [ 674.299396][T14296] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 674.299426][T14296] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 674.492460][T14296] usb 6-1: cp210x converter now attached to ttyUSB0 [ 674.576579][T14296] usb 6-1: USB disconnect, device number 7 [ 674.679861][T14296] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 674.680870][T14296] cp210x 6-1:0.0: device disconnected [ 674.784393][T16733] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4040'. [ 675.462150][T14845] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 675.542176][ T5980] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 675.618813][T14845] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 675.618845][T14845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.618868][T14845] usb 7-1: Product: syz [ 675.618944][T14845] usb 7-1: Manufacturer: syz [ 675.618960][T14845] usb 7-1: SerialNumber: syz [ 675.683578][T14845] usb 7-1: config 0 descriptor?? [ 675.702754][ T5980] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 675.702819][ T5980] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 675.702834][ T5980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 675.702872][ T5980] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 675.702890][ T5980] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 675.708060][ T5980] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 675.708082][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 675.708096][ T5980] usb 5-1: Product: syz [ 675.708147][ T5980] usb 5-1: Manufacturer: syz [ 675.833528][ T5980] cdc_wdm 5-1:1.0: skipping garbage [ 675.833545][ T5980] cdc_wdm 5-1:1.0: skipping garbage [ 675.840418][ T5980] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 675.840449][ T5980] cdc_wdm 5-1:1.0: Unknown control protocol [ 676.097455][ T5980] usb 5-1: USB disconnect, device number 14 [ 676.371461][T14845] usb 7-1: f81604_read: reg: 105 failed: -EPROTO [ 676.371492][T14845] f81604 7-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 676.371534][T14845] f81604 7-1:0.0: probe with driver f81604 failed with error -71 [ 676.410713][T14845] usb 7-1: USB disconnect, device number 2 [ 677.732271][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 677.919576][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4064'. [ 678.090046][T16795] tipc: Started in network mode [ 678.090094][T16795] tipc: Node identity 725c85784542, cluster identity 4711 [ 678.090982][T16795] tipc: Enabled bearer , priority 0 [ 678.151726][T16795] tipc: Resetting bearer [ 678.413746][T16793] tipc: Disabling bearer [ 678.949151][T16816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4072'. [ 679.162358][T16819] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4073'. [ 679.426278][ T38] audit: type=1326 audit(1760563681.097:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16825 comm="syz.4.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651b55eec9 code=0x7ffc0000 [ 679.426338][ T38] audit: type=1326 audit(1760563681.097:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16825 comm="syz.4.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f651b55eec9 code=0x7ffc0000 [ 679.426386][ T38] audit: type=1326 audit(1760563681.097:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16825 comm="syz.4.4076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 679.426435][ T38] audit: type=1326 audit(1760563681.097:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16825 comm="syz.4.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651b55eec9 code=0x7ffc0000 [ 680.547094][T16843] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4084'. [ 680.561112][ T5980] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 680.607853][ T5980] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 680.862544][T16851] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4087'. [ 682.356172][T16839] hid-generic 0000:0000:0000.0001: pid 16839 passed too large report [ 683.012240][T16881] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4098'. [ 683.317282][T16883] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4101'. [ 683.892568][ T5980] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 684.092469][ T5980] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 684.092492][ T5980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.158895][ T5980] usb 2-1: config 0 descriptor?? [ 684.172995][T16898] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 684.173022][T16898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 684.173130][T16898] vhci_hcd vhci_hcd.0: Device attached [ 684.202805][ T5980] cp210x 2-1:0.0: cp210x converter detected [ 684.453669][T14296] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 684.577360][ T5980] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 684.628071][ T5980] usb 2-1: cp210x converter now attached to ttyUSB0 [ 684.827259][ T3118] usb 2-1: USB disconnect, device number 6 [ 684.864110][ T3118] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 684.947978][T16899] vhci_hcd: connection reset by peer [ 684.954409][T14038] vhci_hcd: stop threads [ 684.954438][T14038] vhci_hcd: release socket [ 684.954537][T14038] vhci_hcd: disconnect device [ 685.022316][ T3118] cp210x 2-1:0.0: device disconnected [ 685.192159][T14845] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 685.352069][T14845] usb 1-1: Using ep0 maxpacket: 32 [ 685.390268][T14845] usb 1-1: unable to get BOS descriptor or descriptor too short [ 685.400646][T14845] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 685.400686][T14845] usb 1-1: can't read configurations, error -71 [ 685.710847][T16915] overlayfs: overlapping lowerdir path [ 686.723363][T16939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4117'. [ 687.581796][T16943] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4121'. [ 688.037629][T16950] overlayfs: overlapping lowerdir path [ 688.143511][T16951] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 688.143538][T16951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 688.143639][T16951] vhci_hcd vhci_hcd.0: Device attached [ 688.391993][T14845] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 688.895003][T16952] vhci_hcd: connection reset by peer [ 688.895377][ T68] vhci_hcd: stop threads [ 688.895391][ T68] vhci_hcd: release socket [ 688.895549][ T68] vhci_hcd: disconnect device [ 689.686352][T14296] vhci_hcd: vhci_device speed not set [ 690.364559][T16977] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4132'. [ 690.649848][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4135'. [ 690.656165][T16981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 691.589407][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.589495][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.028752][T16986] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 692.028770][T16986] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 692.028828][T16986] vhci_hcd vhci_hcd.0: Device attached [ 692.162082][ T5980] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 692.505759][ T5980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.505789][ T5980] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 692.505828][ T5980] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 692.505850][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.561633][ T5980] usb 5-1: config 0 descriptor?? [ 692.586366][T16994] vhci_hcd: connection closed [ 692.604966][T14038] vhci_hcd: stop threads [ 692.604981][T14038] vhci_hcd: release socket [ 692.605026][T14038] vhci_hcd: disconnect device [ 692.776979][ T31] usb 5-1: USB disconnect, device number 15 [ 693.312111][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 693.482283][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 693.487971][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.487998][ T31] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 693.488038][ T31] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 693.488056][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.491780][ T31] usb 5-1: config 0 descriptor?? [ 693.495137][T14845] vhci_hcd: vhci_device speed not set [ 693.754477][ T31] usb 5-1: USB disconnect, device number 16 [ 694.841579][T17015] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4147'. [ 696.952824][T17036] ufs: You didn't specify the type of your ufs filesystem [ 696.952824][T17036] [ 696.952824][T17036] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 696.952824][T17036] [ 696.952824][T17036] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 696.952870][T17036] ufs: ufstype=old is supported read-only [ 697.091536][T17042] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4159'. [ 697.142039][T14845] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 698.158167][T14845] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.158194][T14845] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 698.158229][T14845] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 698.158251][T14845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.165987][T14845] usb 6-1: config 0 descriptor?? [ 698.621547][ T31] usb 6-1: USB disconnect, device number 8 [ 698.946091][T17057] fuse: Bad value for 'fd' [ 699.113060][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 699.752016][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 699.872190][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.872220][ T31] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 699.872259][ T31] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 699.872283][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.928784][ T31] usb 6-1: config 0 descriptor?? [ 701.100485][ T31] usb 6-1: can't set config #0, error -71 [ 701.129002][ T31] usb 6-1: USB disconnect, device number 9 [ 702.302033][ T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 702.489839][ T31] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 702.489870][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.534104][ T31] usb 6-1: config 0 descriptor?? [ 702.550182][ T31] cp210x 6-1:0.0: cp210x converter detected [ 702.990688][ T31] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 703.003062][ T31] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 703.003090][ T31] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 703.043223][ T31] usb 6-1: cp210x converter now attached to ttyUSB0 [ 703.065055][ T31] usb 6-1: USB disconnect, device number 10 [ 703.235275][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 703.236121][ T31] cp210x 6-1:0.0: device disconnected [ 706.174747][T17073] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4170'. [ 706.525887][ T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 706.832048][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 707.183140][ T31] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 707.183176][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 707.219344][ T31] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 707.219376][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.219396][ T31] usb 6-1: Product: syz [ 707.219410][ T31] usb 6-1: Manufacturer: syz [ 707.219425][ T31] usb 6-1: SerialNumber: syz [ 707.289275][ T31] usb 6-1: config 0 descriptor?? [ 707.300917][ T31] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 707.300952][ T31] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 707.912237][ T31] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 707.913462][ T31] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 709.608362][ T31] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 709.624435][ T31] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 710.030769][ T31] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 710.157705][ T31] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 710.241831][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.262195][ T31] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 710.277037][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.329961][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.394118][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.425776][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.458276][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.510553][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.575591][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.645667][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.677070][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.708500][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.794843][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.827086][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.860298][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.911519][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.975713][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.219010][ T31] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 711.225474][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.378965][ T31] usb 6-1: USB disconnect, device number 11 [ 711.928021][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.960242][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.012842][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.061767][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.446146][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.568923][T17121] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4183'. [ 712.745991][T17121] ip6tnl1: entered promiscuous mode [ 713.161264][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.192569][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.243774][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.275763][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.342505][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.395503][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.462225][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.494813][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.528544][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.560424][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.592780][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.626927][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.658353][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.745062][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.775892][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.093757][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.141939][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.193765][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.292276][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.379102][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.411075][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.477169][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.531609][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.314273][T17111] syz.4.4181 (17111): drop_caches: 2 [ 715.705595][ T5869] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 719.654714][ T5793] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 720.231951][ T5793] usb 2-1: Using ep0 maxpacket: 8 [ 720.236036][ T5793] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 720.236068][ T5793] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 720.236093][ T5793] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 720.236117][ T5793] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.236160][ T5793] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 720.236183][ T5793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.473820][ T5869] usb 1-1: device not accepting address 7, error -71 [ 722.832267][ T5793] usb 2-1: can't set config #16, error -71 [ 722.923227][ T5793] usb 2-1: USB disconnect, device number 7 [ 724.929621][T17167] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4204'. [ 725.482029][ T5882] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 725.672046][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 725.674712][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 725.674745][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 725.681345][ T5882] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 725.681375][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.681397][ T5882] usb 5-1: Product: syz [ 725.681412][ T5882] usb 5-1: Manufacturer: syz [ 725.681428][ T5882] usb 5-1: SerialNumber: syz [ 725.794338][ T5882] usb 5-1: config 0 descriptor?? [ 725.828609][ T5882] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 725.828643][ T5882] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 726.457381][ T5882] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 726.458562][ T5882] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 727.897006][ T5882] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 727.901760][ T5882] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 727.939740][ T5882] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 727.956919][ T5882] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 727.968802][ T5882] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 728.005331][ T5882] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 728.078113][ T5882] usb 5-1: USB disconnect, device number 17 [ 728.630011][T17193] netlink: 'syz.5.4212': attribute type 4 has an invalid length. [ 728.686818][T17194] netlink: 'syz.5.4212': attribute type 4 has an invalid length. [ 729.781641][ T5980] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 730.101592][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 730.242006][ T5980] usb 5-1: device descriptor read/64, error -32 [ 730.362980][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 730.388525][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 730.390432][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 730.407945][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 730.441178][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 730.821984][ T5980] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 731.092249][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 731.107986][ T5980] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 731.108013][ T5980] usb 5-1: config 0 has no interface number 0 [ 731.108063][ T5980] usb 5-1: config 0 interface 89 has no altsetting 0 [ 731.122750][ T5980] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 731.122789][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.122813][ T5980] usb 5-1: Product: syz [ 731.122831][ T5980] usb 5-1: Manufacturer: syz [ 731.122848][ T5980] usb 5-1: SerialNumber: syz [ 732.221331][ T5980] usb 5-1: config 0 descriptor?? [ 732.542651][T14993] Bluetooth: hci0: command tx timeout [ 732.552082][ T5980] usb 5-1: can't set config #0, error -71 [ 732.772014][ T5980] usb 5-1: USB disconnect, device number 19 [ 734.618007][T14993] Bluetooth: hci0: command tx timeout [ 735.050011][T17217] syzkaller0: entered promiscuous mode [ 735.050040][T17217] syzkaller0: entered allmulticast mode [ 737.371079][T14993] Bluetooth: hci0: command tx timeout [ 738.998185][T17199] chnl_net:caif_netlink_parms(): no params data found [ 739.441974][T14993] Bluetooth: hci0: command tx timeout [ 740.251067][ T5882] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 742.582082][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 742.584764][ T5882] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 742.584790][ T5882] usb 6-1: config 0 has no interface number 0 [ 742.584840][ T5882] usb 6-1: config 0 interface 89 has no altsetting 0 [ 742.589296][ T5882] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 742.589322][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.589341][ T5882] usb 6-1: Product: syz [ 742.589355][ T5882] usb 6-1: Manufacturer: syz [ 742.589368][ T5882] usb 6-1: SerialNumber: syz [ 742.684902][ T5882] usb 6-1: config 0 descriptor?? [ 742.896853][ T5882] usb 6-1: can't set config #0, error -71 [ 742.939691][ T5882] usb 6-1: USB disconnect, device number 12 [ 744.457590][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 744.478822][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 744.482061][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 744.497726][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 744.498847][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 745.130207][T17199] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.130329][T17199] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.130560][T17199] bridge_slave_0: entered allmulticast mode [ 745.156066][T17199] bridge_slave_0: entered promiscuous mode [ 745.218228][T17199] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.218451][T17199] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.218754][T17199] bridge_slave_1: entered allmulticast mode [ 745.261377][T17199] bridge_slave_1: entered promiscuous mode [ 745.872141][ T5882] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 746.039399][T17199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.069562][ T5882] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 746.070656][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.103988][T17199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.106638][ T5882] usb 2-1: config 0 descriptor?? [ 746.142644][ T5882] cp210x 2-1:0.0: cp210x converter detected [ 746.340571][ T5882] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 746.340601][ T5882] cp210x 2-1:0.0: querying part number failed [ 746.382564][ T5882] usb 2-1: cp210x converter now attached to ttyUSB0 [ 746.876701][T14993] Bluetooth: hci4: command tx timeout [ 748.082961][ T5882] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 748.242114][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 748.250546][ T5882] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 748.250575][ T5882] usb 6-1: config 0 has no interface number 0 [ 748.250624][ T5882] usb 6-1: config 0 interface 89 has no altsetting 0 [ 748.312662][ T5882] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 748.312717][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.312738][ T5882] usb 6-1: Product: syz [ 748.312754][ T5882] usb 6-1: Manufacturer: syz [ 748.312769][ T5882] usb 6-1: SerialNumber: syz [ 748.371770][ T5882] usb 6-1: config 0 descriptor?? [ 748.424468][ T5882] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 748.424500][ T5882] em28xx 6-1:0.89: Video interface 89 found: bulk [ 748.875667][ T5980] usb 2-1: USB disconnect, device number 8 [ 748.983285][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 749.223532][ T61] Bluetooth: hci4: command tx timeout [ 749.235168][ T5980] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 749.235428][T15979] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 749.242588][T15979] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 749.262775][T15979] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 749.263915][ T5980] cp210x 2-1:0.0: device disconnected [ 750.034417][ T5882] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 750.105782][T17199] team0: Port device team_slave_0 added [ 750.122409][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 750.274705][T17199] team0: Port device team_slave_1 added [ 750.671156][ T5882] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 750.671208][ T5882] em28xx 6-1:0.89: board has no eeprom [ 750.772115][ T5882] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 750.772144][ T5882] em28xx 6-1:0.89: analog set to bulk mode. [ 750.774008][ T5793] em28xx 6-1:0.89: Registering V4L2 extension [ 750.882185][ T5882] usb 6-1: USB disconnect, device number 13 [ 750.891616][ T5882] em28xx 6-1:0.89: Disconnecting em28xx [ 751.003651][ T5793] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 751.003678][ T5793] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 751.003693][ T5793] em28xx 6-1:0.89: No AC97 audio processor [ 751.092549][ T5793] usb 6-1: Decoder not found [ 751.092572][ T5793] em28xx 6-1:0.89: failed to create media graph [ 751.092633][ T5793] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 751.146948][ T5793] em28xx 6-1:0.89: Registering snapshot button... [ 751.252089][T14993] Bluetooth: hci4: command tx timeout [ 751.260030][ T5793] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input6 [ 751.397778][ T5793] em28xx 6-1:0.89: Remote control support is not available for this card. [ 751.398158][ T5882] em28xx 6-1:0.89: Closing input extension [ 751.423519][ T5882] em28xx 6-1:0.89: Deregistering snapshot button [ 752.049302][ T5882] em28xx 6-1:0.89: Freeing device [ 752.783131][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.783212][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.796963][T14993] Bluetooth: hci6: command tx timeout [ 753.342044][T14993] Bluetooth: hci4: command tx timeout [ 754.417383][T17199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.417402][T17199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.417431][T17199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.488718][T17199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.488737][T17199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.488766][T17199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.862163][T14993] Bluetooth: hci6: command tx timeout [ 756.432537][T14296] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 757.182112][T14993] Bluetooth: hci6: command tx timeout [ 757.245189][T17199] hsr_slave_0: entered promiscuous mode [ 757.246768][T17199] hsr_slave_1: entered promiscuous mode [ 757.247764][T17199] debugfs: 'hsr0' already exists in 'hsr' [ 757.247788][T17199] Cannot create hsr debugfs directory [ 757.321909][T14296] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 757.321938][T14296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.534449][T14296] usb 6-1: config 0 descriptor?? [ 757.562235][T14296] cp210x 6-1:0.0: cp210x converter detected [ 757.840337][T14296] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 757.840367][T14296] cp210x 6-1:0.0: querying part number failed [ 757.904244][T14296] usb 6-1: cp210x converter now attached to ttyUSB0 [ 758.977319][T14296] usb 6-1: USB disconnect, device number 14 [ 759.015046][T14296] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 759.030881][T14296] cp210x 6-1:0.0: device disconnected [ 759.252231][T14993] Bluetooth: hci6: command tx timeout [ 762.543104][T14296] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 762.694878][T14296] usb 2-1: device descriptor read/64, error -71 [ 762.932882][T14296] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 763.061951][T14296] usb 2-1: device descriptor read/64, error -71 [ 763.112090][ T5793] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 763.176397][T14296] usb usb2-port1: attempt power cycle [ 763.281975][ T5793] usb 6-1: Using ep0 maxpacket: 32 [ 763.283026][ T5793] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 763.291065][ T5793] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 763.291100][ T5793] usb 6-1: config 0 has no interface number 0 [ 763.291170][ T5793] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 763.291196][ T5793] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 763.343386][ T5793] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 763.343415][ T5793] usb 6-1: config 0 has no interface number 0 [ 763.343471][ T5793] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 763.343494][ T5793] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 763.345507][ T5793] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 763.345532][ T5793] usb 6-1: config 0 has no interface number 0 [ 763.345603][ T5793] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 763.345627][ T5793] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 763.437246][ T5793] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 763.437276][ T5793] usb 6-1: config 0 has no interface number 0 [ 763.438700][ T5793] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 763.438727][ T5793] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 763.487607][ T5793] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 763.487636][ T5793] usb 6-1: config 0 has no interface number 0 [ 763.487688][ T5793] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 763.487711][ T5793] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 763.489150][ T5793] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 763.489174][ T5793] usb 6-1: config 0 has no interface number 0 [ 763.489221][ T5793] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 763.489244][ T5793] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 763.490711][ T5793] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 763.490734][ T5793] usb 6-1: config 0 has no interface number 0 [ 763.490782][ T5793] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 763.490805][ T5793] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 763.492482][ T5793] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 763.492507][ T5793] usb 6-1: config 0 has no interface number 0 [ 763.492552][ T5793] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 763.492575][ T5793] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 763.532122][T14296] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 763.571893][T14296] usb 2-1: device descriptor read/8, error -71 [ 763.661149][ T5793] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 763.661183][ T5793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.661212][ T5793] usb 6-1: Product: syz [ 763.661227][ T5793] usb 6-1: Manufacturer: syz [ 763.661242][ T5793] usb 6-1: SerialNumber: syz [ 763.723944][ T5793] usb 6-1: config 0 descriptor?? [ 763.738900][ T5793] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 763.832055][T14296] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 763.852891][T14296] usb 2-1: device descriptor read/8, error -71 [ 763.954848][ T5793] etas_es58x 6-1:0.2: could not parse product info: '424242424242' [ 763.967933][T14296] usb usb2-port1: unable to enumerate USB device [ 764.803082][ T5793] usb 6-1: USB disconnect, device number 15 [ 764.806640][ T5793] etas_es58x 6-1:0.2: Disconnecting syz syz [ 767.464203][T17356] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 767.464252][T17356] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 767.464274][T17356] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 768.816576][T17283] chnl_net:caif_netlink_parms(): no params data found [ 768.847806][ T5882] IPVS: starting estimator thread 0... [ 768.942036][T17371] IPVS: using max 7 ests per chain, 16800 per kthread [ 774.881608][T17283] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.881747][T17283] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.882247][T17283] bridge_slave_0: entered allmulticast mode [ 774.885311][T17283] bridge_slave_0: entered promiscuous mode [ 774.919658][T17297] chnl_net:caif_netlink_parms(): no params data found [ 776.292196][T17283] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.292338][T17283] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.292596][T17283] bridge_slave_1: entered allmulticast mode [ 776.333080][T17283] bridge_slave_1: entered promiscuous mode [ 780.023804][T17409] overlayfs: missing 'lowerdir' [ 782.036952][T17283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.120814][T17199] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 782.645224][T17283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.786979][T17199] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 785.775256][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 785.812181][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 785.832054][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 785.833688][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 785.835009][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 787.972170][ T61] Bluetooth: hci7: command tx timeout [ 788.587568][T17283] team0: Port device team_slave_0 added [ 790.052281][ T61] Bluetooth: hci7: command tx timeout [ 792.322679][ T61] Bluetooth: hci7: command tx timeout [ 792.388871][T17283] team0: Port device team_slave_1 added [ 792.448300][T17297] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.448476][T17297] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.448774][T17297] bridge_slave_0: entered allmulticast mode [ 792.545118][T17297] bridge_slave_0: entered promiscuous mode [ 794.372016][ T61] Bluetooth: hci7: command tx timeout [ 799.292241][T17297] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.292388][T17297] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.292726][T17297] bridge_slave_1: entered allmulticast mode [ 799.342236][T17297] bridge_slave_1: entered promiscuous mode [ 801.275316][T17283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.275334][T17283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.275363][T17283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.408136][T17283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.408156][T17283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.408185][T17283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.589267][T17297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.648011][T17297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.133533][T14993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 804.172659][T14993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 804.176437][T14993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 804.177707][T14993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 804.178611][T14993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 806.292297][ T61] Bluetooth: hci0: command tx timeout [ 806.542810][T14993] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 806.550212][T14993] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 806.582160][T14993] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 806.583936][T14993] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 806.592144][T14993] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 806.851294][ T61] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 806.893008][ T61] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 806.900095][ T61] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 806.916512][ T61] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 806.917419][ T61] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 808.157563][ T5465] etas_es58x 6-1:0.2: No memory left for USB buffer [ 808.157606][ T5465] etas_es58x 6-1:0.2: es58x_alloc_rx_urbs: Could not setup any rx URBs [ 808.424041][ T61] Bluetooth: hci0: command tx timeout [ 808.702235][ T61] Bluetooth: hci8: command tx timeout [ 809.012273][ T61] Bluetooth: hci9: command tx timeout [ 810.177131][T14993] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 810.180582][T14993] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 810.197832][T14993] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 810.201778][T14993] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 810.219935][T14993] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 810.452042][T14993] Bluetooth: hci0: command tx timeout [ 810.772345][T14993] Bluetooth: hci8: command tx timeout [ 811.092789][T14993] Bluetooth: hci9: command tx timeout [ 812.300772][T14993] Bluetooth: hci3: command tx timeout [ 812.532183][T14993] Bluetooth: hci0: command tx timeout [ 812.852364][T14993] Bluetooth: hci8: command tx timeout [ 813.172564][T14993] Bluetooth: hci9: command tx timeout [ 814.072344][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.072421][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.372296][T14993] Bluetooth: hci3: command tx timeout [ 814.932628][T14993] Bluetooth: hci8: command tx timeout [ 815.252464][T14993] Bluetooth: hci9: command tx timeout [ 816.452436][T14993] Bluetooth: hci3: command tx timeout [ 818.532229][T14993] Bluetooth: hci3: command tx timeout [ 820.626382][T17421] chnl_net:caif_netlink_parms(): no params data found [ 821.943509][T17470] chnl_net:caif_netlink_parms(): no params data found [ 821.988414][T17472] chnl_net:caif_netlink_parms(): no params data found [ 823.244587][T17481] chnl_net:caif_netlink_parms(): no params data found [ 825.495594][ T5170] udevd[5170]: worker [17308] /devices/platform/dummy_hcd.5/usb6/6-1 is taking a long time [ 825.626588][T17465] chnl_net:caif_netlink_parms(): no params data found [ 825.647126][T17421] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.647279][T17421] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.647594][T17421] bridge_slave_0: entered allmulticast mode [ 825.651121][T17421] bridge_slave_0: entered promiscuous mode [ 825.777347][T17421] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.777832][T17421] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.778170][T17421] bridge_slave_1: entered allmulticast mode [ 825.781314][T17421] bridge_slave_1: entered promiscuous mode [ 832.997126][T17421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.379410][T17421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.785103][T17470] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.785342][T17470] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.785608][T17470] bridge_slave_0: entered allmulticast mode [ 835.788905][T17470] bridge_slave_0: entered promiscuous mode [ 835.820113][T17472] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.820266][T17472] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.820825][T17472] bridge_slave_0: entered allmulticast mode [ 835.858236][T17472] bridge_slave_0: entered promiscuous mode [ 836.899257][T17470] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.899433][T17470] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.899703][T17470] bridge_slave_1: entered allmulticast mode [ 836.927138][T17470] bridge_slave_1: entered promiscuous mode [ 836.929003][T17472] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.929153][T17472] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.929427][T17472] bridge_slave_1: entered allmulticast mode [ 836.960804][T17472] bridge_slave_1: entered promiscuous mode [ 837.962027][T17481] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.962163][T17481] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.962448][T17481] bridge_slave_0: entered allmulticast mode [ 837.967003][T17481] bridge_slave_0: entered promiscuous mode [ 840.779906][T17421] team0: Port device team_slave_0 added [ 840.780723][T17481] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.780872][T17481] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.781130][T17481] bridge_slave_1: entered allmulticast mode [ 840.822758][T17481] bridge_slave_1: entered promiscuous mode [ 842.465007][T17465] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.465161][T17465] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.465468][T17465] bridge_slave_0: entered allmulticast mode [ 842.470648][T17465] bridge_slave_0: entered promiscuous mode [ 842.513444][T17421] team0: Port device team_slave_1 added [ 843.600416][T17470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.618263][T17472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.219393][T17465] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.219551][T17465] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.219834][T17465] bridge_slave_1: entered allmulticast mode [ 845.247642][T17465] bridge_slave_1: entered promiscuous mode [ 845.633554][T17470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.660914][T17472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.070787][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 846.105445][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 846.106916][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 846.108160][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 846.111334][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 847.391710][T17481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.228077][ T61] Bluetooth: hci1: command tx timeout [ 848.975302][T17481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.315800][ T61] Bluetooth: hci1: command tx timeout [ 852.017351][T17465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.372128][ T61] Bluetooth: hci1: command tx timeout [ 852.923806][T17470] team0: Port device team_slave_0 added [ 852.928075][T17472] team0: Port device team_slave_0 added [ 852.949108][T17465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.520631][T17470] team0: Port device team_slave_1 added [ 853.530845][T17472] team0: Port device team_slave_1 added [ 854.452314][ T61] Bluetooth: hci1: command tx timeout [ 855.947373][T17481] team0: Port device team_slave_0 added [ 859.029901][T17481] team0: Port device team_slave_1 added [ 861.611457][T17465] team0: Port device team_slave_0 added [ 862.622705][T17470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.622726][T17470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.622757][T17470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.706574][T17465] team0: Port device team_slave_1 added [ 862.721639][T17472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.721657][T17472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.721686][T17472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.586308][T14993] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 863.609283][T14993] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 863.625658][T14993] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 863.626993][T14993] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 863.630932][T14993] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 864.191839][T17470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.191858][T17470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.191885][T17470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.884593][T17472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.884612][T17472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.884642][T17472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.987494][T17481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.987510][T17481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.987536][T17481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.064409][T17481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.064428][T17481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.064454][T17481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.732876][T14993] Bluetooth: hci4: command tx timeout [ 867.364051][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 867.406118][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 867.407792][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 867.409092][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 867.410307][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 867.658451][T14993] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 867.679893][T14993] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 867.681378][T14993] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 867.711636][T14993] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 867.719721][T14993] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 867.811975][ T61] Bluetooth: hci4: command tx timeout [ 869.501262][ T61] Bluetooth: hci0: command tx timeout [ 869.573075][T14993] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 869.593133][T14993] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 869.595772][T14993] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 869.597069][T14993] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 869.598182][T14993] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 869.894512][T14993] Bluetooth: hci4: command tx timeout [ 869.973385][T14993] Bluetooth: hci6: command tx timeout [ 871.572022][ T61] Bluetooth: hci0: command tx timeout [ 871.652516][ T61] Bluetooth: hci7: command tx timeout [ 871.981853][ T61] Bluetooth: hci4: command tx timeout [ 872.052682][ T61] Bluetooth: hci6: command tx timeout [ 873.654022][ T61] Bluetooth: hci0: command tx timeout [ 873.732215][ T61] Bluetooth: hci7: command tx timeout [ 874.132322][ T61] Bluetooth: hci6: command tx timeout [ 875.342678][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.342778][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.732096][ T61] Bluetooth: hci0: command tx timeout [ 875.812317][ T61] Bluetooth: hci7: command tx timeout [ 876.215272][ T61] Bluetooth: hci6: command tx timeout [ 877.902153][ T61] Bluetooth: hci7: command tx timeout [ 884.378957][T17515] chnl_net:caif_netlink_parms(): no params data found [ 886.078126][T17518] chnl_net:caif_netlink_parms(): no params data found [ 889.609665][T17515] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.609894][T17515] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.618289][T17515] bridge_slave_0: entered allmulticast mode [ 889.633124][T17515] bridge_slave_0: entered promiscuous mode [ 889.647594][T17522] chnl_net:caif_netlink_parms(): no params data found [ 890.515366][T17515] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.515541][T17515] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.515881][T17515] bridge_slave_1: entered allmulticast mode [ 890.518988][T17515] bridge_slave_1: entered promiscuous mode [ 891.415378][T17527] chnl_net:caif_netlink_parms(): no params data found [ 891.427068][T17524] chnl_net:caif_netlink_parms(): no params data found [ 892.039398][T17515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.579457][T17515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.612484][ T39] INFO: task syz.4.4219:17214 blocked for more than 143 seconds. [ 892.612512][ T39] Not tainted syzkaller #0 [ 892.612524][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 892.612534][ T39] task:syz.4.4219 state:D stack:26408 pid:17214 tgid:17213 ppid:12952 task_flags:0x400140 flags:0x00080003 [ 892.612619][ T39] Call Trace: [ 892.612631][ T39] [ 892.612645][ T39] __schedule+0x16f3/0x4c20 [ 892.612717][ T39] ? __pfx___schedule+0x10/0x10 [ 892.612790][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 892.612830][ T39] rt_mutex_schedule+0x77/0xf0 [ 892.612861][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 892.612899][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 892.612947][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 892.612978][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 892.613008][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 892.613036][ T39] ? __lock_acquire+0xab9/0xd20 [ 892.613072][ T39] ? rcu_barrier+0x4c/0x570 [ 892.613126][ T39] ? rcu_barrier+0x4c/0x570 [ 892.613155][ T39] mutex_lock_nested+0x16a/0x1d0 [ 892.613182][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 892.613212][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 892.613242][ T39] rcu_barrier+0x4c/0x570 [ 892.613278][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 892.613308][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 892.613336][ T39] netdev_run_todo+0x327/0xea0 [ 892.613365][ T39] ? __pfx_netif_state_change+0x10/0x10 [ 892.613394][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 892.613418][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 892.613462][ T39] ? netdev_state_change+0x1ca/0x220 [ 892.613506][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 892.613534][ T39] tun_chr_close+0x13f/0x1c0 [ 892.613563][ T39] __fput+0x45b/0xa80 [ 892.613607][ T39] task_work_run+0x1d4/0x260 [ 892.613641][ T39] ? __pfx_task_work_run+0x10/0x10 [ 892.613685][ T39] get_signal+0x11c4/0x1310 [ 892.613733][ T39] ? kick_process+0xeb/0x160 [ 892.613765][ T39] arch_do_signal_or_restart+0xa0/0x790 [ 892.613801][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 892.613831][ T39] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 892.613877][ T39] ? exit_to_user_mode_loop+0x40/0x130 [ 892.613906][ T39] exit_to_user_mode_loop+0x72/0x130 [ 892.613942][ T39] do_syscall_64+0x2bd/0xfa0 [ 892.613974][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 892.614008][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.614030][ T39] ? clear_bhb_loop+0x60/0xb0 [ 892.614057][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.614079][ T39] RIP: 0033:0x7f651b55eec9 [ 892.614103][ T39] RSP: 002b:00007f65197be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.614126][ T39] RAX: 0000000000000000 RBX: 00007f651b7b5fa0 RCX: 00007f651b55eec9 [ 892.614142][ T39] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 892.614157][ T39] RBP: 00007f651b5e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 892.614170][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.614183][ T39] R13: 00007f651b7b6038 R14: 00007f651b7b5fa0 R15: 00007ffeec438ac8 [ 892.614219][ T39] [ 892.614272][ T39] [ 892.614272][ T39] Showing all locks held in the system: [ 892.614290][ T39] 5 locks held by ksoftirqd/0/15: [ 892.614305][ T39] 3 locks held by kworker/1:0/31: [ 892.614316][ T39] #0: ffff88813fe19138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 892.614389][ T39] #1: ffffc90000a5fba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 892.614453][ T39] #2: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.614518][ T39] 1 lock held by khungtaskd/39: [ 892.614530][ T39] #0: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 892.614608][ T39] 2 locks held by getty/5559: [ 892.614620][ T39] #0: ffff88814e2810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 892.614673][ T39] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 892.614737][ T39] 6 locks held by kworker/1:3/5793: [ 892.614749][ T39] #0: ffff888143ee9138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 892.614813][ T39] #1: ffffc90004b5fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 892.614883][ T39] #2: ffff8881453be188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 892.614933][ T39] #3: ffff88809cda1188 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xde/0x940 [ 892.614992][ T39] #4: ffff888038e83150 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 892.615054][ T39] #5: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.615119][ T39] 1 lock held by syz-executor/14332: [ 892.615132][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.615189][ T39] 1 lock held by syz-executor/14448: [ 892.615201][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.615265][ T39] 1 lock held by syz.0.4208/17178: [ 892.615277][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.615336][ T39] 1 lock held by syz-executor/17199: [ 892.615348][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.615406][ T39] 1 lock held by syz.4.4219/17214: [ 892.615418][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.615483][ T39] 1 lock held by syz-executor/17283: [ 892.615495][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.615554][ T39] 1 lock held by syz-executor/17297: [ 892.615566][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.615624][ T39] 4 locks held by udevd/17308: [ 892.615635][ T39] #0: ffff888058041a68 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 892.615695][ T39] #1: ffff88809e150478 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 892.615753][ T39] #2: ffff88808962cb48 (kn->active#19){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 892.615810][ T39] #3: ffff88809cda1188 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 892.615874][ T39] 1 lock held by syz-executor/17421: [ 892.615886][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.615945][ T39] 1 lock held by syz.1.4279/17441: [ 892.615957][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.616015][ T39] 2 locks held by syz.5.4280/17445: [ 892.616028][ T39] #0: ffffffff8ea6aa60 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 892.616084][ T39] #1: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.616142][ T39] 1 lock held by syz-executor/17465: [ 892.616154][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.616220][ T39] 1 lock held by syz-executor/17470: [ 892.616232][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.616291][ T39] 1 lock held by syz-executor/17472: [ 892.616303][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.616362][ T39] 1 lock held by syz-executor/17481: [ 892.616374][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 892.616434][ T39] 2 locks held by syz-executor/17515: [ 892.616445][ T39] #0: ffffffff8e202c20 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 892.616518][ T39] #1: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 892.616576][ T39] 2 locks held by syz-executor/17518: [ 892.616589][ T39] #0: ffffffff8e202c20 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 892.616653][ T39] #1: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 892.616711][ T39] 2 locks held by syz-executor/17522: [ 892.616722][ T39] #0: ffffffff8ef78008 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 892.616787][ T39] #1: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 892.616845][ T39] 3 locks held by syz-executor/17524: [ 892.616858][ T39] 2 locks held by syz-executor/17527: [ 892.616869][ T39] #0: ffffffff8e202c20 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 892.616934][ T39] #1: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 892.616994][ T39] [ 892.616999][ T39] ============================================= [ 892.616999][ T39] [ 892.617009][ T39] NMI backtrace for cpu 1 [ 892.617036][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 892.617077][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 892.617090][ T39] Call Trace: [ 892.617098][ T39] [ 892.617107][ T39] dump_stack_lvl+0x189/0x250 [ 892.617138][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 892.617164][ T39] ? __pfx__printk+0x10/0x10 [ 892.617213][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 892.617242][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 892.617274][ T39] ? __pfx__printk+0x10/0x10 [ 892.617304][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 892.617338][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 892.617368][ T39] watchdog+0xf60/0xfa0 [ 892.617397][ T39] ? watchdog+0x1e2/0xfa0 [ 892.617427][ T39] kthread+0x711/0x8a0 [ 892.617456][ T39] ? __pfx_watchdog+0x10/0x10 [ 892.617486][ T39] ? __pfx_kthread+0x10/0x10 [ 892.617508][ T39] ? rt_spin_unlock+0x150/0x200 [ 892.617540][ T39] ? rt_spin_unlock+0x161/0x200 [ 892.617562][ T39] ? __pfx_kthread+0x10/0x10 [ 892.617588][ T39] ret_from_fork+0x4bc/0x870 [ 892.617625][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 892.617666][ T39] ? __switch_to_asm+0x39/0x70 [ 892.617695][ T39] ? __switch_to_asm+0x33/0x70 [ 892.617722][ T39] ? __pfx_kthread+0x10/0x10 [ 892.617748][ T39] ret_from_fork_asm+0x1a/0x30 [ 892.617796][ T39] [ 892.617806][ T39] Sending NMI from CPU 1 to CPUs 0: [ 892.617832][ C0] NMI backtrace for cpu 0 [ 892.617848][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 892.617880][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 892.617897][ C0] RIP: 0010:lock_release+0x70/0x3e0 [ 892.617920][ C0] Code: e8 95 fd 08 00 84 c0 75 0d f6 05 6b 69 45 0d 01 0f 84 ad 02 00 00 83 3d 0d 49 5b 0d 00 0f 84 44 02 00 00 65 8b 05 10 83 29 10 <85> c0 0f 85 35 02 00 00 65 4c 8b 3c 25 08 70 c5 91 41 83 bf 5c 0b [ 892.617937][ C0] RSP: 0018:ffffc900001469d0 EFLAGS: 00000202 [ 892.617953][ C0] RAX: 0000000000000000 RBX: ffffffff8f7fb501 RCX: 076aa2e721ffdd00 [ 892.617966][ C0] RDX: ffffc90000146b01 RSI: ffffffff8b3f4e40 RDI: ffffffff8b3f4e00 [ 892.617980][ C0] RBP: dffffc0000000000 R08: ffffc90000147cd0 R09: 0000000000000000 [ 892.617993][ C0] R10: ffffc90000146b58 R11: fffff52000028d6d R12: ffffc90000147ce0 [ 892.618007][ C0] R13: ffffffff8173acf5 R14: ffffffff8d7aa4c0 R15: ffffffff8173acf5 [ 892.618022][ C0] FS: 0000000000000000(0000) GS:ffff888126bc9000(0000) knlGS:0000000000000000 [ 892.618037][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 892.618049][ C0] CR2: 00007f1783b4b120 CR3: 000000009e268000 CR4: 00000000003526f0 [ 892.618065][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 892.618077][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 892.618090][ C0] Call Trace: [ 892.618096][ C0] [ 892.618103][ C0] ? deref_stack_reg+0x19f/0x230 [ 892.618125][ C0] ? unwind_next_frame+0xa5/0x2390 [ 892.618143][ C0] unwind_next_frame+0x19a9/0x2390 [ 892.618164][ C0] ? unwind_next_frame+0xa5/0x2390 [ 892.618183][ C0] ? run_ksoftirqd+0xac/0x210 [ 892.618204][ C0] ? skb_release_data+0x62d/0x7c0 [ 892.618233][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 892.618261][ C0] arch_stack_walk+0x11c/0x150 [ 892.618282][ C0] ? smpboot_thread_fn+0x542/0xa60 [ 892.618302][ C0] stack_trace_save+0x9c/0xe0 [ 892.618327][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 892.618352][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 892.618380][ C0] ? __lock_acquire+0xab9/0xd20 [ 892.618399][ C0] kasan_save_track+0x3e/0x80 [ 892.618414][ C0] ? kasan_save_track+0x3e/0x80 [ 892.618428][ C0] ? __kasan_save_free_info+0x46/0x50 [ 892.618452][ C0] ? __kasan_slab_free+0x5c/0x80 [ 892.618468][ C0] ? kmem_cache_free+0x19a/0x910 [ 892.618506][ C0] ? skb_release_data+0x62d/0x7c0 [ 892.618535][ C0] ? consume_skb+0x9e/0xf0 [ 892.618561][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 892.618582][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 892.618603][ C0] ? nft_do_chain+0x40c/0x1920 [ 892.618622][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 892.618641][ C0] ? nf_hook_slow+0xc5/0x220 [ 892.618668][ C0] ? NF_HOOK+0x206/0x3a0 [ 892.618691][ C0] ? NF_HOOK+0x30c/0x3a0 [ 892.618714][ C0] ? __netif_receive_skb+0x143/0x380 [ 892.618743][ C0] ? process_backlog+0x31e/0x900 [ 892.618766][ C0] ? __napi_poll+0xb6/0x540 [ 892.618786][ C0] ? net_rx_action+0x5f7/0xda0 [ 892.618810][ C0] ? handle_softirqs+0x22f/0x710 [ 892.618838][ C0] ? run_ksoftirqd+0xac/0x210 [ 892.618879][ C0] __kasan_save_free_info+0x46/0x50 [ 892.618904][ C0] __kasan_slab_free+0x5c/0x80 [ 892.618923][ C0] kmem_cache_free+0x19a/0x910 [ 892.618941][ C0] ? skb_release_data+0x62d/0x7c0 [ 892.618974][ C0] skb_release_data+0x62d/0x7c0 [ 892.619008][ C0] consume_skb+0x9e/0xf0 [ 892.619036][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 892.619061][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 892.619084][ C0] ? nf_ip_checksum+0x13c/0x510 [ 892.619107][ C0] nft_synproxy_do_eval+0x345/0x570 [ 892.619132][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 892.619154][ C0] ? wg_packet_receive+0x1a8c/0x2640 [ 892.619184][ C0] nft_do_chain+0x40c/0x1920 [ 892.619217][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 892.619250][ C0] ? rcu_read_lock_sched_held+0x89/0x100 [ 892.619276][ C0] ? rcu_is_watching+0x15/0xb0 [ 892.619304][ C0] nft_do_chain_inet+0x25d/0x340 [ 892.619324][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 892.619356][ C0] ? __lock_acquire+0xab9/0xd20 [ 892.619379][ C0] ? NF_HOOK+0x9a/0x3a0 [ 892.619403][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 892.619423][ C0] nf_hook_slow+0xc5/0x220 [ 892.619453][ C0] NF_HOOK+0x206/0x3a0 [ 892.619478][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 892.619503][ C0] ? NF_HOOK+0x9a/0x3a0 [ 892.619526][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 892.619548][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 892.619575][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 892.619601][ C0] ? skb_dst+0x4f/0xd0 [ 892.619624][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 892.619651][ C0] NF_HOOK+0x30c/0x3a0 [ 892.619675][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 892.619699][ C0] ? NF_HOOK+0x9a/0x3a0 [ 892.619727][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 892.619752][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 892.619782][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 892.619804][ C0] __netif_receive_skb+0x143/0x380 [ 892.619830][ C0] ? process_backlog+0x27b/0x900 [ 892.619853][ C0] process_backlog+0x31e/0x900 [ 892.619883][ C0] __napi_poll+0xb6/0x540 [ 892.619908][ C0] net_rx_action+0x5f7/0xda0 [ 892.619939][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 892.619965][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 892.619998][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 892.620030][ C0] handle_softirqs+0x22f/0x710 [ 892.620063][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 892.620097][ C0] run_ksoftirqd+0xac/0x210 [ 892.620115][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 892.620135][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 892.620165][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 892.620181][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 892.620197][ C0] smpboot_thread_fn+0x542/0xa60 [ 892.620214][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 892.620235][ C0] kthread+0x711/0x8a0 [ 892.620256][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 892.620273][ C0] ? __pfx_kthread+0x10/0x10 [ 892.620292][ C0] ? rt_spin_unlock+0x150/0x200 [ 892.620317][ C0] ? rt_spin_unlock+0x161/0x200 [ 892.620339][ C0] ? __pfx_kthread+0x10/0x10 [ 892.620360][ C0] ret_from_fork+0x4bc/0x870 [ 892.620388][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 892.620420][ C0] ? __switch_to_asm+0x39/0x70 [ 892.620444][ C0] ? __switch_to_asm+0x33/0x70 [ 892.620467][ C0] ? __pfx_kthread+0x10/0x10 [ 892.620489][ C0] ret_from_fork_asm+0x1a/0x30 [ 892.620523][ C0] [ 892.621191][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 892.621209][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 892.621232][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 892.621245][ T39] Call Trace: [ 892.621253][ T39] [ 892.621263][ T39] dump_stack_lvl+0x99/0x250 [ 892.621291][ T39] ? __asan_memcpy+0x40/0x70 [ 892.621324][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 892.621350][ T39] ? __pfx__printk+0x10/0x10 [ 892.621390][ T39] vpanic+0x237/0x6d0 [ 892.621411][ T39] ? __pfx_vpanic+0x10/0x10 [ 892.621433][ T39] ? preempt_schedule_common+0x83/0xd0 [ 892.621486][ T39] panic+0xb9/0xc0 [ 892.621547][ T39] ? __pfx_panic+0x10/0x10 [ 892.621569][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 892.621611][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 892.621641][ T39] watchdog+0xf9f/0xfa0 [ 892.621670][ T39] ? watchdog+0x1e2/0xfa0 [ 892.621701][ T39] kthread+0x711/0x8a0 [ 892.621730][ T39] ? __pfx_watchdog+0x10/0x10 [ 892.621755][ T39] ? __pfx_kthread+0x10/0x10 [ 892.621795][ T39] ? rt_spin_unlock+0x150/0x200 [ 892.621829][ T39] ? rt_spin_unlock+0x161/0x200 [ 892.621855][ T39] ? __pfx_kthread+0x10/0x10 [ 892.621882][ T39] ret_from_fork+0x4bc/0x870 [ 892.621917][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 892.621956][ T39] ? __switch_to_asm+0x39/0x70 [ 892.621983][ T39] ? __switch_to_asm+0x33/0x70 [ 892.622011][ T39] ? __pfx_kthread+0x10/0x10 [ 892.622037][ T39] ret_from_fork_asm+0x1a/0x30 [ 892.622087][ T39] [ 892.622405][ T39] Kernel Offset: disabled