last executing test programs: 6m5.588846494s ago: executing program 0 (id=436): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m5.328041385s ago: executing program 0 (id=440): r0 = socket$kcm(0x23, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) socket$kcm(0x23, 0x2, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) (async) 6m5.183049799s ago: executing program 0 (id=442): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000086d0404ca00000000000109022400010000300f0904000004030000000921faff080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x5f3a198e2e5c5184, "ffffffdf"}, @global=@item_012={0x1, 0x1, 0x1, "a5"}]}}, 0x0}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r2 = syz_io_uring_setup(0x163a, &(0x7f00000001c0)={0x0, 0x5925, 0x1000, 0x3, 0x3}, &(0x7f0000000000), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000478000/0x1000)=nil, 0x1000, 0xb, 0x100010, r2, 0x0) (async, rerun: 64) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) (rerun: 64) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) 6m3.360533776s ago: executing program 0 (id=454): mkdir(&(0x7f0000000240)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x9, 0x200, 0x8, 0x1fc, 0x48cd, 0x0, 0xffff}) r4 = creat(&(0x7f0000001380)='./file0\x00', 0x50) r5 = syz_clone(0x20000, &(0x7f00000003c0)="157a904168dd890332aa42", 0xb, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="9257839896e23ff376fc2584344a97611a4a516af3eed46a709cec50450c0d4421be395ea71a60e72f672b1999f179b255debe2b04a6a889ca29a861d81e58bfd9a4e90c571945504dc23a4ebdb8fe9915fb9dc699d3b86c29f5510347403b4f15b9abbea77d34f0244a1cbe4c46a767494cee278f7a084170f3efe3675ac4df8324dd78cb05c8e0e691b4bdd0f2ed6ef9873cc7b8ff3a4708dc12ec3a8101d98d0cd02c6aa9fab149abb312c0c5281bb925ad6ff04b7af40c6822") pselect6(0x40, &(0x7f0000000080)={0x9, 0x0, 0x7b, 0x1, 0x6, 0x0, 0x7c, 0x3}, &(0x7f00000000c0)={0x6, 0x80000001, 0x3, 0x171, 0x0, 0x3, 0x2, 0x7}, &(0x7f0000000100)={0xffffffffffffe8b9, 0x9, 0x10, 0x3, 0x200000000, 0x3, 0x1ff, 0x8}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7fffffff]}, 0x8}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r2, 0x7, r6, &(0x7f0000000580)={r4, 0xffffffffffffffff, 0xa3}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 6m3.177469145s ago: executing program 0 (id=457): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) dup(r1) (async) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r3, 0x1000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) dup(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) write$6lowpan_enable(r5, &(0x7f00000000c0)='0', 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x680200, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000040)={'erspan0\x00'}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000001080)={&(0x7f0000000080)=""/4096, 0x1000, 0x1, 0x7fff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x4c, r8, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x6a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x374}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) (async) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x4c, r8, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x6a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x374}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) ioctl$sock_SIOCGSKNS(r7, 0x894c, &(0x7f0000001280)=0x1) (async) ioctl$sock_SIOCGSKNS(r7, 0x894c, &(0x7f0000001280)=0x1) splice(0xffffffffffffffff, &(0x7f00000012c0)=0x3, r6, &(0x7f0000001300)=0x11b8, 0x1000, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) (async) r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000001380)={[{0x2b, 'cpuset'}, {0x2b, 'rlimit'}, {0x2d, 'pids'}, {0x2b, 'cpuset'}, {0x2d, 'hugetlb'}]}, 0x27) socket$inet_smc(0x2b, 0x1, 0x0) r11 = shmget(0x3, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_STAT(r11, 0x2, &(0x7f0000001400)=""/229) shmctl$IPC_RMID(r11, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 6m2.801653424s ago: executing program 0 (id=460): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0x0, @multicast}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x4, 0x4) 6m2.374709817s ago: executing program 32 (id=460): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0x0, @multicast}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x4, 0x4) 47.670290014s ago: executing program 1 (id=1889): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2011c0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.259772542s ago: executing program 1 (id=1890): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="000001000008000001000000000000000100000005440e000015c0f5"]) 47.190376574s ago: executing program 1 (id=1891): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250a0000003000078008000100080000000c00040006000000000000000c000300a3"], 0x1ec}, 0x1, 0x0, 0x0, 0x40008000}, 0x40000) 47.068641253s ago: executing program 1 (id=1893): r0 = syz_usb_connect$cdc_ncm(0x2, 0x91, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027f0002010000000904000001020d0000052406000105240000000d240f0100000000060000008006241a030000152412ff01a317a89b340a2101a607c0ffcb7e3b2a0724140800450507241401800e270905810300020000000904010000020d00000904010102020d00000905820200020000b1090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x80, 0x1c, {0x10, 0x10, 0xe, 0x22, 0x16, 0x1, 0xfff, 0x8, 0x9, 0x10, 0x13, 0xd}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 46.432622047s ago: executing program 1 (id=1895): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, &(0x7f0000000080)) 46.367555809s ago: executing program 1 (id=1896): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa08, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) 30.905634174s ago: executing program 33 (id=1896): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa08, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) 22.97089808s ago: executing program 3 (id=2022): stat(0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r2) chroot(&(0x7f0000000040)='./file0\x00') 22.706772334s ago: executing program 3 (id=2023): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) close(r0) 7.417152108s ago: executing program 2 (id=2074): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) 7.38143662s ago: executing program 5 (id=2075): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"86f9179575c5154183e301abe7972480", 0x0, 0x0, {0xfffffffffffffffc, 0x2}, {0x6, 0x9}, 0x5, [0x10, 0x1, 0x8, 0xffffffffffffffff, 0xc673, 0x6, 0x80000000, 0x8, 0x37, 0x4, 0x81, 0x5, 0x0, 0x5, 0x8, 0x800]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000800)={0x0, &(0x7f0000000480)=[@cpuid={0x2, 0x18, {0x5, 0x6}}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0x2, 0xff}}, @uexit={0x0, 0x18, 0xc}, @cpuid={0x2, 0x18, {0xd78, 0x7fff}}, @code={0x1, 0x54, {"c4a1fd5be266baf80cb8e64e1d80ef66bafc0c66ed440f20c0350a000000440f22c046d3aff89700000f0148283e3ee434400f01c4470f01c40f0170ed66450f388008"}}, @code={0x1, 0x6b, {"44d8bf153300000f20d835080000000f22d866b8e0000f00d08fa9d0933a0fc71db3ecb3e5b9800000c00f3235004000000f30440f20c03506000000440f22c0b9800a00000f3266baf80cb8ca74c68cef66bafc0cec470f01c2"}}, @code={0x1, 0x68, {"66baf80cb848fc8381ef66bafc0ced66b87c008ed066baf80cb83c163180ef66bafc0cecdcbc0f370000000f0648b850870000000000000f23c00f21f83502000a000f23f8440f232ff3ab450fc728b8010000000f01c1"}}, @code={0x1, 0x53, {"f3450f015afec744240017000000c744240207000000ff1c24c4e3a968c2ebfd0f01c3c421f5e2d046e100f20f013d65eb00002e440f005900c4c25bf7be1f020000"}}, @cpuid={0x2, 0x18, {0x4, 0x7}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x6}], 0x23a}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000840)=@arm64) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224"], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) setfsgid(0xee01) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x5, 0x4, 0x408, 0x110, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private, @empty}}}, {{@uncond, 0xc0, 0x100}, @unspec=@CLASSIFY={0x0, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfcd7) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000200)) 7.203155353s ago: executing program 2 (id=2076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000580)={0xfffffffffffffffd, 0x8080000, 0x4, 0xffffffffffffffff, 0x981013cacb0a4980}) 6.803883107s ago: executing program 2 (id=2077): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) 6.481935288s ago: executing program 2 (id=2078): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x280000, 0x0) close(r1) ioctl$TUNSETOWNER(r1, 0xff02, 0x0) syz_usb_connect$uac1(0x6, 0xa1, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x2b, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xe}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1fa, 0x2, 0x5, 0xf}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x6, 0x2, 0xf}, @mixer_unit={0x8, 0x24, 0x4, 0x1, 0x7f, "bd0a14"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x1, "a1723dea53"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x0, 0x3, "c941", "6886"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x53, 0x0, 0x4, {0x7, 0x25, 0x1, 0x80, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x93, 0x5, {0x7, 0x25, 0x1, 0x4, 0x3, 0x1}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000180), 0x0) syz_usb_connect$printer(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x78, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x5, 0x80, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5c, 0x53e, 0x10}, {0x6, 0x24, 0x1a, 0x2}, [@obex={0x5, 0x24, 0x15, 0x7}, @call_mgmt={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x39, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6e, 0x9, 0x9}}}}}}}]}}, 0x0) 5.616838722s ago: executing program 4 (id=2080): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close_range(r0, 0xffffffffffffffff, 0x0) 4.938782608s ago: executing program 4 (id=2081): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xd, r1, 0x1, 0xfc, 0x6, @multicast}, 0x14) 4.603785753s ago: executing program 4 (id=2082): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000029c0)={{}, "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"}) 4.484990194s ago: executing program 4 (id=2083): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x41, 0x2, 0x4, "a008ad4fa09aa0d4aa928bfd5a62f565", "4bae58a966cf3bef22ff9d20d59e3b811cf09d969b64703adef4a3bd848774d06e05e7637a62d06a7a1aafd7"}, 0x41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffffefff}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 4.051997372s ago: executing program 5 (id=2084): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x6, 0x7, 0x2, 0xff, 0x0, 0x4, "53afa0f3b220"}}, 0x11e) write$UHID_INPUT2(r0, &(0x7f0000000500), 0x6) 3.60795854s ago: executing program 5 (id=2085): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x4) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) 3.428759926s ago: executing program 4 (id=2086): setsockopt(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x55, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) tkill(0x0, 0x13) wait4(0x0, 0x0, 0xa, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x0, 0x4, 0x5f, {0x5f, 0x9, "7caa912e9361583e3901734d8c21cd246a4e7698d6533251a75ca81f71ed85160e8d566f08924bdf99463ca9f8c89b75345c5ad526d83e9d11189911b4139ed4b7906269ffe6034f4c08e853740f373805ccf632a4b05c69c7b6c8e6e6"}}, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x6, 0x2, 0x1, 0x2, 0x9064}}}, &(0x7f0000000800)={0x84, 0x0, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x8, 0x10}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x8}, 0x0, &(0x7f00000005c0)={0x40, 0xb, 0x2, "b4bd"}, 0x0, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x480}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x6}, 0x0}) 3.23854687s ago: executing program 5 (id=2087): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pipe2(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x1, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0x80000001, 0x10000, 0x9, 0x2d9, 0x4, 0x40000003, 0xc5, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x80, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x7, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x1aac, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x4002, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0xc67d, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe39, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x5, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 3.238071144s ago: executing program 2 (id=2088): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200800c, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}]}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0x2020) 2.937281956s ago: executing program 2 (id=2089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x9, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.770797114s ago: executing program 5 (id=2090): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r1, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 2.435388954s ago: executing program 5 (id=2091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)) 988.456074ms ago: executing program 3 (id=2025): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) mremap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000ff3000/0x1000)=nil) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000500)=""/52, 0x34}], 0x1, 0x80006, 0x0) 768.02004ms ago: executing program 3 (id=2092): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x5, 0x800, 0x3ff) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 534.112428ms ago: executing program 3 (id=2093): connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 361.658154ms ago: executing program 3 (id=2094): timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 0s ago: executing program 4 (id=2095): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, 0x0) kernel console output (not intermixed with test programs): river returned -16 [ 343.850928][ T5890] usb 5-1: USB disconnect, device number 41 [ 344.112455][T10903] /dev/rnullb0: Can't open blockdev [ 344.341562][T10905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.350761][T10909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.383844][T10909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.404484][T10905] /dev/rnullb0: Can't open blockdev [ 344.446243][T10909] /dev/rnullb0: Can't open blockdev [ 344.477710][T10912] /dev/rnullb0: Can't open blockdev [ 344.674208][ C0] net_ratelimit: 8335 callbacks suppressed [ 344.674227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 344.692885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.705362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.718473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 344.731006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.744236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 344.756989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.769459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.782387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 344.794885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.882052][ T51] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 345.053431][T10919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.107660][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.180436][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.815477][ T5890] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 345.973871][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 346.008654][ T5890] usb 5-1: config 10 has an invalid interface number: 131 but max is 0 [ 346.033069][ T5890] usb 5-1: config 10 has no interface number 0 [ 346.063478][ T5890] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=3f.c4 [ 346.087837][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.101623][ T5890] usb 5-1: Product: syz [ 346.111687][ T5890] usb 5-1: Manufacturer: syz [ 346.122717][ T5890] usb 5-1: SerialNumber: syz [ 346.271252][T10950] /dev/rnullb0: Can't open blockdev [ 346.289282][T10949] /dev/rnullb0: Can't open blockdev [ 347.739846][T10971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.840752][T10971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.150055][T10971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.239600][T10971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.725071][ T5890] usb 5-1: USB disconnect, device number 42 [ 349.432481][T10989] /dev/rnullb0: Can't open blockdev [ 349.684074][ C0] net_ratelimit: 6826 callbacks suppressed [ 349.684094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.702553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.716000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 349.728761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.742619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 349.755772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.768310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.782147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 349.794649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.807786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 350.165867][T11001] /dev/rnullb0: Can't open blockdev [ 350.387089][T11009] netlink: 'syz.3.1387': attribute type 11 has an invalid length. [ 350.428899][T11009] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1387'. [ 350.964549][T11029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.039897][T11029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.073764][ T5876] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 351.090586][T11031] netlink: 'syz.2.1392': attribute type 11 has an invalid length. [ 351.132654][T11026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.141523][T11031] /dev/rnullb0: Can't open blockdev [ 351.176030][T11032] netlink: 'syz.2.1392': attribute type 11 has an invalid length. [ 351.182485][T11031] /dev/rnullb0: Can't open blockdev [ 351.193826][T11026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.268110][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 351.289768][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.333503][ T5876] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 351.386385][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.439035][ T5876] usb 5-1: config 0 descriptor?? [ 351.468033][ T5876] hub 5-1:0.0: USB hub found [ 351.670998][ T5876] hub 5-1:0.0: 1 port detected [ 351.826013][T11044] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 351.871978][T11044] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 351.942934][T11044] /dev/rnullb0: Can't open blockdev [ 352.092466][ T5876] usb 5-1: USB disconnect, device number 43 [ 354.693258][ C0] net_ratelimit: 7301 callbacks suppressed [ 354.693278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.712618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 354.725026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.738202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 354.750989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.763437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.776487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 354.788883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.802098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 354.814938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.441661][T11073] /dev/rnullb0: Can't open blockdev [ 355.656161][T11076] /dev/rnullb0: Can't open blockdev [ 356.793430][ T5890] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 356.934016][ T5890] usb 3-1: device descriptor read/64, error -71 [ 357.064441][T11092] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1414'. [ 357.081349][ T30] audit: type=1326 audit(1751220618.801:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.4.1414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f260638e929 code=0x0 [ 357.203486][ T5890] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 357.216762][T11095] netlink: 'syz.1.1415': attribute type 4 has an invalid length. [ 357.227243][T11095] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1415'. [ 357.353804][ T5890] usb 3-1: device descriptor read/64, error -71 [ 357.463611][ T5890] usb usb3-port1: attempt power cycle [ 357.547117][ T30] audit: type=1326 audit(1751220619.271:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11097 comm="syz.1.1416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feaeb58e929 code=0x0 [ 357.569105][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.813502][ T5890] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 357.845573][ T5890] usb 3-1: device descriptor read/8, error -71 [ 358.083373][ T5890] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 358.114172][ T5890] usb 3-1: device descriptor read/8, error -71 [ 358.223950][ T5890] usb usb3-port1: unable to enumerate USB device [ 358.862134][T11113] syz.3.1420: attempt to access beyond end of device [ 358.862134][T11113] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 359.432425][T11123] /dev/rnullb0: Can't open blockdev [ 359.703561][ C0] net_ratelimit: 9038 callbacks suppressed [ 359.703578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 359.705735][T11131] /dev/rnullb0: Can't open blockdev [ 359.710118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.739014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.751895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 359.764302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.777380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 359.790379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.802842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.815760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 359.828167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.220698][T11140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1430'. [ 360.247676][T11140] /dev/rnullb0: Can't open blockdev [ 360.439772][T11143] /dev/rnullb0: Can't open blockdev [ 360.522204][T11145] /dev/rnullb0: Can't open blockdev [ 360.686564][T11148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.731923][T11148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.023412][ T5890] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 361.187395][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.200575][ T5890] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 361.216868][ T5890] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 361.231760][ T5890] usb 3-1: config 0 interface 0 has no altsetting 0 [ 361.240291][ T5890] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 361.252344][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.269560][ T5890] usb 3-1: config 0 descriptor?? [ 361.291442][ T5890] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 361.515971][T11150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.559410][T11150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.587818][ T5890] usb 3-1: USB disconnect, device number 84 [ 361.651969][T11156] /dev/rnullb0: Can't open blockdev [ 362.047853][T11158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.067344][T11158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.168233][T11158] ptrace attach of "./syz-executor exec"[5831] was attempted by "ÉôÔ“€7çE\x09Å» 宬›ò¾áPÕ [ 362.168718][T11158] ptrace attach of "./syz-executor exec"[5831] was attempted by "ÉôÔ“€7çE\x09Å» 宬›ò¾áPÕ [ 362.260067][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.352373][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.406576][T11160] /dev/rnullb0: Can't open blockdev [ 362.463009][T11164] nfs: Unknown parameter '&%'' [ 363.182409][T11169] /dev/rnullb0: Can't open blockdev [ 363.540534][T11175] /dev/rnullb0: Can't open blockdev [ 363.618683][T11178] /dev/rnullb0: Can't open blockdev [ 363.831043][T11187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.858446][T11187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.867265][T11185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.910774][T11185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.953809][T11182] netlink: 'syz.2.1445': attribute type 12 has an invalid length. [ 364.078997][T11191] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 364.104353][T11191] /dev/rnullb0: Can't open blockdev [ 364.123756][T11191] ip6gretap0: entered promiscuous mode [ 364.178705][T11192] ip6gretap0: left promiscuous mode [ 364.713721][ C0] net_ratelimit: 8461 callbacks suppressed [ 364.713742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 364.731952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.744956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 364.757491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.769908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.782695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.795129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.808005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 364.820364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.834060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 365.198354][T11198] loop6: detected capacity change from 0 to 63 [ 365.210861][ T5997] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.220274][ T5997] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.231216][ T5997] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.242416][ T5997] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.277572][ T5997] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.286222][ T5997] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.301168][ T5997] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.309506][ T5997] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.322697][ T5997] ldm_validate_partition_table(): Disk read failed. [ 365.329843][ T5997] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.345244][ T5997] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.355997][ T5997] Dev loop6: unable to read RDB block 0 [ 365.362115][ T5997] loop6: unable to read partition table [ 365.596706][T11208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.612010][T11208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.622745][T11208] /dev/rnullb0: Can't open blockdev [ 365.955821][T11223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.989717][T11223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.408794][T11229] /dev/rnullb0: Can't open blockdev [ 367.258852][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.342064][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.439082][T11250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.487781][T11250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.638355][T11246] sctp: [Deprecated]: syz.3.1464 (pid 11246) Use of int in maxseg socket option. [ 367.638355][T11246] Use struct sctp_assoc_value instead [ 367.756203][T11255] sctp: [Deprecated]: syz.3.1464 (pid 11255) Use of int in maxseg socket option. [ 367.756203][T11255] Use struct sctp_assoc_value instead [ 369.675771][T11299] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 369.696421][T11299] /dev/rnullb0: Can't open blockdev [ 369.723440][ C0] net_ratelimit: 7924 callbacks suppressed [ 369.723461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.741690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.754407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.766857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.779846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 369.792250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.805399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 369.809017][ T30] audit: type=1804 audit(1751220631.521:925): pid=11306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1478" name="/newroot/414/cgroup.controllers" dev="tmpfs" ino=2220 res=1 errno=0 [ 369.817858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.818230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.818797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.925404][T11308] /dev/rnullb0: Can't open blockdev [ 369.963408][ T30] audit: type=1800 audit(1751220631.571:926): pid=11306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1478" name="cgroup.controllers" dev="tmpfs" ino=2220 res=0 errno=0 [ 370.674636][T11327] /dev/rnullb0: Can't open blockdev [ 371.049204][T11337] program syz.3.1488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.097177][T11338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.122242][T11338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.973476][T11348] /dev/rnullb0: Can't open blockdev [ 372.018687][T11347] /dev/rnullb0: Can't open blockdev [ 372.045684][T11348] /dev/rnullb0: Can't open blockdev [ 372.121770][T11348] /dev/rnullb0: Can't open blockdev [ 372.194321][T11348] /dev/rnullb0: Can't open blockdev [ 372.269201][T11348] /dev/rnullb0: Can't open blockdev [ 372.405460][T11348] /dev/rnullb0: Can't open blockdev [ 372.484173][T11348] /dev/rnullb0: Can't open blockdev [ 372.545070][T11348] /dev/rnullb0: Can't open blockdev [ 372.611638][T11348] /dev/rnullb0: Can't open blockdev [ 373.813881][ T5890] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 373.975017][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 374.006213][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.047584][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.061393][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'. [ 374.086489][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.147648][ T5890] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 374.197623][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.242691][ T5890] usb 3-1: config 0 descriptor?? [ 374.545258][T11387] overlayfs: missing 'lowerdir' [ 374.613622][ T5154] Bluetooth: hci4: command 0x1003 tx timeout [ 374.620422][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 374.690197][T11372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.733836][ C0] net_ratelimit: 7699 callbacks suppressed [ 374.733865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.747830][T11372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.752435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.772490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 374.784968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.798484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 374.810926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.823447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.836188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.840432][ T5890] HID 045e:07da: Invalid code 65791 type 1 [ 374.848672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.867087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 374.965695][ T5890] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001A/input/input29 [ 375.022737][T11372] /dev/rnullb0: Can't open blockdev [ 375.120068][T11394] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1504'. [ 375.191317][ T5890] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 375.209144][T11394] /dev/rnullb0: Can't open blockdev [ 375.273621][T11396] overlay: ./file0 is not a directory [ 375.287664][ T5890] usb 3-1: USB disconnect, device number 85 [ 375.369447][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.399421][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.470498][T11398] fido_id[11398]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 375.832261][T11393] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.866594][T11393] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 375.981587][T11393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 376.048603][T11393] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 376.120155][T11393] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.188058][T11393] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 376.431751][T11409] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1507'. [ 376.955038][T11417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.003914][T11417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.061378][T11417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.104351][T11425] ./file0: Can't lookup blockdev [ 377.123879][T11417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.549932][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 377.699314][T11393] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 377.729929][T11393] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 377.885430][T11442] overlay: ./file0 is not a directory [ 377.972378][T11444] overlay: Unknown parameter 'smackfsroot' [ 378.023601][T11442] overlay: Unknown parameter 'smackfsroot' [ 378.060161][T11442] /dev/rnullb0: Can't open blockdev [ 378.388963][T11452] netlink: 'syz.3.1513': attribute type 4 has an invalid length. [ 378.463672][T11452] netlink: 'syz.3.1513': attribute type 4 has an invalid length. [ 378.705675][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.712127][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.392404][T11482] /dev/rnullb0: Can't open blockdev [ 379.415830][T11478] /dev/rnullb0: Can't open blockdev [ 379.442804][T11480] block device autoloading is deprecated and will be removed. [ 379.743290][ C0] net_ratelimit: 8136 callbacks suppressed [ 379.743309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.761575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.779029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.791528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.804427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 379.816841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.830164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 379.842654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.855075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.867894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.038204][ T5869] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 380.218002][T11501] /dev/rnullb0: Can't open blockdev [ 380.282760][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 380.332884][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 380.397872][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 380.441999][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 380.526120][ T5869] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.567237][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.634174][ T5869] usb 3-1: config 0 descriptor?? [ 380.770902][T11510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.819392][T11510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.897568][T11513] ./file0: Can't lookup blockdev [ 381.081512][ T5869] plantronics 0003:047F:FFFF.001B: ignoring exceeding usage max [ 381.184094][ T5869] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 383.084979][ T5869] usb 3-1: USB disconnect, device number 86 [ 383.563462][ T5869] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 383.803030][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.848026][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.923605][ T5869] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 383.987025][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.036925][ T5869] usb 3-1: config 0 descriptor?? [ 384.519248][ T5869] hid_parser_main: 203 callbacks suppressed [ 384.519272][ T5869] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 384.566216][ T5869] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 384.594132][ T5869] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.001C/input/input30 [ 384.710106][ T5869] cm6533_jd 0003:0D8C:0022.001C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 384.753581][ C0] net_ratelimit: 8206 callbacks suppressed [ 384.753598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.755114][T11556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.760144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.792365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.805370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 384.818164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.831065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.844082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 384.856628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.865191][T11580] /dev/rnullb0: Can't open blockdev [ 384.869090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.886775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.906715][T11556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.087937][ T5869] usb 3-1: USB disconnect, device number 87 [ 385.154944][T11582] syzkaller1: entered promiscuous mode [ 385.160457][T11582] syzkaller1: entered allmulticast mode [ 385.190093][T11578] fido_id[11578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 385.682812][T11598] /dev/rnullb0: Can't open blockdev [ 386.099532][T11603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.184113][T11603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.644679][T11614] /dev/rnullb0: Can't open blockdev [ 386.754332][T11616] syz.3.1553 (11616): /proc/11615/oom_adj is deprecated, please use /proc/11615/oom_score_adj instead. [ 387.373796][ T5869] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 387.463549][T11627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.508090][T11627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.581682][T11627] /dev/rnullb0: Can't open blockdev [ 387.587200][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 387.629531][ T5869] usb 3-1: config 33 has too many interfaces: 127, using maximum allowed: 32 [ 387.663891][ T5869] usb 3-1: config 33 has an invalid descriptor of length 48, skipping remainder of the config [ 387.763407][ T5869] usb 3-1: config 33 has 0 interfaces, different from the descriptor's value: 127 [ 387.806957][T11630] syzkaller1: entered promiscuous mode [ 387.812485][T11630] syzkaller1: entered allmulticast mode [ 387.828844][ T5869] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 387.862508][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.902635][ T5869] usb 3-1: Product: syz [ 387.919522][ T5869] usb 3-1: Manufacturer: syz [ 387.937838][ T5869] usb 3-1: SerialNumber: syz [ 388.228688][ T5869] usb 3-1: USB disconnect, device number 88 [ 389.160304][T11665] /dev/rnullb0: Can't open blockdev [ 389.763375][ C0] net_ratelimit: 8518 callbacks suppressed [ 389.763396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.782056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.794483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.807529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 389.820090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.832847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.846149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 389.858260][T11675] /dev/rnullb0: Can't open blockdev [ 389.858585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.875945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.889385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.727436][T11691] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 390.786856][T11692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.841117][T11691] /dev/rnullb0: Can't open blockdev [ 390.885747][T11692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.236156][ T5890] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 391.264231][T11705] /dev/rnullb0: Can't open blockdev [ 391.433398][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 391.449834][T11709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.469407][ T5890] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 391.487060][ T5890] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 391.497915][T11709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.506749][T11711] /dev/rnullb0: Can't open blockdev [ 391.524573][T11712] /dev/rnullb0: Can't open blockdev [ 391.531358][ T5890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 391.545100][T11709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1578'. [ 391.563989][ T5890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 391.591811][ T5890] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.627492][ T5890] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 391.652188][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.888610][ T5890] usb 3-1: GET_CAPABILITIES returned 0 [ 391.905881][ T5890] usbtmc 3-1:16.0: can't read capabilities [ 391.995287][T11722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.018105][T11722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.103444][ T5883] usb 3-1: USB disconnect, device number 89 [ 392.398933][T11730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.446615][T11730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.507199][T11730] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1584'. [ 392.536875][T11734] /dev/rnullb0: Can't open blockdev [ 392.643542][ T5883] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 392.708445][T11738] configfs: Unknown parameter '\@' [ 392.737203][T11738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.752282][T11740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.769104][T11738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.779974][T11740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.814315][ T5883] usb 3-1: device descriptor read/64, error -71 [ 393.053482][ T5883] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 393.203449][ T5883] usb 3-1: device descriptor read/64, error -71 [ 393.297404][T11745] /dev/rnullb0: Can't open blockdev [ 393.336163][ T5883] usb usb3-port1: attempt power cycle [ 393.683481][ T5883] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 393.716452][ T5883] usb 3-1: device descriptor read/8, error -71 [ 393.963437][ T5883] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 394.162686][T11756] /dev/rnullb0: Can't open blockdev [ 394.213544][ T5883] usb 3-1: device not accepting address 93, error -71 [ 394.240085][ T5883] usb usb3-port1: unable to enumerate USB device [ 394.567191][T11761] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 394.585394][T11761] overlayfs: failed to set xattr on upper [ 394.591835][T11761] overlayfs: ...falling back to redirect_dir=nofollow. [ 394.611350][T11761] overlayfs: ...falling back to uuid=null. [ 394.773436][ C0] net_ratelimit: 8831 callbacks suppressed [ 394.773454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.791667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.804631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 394.817119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.829802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.842599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 394.854996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.867413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.880146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.892669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.600288][ T5869] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 395.765964][ T5869] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 395.808840][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.846692][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 395.890966][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.931493][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 395.960078][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.991928][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 396.010468][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.026681][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 396.053144][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.081660][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 396.118671][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.142763][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 396.167185][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.187956][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 396.214700][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.227663][T11785] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1601'. [ 396.238104][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 396.263866][ T5869] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 396.277393][ T5869] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 396.304338][ T5869] usb 3-1: Product: syz [ 396.312914][ T5869] usb 3-1: Manufacturer: syz [ 396.324096][ T5869] usb 3-1: SerialNumber: syz [ 396.337752][ T5869] usb 3-1: config 0 descriptor?? [ 396.378946][ T5869] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 396.567197][ T5869] usb 3-1: USB disconnect, device number 94 [ 396.592160][ T5869] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 397.357723][T11795] /dev/rnullb0: Can't open blockdev [ 398.191151][T11807] /dev/rnullb0: Can't open blockdev [ 398.947966][T11823] binder: 11822:11823 ioctl c0306201 0 returned -14 [ 399.783844][ C0] net_ratelimit: 8907 callbacks suppressed [ 399.783866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.802575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 399.814963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.827378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.840171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.852577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.865384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 399.877904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.890643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.903459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 400.181866][T11843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1621'. [ 400.198986][T11842] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1621'. [ 400.273332][ T5890] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 400.435428][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 400.454632][ T5890] usb 3-1: config 255 has an invalid interface number: 92 but max is 0 [ 400.470220][T11846] /dev/rnullb0: Can't open blockdev [ 400.471545][ T5890] usb 3-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 400.492614][ T5890] usb 3-1: config 255 has an invalid descriptor of length 245, skipping remainder of the config [ 400.506532][ T5890] usb 3-1: config 255 has no interface number 0 [ 400.530257][ T5890] usb 3-1: config 255 interface 92 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.560719][ T5890] usb 3-1: config 255 interface 92 has no altsetting 0 [ 400.575016][ T5890] usb 3-1: New USB device found, idVendor=04e8, idProduct=a100, bcdDevice= f.32 [ 400.593664][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.623650][ T5890] usb 3-1: Product: à „ [ 400.627844][ T5890] usb 3-1: Manufacturer: у [ 400.632388][ T5890] usb 3-1: SerialNumber: ÑŒ [ 400.696077][T11851] Malformed UNC in devname [ 400.696077][T11851] [ 400.703708][T11851] CIFS: VFS: Malformed UNC in devname [ 402.004938][T11866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.078169][T11866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.101852][ T5890] ax88179_178a 3-1:255.92: probe with driver ax88179_178a failed with error -22 [ 403.192844][ T5890] usb 3-1: USB disconnect, device number 95 [ 403.432156][T11888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.470992][T11888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.512206][T11888] /dev/rnullb0: Can't open blockdev [ 403.773360][ T5890] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 403.935252][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.949978][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 403.961595][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 403.977732][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 403.995250][ T5890] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 404.005563][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.022645][ T5890] usb 3-1: config 0 descriptor?? [ 404.180108][T11899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.191346][T11899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.259582][T11895] netlink: 'syz.2.1639': attribute type 2 has an invalid length. [ 404.494544][ T5890] usbhid 3-1:0.0: can't add hid device: -71 [ 404.500863][ T5890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 404.515588][ T5890] usb 3-1: USB disconnect, device number 96 [ 404.793361][ C0] net_ratelimit: 9583 callbacks suppressed [ 404.793379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 404.811573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.823783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.836566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.848984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.861857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 404.874264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.886959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.899799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 404.912175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.964368][T11904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.976527][T11904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.004665][T11905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.033015][T11904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.075161][T11905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.104978][T11904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.131262][T11904] syz.3.1642: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 405.152318][T11904] CPU: 1 UID: 0 PID: 11904 Comm: syz.3.1642 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 405.152342][T11904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 405.152357][T11904] Call Trace: [ 405.152365][T11904] [ 405.152372][T11904] dump_stack_lvl+0x189/0x250 [ 405.152399][T11904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.152418][T11904] ? __pfx__printk+0x10/0x10 [ 405.152437][T11904] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 405.152456][T11904] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 405.152476][T11904] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 405.152498][T11904] warn_alloc+0x214/0x310 [ 405.152517][T11904] ? stack_depot_save_flags+0x40/0x900 [ 405.152541][T11904] ? __pfx_warn_alloc+0x10/0x10 [ 405.152563][T11904] ? kasan_save_track+0x4f/0x80 [ 405.152580][T11904] ? xskq_create+0x56/0x170 [ 405.152598][T11904] ? xsk_init_queue+0xb0/0x110 [ 405.152614][T11904] ? xsk_setsockopt+0x43f/0x710 [ 405.152629][T11904] ? do_sock_setsockopt+0x25a/0x3e0 [ 405.152651][T11904] ? __x64_sys_setsockopt+0x18b/0x220 [ 405.152671][T11904] ? do_syscall_64+0xfa/0x3b0 [ 405.152690][T11904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.152714][T11904] __vmalloc_node_range_noprof+0x125/0x12f0 [ 405.152770][T11904] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 405.152796][T11904] ? __kasan_kmalloc+0x93/0xb0 [ 405.152817][T11904] vmalloc_user_noprof+0xad/0xf0 [ 405.152836][T11904] ? xskq_create+0xbf/0x170 [ 405.152856][T11904] xskq_create+0xbf/0x170 [ 405.152878][T11904] xsk_init_queue+0xb0/0x110 [ 405.152900][T11904] xsk_setsockopt+0x43f/0x710 [ 405.152921][T11904] ? __pfx_xsk_setsockopt+0x10/0x10 [ 405.152937][T11904] ? __lock_acquire+0xab9/0xd20 [ 405.152965][T11904] ? aa_sock_opt_perm+0xff/0x1b0 [ 405.152990][T11904] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 405.153012][T11904] ? __pfx_xsk_setsockopt+0x10/0x10 [ 405.153031][T11904] do_sock_setsockopt+0x25a/0x3e0 [ 405.153057][T11904] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 405.153085][T11904] ? __fget_files+0x2a/0x420 [ 405.153115][T11904] __x64_sys_setsockopt+0x18b/0x220 [ 405.153145][T11904] do_syscall_64+0xfa/0x3b0 [ 405.153163][T11904] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.153182][T11904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.153198][T11904] ? clear_bhb_loop+0x60/0xb0 [ 405.153220][T11904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.153237][T11904] RIP: 0033:0x7f7c6a18e929 [ 405.153252][T11904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.153266][T11904] RSP: 002b:00007f7c6af23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 405.153284][T11904] RAX: ffffffffffffffda RBX: 00007f7c6a3b5fa0 RCX: 00007f7c6a18e929 [ 405.153297][T11904] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 405.153307][T11904] RBP: 00007f7c6a210b39 R08: 0000000000000004 R09: 0000000000000000 [ 405.153317][T11904] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.153327][T11904] R13: 0000000000000000 R14: 00007f7c6a3b5fa0 R15: 00007ffdab2a9be8 [ 405.153355][T11904] [ 405.457621][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.501913][T11904] Mem-Info: [ 405.505917][T11904] active_anon:10644 inactive_anon:0 isolated_anon:0 [ 405.505917][T11904] active_file:15358 inactive_file:60794 isolated_file:0 [ 405.505917][T11904] unevictable:2822 dirty:4162 writeback:0 [ 405.505917][T11904] slab_reclaimable:11335 slab_unreclaimable:99805 [ 405.505917][T11904] mapped:29024 shmem:4254 pagetables:1739 [ 405.505917][T11904] sec_pagetables:0 bounce:0 [ 405.505917][T11904] kernel_misc_reclaimable:0 [ 405.505917][T11904] free:1281357 free_pcp:27588 free_cma:0 [ 405.551473][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.562964][T11908] /dev/rnullb0: Can't open blockdev [ 405.569008][T11904] Node 0 active_anon:43264kB inactive_anon:0kB active_file:61432kB inactive_file:242972kB unevictable:9752kB isolated(anon):0kB isolated(file):0kB mapped:116096kB dirty:16648kB writeback:0kB shmem:15480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12360kB pagetables:6712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 405.602655][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.616638][T11904] Node 1 active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 405.648315][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.660978][T11904] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 405.695150][T11904] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 405.708157][T11904] Node 0 DMA32 free:1256568kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43620kB inactive_anon:0kB active_file:61432kB inactive_file:241648kB unevictable:9752kB writepending:16648kB present:3129332kB managed:2556992kB mlocked:8216kB bounce:0kB free_pcp:57180kB local_pcp:21808kB free_cma:0kB [ 405.740914][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.760775][T11904] lowmem_reserve[]: 0 0 1 1 1 [ 405.767503][T11904] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 405.796861][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.850771][T11904] lowmem_reserve[]: 0 0 0 0 0 [ 405.901538][T11904] Node 1 Normal free:3853492kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:51544kB local_pcp:27592kB free_cma:0kB [ 406.001918][T11904] lowmem_reserve[]: 0 0 0 0 0 [ 406.007125][T11904] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 406.034350][T11915] /dev/rnullb0: Can't open blockdev [ 406.048953][T11904] Node 0 DMA32: 1039*4kB (U) 887*8kB (UM) 1234*16kB (UME) 716*32kB (UME) 324*64kB (UME) 69*128kB (UME) 32*256kB (ME) 7*512kB (UME) 5*1024kB (ME) 2*2048kB (UM) 283*4096kB (UME) = 1263636kB [ 406.113393][T11904] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 406.198691][T11904] Node 1 Normal: 43*4kB (UME) 59*8kB (UME) 61*16kB (UM) 79*32kB (UME) 28*64kB (UME) 19*128kB (UME) 12*256kB (UME) 10*512kB (UM) 9*1024kB (UM) 5*2048kB (UME) 932*4096kB (M) = 3853492kB [ 406.293730][T11904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.306235][T11904] Node 0 hugepages_total=6 hugepages_free=5 hugepages_surp=4 hugepages_size=2048kB [ 406.317774][T11904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.355162][T11904] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 406.395104][T11904] 82453 total pagecache pages [ 406.400303][T11904] 0 pages in swap cache [ 406.405191][T11904] Free swap = 124996kB [ 406.409407][T11904] Total swap = 124996kB [ 406.465318][T11904] 2097051 pages RAM [ 406.469222][T11904] 0 pages HighMem/MovableOnly [ 406.484862][T11904] 425825 pages reserved [ 406.489052][T11904] 0 pages cma reserved [ 406.903349][ T5890] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 407.076559][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 407.107220][ T5890] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.143338][ T5890] usb 3-1: config 0 has no interface number 0 [ 407.156276][ T5890] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 407.181772][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.200888][ T5890] usb 3-1: Product: syz [ 407.214380][ T5890] usb 3-1: Manufacturer: syz [ 407.228750][ T5890] usb 3-1: SerialNumber: syz [ 407.258219][ T5890] usb 3-1: config 0 descriptor?? [ 407.285618][T11937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.311587][ T5890] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 407.320124][T11937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.395158][T11941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.421363][T11941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.677663][T11945] /dev/rnullb0: Can't open blockdev [ 408.109605][T11950] /dev/rnullb0: Can't open blockdev [ 408.937751][ T5890] gspca_spca1528: reg_r err -71 [ 408.942748][ T5890] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 409.006976][ T5890] usb 3-1: USB disconnect, device number 97 [ 409.803410][ C0] net_ratelimit: 8447 callbacks suppressed [ 409.803429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.817978][T11966] /dev/rnullb0: Can't open blockdev [ 409.821644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.839489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.851880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.865141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 409.877694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.890468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.907242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 409.919820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.932430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.972323][T11993] nbd: must specify at least one socket [ 411.981283][T12003] /dev/rnullb0: Can't open blockdev [ 412.611004][T12016] /dev/rnullb0: Can't open blockdev [ 412.769718][T12013] syz.2.1675: attempt to access beyond end of device [ 412.769718][T12013] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 412.833655][T12013] XFS (nbd2): SB validate failed with error -5. [ 412.880188][T12021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.962843][T12021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.423658][T12027] syzkaller1: entered promiscuous mode [ 413.446343][T12027] syzkaller1: entered allmulticast mode [ 413.487430][T12026] /dev/rnullb0: Can't open blockdev [ 413.689832][T12033] /dev/rnullb0: Can't open blockdev [ 413.815253][T12034] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 413.842644][T12036] batadv_slave_1: entered promiscuous mode [ 414.454059][T12038] syzkaller0: entered promiscuous mode [ 414.484381][T12038] syzkaller0: entered allmulticast mode [ 414.813380][ C0] net_ratelimit: 8533 callbacks suppressed [ 414.813400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 414.831646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.844084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.856850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.869280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.882191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 414.894607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.907380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.920289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 414.932763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.368294][T12047] /dev/rnullb0: Can't open blockdev [ 419.823478][ C0] net_ratelimit: 9690 callbacks suppressed [ 419.823497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.842196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 419.854669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.867358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.880074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 419.892280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.904603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.917069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.929547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.942044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 421.277060][T12028] batadv_slave_1: left promiscuous mode [ 421.399600][T12058] syzkaller1: entered promiscuous mode [ 421.426055][T12058] syzkaller1: entered allmulticast mode [ 421.695327][T12070] overlayfs: failed to resolve './file0': -2 [ 422.546379][T12098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.628943][T12098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.723628][ T5883] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 422.883564][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 422.896486][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 422.926528][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.957290][ T5883] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 423.018066][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.055007][ T5883] usb 3-1: config 0 descriptor?? [ 423.527323][ T5883] logitech 0003:046D:C298.001D: report_id 56068 is invalid [ 423.537610][ T5883] logitech 0003:046D:C298.001D: item 0 2 1 8 parsing failed [ 423.546355][ T5883] logitech 0003:046D:C298.001D: parse failed [ 423.552816][ T5883] logitech 0003:046D:C298.001D: probe with driver logitech failed with error -22 [ 423.583156][ T30] audit: type=1326 audit(1751220941.302:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12111 comm="syz.3.1698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c6a18e929 code=0x0 [ 423.829714][ T5883] usb 3-1: USB disconnect, device number 98 [ 424.051327][T12119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.067839][T12119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.359364][T12127] /dev/rnullb0: Can't open blockdev [ 424.517248][T12130] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 424.532602][T12130] /dev/rnullb0: Can't open blockdev [ 424.830955][T12138] /dev/rnullb0: Can't open blockdev [ 424.833806][ C0] net_ratelimit: 10045 callbacks suppressed [ 424.833821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.854494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.867632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 424.880074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 424.892810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 424.905661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 424.918264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.930769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.943535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.955975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.979297][T12141] /dev/rnullb0: Can't open blockdev [ 424.984825][ T5883] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 425.163340][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 425.174884][ T5883] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 425.188424][ T5883] usb 3-1: config 0 has no interface number 0 [ 425.205903][ T5883] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 425.223329][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.241991][ T5883] usb 3-1: Product: syz [ 425.248025][ T5883] usb 3-1: Manufacturer: syz [ 425.261002][ T5883] usb 3-1: SerialNumber: syz [ 425.276360][ T5883] usb 3-1: config 0 descriptor?? [ 425.302771][ T5883] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 425.766737][T12154] /dev/rnullb0: Can't open blockdev [ 426.196444][T12160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.239893][T12160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.275237][T12160] /dev/rnullb0: Can't open blockdev [ 426.648873][T12165] program syz.4.1716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.665271][T12162] /dev/rnullb0: Can't open blockdev [ 426.991600][ T5883] gspca_spca1528: reg_r err -71 [ 427.008543][ T5883] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 427.080802][ T5883] usb 3-1: USB disconnect, device number 99 [ 427.102467][T12177] /dev/rnullb0: Can't open blockdev [ 427.548702][T12185] /dev/rnullb0: Can't open blockdev [ 427.755443][T12187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.789147][T12187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.832514][T12187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.873063][T12187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.908807][T12187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.925152][T12187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.989220][T12187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.014914][T12187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.211826][T12197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.221726][T12197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.293348][ T5869] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 428.443444][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 428.454413][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 428.470646][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.481157][ T5869] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 428.493902][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.511012][ T5869] usb 3-1: config 0 descriptor?? [ 428.647870][T12200] cgroup: release_agent respecified [ 428.927647][ T5869] usbhid 3-1:0.0: can't add hid device: -71 [ 428.953522][ T5869] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 429.019064][ T5869] usb 3-1: USB disconnect, device number 100 [ 429.355220][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1730'. [ 429.369258][T12219] /dev/rnullb0: Can't open blockdev [ 429.676783][T12223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.692164][T12223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.819583][T12227] syz.2.1733: attempt to access beyond end of device [ 429.819583][T12227] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 429.843477][ C0] net_ratelimit: 9263 callbacks suppressed [ 429.843493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.862039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 429.874822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 429.887621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 429.900535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 429.913067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.925528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.938380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.950899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.963837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 430.120848][ T30] audit: type=1326 audit(1751220947.842:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638e929 code=0x7fc00000 [ 430.143245][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.244058][ T30] audit: type=1326 audit(1751220947.842:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f260638e929 code=0x7fc00000 [ 430.299882][T12234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.317056][T12234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.339535][ T30] audit: type=1326 audit(1751220947.842:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638e929 code=0x7fc00000 [ 430.361948][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.378141][T12234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.393701][T12234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.457431][ T30] audit: type=1326 audit(1751220947.842:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638e929 code=0x7fc00000 [ 430.479911][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.492657][ T30] audit: type=1326 audit(1751220947.842:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638e929 code=0x7fc00000 [ 430.515090][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.546896][ T30] audit: type=1326 audit(1751220947.842:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638e929 code=0x7fc00000 [ 430.598475][ T30] audit: type=1326 audit(1751220947.842:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638e929 code=0x7fc00000 [ 430.643353][ T30] audit: type=1326 audit(1751220947.842:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638e929 code=0x7fc00000 [ 430.693280][ T30] audit: type=1326 audit(1751220947.842:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638e929 code=0x7fc00000 [ 430.719851][ T30] audit: type=1326 audit(1751220947.842:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638e929 code=0x7fc00000 [ 431.082123][T12248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.119285][T12248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.165242][T12250] /dev/rnullb0: Can't open blockdev [ 431.369170][T12254] /dev/rnullb0: Can't open blockdev [ 431.659387][T12263] tipc: Can't bind to reserved service type 0 [ 431.837674][T12269] MTD: Couldn't look up './cgroup': -15 [ 431.853955][T12269] ./cgroup: Can't lookup blockdev [ 432.412001][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.469335][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.174234][T12296] /dev/rnullb0: Can't open blockdev [ 433.823253][T12308] /dev/rnullb0: Can't open blockdev [ 434.124029][T12312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.185512][T12312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.756887][T12324] /dev/rnullb0: Can't open blockdev [ 434.813479][ T5869] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 434.853432][ C0] net_ratelimit: 9236 callbacks suppressed [ 434.853448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.872048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.884443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.897370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 434.909798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.922535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.934126][T12328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.935613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 434.955138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.959980][T12328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.967588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.987467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.023759][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 435.073844][ T5869] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 435.098246][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.129309][T12333] /dev/rnullb0: Can't open blockdev [ 435.142696][ T5869] usb 3-1: Product: syz [ 435.151537][ T5869] usb 3-1: Manufacturer: syz [ 435.160362][T12334] /dev/rnullb0: Can't open blockdev [ 435.163687][ T5869] usb 3-1: SerialNumber: syz [ 435.190812][ T5869] usb 3-1: config 0 descriptor?? [ 435.420804][ T5869] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 435.477078][ T5869] gspca_sunplus: reg_w_riv err -71 [ 435.491669][T12343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.521274][ T5869] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 435.532581][T12343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.568665][ T5869] usb 3-1: USB disconnect, device number 101 [ 435.653986][T12346] /dev/rnullb0: Can't open blockdev [ 435.809597][T12350] /dev/rnullb0: Can't open blockdev [ 435.928195][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.968234][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.983748][T12355] netlink: 'syz.2.1778': attribute type 3 has an invalid length. [ 435.997875][T12355] netlink: 'syz.2.1778': attribute type 1 has an invalid length. [ 436.006349][T12355] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1778'. [ 436.279763][T12364] x_tables: duplicate entry at hook 2 [ 436.347387][T12361] virtio-fs: tag not found [ 436.663413][ T5890] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 436.714305][T12370] /dev/rnullb0: Can't open blockdev [ 436.738445][T12371] netlink: 'syz.1.1784': attribute type 21 has an invalid length. [ 436.751511][T12371] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1784'. [ 436.771453][T12371] netlink: 'syz.1.1784': attribute type 4 has an invalid length. [ 436.819454][T12371] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1784'. [ 436.893303][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 436.912437][ T5890] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 436.941786][ T5890] usb 3-1: config 0 has no interface number 0 [ 436.958536][ T5890] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 436.990137][ T5890] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 437.022548][T12378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.045035][ T5890] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 437.054751][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 437.062884][ T5890] usb 3-1: Product: syz [ 437.070893][T12378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.110383][ T5890] usb 3-1: SerialNumber: syz [ 437.140239][ T5890] usb 3-1: config 0 descriptor?? [ 437.163899][ T5890] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 437.192415][ T5890] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input31 [ 437.615173][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 437.625066][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 437.632237][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 437.639601][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 437.646767][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 437.653977][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 437.661123][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 437.668299][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 437.675442][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 437.682619][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 437.711060][ T5890] usb 3-1: USB disconnect, device number 102 [ 437.711118][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 437.781374][ T5890] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 438.400430][T12397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.417345][T12397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.108020][T12405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.145613][T12405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.424872][T12414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.443789][T12414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.563338][ T5890] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 439.782847][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.833434][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.863337][ C0] net_ratelimit: 9490 callbacks suppressed [ 439.863355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.881922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.893168][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.894859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 439.919321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.931805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.944647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.957099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.970004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 439.982446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.983976][ T5890] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.995328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 440.089314][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.146373][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.153013][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.184290][ T5890] usb 3-1: config 0 descriptor?? [ 440.520414][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 440.596265][ T5890] usbhid 3-1:0.0: can't add hid device: -71 [ 440.616838][ T5890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 440.652687][ T5890] usb 3-1: USB disconnect, device number 103 [ 442.534930][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 443.494149][ T5890] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 443.704933][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 443.743606][ T5890] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 443.769156][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.807325][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.838545][ T5890] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.875292][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.911273][ T5890] usb 3-1: Product: syz [ 443.931747][ T5890] usb 3-1: Manufacturer: syz [ 443.945513][ T5890] usb 3-1: SerialNumber: syz [ 444.138206][T12475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.153642][T12475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.251050][T12477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.273792][T12477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.389085][T12475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.400031][ T5890] usb 3-1: 0:2 : does not exist [ 444.405640][T12475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.873532][ C0] net_ratelimit: 8943 callbacks suppressed [ 444.873550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.885017][T12479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.892284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 444.910403][T12479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.912771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.932362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.945143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.957542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.970399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 444.982774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.995464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.008249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 445.697433][T12492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.711745][T12492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.825651][T12494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.840635][T12494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.067165][ T5890] usb 3-1: USB disconnect, device number 104 [ 446.109895][T12099] udevd[12099]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.738392][T12530] usb usb6: usbfs: process 12530 (syz.2.1842) did not claim interface 0 before use [ 448.163762][ T5883] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 448.323491][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 448.335051][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.364851][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.384749][ T5883] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 448.406836][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.430455][ T5883] usb 3-1: config 0 descriptor?? [ 448.453086][ T5883] hub 3-1:0.0: USB hub found [ 448.667486][ T5883] hub 3-1:0.0: 2 ports detected [ 449.110865][ T5883] usb 3-1: USB disconnect, device number 105 [ 449.884019][ C0] net_ratelimit: 9519 callbacks suppressed [ 449.884040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 449.902346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.914884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.927690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.940237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.953167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 449.965794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.978651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.991705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 450.004077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.016605][T12563] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.050612][T12563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 450.058800][T12563] IPv6: NLM_F_CREATE should be set when creating new route [ 452.256546][T12596] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 452.631834][T12604] netlink: 'syz.1.1871': attribute type 6 has an invalid length. [ 452.662156][T12604] netlink: 'syz.1.1871': attribute type 4 has an invalid length. [ 452.687603][T12604] netlink: 'syz.1.1871': attribute type 6 has an invalid length. [ 452.709985][T12604] netlink: 'syz.1.1871': attribute type 13 has an invalid length. [ 452.732881][T12604] netlink: 'syz.1.1871': attribute type 15 has an invalid length. [ 452.752451][T12604] netlink: 'syz.1.1871': attribute type 19 has an invalid length. [ 452.772836][T12604] netlink: 3684 bytes leftover after parsing attributes in process `syz.1.1871'. [ 453.515294][T12614] tipc: Started in network mode [ 453.523105][T12614] tipc: Node identity 5ac726c56a4d, cluster identity 4711 [ 453.546740][T12614] tipc: Enabled bearer , priority 0 [ 453.660165][T12613] tipc: Disabling bearer [ 453.987920][T12621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.039402][T12621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.557702][T12634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.603709][T12634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.893395][ C0] net_ratelimit: 9321 callbacks suppressed [ 454.893415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.911794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.924807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 454.937369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 454.950095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 454.963015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 454.975453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.987921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.000681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.013145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.127013][T12646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.144455][T12646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.175298][T12646] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1883'. [ 456.498966][T12664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.515827][T12664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.642091][T12666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.656804][T12666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.919117][T12684] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 457.928827][T12684] overlayfs: failed to set xattr on upper [ 457.936515][T12684] overlayfs: ...falling back to index=off. [ 457.942583][T12684] overlayfs: ...falling back to uuid=null. [ 458.386429][T12689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.428839][T12689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.903733][ C0] net_ratelimit: 11218 callbacks suppressed [ 459.903754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.922729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 459.935142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.947617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.960395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.972861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.985752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 459.998153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.010879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.023924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 460.532294][T12708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.566683][T12708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.916999][T12727] input: syz0 as /devices/virtual/input/input32 [ 461.969364][T12727] binder: 12726:12727 ioctl 4018620d 0 returned -22 [ 462.016353][T12727] binder: 12726:12727 ioctl c0306201 0 returned -14 [ 462.593383][T12736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.622493][T12736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.910783][T12742] overlayfs: failed to get inode (-116) [ 462.919508][T12742] overlayfs: failed to get inode (-116) [ 463.258503][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'. [ 464.263091][T12759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.279497][T12759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.913649][ C0] net_ratelimit: 11044 callbacks suppressed [ 464.913667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 464.915366][T12767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.919960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 464.938365][T12767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.940700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 464.972150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 464.984611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.997030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.009728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.021934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.034947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 465.047303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.592746][T12772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.618629][T12772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.202297][T12797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.220979][T12797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.001051][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1956'. [ 469.923465][ C0] net_ratelimit: 12118 callbacks suppressed [ 469.923483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 469.941806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.954582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.967569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 469.980302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.992711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.005126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.017526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.030435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 470.042935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 471.066078][T12847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.108930][T12847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.079673][T12865] binder: 12864:12865 ioctl c0306201 2000000003c0 returned -14 [ 472.797542][T12873] UHID_CREATE from different security context by process 942 (syz.4.1984), this is not allowed. [ 472.983465][ T24] usb 2-1: USB disconnect, device number 57 [ 474.076391][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 474.086360][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.087203][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.144385][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 474.157845][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 474.170187][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 474.179262][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 474.207371][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 474.215036][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 474.222657][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 474.233619][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 474.242504][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 474.761019][T12891] chnl_net:caif_netlink_parms(): no params data found [ 474.933635][ C0] net_ratelimit: 9179 callbacks suppressed [ 474.933736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.952427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.964976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.977965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 474.990331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.002915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.015640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 475.028036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.040455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.053028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.174959][T12891] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.203108][T12891] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.229077][T12891] bridge_slave_0: entered allmulticast mode [ 475.252721][T12891] bridge_slave_0: entered promiscuous mode [ 475.276436][T12891] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.295722][T12891] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.319113][T12891] bridge_slave_1: entered allmulticast mode [ 475.363166][T12891] bridge_slave_1: entered promiscuous mode [ 475.555905][T12891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.625869][T12891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.925844][T12891] team0: Port device team_slave_0 added [ 475.969779][T12891] team0: Port device team_slave_1 added [ 476.156125][T12927] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 476.166602][T12927] overlayfs: failed to set xattr on upper [ 476.172355][T12927] overlayfs: ...falling back to redirect_dir=nofollow. [ 476.182178][T12891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.190404][T12927] overlayfs: ...falling back to index=off. [ 476.197180][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.223175][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.256148][T12891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.275650][T12891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.298024][ T5154] Bluetooth: hci4: command tx timeout [ 476.333630][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.359932][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.439361][T12891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.639434][T12891] hsr_slave_0: entered promiscuous mode [ 476.658171][T12891] hsr_slave_1: entered promiscuous mode [ 476.665036][T12891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.682536][T12891] Cannot create hsr debugfs directory [ 476.888254][T12937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.900788][T12937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.200002][T12891] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 477.217241][T12891] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 477.241776][T12891] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 477.271616][T12891] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 477.471774][T12891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.562230][T12891] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.591651][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.598904][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.616697][T12945] tipc: Enabled bearer , priority 10 [ 477.792328][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.799604][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.092698][T12891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.383935][ T5154] Bluetooth: hci4: command tx timeout [ 478.436783][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.465563][T12891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.483809][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.361128][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.474952][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.669688][T12891] veth0_vlan: entered promiscuous mode [ 479.759296][T12891] veth1_vlan: entered promiscuous mode [ 479.883394][T12891] veth0_macvtap: entered promiscuous mode [ 479.917201][T12891] veth1_macvtap: entered promiscuous mode [ 479.943433][ C0] net_ratelimit: 9303 callbacks suppressed [ 479.943450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.958413][T12891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.963396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.985369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 479.997809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 480.010666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 480.023643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 480.036074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.048612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.061430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.065444][T12891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.073882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.185068][ T1141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.239112][ T1141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.268552][T12978] binder: 12977:12978 ioctl c018620c 200000000000 returned -22 [ 480.301780][ T1141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.348005][ T1141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.455128][ T5154] Bluetooth: hci4: command tx timeout [ 480.690087][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.742265][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.917359][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.988314][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.753495][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 481.779291][ T5890] usb 4-1: USB disconnect, device number 59 [ 481.963147][ T24] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 481.991815][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.050856][ T24] usb 6-1: Product: syz [ 482.085305][ T24] usb 6-1: Manufacturer: syz [ 482.089981][ T24] usb 6-1: SerialNumber: syz [ 482.145607][ T24] usb 6-1: config 0 descriptor?? [ 482.533952][ T5154] Bluetooth: hci4: command tx timeout [ 482.656479][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.669770][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.689515][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.698946][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.709229][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 482.977455][ T24] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 482.990739][ T24] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 483.003727][ T24] asix 6-1:0.0: probe with driver asix failed with error -71 [ 483.058595][ T24] usb 6-1: USB disconnect, device number 2 [ 483.610874][ T1141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.022097][ T1141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.110280][T12997] chnl_net:caif_netlink_parms(): no params data found [ 484.441772][ T1141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.774111][ T5154] Bluetooth: hci5: command tx timeout [ 484.953508][ C0] net_ratelimit: 8906 callbacks suppressed [ 484.953522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 484.971975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 484.984313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.996791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.009300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.021627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.034277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 485.046795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 485.059660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 485.072600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 485.176284][ T1141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.345335][T12997] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.352802][T12997] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.367033][T12997] bridge_slave_0: entered allmulticast mode [ 485.376392][T12997] bridge_slave_0: entered promiscuous mode [ 485.391984][T12997] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.404252][T12997] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.411819][T12997] bridge_slave_1: entered allmulticast mode [ 485.425537][T12997] bridge_slave_1: entered promiscuous mode [ 485.591630][T12997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.738513][T12997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.036317][T12997] team0: Port device team_slave_0 added [ 486.059978][T12997] team0: Port device team_slave_1 added [ 486.076943][ T1141] bridge_slave_1: left allmulticast mode [ 486.082717][ T1141] bridge_slave_1: left promiscuous mode [ 486.122639][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.218710][ T1141] bridge_slave_0: left allmulticast mode [ 486.237168][ T1141] bridge_slave_0: left promiscuous mode [ 486.266828][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.862077][ T5154] Bluetooth: hci5: command tx timeout [ 487.630308][ T1141] smc: removing net device bridge0 with user defined pnetid SYZ0 [ 488.108565][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.130734][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.151268][ T1141] bond0 (unregistering): Released all slaves [ 488.472481][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 488.472496][ T30] audit: type=1326 audit(1751221006.192:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13071 comm="syz.2.2045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa1ad8e929 code=0x0 [ 488.509293][T12997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.532982][T12997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.558988][ C1] vkms_vblank_simulate: vblank timer overrun [ 488.570525][T12997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.596494][ T1141] tipc: Disabling bearer [ 488.617396][ T1141] tipc: Left network mode [ 488.649183][T12997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.676205][T12997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.817767][T12997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.934796][ T5154] Bluetooth: hci5: command tx timeout [ 489.446334][T13084] binder: 13083:13084 ioctl 4018620d 0 returned -22 [ 489.469592][T12997] hsr_slave_0: entered promiscuous mode [ 489.509612][T12997] hsr_slave_1: entered promiscuous mode [ 489.553917][T12997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.592395][T12997] Cannot create hsr debugfs directory [ 489.963516][ C0] net_ratelimit: 8097 callbacks suppressed [ 489.963534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.982095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.994665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.007876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 490.020280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.033016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.046825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 490.059273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.071784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.084759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.177914][ T1141] hsr_slave_0: left promiscuous mode [ 490.216661][ T1141] hsr_slave_1: left promiscuous mode [ 490.250237][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.298518][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.343250][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.381682][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.526861][ T1141] veth1_macvtap: left promiscuous mode [ 490.557219][ T1141] veth0_macvtap: left promiscuous mode [ 490.586685][ T1141] veth1_vlan: left promiscuous mode [ 490.632093][ T1141] veth0_vlan: left promiscuous mode [ 491.013643][ T5154] Bluetooth: hci5: command tx timeout [ 493.866855][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 494.343470][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 494.973508][ C0] net_ratelimit: 7401 callbacks suppressed [ 494.973529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 494.991827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 495.004634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 495.020230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 495.032668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.045293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.058028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.070455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.083546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 495.095952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 496.543627][T12981] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 496.703710][T12981] usb 6-1: Using ep0 maxpacket: 32 [ 496.726020][T12981] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.772088][T12981] usb 6-1: config 0 has no interfaces? [ 496.790830][T12981] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 496.843591][T12981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.872940][T12981] usb 6-1: config 0 descriptor?? [ 498.076019][ T1141] IPVS: stop unused estimator thread 0... [ 499.239482][T13210] binder: 13209:13210 ioctl c0306201 0 returned -14 [ 499.253810][ T51] Bluetooth: hci0: command 0x1003 tx timeout [ 499.262097][ T5154] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 499.272452][T13173] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 499.366712][ T5890] usb 6-1: USB disconnect, device number 3 [ 499.418790][T12997] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 499.501358][T12997] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 499.588706][T12997] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 499.625775][T12981] hid-generic 0007:0002:00FF.001E: unknown main item tag 0x5 [ 499.648627][T12997] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 499.666434][T12981] hid-generic 0007:0002:00FF.001E: unknown main item tag 0x2 [ 499.690394][T12981] hid-generic 0007:0002:00FF.001E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 499.983697][ C0] net_ratelimit: 7581 callbacks suppressed [ 499.983719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.988473][T13218] fido_id[13218]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 499.990447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 500.027557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 500.040687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 500.054703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 500.067179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.079937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.092726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.105226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.118230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 500.232612][T12997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.361791][T12997] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.416241][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.423463][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.535302][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.542556][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.718783][T12997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.472674][T12997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.577846][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.586056][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.643719][T12997] veth0_vlan: entered promiscuous mode [ 501.706125][T12997] veth1_vlan: entered promiscuous mode [ 501.787193][T12997] veth0_macvtap: entered promiscuous mode [ 501.821366][T12997] veth1_macvtap: entered promiscuous mode [ 501.877427][T12997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.917367][T12997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.980336][ T1141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.011930][ T1141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.038104][ T1141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.056855][ T1141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.243738][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.277273][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.354055][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.370177][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.883538][T13277] binder: 13273:13277 ioctl c0306201 200000000380 returned -14 [ 503.494596][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 503.515041][ T31] Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 [ 503.571528][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.626492][ T31] task:kworker/1:1 state:D stack:13272 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 503.692557][ T31] Workqueue: events_power_efficient hub_init_func2 [ 503.722520][ T31] Call Trace: [ 503.742971][ T31] [ 503.753493][ T31] __schedule+0x16f5/0x4d00 [ 503.781228][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 503.812841][ T31] ? schedule+0x165/0x360 [ 503.837661][ T31] ? __pfx___schedule+0x10/0x10 [ 503.860786][ T31] ? schedule+0x91/0x360 [ 503.888740][ T31] schedule+0x165/0x360 [ 503.907182][ T31] schedule_preempt_disabled+0x13/0x30 [ 503.950755][ T31] __mutex_lock+0x724/0xe80 [ 503.968220][ T31] ? __mutex_lock+0x51b/0xe80 [ 504.000774][ T31] ? hub_activate+0xb7/0x1ea0 [ 504.022648][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 504.042505][ T31] ? do_raw_spin_lock+0x121/0x290 [ 504.071698][ T31] ? __lock_acquire+0xab9/0xd20 [ 504.093366][ T31] hub_activate+0xb7/0x1ea0 [ 504.115938][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 504.142775][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 504.171291][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 504.197299][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 504.221976][ T31] process_scheduled_works+0xade/0x17b0 [ 504.251544][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 504.279430][ T31] worker_thread+0x8a0/0xda0 [ 504.298164][ T31] kthread+0x711/0x8a0 [ 504.317280][ T31] ? __pfx_worker_thread+0x10/0x10 [ 504.344302][ T31] ? __pfx_kthread+0x10/0x10 [ 504.361047][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 504.379627][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.412266][ T31] ? __pfx_kthread+0x10/0x10 [ 504.429447][ T31] ret_from_fork+0x3fc/0x770 [ 504.440917][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 504.468082][ T31] ? __switch_to_asm+0x39/0x70 [ 504.491125][ T31] ? __switch_to_asm+0x33/0x70 [ 504.509257][ T31] ? __pfx_kthread+0x10/0x10 [ 504.528110][ T31] ret_from_fork_asm+0x1a/0x30 [ 504.548350][ T31] [ 504.562937][ T31] INFO: task kworker/1:3:5876 blocked for more than 144 seconds. [ 504.618979][ T31] Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 [ 504.646277][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 504.684239][ T31] task:kworker/1:3 state:D stack:20984 pid:5876 tgid:5876 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 504.803270][ T31] Workqueue: usb_hub_wq hub_event [ 504.808379][ T31] Call Trace: [ 504.811663][ T31] [ 504.835925][ T31] __schedule+0x16f5/0x4d00 [ 504.840542][ T31] ? schedule+0x165/0x360 [ 504.873059][ T31] ? __pfx___schedule+0x10/0x10 [ 504.895727][ T31] ? preempt_schedule_common+0x83/0xd0 [ 504.901326][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 504.934479][ T31] ? schedule+0x91/0x360 [ 504.943629][ T31] schedule+0x165/0x360 [ 504.950166][ T31] schedule_timeout+0x9a/0x270 [ 504.960720][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 504.979628][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 504.993574][ C0] net_ratelimit: 7637 callbacks suppressed [ 504.993593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.011916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.024918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 505.025163][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.037282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 505.037942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 505.068386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:1a:ab:d8:0b:91, vlan:0) [ 505.071358][ T31] ? wait_for_completion+0x267/0x5d0 [ 505.080809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.098277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.111286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.122338][ T31] wait_for_completion+0x2bf/0x5d0 [ 505.123702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.149751][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 505.165636][ T31] ? __flush_work+0xd2/0xbc0 [ 505.180329][ T31] ? __flush_work+0xd2/0xbc0 [ 505.200354][ T31] __flush_work+0x9b9/0xbc0 [ 505.215511][ T31] ? __flush_work+0xd2/0xbc0 [ 505.236957][ T31] ? __pfx___flush_work+0x10/0x10 [ 505.262803][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 505.288493][ T31] ? __queue_work+0xc56/0xfb0 [ 505.330224][ T31] ? flush_delayed_work+0x11d/0x190 [ 505.337181][ T31] flush_delayed_work+0x13e/0x190 [ 505.353635][ T31] ? __pfx_flush_delayed_work+0x10/0x10 [ 505.367074][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.378074][ T31] ? usb_hcd_flush_endpoint+0x3e9/0x400 [ 505.390664][ T31] hub_quiesce+0x1f0/0x330 [ 505.402213][ T31] hub_disconnect+0xc8/0x470 [ 505.411516][ T31] usb_unbind_interface+0x26e/0x910 [ 505.428406][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 505.440946][ T31] device_release_driver_internal+0x4d9/0x7c0 [ 505.453981][ T31] bus_remove_device+0x34d/0x410 [ 505.466476][ T31] device_del+0x511/0x8e0 [ 505.475399][ T31] ? kfree+0x18e/0x440 [ 505.483024][ T31] ? __pfx_device_del+0x10/0x10 [ 505.493675][ T31] ? kobject_put+0x446/0x480 [ 505.506368][ T31] usb_disable_device+0x3e9/0x8a0 [ 505.517140][ T31] usb_disconnect+0x330/0x950 [ 505.527559][ T31] hub_event+0x1cdb/0x4a00 [ 505.539899][ T31] ? do_raw_spin_lock+0x121/0x290 [ 505.550669][ T31] ? register_lock_class+0x51/0x320 [ 505.561814][ T31] ? __pfx_hub_event+0x10/0x10 [ 505.571343][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 505.586859][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 505.598153][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 505.614769][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 505.626680][ T31] process_scheduled_works+0xade/0x17b0 [ 505.639216][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 505.655623][ T31] worker_thread+0x8a0/0xda0 [ 505.665969][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 505.679177][ T31] ? __kthread_parkme+0x7b/0x200 [ 505.697425][ T31] kthread+0x711/0x8a0 [ 505.709478][ T31] ? __pfx_worker_thread+0x10/0x10 [ 505.724213][ T31] ? __pfx_kthread+0x10/0x10 [ 505.737368][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 505.749344][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.768364][ T31] ? __pfx_kthread+0x10/0x10 [ 505.777668][ T31] ret_from_fork+0x3fc/0x770 [ 505.792782][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 505.801829][ T31] ? __switch_to_asm+0x39/0x70 [ 505.812313][ T31] ? __switch_to_asm+0x33/0x70 [ 505.822859][ T31] ? __pfx_kthread+0x10/0x10 [ 505.831390][ T31] ret_from_fork_asm+0x1a/0x30 [ 505.836713][ T31] [ 505.839939][ T31] [ 505.839939][ T31] Showing all locks held in the system: [ 505.858915][ T31] 4 locks held by ksoftirqd/0/15: [ 505.869252][ T31] 1 lock held by khungtaskd/31: [ 505.878117][ T31] #0: ffffffff8e33bf20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 505.981871][ T31] 3 locks held by kworker/1:1/43: [ 505.987327][ T31] #0: ffff88801a882148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 506.018426][ T31] #1: ffffc90000b37bc0 ((work_completion)(&(&hub->init_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 506.033899][ T31] #2: ffff88802ae1b198 (&dev->mutex){....}-{4:4}, at: hub_activate+0xb7/0x1ea0 [ 506.043155][ T31] 2 locks held by getty/5600: [ 506.051024][ T31] #0: ffff8880307270a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 506.074156][ T31] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 506.090780][ T31] 3 locks held by kworker/1:2/5869: [ 506.096712][ T31] #0: ffff88801a882148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 506.114861][ T31] #1: ffffc90004277bc0 ((work_completion)(&(&hub->init_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 506.130433][ T31] #2: ffff88807eecd198 (&dev->mutex){....}-{4:4}, at: hub_activate+0xb7/0x1ea0 [ 506.145647][ T31] 5 locks held by kworker/1:3/5876: [ 506.152041][ T31] #0: ffff888021a94948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 506.167723][ T31] #1: ffffc900042e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 506.182077][ T31] #2: ffff888144ba7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 506.202011][ T31] #3: ffff88802ae1b198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 506.218052][ T31] #4: ffff888020ef5160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 506.239547][ T31] 5 locks held by kworker/1:4/5883: [ 506.245163][ T31] #0: ffff888021a94948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 506.262673][ T31] #1: ffffc90004357bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 506.278615][ T31] #2: ffff8880285a7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 506.289913][ T31] #3: ffff88807eecd198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 506.306275][ T31] #4: ffff888030895160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 506.330784][ T31] 1 lock held by syz.1.1896/12670: [ 506.346369][ T31] #0: ffff8880285a7198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 506.368992][ T31] 2 locks held by cmp/13310: [ 506.380489][ T31] #0: ffff8880b8739f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 506.408890][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 506.444101][ T31] [ 506.448747][ T31] ============================================= [ 506.448747][ T31] [ 506.475680][ T31] NMI backtrace for cpu 1 [ 506.475698][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 506.475719][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.475729][ T31] Call Trace: [ 506.475736][ T31] [ 506.475744][ T31] dump_stack_lvl+0x189/0x250 [ 506.475765][ T31] ? __wake_up_klogd+0xd9/0x110 [ 506.475787][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.475805][ T31] ? __pfx__printk+0x10/0x10 [ 506.475835][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 506.475856][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 506.475871][ T31] ? _printk+0xcf/0x120 [ 506.475893][ T31] ? __pfx__printk+0x10/0x10 [ 506.475911][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 506.475936][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 506.475956][ T31] watchdog+0xfee/0x1030 [ 506.475979][ T31] ? watchdog+0x1de/0x1030 [ 506.476006][ T31] kthread+0x711/0x8a0 [ 506.476028][ T31] ? __pfx_watchdog+0x10/0x10 [ 506.476048][ T31] ? __pfx_kthread+0x10/0x10 [ 506.476068][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.476087][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.476104][ T31] ? __pfx_kthread+0x10/0x10 [ 506.476124][ T31] ret_from_fork+0x3fc/0x770 [ 506.476150][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 506.476179][ T31] ? __switch_to_asm+0x39/0x70 [ 506.476196][ T31] ? __switch_to_asm+0x33/0x70 [ 506.476214][ T31] ? __pfx_kthread+0x10/0x10 [ 506.476234][ T31] ret_from_fork_asm+0x1a/0x30 [ 506.476267][ T31] [ 506.476274][ T31] Sending NMI from CPU 1 to CPUs 0: [ 506.636177][ C0] NMI backtrace for cpu 0 [ 506.636195][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 506.636215][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.636226][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 506.636254][ C0] RIP: 0010:unwind_next_frame+0x1725/0x2390 [ 506.636320][ C0] Code: 80 3d 3e ee 56 11 00 0f 85 0b 02 00 00 c6 05 31 ee 56 11 01 4c 89 f7 e8 89 0c 00 00 e9 f7 01 00 00 48 8b 54 24 08 48 8d 5a 02 <48> 83 c2 03 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 19 0b 00 [ 506.636333][ C0] RSP: 0018:ffffc90000006b58 EFLAGS: 00000246 [ 506.636347][ C0] RAX: 0000000000000000 RBX: ffffffff9051ca9e RCX: 0000000000000000 [ 506.636358][ C0] RDX: ffffffff9051ca9c RSI: 0000000000000001 RDI: ffffc90000006ce8 [ 506.636369][ C0] RBP: dffffc0000000000 R08: ffffc90000006ce7 R09: 0000000000000000 [ 506.636381][ C0] R10: ffffc90000006cd8 R11: fffff52000000d9d R12: ffffc90000006d20 [ 506.636392][ C0] R13: ffffc90000006cd8 R14: ffffc90000006c88 R15: 1ffffffff20a3954 [ 506.636405][ C0] FS: 0000000000000000(0000) GS:ffff8881259e6000(0000) knlGS:0000000000000000 [ 506.636418][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 506.636429][ C0] CR2: 00007f65371e0440 CR3: 000000000e136000 CR4: 00000000003526f0 [ 506.636443][ C0] Call Trace: [ 506.636449][ C0] [ 506.636459][ C0] ? unwind_next_frame+0xa5/0x2390 [ 506.636475][ C0] ? arch_stack_walk+0xe4/0x150 [ 506.636494][ C0] __unwind_start+0x5b9/0x760 [ 506.636511][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 506.636529][ C0] arch_stack_walk+0xe4/0x150 [ 506.636548][ C0] ? stack_trace_save+0x9c/0xe0 [ 506.636567][ C0] stack_trace_save+0x9c/0xe0 [ 506.636584][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 506.636605][ C0] ? stack_depot_save_flags+0x40/0x900 [ 506.636625][ C0] kasan_save_track+0x3e/0x80 [ 506.636666][ C0] __kasan_slab_alloc+0x6c/0x80 [ 506.636683][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 506.636702][ C0] ? kmalloc_reserve+0xbd/0x290 [ 506.636725][ C0] kmalloc_reserve+0xbd/0x290 [ 506.636748][ C0] __alloc_skb+0x142/0x2d0 [ 506.636771][ C0] fdb_notify+0xa6/0x160 [ 506.636788][ C0] br_fdb_update+0x4c8/0x690 [ 506.636807][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 506.636828][ C0] br_handle_frame_finish+0x573/0x19b0 [ 506.636854][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 506.636879][ C0] ? ip6t_do_table+0x1db/0x1560 [ 506.636902][ C0] ? nf_hook_slow+0x176/0x220 [ 506.636923][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 506.636943][ C0] br_nf_hook_thresh+0x3c3/0x4a0 [ 506.636966][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 506.636987][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 506.637006][ C0] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 506.637028][ C0] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 506.637049][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 506.637073][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 506.637094][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 506.637116][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 506.637139][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 506.637161][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 506.637183][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 506.637202][ C0] br_handle_frame+0x982/0x14c0 [ 506.637226][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 506.637248][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 506.637277][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 506.637297][ C0] __netif_receive_skb_core+0x10de/0x4180 [ 506.637317][ C0] ? ip6_mc_input+0x9c3/0xbe0 [ 506.637331][ C0] ? kmem_cache_free+0x18f/0x400 [ 506.637350][ C0] ? ip6_mc_input+0x9c3/0xbe0 [ 506.637370][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 506.637394][ C0] ? __lock_acquire+0xab9/0xd20 [ 506.637419][ C0] ? process_backlog+0x2d5/0x14f0 [ 506.637438][ C0] ? process_backlog+0x2d5/0x14f0 [ 506.637460][ C0] __netif_receive_skb+0x72/0x380 [ 506.637479][ C0] ? process_backlog+0x2d5/0x14f0 [ 506.637499][ C0] process_backlog+0x60e/0x14f0 [ 506.637518][ C0] ? __lock_acquire+0xab9/0xd20 [ 506.637545][ C0] ? __pfx_process_backlog+0x10/0x10 [ 506.637569][ C0] __napi_poll+0xc7/0x480 [ 506.637586][ C0] ? net_rx_action+0x46d/0xe30 [ 506.637606][ C0] net_rx_action+0x707/0xe30 [ 506.637625][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.637651][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 506.637686][ C0] handle_softirqs+0x286/0x870 [ 506.637702][ C0] ? do_softirq+0xec/0x180 [ 506.637718][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 506.637734][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 506.637757][ C0] do_softirq+0xec/0x180 [ 506.637770][ C0] [ 506.637775][ C0] [ 506.637782][ C0] ? __pfx_do_softirq+0x10/0x10 [ 506.637795][ C0] ? __lock_acquire+0xab9/0xd20 [ 506.637820][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 506.637841][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 506.637856][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 506.637871][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 506.637890][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 506.637911][ C0] wg_packet_tx_worker+0x586/0x7c0 [ 506.637933][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 506.637954][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.637971][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 506.637995][ C0] process_scheduled_works+0xade/0x17b0 [ 506.638032][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 506.638063][ C0] worker_thread+0x8a0/0xda0 [ 506.638088][ C0] kthread+0x711/0x8a0 [ 506.638108][ C0] ? __pfx_worker_thread+0x10/0x10 [ 506.638122][ C0] ? __pfx_kthread+0x10/0x10 [ 506.638140][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.638156][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.638173][ C0] ? __pfx_kthread+0x10/0x10 [ 506.638190][ C0] ret_from_fork+0x3fc/0x770 [ 506.638215][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 506.638239][ C0] ? __switch_to_asm+0x39/0x70 [ 506.638258][ C0] ? __switch_to_asm+0x33/0x70 [ 506.638281][ C0] ? __pfx_kthread+0x10/0x10 [ 506.638299][ C0] ret_from_fork_asm+0x1a/0x30 [ 506.638325][ C0] [ 507.233830][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.257312][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 507.264208][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 507.275503][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.285570][ T31] Call Trace: [ 507.288863][ T31] [ 507.291798][ T31] dump_stack_lvl+0x99/0x250 [ 507.296397][ T31] ? __asan_memcpy+0x40/0x70 [ 507.301018][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.306220][ T31] ? __pfx__printk+0x10/0x10 [ 507.310830][ T31] panic+0x2db/0x790 [ 507.314731][ T31] ? __pfx_panic+0x10/0x10 [ 507.319148][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 507.323914][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 507.329730][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 507.335112][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 507.341275][ T31] watchdog+0x102d/0x1030 [ 507.345625][ T31] ? watchdog+0x1de/0x1030 [ 507.350062][ T31] kthread+0x711/0x8a0 [ 507.354137][ T31] ? __pfx_watchdog+0x10/0x10 [ 507.358826][ T31] ? __pfx_kthread+0x10/0x10 [ 507.363457][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 507.368667][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.373867][ T31] ? __pfx_kthread+0x10/0x10 [ 507.378472][ T31] ret_from_fork+0x3fc/0x770 [ 507.383094][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 507.388228][ T31] ? __switch_to_asm+0x39/0x70 [ 507.393264][ T31] ? __switch_to_asm+0x33/0x70 [ 507.398033][ T31] ? __pfx_kthread+0x10/0x10 [ 507.402645][ T31] ret_from_fork_asm+0x1a/0x30 [ 507.407435][ T31] [ 507.410607][ T31] Kernel Offset: disabled [ 507.414951][ T31] Rebooting in 86400 seconds..