last executing test programs: 11m38.905908169s ago: executing program 0 (id=1): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) syz_open_dev$radio(0x0, 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000100)=""/226, 0x26, 0xe2, 0x1}, 0x28) 11m22.815199616s ago: executing program 32 (id=1): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) syz_open_dev$radio(0x0, 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000100)=""/226, 0x26, 0xe2, 0x1}, 0x28) 10m43.170802005s ago: executing program 1 (id=95): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 10m41.822193807s ago: executing program 1 (id=96): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d2e42d20c95f630048300100030109021b0001000000000904000001d5af530009090000"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)) 10m37.602574319s ago: executing program 1 (id=104): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 10m36.115513369s ago: executing program 1 (id=108): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004c7f9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 10m35.044221102s ago: executing program 1 (id=110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 10m33.789629031s ago: executing program 1 (id=112): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',']) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = getpgrp(0x0) getsockname$packet(r0, &(0x7f0000000180), &(0x7f00000000c0)=0x14) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000140)=[0x2, 0x9]) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x800, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_ACTION={0x6, 0x3, 0x20}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) landlock_restrict_self(r5, 0x5) landlock_create_ruleset(0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000340)=ANY=[], 0x28) 10m18.623006507s ago: executing program 33 (id=112): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',']) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = getpgrp(0x0) getsockname$packet(r0, &(0x7f0000000180), &(0x7f00000000c0)=0x14) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000140)=[0x2, 0x9]) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x800, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_ACTION={0x6, 0x3, 0x20}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) landlock_restrict_self(r5, 0x5) landlock_create_ruleset(0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000340)=ANY=[], 0x28) 3m19.839011317s ago: executing program 3 (id=903): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002200)={0x14}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[], 0x0) timerfd_create(0x8, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3b9ac9ff, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10000000000100, 0xfffffffffffffffd, 0xfffffffffffffffd}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x200, 0x0) setregid(0xee00, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='sysfs\x00', 0x200013, 0x0) 3m18.152773368s ago: executing program 3 (id=905): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 3m16.251329804s ago: executing program 3 (id=906): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], 0x0, &(0x7f0000000300)=[r3], &(0x7f0000000340)}) 3m15.023770258s ago: executing program 3 (id=909): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2) r2 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r3}) close(r4) r6 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r6, r5, 0x0) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000d40)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x8c, @rand_addr=' \x01\x00', 0x24}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000340)="00d2b124cff53e5b8b86231f5e1ef2787f2ecbdc870dfd6aef049831274fc3dc6f1cb46d927a3d14a1d3c3138b300d194b96b0a423abad994ebcb9a4acb46b663f6294283923a8754db3db49f2f32ac8520af4b553dfd339c413562770fc41a751fc721dc73e94ac569c257a98a464cc8e982ea7b0ee1ce5f64fd7146cb69c7143c6", 0x82}], 0x1, &(0x7f0000000280)=[@dstopts={{0x30, 0x29, 0x37, {0x73, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7fff}, @jumbo={0xc2, 0x4, 0x3}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x30}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000780)="e2f6a89744f7c472fba59ac49566a467edfebb6b7a219a664b6ca56a6d58b46834678434fd9ab6e97c4deb5deb9900a830126b84e38997e3ce3a18a51d71355bd1ef6a5a0b51e59a28fa1b7e959d9dd502cbb91c51ce1b837a6268fbebcbb9f1c407110e594ea80489a2b1cfe508ee9976a634cdb10921aece904cd6be9a976ade47975e6f731d0385011ca25519003e5f07f596b244ac2d", 0x98}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)="1dba8dcdb448c7e9a1ac3548faec7ceba8c4d30788213db0102451", 0x1b}, {&(0x7f0000000900)="165a5d8618cd99005f470a0988560aa6a40a7643f09a0d259fb3876ebe8c3a7eb8c6a4869e0e8b1db0347745a1c7f1482d8604d0e1207a6d", 0x38}], 0x2}}, {{&(0x7f0000000980)={0xa, 0x4e21, 0x1ff, @mcast1, 0x9d}, 0x1c, &(0x7f0000000c00)=[{&(0x7f00000009c0)}, {&(0x7f0000000a80)}, {&(0x7f0000000b80)="e8b499c4fb2c222394b9587fdeda4bb2a2586159a0533cf43a8f4e3d924e99831a207af9fe9c97e1834308dccc401b634bbc40a09e52812affb98f648c0ba713ab064c62412e9d0101cb8e592ace9a86937f30878edf3f244d8aa48e1cc483c789", 0x61}], 0x3, &(0x7f0000000c40)=[@flowinfo={{0x14, 0x29, 0xb, 0xb}}, @hoplimit={{0x14, 0x29, 0x34, 0xb}}, @rthdr={{0x78, 0x29, 0x39, {0xff, 0xc, 0x2, 0xa3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @private0]}}}], 0xa8}}], 0x5, 0x80) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 3m10.782661065s ago: executing program 3 (id=912): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 3m8.886087782s ago: executing program 3 (id=915): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d2e42d20c95f630048300100030109021b0001000000000904000001d5af530009090000"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)) openat$adsp1(0xffffff9c, &(0x7f00000000c0), 0x100, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 3m7.506294382s ago: executing program 4 (id=917): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], 0x0, &(0x7f0000000300)=[r3], &(0x7f0000000340)}) 3m6.709890912s ago: executing program 4 (id=919): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000100), 0x18) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000540003805000f87f080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c617374"], 0x104}}, 0x0) 2m58.829159095s ago: executing program 4 (id=921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2m55.105051002s ago: executing program 4 (id=922): set_mempolicy(0x8006, &(0x7f0000000040)=0xfbe, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m52.736741951s ago: executing program 34 (id=915): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d2e42d20c95f630048300100030109021b0001000000000904000001d5af530009090000"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)) openat$adsp1(0xffffff9c, &(0x7f00000000c0), 0x100, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2m51.246748327s ago: executing program 4 (id=925): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffff, 0xb7, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) rmdir(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) sendto$inet6(r0, &(0x7f0000000740)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 2m49.77262202s ago: executing program 4 (id=927): socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) 2m33.934433233s ago: executing program 35 (id=927): socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) 7.129099317s ago: executing program 2 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000400)={{0x8, 0x4, 0x4, 0x2, 'syz0\x00', 0x40}, 0x3, 0x10000000, 0x1, r0, 0x0, 0x5, 'syz1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) 6.131845409s ago: executing program 2 (id=993): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0xa, 0x3, 0xff) io_uring_setup(0x1b7b, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) 4.560339608s ago: executing program 2 (id=994): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) prlimit64(r1, 0xa, &(0x7f00000000c0)={0xd35, 0x6}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xfff7, 0xe, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x995, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x101, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0xfc74, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x1, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xd064, 0x10000005, 0x4, 0x10000, 0xd, 0x0, 0x9, 0x10, 0x4000e, 0x9, 0x87, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7b, 0xa, 0x0, 0x1000, 0xf1, 0x5a56, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x6, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7e2, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0002, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0x1000c, 0x4, 0x23}, 0xb62d18fbf43bc210, 0xfffffffe, 0x0, 0xc, 0x0, 0x6}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 3.322237589s ago: executing program 2 (id=995): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000014000305000000000000000002180000", @ANYRES32=r1, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x20, 0x20, 0xfd}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 284.854395ms ago: executing program 2 (id=996): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @window={0x3, 0x3, 0x9}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}, @timestamp={0x8, 0xa, 0x8, 0xffffffff}]}}}}}}}, 0x0) 0s ago: executing program 2 (id=997): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44080) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): couldn't find an input interrupt endpoint [ 235.263028][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.280349][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.282876][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.291510][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.292266][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.683627][ T61] Bluetooth: hci0: command tx timeout [ 235.724610][ T3862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.784837][ T3862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.808364][ T3862] bond0 (unregistering): Released all slaves [ 236.055229][ T3862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.134186][ T3862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.197281][ T3862] bond0 (unregistering): Released all slaves [ 236.367955][ T6069] usb 3-1: USB disconnect, device number 8 [ 237.046776][ T6919] 9pnet_fd: Insufficient options for proto=fd [ 237.366447][ T61] Bluetooth: hci5: command tx timeout [ 237.763617][ T61] Bluetooth: hci0: command tx timeout [ 239.443607][ T61] Bluetooth: hci5: command tx timeout [ 239.843686][ T61] Bluetooth: hci0: command tx timeout [ 241.194269][ T5839] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 241.523613][ T61] Bluetooth: hci5: command tx timeout [ 241.653948][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 241.657967][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.661048][ T5839] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 241.661073][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 241.661092][ T5839] usb 4-1: Manufacturer: syz [ 241.661105][ T5839] usb 4-1: SerialNumber: syz [ 241.725141][ T5839] usb 4-1: config 0 descriptor?? [ 242.353351][ T6947] overlayfs: failed to resolve './bus': -2 [ 242.995527][ T5648] usb 4-1: USB disconnect, device number 12 [ 244.883524][ T61] Bluetooth: hci5: command tx timeout [ 245.053656][ T5942] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 245.483613][ T5942] usb 3-1: Using ep0 maxpacket: 8 [ 245.615181][ T5942] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 245.615209][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.615228][ T5942] usb 3-1: Product: syz [ 245.615241][ T5942] usb 3-1: Manufacturer: syz [ 245.615254][ T5942] usb 3-1: SerialNumber: syz [ 245.657803][ T5942] usb 3-1: config 0 descriptor?? [ 245.713648][ T5648] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 245.864726][ T5648] usb 4-1: Using ep0 maxpacket: 32 [ 245.871505][ T5648] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 245.871746][ T5648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.871775][ T5648] usb 4-1: Product: syz [ 245.871789][ T5648] usb 4-1: Manufacturer: syz [ 245.871802][ T5648] usb 4-1: SerialNumber: syz [ 245.928035][ T5648] usb 4-1: config 0 descriptor?? [ 245.957872][ T5942] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 246.692622][ T5648] snd-usb-6fire 4-1:0.0: unable to receive device firmware state. [ 246.692719][ T5648] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 247.019761][ T5994] usb 4-1: USB disconnect, device number 13 [ 247.107271][ T6968] 9pnet_fd: Insufficient options for proto=fd [ 249.013502][ T5942] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 249.044592][ T5942] usb 3-1: USB disconnect, device number 9 [ 250.554619][ T3862] hsr_slave_0: left promiscuous mode [ 250.664121][ T3862] hsr_slave_1: left promiscuous mode [ 250.673803][ T3862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.673826][ T3862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.733734][ T3862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.733760][ T3862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.024838][ T3862] hsr_slave_0: left promiscuous mode [ 253.088486][ T3862] hsr_slave_1: left promiscuous mode [ 253.089460][ T3862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.261644][ T3862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.143745][ T5907] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 254.259198][ T3862] veth1_macvtap: left promiscuous mode [ 254.259307][ T3862] veth0_macvtap: left promiscuous mode [ 254.259559][ T3862] veth1_vlan: left promiscuous mode [ 254.259735][ T3862] veth0_vlan: left promiscuous mode [ 254.453596][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 254.556154][ T7013] Device name cannot be null; rc = [-22] [ 255.247030][ T5907] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 255.247048][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.247057][ T5907] usb 4-1: Product: syz [ 255.247065][ T5907] usb 4-1: Manufacturer: syz [ 255.247072][ T5907] usb 4-1: SerialNumber: syz [ 255.250959][ T5907] usb 4-1: config 0 descriptor?? [ 255.708685][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.733816][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.124784][ T5907] snd-usb-6fire 4-1:0.0: unable to receive device firmware state. [ 256.124834][ T5907] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 256.176348][ T7008] 9pnet_fd: Insufficient options for proto=fd [ 256.330208][ T5946] usb 4-1: USB disconnect, device number 14 [ 258.478765][ T7035] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 258.543615][ T1084] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 258.693620][ T1084] usb 4-1: Using ep0 maxpacket: 32 [ 258.711278][ T1084] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.711303][ T1084] usb 4-1: config 0 has no interface number 0 [ 258.713743][ T1084] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 258.713776][ T1084] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.713794][ T1084] usb 4-1: Product: syz [ 258.713807][ T1084] usb 4-1: Manufacturer: syz [ 258.713821][ T1084] usb 4-1: SerialNumber: syz [ 258.749862][ T1084] usb 4-1: config 0 descriptor?? [ 258.770442][ T1084] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 258.770468][ T1084] usb 4-1: selecting invalid altsetting 1 [ 258.770562][ T1084] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 258.795666][ T1084] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 258.796057][ T1084] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 258.796104][ T1084] usb 4-1: media controller created [ 258.837870][ T1084] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.085530][ T7033] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 260.121553][ T1084] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 260.121609][ T1084] zl10353_read_register: readreg error (reg=127, ret==-71) [ 260.124511][ T1084] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 260.256966][ T1084] usb 4-1: USB disconnect, device number 15 [ 260.329268][ T3862] team0 (unregistering): Port device team_slave_1 removed [ 260.614309][ T3862] team0 (unregistering): Port device team_slave_0 removed [ 262.690465][ T7059] 9pnet_fd: Insufficient options for proto=fd [ 263.443750][ T5648] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 263.653798][ T5648] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.653914][ T5648] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 263.653933][ T5648] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.653984][ T5648] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 263.654215][ T5648] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 263.680962][ T5648] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.699055][ T5648] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.709376][ T5648] usb 4-1: Product: syz [ 263.723648][ T5648] usb 4-1: Manufacturer: syz [ 263.873237][ T5648] cdc_wdm 4-1:1.0: skipping garbage [ 263.873338][ T5648] cdc_wdm 4-1:1.0: skipping garbage [ 264.296069][ T5648] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 264.296233][ T5648] cdc_wdm 4-1:1.0: Unknown control protocol [ 264.458111][ T5648] usb 4-1: USB disconnect, device number 16 [ 266.573643][ T5946] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 266.743597][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 266.745520][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.747325][ T5946] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 266.747344][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 266.747354][ T5946] usb 4-1: Manufacturer: syz [ 266.747361][ T5946] usb 4-1: SerialNumber: syz [ 266.750904][ T5946] usb 4-1: config 0 descriptor?? [ 267.424763][ T7071] overlayfs: failed to resolve './bus': -2 [ 267.597311][ T5983] usb 4-1: USB disconnect, device number 17 [ 268.034207][ T3862] team0 (unregistering): Port device team_slave_1 removed [ 268.135116][ T3862] team0 (unregistering): Port device team_slave_0 removed [ 268.382017][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 268.382281][ T7075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.300'. [ 269.663803][ T5983] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 270.697266][ T6897] chnl_net:caif_netlink_parms(): no params data found [ 270.808191][ T5983] usb 4-1: Using ep0 maxpacket: 32 [ 270.811932][ T5983] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.815396][ T5983] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 270.815422][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 270.815439][ T5983] usb 4-1: Manufacturer: syz [ 270.815453][ T5983] usb 4-1: SerialNumber: syz [ 270.895406][ T5983] usb 4-1: config 0 descriptor?? [ 270.941365][ T6865] chnl_net:caif_netlink_parms(): no params data found [ 271.805906][ T7081] overlayfs: failed to resolve './bus': -2 [ 271.872958][ T5983] usb 4-1: USB disconnect, device number 18 [ 271.993665][ T5839] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 272.143578][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 272.149241][ T5839] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 272.149270][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.149287][ T5839] usb 5-1: Product: syz [ 272.149300][ T5839] usb 5-1: Manufacturer: syz [ 272.149311][ T5839] usb 5-1: SerialNumber: syz [ 272.205756][ T5839] usb 5-1: config 0 descriptor?? [ 272.228266][ T5839] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 272.271733][ T6897] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.272016][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.272355][ T6897] bridge_slave_0: entered allmulticast mode [ 272.331976][ T6897] bridge_slave_0: entered promiscuous mode [ 272.353602][ T5946] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 272.477016][ T6897] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.477194][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.477498][ T6897] bridge_slave_1: entered allmulticast mode [ 272.481461][ T6897] bridge_slave_1: entered promiscuous mode [ 272.676014][ T5946] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.676045][ T5946] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.678026][ T5946] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 272.678057][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 272.678077][ T5946] usb 3-1: SerialNumber: syz [ 272.899898][ T7130] overlayfs: failed to resolve './bus': -2 [ 273.268311][ T5839] gspca_ov534_9: reg_w failed -110 [ 273.577676][ T5946] usb 3-1: 0:2 : does not exist [ 273.577768][ T5946] usb 3-1: unit 255 not found! [ 273.637469][ T5946] usb 3-1: USB disconnect, device number 10 [ 273.705499][ T5839] gspca_ov534_9: Unknown sensor 0000 [ 273.705597][ T5839] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 273.742738][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.765807][ T6865] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.766024][ T6865] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.766229][ T6865] bridge_slave_0: entered allmulticast mode [ 273.773185][ T6865] bridge_slave_0: entered promiscuous mode [ 273.898280][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.898404][ T6865] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.898603][ T6865] bridge_slave_1: entered allmulticast mode [ 273.900868][ T6865] bridge_slave_1: entered promiscuous mode [ 273.906755][ T6897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.965079][ T5907] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 274.017306][ T6897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.123714][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 274.127405][ T5907] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 274.127426][ T5907] usb 4-1: config 0 has no interface number 0 [ 274.129931][ T5907] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 274.129953][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.129963][ T5907] usb 4-1: Product: syz [ 274.129977][ T5907] usb 4-1: Manufacturer: syz [ 274.129984][ T5907] usb 4-1: SerialNumber: syz [ 274.137242][ T5907] usb 4-1: config 0 descriptor?? [ 274.189934][ T5907] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 274.189961][ T5907] usb 4-1: selecting invalid altsetting 1 [ 274.189977][ T5907] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 274.199807][ T5907] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 274.200787][ T5907] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 274.201050][ T5907] usb 4-1: media controller created [ 274.225553][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.326655][ T6865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.462586][ T6865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.479659][ T6897] team0: Port device team_slave_0 added [ 274.581244][ T6897] team0: Port device team_slave_1 added [ 274.696908][ T5866] usb 5-1: USB disconnect, device number 6 [ 274.713568][ T5946] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 274.810008][ T6865] team0: Port device team_slave_0 added [ 275.047620][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 275.102610][ T5946] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 275.102639][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.102657][ T5946] usb 3-1: Product: syz [ 275.102670][ T5946] usb 3-1: Manufacturer: syz [ 275.102683][ T5946] usb 3-1: SerialNumber: syz [ 275.380361][ T5907] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 275.380862][ T5907] zl10353_read_register: readreg error (reg=127, ret==-110) [ 275.449717][ T7138] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 275.834357][ T5907] usb 4-1: USB disconnect, device number 19 [ 276.178019][ T5946] usb 3-1: config 0 descriptor?? [ 276.574273][ T5946] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 276.574293][ T5946] 00 00 00 00 00 00 00 00 [ 276.574580][ T5946] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 276.596389][ T7150] ptrace attach of ""[7152] was attempted by "./syz-executor exec"[7150] [ 276.796158][ T5946] usb 3-1: USB disconnect, device number 11 [ 277.216300][ T6865] team0: Port device team_slave_1 added [ 277.217514][ T6897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.217526][ T6897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.217544][ T6897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.316006][ T6897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.316017][ T6897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.316030][ T6897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.535790][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.535807][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.535831][ T6865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.286746][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.286763][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.286795][ T6865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.445948][ T6897] hsr_slave_0: entered promiscuous mode [ 278.463394][ T6897] hsr_slave_1: entered promiscuous mode [ 278.630503][ T3862] bridge_slave_1: left allmulticast mode [ 278.630544][ T3862] bridge_slave_1: left promiscuous mode [ 278.642970][ T3862] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.726336][ T3862] bridge_slave_0: left allmulticast mode [ 278.726365][ T3862] bridge_slave_0: left promiscuous mode [ 278.726623][ T3862] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.869796][ T3862] bridge_slave_1: left allmulticast mode [ 278.869824][ T3862] bridge_slave_1: left promiscuous mode [ 278.870617][ T3862] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.957987][ T3862] bridge_slave_0: left allmulticast mode [ 278.958015][ T3862] bridge_slave_0: left promiscuous mode [ 278.958254][ T3862] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.441862][ T7204] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 279.615339][ T3862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.747019][ T3862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.818278][ T3862] bond0 (unregistering): Released all slaves [ 280.105600][ T3862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.234356][ T3862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.240814][ T7223] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 280.317205][ T3862] bond0 (unregistering): Released all slaves [ 280.919018][ T6865] hsr_slave_0: entered promiscuous mode [ 280.919883][ T6865] hsr_slave_1: entered promiscuous mode [ 280.920414][ T6865] debugfs: 'hsr0' already exists in 'hsr' [ 280.920431][ T6865] Cannot create hsr debugfs directory [ 281.183688][ T3862] hsr_slave_0: left promiscuous mode [ 281.246053][ T3862] hsr_slave_1: left promiscuous mode [ 281.246992][ T3862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.268768][ T3862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.594360][ T3862] hsr_slave_0: left promiscuous mode [ 281.644217][ T3862] hsr_slave_1: left promiscuous mode [ 281.647699][ T3862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.734532][ T3862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.173667][ T5994] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 282.244847][ T37] kauditd_printk_skb: 27 callbacks suppressed [ 282.244863][ T37] audit: type=1326 audit(1767255469.919:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 282.245974][ T37] audit: type=1326 audit(1767255469.919:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 282.246012][ T37] audit: type=1326 audit(1767255469.919:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 282.246034][ T37] audit: type=1326 audit(1767255469.919:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 282.246055][ T37] audit: type=1326 audit(1767255469.919:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 282.246076][ T37] audit: type=1326 audit(1767255469.919:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 282.246097][ T37] audit: type=1326 audit(1767255469.919:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 282.246120][ T37] audit: type=1326 audit(1767255469.919:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 282.246143][ T37] audit: type=1326 audit(1767255469.919:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 282.246164][ T37] audit: type=1326 audit(1767255469.919:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f3e17df90 code=0x7ffc0000 [ 282.384664][ T5994] usb 4-1: Using ep0 maxpacket: 16 [ 282.525551][ T5994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.525609][ T5994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 282.525623][ T5994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 282.525634][ T5994] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 282.525645][ T5994] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.526706][ T5994] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 282.526729][ T5994] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 282.526747][ T5994] usb 4-1: Manufacturer: syz [ 282.530267][ T5994] usb 4-1: config 0 descriptor?? [ 282.855565][ T3862] team0 (unregistering): Port device team_slave_1 removed [ 282.909043][ T5994] rc_core: IR keymap rc-hauppauge not found [ 282.909070][ T5994] Registered IR keymap rc-empty [ 282.910904][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 282.931694][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 282.948728][ T5994] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 282.965779][ T3862] team0 (unregistering): Port device team_slave_0 removed [ 283.028143][ T5994] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 283.109282][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 283.151399][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 283.163745][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 283.183886][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 283.204668][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 283.228786][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 283.243664][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 283.277329][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 283.293678][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 283.375222][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 283.405802][ T5994] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 283.405825][ T5994] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 283.470277][ T5994] usb 4-1: USB disconnect, device number 20 [ 283.894111][ T3862] team0 (unregistering): Port device team_slave_1 removed [ 284.034104][ T3862] team0 (unregistering): Port device team_slave_0 removed [ 286.403686][ T1084] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 286.564195][ T1084] usb 5-1: Using ep0 maxpacket: 16 [ 286.661089][ T1084] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.661118][ T1084] usb 5-1: config 0 interface 0 has no altsetting 0 [ 286.661151][ T1084] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 286.661172][ T1084] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.707941][ T1084] usb 5-1: config 0 descriptor?? [ 286.721959][ T1084] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 287.979092][ T6897] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 288.875807][ T6897] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 289.186400][ T7279] ptrace attach of "./syz-executor exec"[7289] was attempted by "./syz-executor exec"[7279] [ 290.527930][ T5907] usb 5-1: USB disconnect, device number 7 [ 290.576065][ T6897] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 290.813025][ T6897] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 290.902037][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.925890][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.944810][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.946096][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.949583][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.043683][ T61] Bluetooth: hci2: command tx timeout [ 294.461086][ T6897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.461945][ T7299] chnl_net:caif_netlink_parms(): no params data found [ 295.123859][ T61] Bluetooth: hci2: command tx timeout [ 295.820884][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.833607][ T5794] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 295.850265][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.853596][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.861650][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.865041][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.005100][ T5794] usb 3-1: Using ep0 maxpacket: 32 [ 296.009105][ T5794] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.016154][ T5794] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 296.016182][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 296.016200][ T5794] usb 3-1: Manufacturer: syz [ 296.016214][ T5794] usb 3-1: SerialNumber: syz [ 296.051498][ T5794] usb 3-1: config 0 descriptor?? [ 296.871685][ T7360] overlayfs: failed to resolve './bus': -2 [ 296.884528][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.884677][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.884905][ T7299] bridge_slave_0: entered allmulticast mode [ 296.887419][ T7299] bridge_slave_0: entered promiscuous mode [ 296.890478][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.890608][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.890801][ T7299] bridge_slave_1: entered allmulticast mode [ 296.893350][ T7299] bridge_slave_1: entered promiscuous mode [ 296.985861][ T5946] usb 3-1: USB disconnect, device number 12 [ 297.213424][ T5806] Bluetooth: hci2: command tx timeout [ 297.772545][ T7299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.792887][ T7299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.929678][ T5806] Bluetooth: hci0: command tx timeout [ 299.283566][ T5806] Bluetooth: hci2: command tx timeout [ 300.014083][ T5806] Bluetooth: hci0: command tx timeout [ 300.051146][ T7299] team0: Port device team_slave_0 added [ 300.477284][ T7299] team0: Port device team_slave_1 added [ 302.151172][ T5806] Bluetooth: hci0: command tx timeout [ 303.002959][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.002975][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.002997][ T7299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.086395][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.086412][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.086437][ T7299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.441634][ T7447] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20004 [ 303.794775][ T7299] hsr_slave_0: entered promiscuous mode [ 303.798021][ T7299] hsr_slave_1: entered promiscuous mode [ 303.804117][ T5919] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 303.828075][ T7299] debugfs: 'hsr0' already exists in 'hsr' [ 303.828100][ T7299] Cannot create hsr debugfs directory [ 303.976075][ T5919] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 303.976109][ T5919] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 303.976144][ T5919] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 303.976162][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.029020][ T7447] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 304.052507][ T5919] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.243631][ T5806] Bluetooth: hci0: command tx timeout [ 304.798669][ T6173] bridge_slave_1: left allmulticast mode [ 304.798694][ T6173] bridge_slave_1: left promiscuous mode [ 304.798918][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.874890][ T6173] bridge_slave_0: left allmulticast mode [ 304.874919][ T6173] bridge_slave_0: left promiscuous mode [ 304.875187][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.635730][ T6173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.886518][ T6173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.160951][ T6173] bond0 (unregistering): Released all slaves [ 306.366578][ T5960] usb 4-1: USB disconnect, device number 21 [ 307.813756][ T6173] hsr_slave_0: left promiscuous mode [ 307.857675][ T6173] hsr_slave_1: left promiscuous mode [ 307.858330][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.894416][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.453727][ T5919] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 308.613607][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 308.615953][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.616005][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.616031][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 308.616051][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 308.616072][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.617548][ T5919] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 308.617572][ T5919] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 308.617589][ T5919] usb 4-1: Manufacturer: syz [ 308.878381][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 308.878401][ T37] audit: type=1326 audit(1767255496.379:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7496 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 308.881302][ T37] audit: type=1326 audit(1767255496.559:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7496 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 309.006599][ T37] audit: type=1326 audit(1767255496.689:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7496 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 309.011194][ T37] audit: type=1326 audit(1767255496.689:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7496 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 309.621874][ T5919] usb 4-1: config 0 descriptor?? [ 309.675225][ T6173] team0 (unregistering): Port device team_slave_1 removed [ 309.904978][ T6173] team0 (unregistering): Port device team_slave_0 removed [ 309.915419][ T5919] rc_core: IR keymap rc-hauppauge not found [ 309.915441][ T5919] Registered IR keymap rc-empty [ 309.915639][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 309.934957][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 309.960539][ T5919] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 309.963310][ T5919] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 309.992288][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.013830][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.045336][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.097053][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.113743][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.135992][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.154653][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.199364][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.219286][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.256008][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.297669][ T5919] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 310.297692][ T5919] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 310.368520][ T5919] usb 4-1: USB disconnect, device number 22 [ 310.817069][ T7363] chnl_net:caif_netlink_parms(): no params data found [ 313.869751][ T7363] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.870070][ T7363] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.873142][ T7363] bridge_slave_0: entered allmulticast mode [ 313.876243][ T7363] bridge_slave_0: entered promiscuous mode [ 313.916090][ T7363] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.923855][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.924109][ T7363] bridge_slave_1: entered allmulticast mode [ 313.954230][ T7363] bridge_slave_1: entered promiscuous mode [ 315.884062][ T7555] ptrace attach of ""[7557] was attempted by "./syz-executor exec"[7555] [ 316.555343][ T7363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.684198][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.684269][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.751383][ T7363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.963330][ T7582] Bluetooth: MGMT ver 1.23 [ 320.043689][ T5648] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 320.194906][ T5648] usb 5-1: Using ep0 maxpacket: 16 [ 320.196587][ T5648] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.196610][ T5648] usb 5-1: config 0 interface 0 has no altsetting 0 [ 320.196628][ T5648] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 320.196639][ T5648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.201260][ T5648] usb 5-1: config 0 descriptor?? [ 320.210907][ T5648] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 320.506758][ T7590] Device name cannot be null; rc = [-22] [ 321.821866][ T7363] team0: Port device team_slave_0 added [ 321.828216][ T7363] team0: Port device team_slave_1 added [ 322.519428][ T7363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.519444][ T7363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.519466][ T7363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.758786][ T5839] usb 5-1: USB disconnect, device number 8 [ 322.983188][ T7607] ptrace attach of ""[7609] was attempted by "./syz-executor exec"[7607] [ 323.393382][ T7363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.393393][ T7363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.393406][ T7363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.721900][ T7617] Device name cannot be null; rc = [-22] [ 326.183615][ T5960] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 326.262826][ T7363] hsr_slave_0: entered promiscuous mode [ 326.264913][ T7363] hsr_slave_1: entered promiscuous mode [ 326.269638][ T7363] debugfs: 'hsr0' already exists in 'hsr' [ 326.269663][ T7363] Cannot create hsr debugfs directory [ 326.269870][ T7299] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.313559][ T5960] usb 5-1: device descriptor read/64, error -71 [ 326.318028][ T7299] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.495300][ T7299] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 326.568061][ T5960] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 326.574745][ T7299] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 326.694432][ T5960] usb 5-1: device descriptor read/64, error -71 [ 326.807903][ T5960] usb usb5-port1: attempt power cycle [ 327.183679][ T5960] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 327.206604][ T5960] usb 5-1: device descriptor read/8, error -71 [ 328.823642][ T5960] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 328.844360][ T5960] usb 5-1: device descriptor read/8, error -71 [ 328.964245][ T5960] usb usb5-port1: unable to enumerate USB device [ 329.072929][ T6173] bridge_slave_1: left allmulticast mode [ 329.072955][ T6173] bridge_slave_1: left promiscuous mode [ 329.073186][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.144926][ T7672] Device name cannot be null; rc = [-22] [ 330.067784][ T6173] bridge_slave_0: left allmulticast mode [ 330.067809][ T6173] bridge_slave_0: left promiscuous mode [ 330.068066][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.484418][ T5983] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 332.509623][ T7708] Device name cannot be null; rc = [-22] [ 332.639270][ T5983] usb 3-1: device descriptor read/64, error -71 [ 332.883717][ T5983] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 333.023687][ T5983] usb 3-1: device descriptor read/64, error -71 [ 333.134058][ T5983] usb usb3-port1: attempt power cycle [ 333.473624][ T5983] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 334.280401][ T5983] usb 3-1: device descriptor read/8, error -71 [ 334.523557][ T5983] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 334.554211][ T5983] usb 3-1: device descriptor read/8, error -71 [ 334.669571][ T5983] usb usb3-port1: unable to enumerate USB device [ 335.220296][ T7727] ptrace attach of "./syz-executor exec"[7728] was attempted by "./syz-executor exec"[7727] [ 336.275181][ T6173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.290329][ T7736] Device name cannot be null; rc = [-22] [ 337.594553][ T6173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.728236][ T6173] bond0 (unregistering): Released all slaves [ 337.875413][ T5919] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 338.013679][ T5907] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 338.024007][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 338.039429][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.060910][ T5919] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 338.060939][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 338.060957][ T5919] usb 5-1: Manufacturer: syz [ 338.060970][ T5919] usb 5-1: SerialNumber: syz [ 338.071583][ T5919] usb 5-1: config 0 descriptor?? [ 338.143626][ T5907] usb 3-1: device descriptor read/64, error -71 [ 338.193627][ T6173] hsr_slave_0: left promiscuous mode [ 338.213761][ T6173] hsr_slave_1: left promiscuous mode [ 338.214392][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.254954][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.394418][ T5907] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 338.570113][ T5907] usb 3-1: device descriptor read/64, error -71 [ 338.678589][ T5907] usb usb3-port1: attempt power cycle [ 338.871067][ T7755] overlayfs: failed to resolve './bus': -2 [ 338.926497][ T5839] usb 5-1: USB disconnect, device number 13 [ 339.063574][ T5907] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 339.085386][ T5907] usb 3-1: device descriptor read/8, error -71 [ 339.339257][ T5907] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 339.354528][ T5907] usb 3-1: device descriptor read/8, error -71 [ 339.444618][ T6173] team0 (unregistering): Port device team_slave_1 removed [ 339.493135][ T5907] usb usb3-port1: unable to enumerate USB device [ 340.054311][ T6173] team0 (unregistering): Port device team_slave_0 removed [ 342.017611][ T7789] Device name cannot be null; rc = [-22] [ 343.112165][ T7299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.170052][ T7299] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.238928][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.239079][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.558335][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.585428][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.931627][ T7811] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20004 [ 344.223796][ T5839] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 344.376513][ T5839] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 344.376546][ T5839] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 344.376584][ T5839] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 344.376606][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.381547][ T7811] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 344.438331][ T5839] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.876637][ T7363] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 344.956213][ T7363] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.013224][ T7363] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 345.020429][ T5839] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 345.143605][ T5839] usb 5-1: device descriptor read/64, error -71 [ 345.215405][ T7363] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 345.336164][ T7299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.383612][ T5839] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 345.523986][ T5839] usb 5-1: device descriptor read/64, error -71 [ 345.620917][ T7363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.634186][ T5839] usb usb5-port1: attempt power cycle [ 345.697227][ T7363] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.746079][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.746359][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.794741][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.795471][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.986145][ T5839] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 346.004304][ T5839] usb 5-1: device descriptor read/8, error -71 [ 346.243791][ T5839] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 346.245496][ T7854] Device name cannot be null; rc = [-22] [ 346.264635][ T5839] usb 5-1: device descriptor read/8, error -71 [ 346.349076][ T7299] veth0_vlan: entered promiscuous mode [ 346.375383][ T5839] usb usb5-port1: unable to enumerate USB device [ 346.375788][ T7299] veth1_vlan: entered promiscuous mode [ 346.495662][ T7299] veth0_macvtap: entered promiscuous mode [ 346.501396][ T7299] veth1_macvtap: entered promiscuous mode [ 346.545814][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.588909][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.629706][ T3569] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.635162][ T3569] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.651852][ T3569] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.659097][ T3569] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.859634][ T5794] usb 3-1: USB disconnect, device number 21 [ 347.636708][ T7868] ptrace attach of ""[7871] was attempted by "./syz-executor exec"[7868] [ 348.244635][ T7363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.318137][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.318160][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.593571][ T37] audit: type=1326 audit(1767255536.159:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7875 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 348.594245][ T37] audit: type=1326 audit(1767255536.249:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7875 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 349.416893][ T37] audit: type=1326 audit(1767255537.099:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7875 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 349.726333][ T37] audit: type=1326 audit(1767255537.099:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7875 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 351.360161][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.360184][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.079291][ T7363] veth0_vlan: entered promiscuous mode [ 352.196554][ T7363] veth1_vlan: entered promiscuous mode [ 352.257323][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 352.268265][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 352.283789][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 352.285202][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 352.290209][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 352.546742][ T7363] veth0_macvtap: entered promiscuous mode [ 352.642794][ T7363] veth1_macvtap: entered promiscuous mode [ 352.712579][ T7363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.807459][ T7363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.267626][ T3569] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.287881][ T3569] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.325975][ T3569] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.383897][ T5648] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 353.658051][ T5648] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.658077][ T5648] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.659599][ T5648] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 353.659625][ T5648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 353.659644][ T5648] usb 5-1: SerialNumber: syz [ 354.430008][ T5806] Bluetooth: hci5: command tx timeout [ 354.678433][ T3569] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.721210][ T5648] usb 5-1: 0:2 : does not exist [ 354.721298][ T5648] usb 5-1: unit 255 not found! [ 354.776685][ T5648] usb 5-1: USB disconnect, device number 18 [ 355.092120][ T6173] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.758455][ T6173] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.903528][ T5983] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 356.033581][ T5983] usb 5-1: device descriptor read/64, error -71 [ 356.047297][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.069047][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.087014][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.094654][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.095568][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.303562][ T5983] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 356.433643][ T5983] usb 5-1: device descriptor read/64, error -71 [ 356.485609][ T5806] Bluetooth: hci5: command tx timeout [ 356.544174][ T5983] usb usb5-port1: attempt power cycle [ 356.582373][ T6173] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.669609][ T7901] chnl_net:caif_netlink_parms(): no params data found [ 356.904177][ T5983] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 356.931059][ T5983] usb 5-1: device descriptor read/8, error -71 [ 357.458832][ T5983] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 357.705255][ T5983] usb 5-1: device descriptor read/8, error -71 [ 357.837000][ T5983] usb usb5-port1: unable to enumerate USB device [ 357.856398][ T6173] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.128073][ T7950] 9pnet_fd: Insufficient options for proto=fd [ 358.217904][ T5806] Bluetooth: hci2: command tx timeout [ 358.566123][ T5806] Bluetooth: hci5: command tx timeout [ 360.244051][ T5794] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 360.324793][ T5806] Bluetooth: hci2: command tx timeout [ 360.517636][ T5794] usb 5-1: Using ep0 maxpacket: 32 [ 360.578264][ T5794] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.646736][ T5806] Bluetooth: hci5: command tx timeout [ 360.653059][ T5794] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 360.653225][ T5794] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 360.653277][ T5794] usb 5-1: Manufacturer: syz [ 360.653332][ T5794] usb 5-1: SerialNumber: syz [ 361.052217][ T5794] usb 5-1: config 0 descriptor?? [ 362.135408][ T7957] overlayfs: failed to resolve './bus': -2 [ 362.172383][ T5994] usb 5-1: USB disconnect, device number 23 [ 362.514103][ T61] Bluetooth: hci2: command tx timeout [ 362.580317][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.580467][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.580604][ T7901] bridge_slave_0: entered allmulticast mode [ 362.581951][ T7901] bridge_slave_0: entered promiscuous mode [ 363.479012][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.479108][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.479265][ T7901] bridge_slave_1: entered allmulticast mode [ 363.485075][ T7901] bridge_slave_1: entered promiscuous mode [ 364.459207][ T7997] 9pnet_fd: Insufficient options for proto=fd [ 364.527308][ T5879] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 364.578117][ T61] Bluetooth: hci2: command tx timeout [ 364.846824][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 364.864893][ T5879] usb 3-1: no configurations [ 364.864945][ T5879] usb 3-1: can't read configurations, error -22 [ 365.074301][ T5879] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 365.256052][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 365.259174][ T5879] usb 3-1: no configurations [ 365.259227][ T5879] usb 3-1: can't read configurations, error -22 [ 365.297460][ T5879] usb usb3-port1: attempt power cycle [ 365.694105][ T5879] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 365.726757][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 365.730902][ T5879] usb 3-1: no configurations [ 365.730962][ T5879] usb 3-1: can't read configurations, error -22 [ 365.924628][ T5879] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 365.966662][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 365.988822][ T5879] usb 3-1: no configurations [ 365.989117][ T5879] usb 3-1: can't read configurations, error -22 [ 365.991648][ T5879] usb usb3-port1: unable to enumerate USB device [ 367.337489][ T7901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.430561][ T7901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.794645][ T7901] team0: Port device team_slave_0 added [ 368.895761][ T6173] bridge_slave_1: left allmulticast mode [ 368.895790][ T6173] bridge_slave_1: left promiscuous mode [ 368.896030][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.985826][ T6173] bridge_slave_0: left allmulticast mode [ 368.985855][ T6173] bridge_slave_0: left promiscuous mode [ 368.986090][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.243844][ T6045] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 371.403680][ T6045] usb 4-1: Using ep0 maxpacket: 8 [ 371.404503][ T6045] usb 4-1: no configurations [ 371.404518][ T6045] usb 4-1: can't read configurations, error -22 [ 371.549268][ T6045] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 372.083790][ T6045] usb 4-1: Using ep0 maxpacket: 8 [ 372.085953][ T6045] usb 4-1: no configurations [ 372.085969][ T6045] usb 4-1: can't read configurations, error -22 [ 372.087036][ T6045] usb usb4-port1: attempt power cycle [ 372.563105][ T6045] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 372.724205][ T6045] usb 4-1: Using ep0 maxpacket: 8 [ 372.728762][ T6045] usb 4-1: no configurations [ 372.728780][ T6045] usb 4-1: can't read configurations, error -22 [ 372.873788][ T6045] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 372.905234][ T6045] usb 4-1: Using ep0 maxpacket: 8 [ 372.905932][ T6045] usb 4-1: no configurations [ 372.905946][ T6045] usb 4-1: can't read configurations, error -22 [ 372.906264][ T6045] usb usb4-port1: unable to enumerate USB device [ 376.275068][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 378.426091][ T6173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.484181][ T6173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.507146][ T6173] bond0 (unregistering): Released all slaves [ 378.546421][ T7901] team0: Port device team_slave_1 added [ 378.603652][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.603721][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.661793][ T8084] vlan2: entered promiscuous mode [ 378.661818][ T8084] bond0: entered promiscuous mode [ 378.661831][ T8084] bond_slave_0: entered promiscuous mode [ 378.662159][ T8084] bond_slave_1: entered promiscuous mode [ 379.201414][ T5919] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 379.363841][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 379.369051][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.371125][ T5919] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 379.371151][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 379.371170][ T5919] usb 3-1: Manufacturer: syz [ 379.371184][ T5919] usb 3-1: SerialNumber: syz [ 379.378707][ T5919] usb 3-1: config 0 descriptor?? [ 379.574354][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.574371][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.574397][ T7901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.597567][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.597583][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.597664][ T7901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.647685][ T5919] usb 3-1: USB disconnect, device number 26 [ 379.849830][ T5879] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 380.023635][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 380.024498][ T5879] usb 5-1: no configurations [ 380.024513][ T5879] usb 5-1: can't read configurations, error -22 [ 380.164802][ T5879] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 380.243587][ T5919] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 380.323658][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 380.326622][ T5879] usb 5-1: no configurations [ 380.326641][ T5879] usb 5-1: can't read configurations, error -22 [ 380.328020][ T5879] usb usb5-port1: attempt power cycle [ 380.676895][ T5919] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 380.676913][ T5919] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 380.676923][ T5919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 380.750325][ T8140] ptrace attach of "./syz-executor exec"[8142] was attempted by "./syz-executor exec"[8140] [ 381.280505][ T5919] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 381.280525][ T5919] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 381.284853][ T5919] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 381.284877][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 381.284894][ T5919] usb 4-1: Product: syz [ 381.284907][ T5919] usb 4-1: Manufacturer: syz [ 381.329376][ T5919] cdc_wdm 4-1:1.0: skipping garbage [ 381.329396][ T5919] cdc_wdm 4-1:1.0: skipping garbage [ 381.333618][ T5879] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 381.350484][ T5919] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 381.350506][ T5919] cdc_wdm 4-1:1.0: Unknown control protocol [ 381.364135][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 381.364802][ T5879] usb 5-1: no configurations [ 381.364816][ T5879] usb 5-1: can't read configurations, error -22 [ 381.427608][ T7901] hsr_slave_0: entered promiscuous mode [ 381.432948][ T7901] hsr_slave_1: entered promiscuous mode [ 381.570350][ T5942] usb 4-1: USB disconnect, device number 27 [ 381.614986][ T5879] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 381.634396][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 381.635606][ T5879] usb 5-1: no configurations [ 381.635622][ T5879] usb 5-1: can't read configurations, error -22 [ 381.635964][ T5879] usb usb5-port1: unable to enumerate USB device [ 382.873618][ T6173] hsr_slave_0: left promiscuous mode [ 383.673942][ T6173] hsr_slave_1: left promiscuous mode [ 383.674964][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.674987][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.864552][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.864578][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.991759][ T8164] Device name cannot be null; rc = [-22] [ 384.744078][ T6173] veth1_macvtap: left promiscuous mode [ 384.744234][ T6173] veth0_macvtap: left promiscuous mode [ 384.744514][ T6173] veth1_vlan: left promiscuous mode [ 384.744682][ T6173] veth0_vlan: left promiscuous mode [ 389.341385][ T6173] team0 (unregistering): Port device team_slave_1 removed [ 391.596191][ T6173] team0 (unregistering): Port device team_slave_0 removed [ 397.004990][ T7933] chnl_net:caif_netlink_parms(): no params data found [ 399.049163][ T5919] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 399.983531][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 399.985819][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.985839][ T5919] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 399.990469][ T5919] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 399.990496][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.990515][ T5919] usb 4-1: Product: syz [ 399.990528][ T5919] usb 4-1: Manufacturer: syz [ 399.990541][ T5919] usb 4-1: SerialNumber: syz [ 399.998817][ T5919] usb 4-1: config 0 descriptor?? [ 400.010477][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.010604][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.010802][ T7933] bridge_slave_0: entered allmulticast mode [ 400.024991][ T7933] bridge_slave_0: entered promiscuous mode [ 400.277473][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.277672][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.277868][ T7933] bridge_slave_1: entered allmulticast mode [ 400.842682][ T7933] bridge_slave_1: entered promiscuous mode [ 402.443144][ T5919] usb 4-1: USB disconnect, device number 28 [ 402.663684][ T8009] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 402.813583][ T8009] usb 5-1: Using ep0 maxpacket: 32 [ 402.818345][ T8009] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 402.821046][ T8009] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 402.821068][ T8009] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 402.821083][ T8009] usb 5-1: Manufacturer: syz [ 402.821094][ T8009] usb 5-1: SerialNumber: syz [ 402.879794][ T7933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.902726][ T8009] usb 5-1: config 0 descriptor?? [ 402.968644][ T7933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.817320][ T7933] team0: Port device team_slave_0 added [ 403.870786][ T8251] overlayfs: failed to resolve './bus': -2 [ 403.887586][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'. [ 404.001046][ T5866] usb 5-1: USB disconnect, device number 28 [ 404.060529][ T7933] team0: Port device team_slave_1 added [ 404.327827][ T8269] vlan2: entered promiscuous mode [ 404.327848][ T8269] bond0: entered promiscuous mode [ 404.327860][ T8269] bond_slave_0: entered promiscuous mode [ 404.328103][ T8269] bond_slave_1: entered promiscuous mode [ 407.463858][ T5866] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 407.624500][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 407.660761][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.660826][ T5866] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 407.753772][ T5866] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 407.753823][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.753846][ T5866] usb 3-1: Product: syz [ 407.753922][ T5866] usb 3-1: Manufacturer: syz [ 407.753935][ T5866] usb 3-1: SerialNumber: syz [ 407.798982][ T5866] usb 3-1: config 0 descriptor?? [ 407.832607][ T6173] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.031264][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.031282][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.031308][ T7933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.703788][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.703808][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.703836][ T7933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.222920][ T5866] usb 3-1: USB disconnect, device number 27 [ 412.913042][ T6173] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.904177][ T8336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.591'. [ 414.166769][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 414.190299][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 414.191537][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 414.205306][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 414.205978][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 414.987247][ T8343] ptrace attach of ""[8344] was attempted by "./syz-executor exec"[8343] [ 416.244479][ T61] Bluetooth: hci0: command tx timeout [ 416.336409][ T6173] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.834522][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 416.839817][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 416.841035][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 417.473583][ T5994] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 417.552317][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 417.553141][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 417.623704][ T5994] usb 5-1: Using ep0 maxpacket: 16 [ 417.626075][ T5994] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.626103][ T5994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 417.626135][ T5994] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 417.626157][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.701076][ T5994] usb 5-1: config 0 descriptor?? [ 417.717835][ T5994] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 417.768725][ T6173] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.355599][ T5806] Bluetooth: hci0: command tx timeout [ 420.242407][ T5806] Bluetooth: hci2: command tx timeout [ 420.414875][ T5806] Bluetooth: hci0: command tx timeout [ 420.423166][ T5983] usb 5-1: USB disconnect, device number 29 [ 422.257823][ T5806] Bluetooth: hci2: command tx timeout [ 422.500786][ T5806] Bluetooth: hci0: command tx timeout [ 424.323514][ T5806] Bluetooth: hci2: command tx timeout [ 425.912079][ T6173] bridge_slave_1: left allmulticast mode [ 425.912108][ T6173] bridge_slave_1: left promiscuous mode [ 425.912349][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.062066][ T6173] bridge_slave_0: left allmulticast mode [ 426.062096][ T6173] bridge_slave_0: left promiscuous mode [ 426.062738][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.535687][ T5806] Bluetooth: hci2: command tx timeout [ 429.046227][ T8440] ptrace attach of "./syz-executor exec"[8441] was attempted by "./syz-executor exec"[8440] [ 431.631614][ T8454] ptrace attach of "./syz-executor exec"[8458] was attempted by "./syz-executor exec"[8454] [ 436.013494][ T8009] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 436.170733][ T8009] usb 3-1: Using ep0 maxpacket: 16 [ 436.725339][ T8009] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.725396][ T8009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 436.725422][ T8009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 436.725443][ T8009] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 436.725465][ T8009] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.726938][ T8009] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 436.726964][ T8009] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 436.726984][ T8009] usb 3-1: Manufacturer: syz [ 436.732089][ T8009] usb 3-1: config 0 descriptor?? [ 437.143500][ T37] audit: type=1326 audit(1767255624.809:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8486 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066eeff749 code=0x7ffc0000 [ 437.143555][ T37] audit: type=1326 audit(1767255624.809:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8486 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f066eeff749 code=0x7ffc0000 [ 437.198586][ T8009] rc_core: IR keymap rc-hauppauge not found [ 437.198607][ T8009] Registered IR keymap rc-empty [ 437.198787][ T8009] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.202311][ T37] audit: type=1326 audit(1767255624.829:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8486 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066eeff749 code=0x7ffc0000 [ 437.202716][ T37] audit: type=1326 audit(1767255624.879:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8486 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f066eeff749 code=0x7ffc0000 [ 437.203056][ T37] audit: type=1326 audit(1767255624.879:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8486 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066eeff749 code=0x7ffc0000 [ 437.213581][ T8009] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.235079][ T8009] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 437.238185][ T8009] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 437.259397][ T37] audit: type=1326 audit(1767255624.889:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8486 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f066eeff749 code=0x7ffc0000 [ 437.259451][ T37] audit: type=1326 audit(1767255624.899:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8486 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066eeff749 code=0x7ffc0000 [ 437.259490][ T37] audit: type=1326 audit(1767255624.899:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8486 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066eeff749 code=0x7ffc0000 [ 437.288933][ T37] audit: type=1326 audit(1767255624.939:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8486 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f066eeff749 code=0x7ffc0000 [ 437.288992][ T37] audit: type=1326 audit(1767255624.969:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8486 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066eeff749 code=0x7ffc0000 [ 437.471210][ T8009] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.483567][ T8009] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.503648][ T8009] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.523719][ T8009] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.543579][ T8009] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.563616][ T8009] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.583580][ T8009] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.603664][ T8009] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.623574][ T8009] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.643589][ T8009] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.666478][ T8009] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 437.666502][ T8009] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 437.692806][ T8009] usb 3-1: USB disconnect, device number 28 [ 438.685410][ T6173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.726631][ T6173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.752808][ T6173] bond0 (unregistering): Released all slaves [ 439.883613][ T6173] hsr_slave_0: left promiscuous mode [ 439.904065][ T6173] hsr_slave_1: left promiscuous mode [ 439.904845][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.904861][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.980799][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.980818][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.011640][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.011706][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.156213][ T6173] veth1_macvtap: left promiscuous mode [ 440.156278][ T6173] veth0_macvtap: left promiscuous mode [ 440.156422][ T6173] veth1_vlan: left promiscuous mode [ 440.156516][ T6173] veth0_vlan: left promiscuous mode [ 440.926965][ T8513] 9pnet_fd: Insufficient options for proto=fd [ 442.650337][ T8530] netlink: 'syz.3.630': attribute type 1 has an invalid length. [ 444.813576][ T8547] ptrace attach of "./syz-executor exec"[8549] was attempted by "./syz-executor exec"[8547] [ 447.410887][ T8562] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 458.104561][ T8645] overlayfs: failed to resolve './bus': -2 [ 458.125794][ T5960] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 458.693508][ T5960] usb 3-1: Using ep0 maxpacket: 32 [ 458.696019][ T5960] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 458.698762][ T5960] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 458.698788][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 458.698807][ T5960] usb 3-1: Manufacturer: syz [ 458.698830][ T5960] usb 3-1: SerialNumber: syz [ 458.755865][ T5960] usb 3-1: config 0 descriptor?? [ 459.006878][ T8639] overlayfs: failed to resolve './bus': -2 [ 459.013538][ T5960] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 459.176284][ T8654] 9pnet_fd: Insufficient options for proto=fd [ 459.184208][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 459.213106][ T5960] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.213164][ T5960] usb 5-1: config 0 interface 0 has no altsetting 0 [ 459.213228][ T5960] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 459.213287][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.386975][ T5960] usb 5-1: config 0 descriptor?? [ 459.464355][ T5960] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 460.520807][ T5866] usb 3-1: USB disconnect, device number 29 [ 460.546843][ T6173] team0 (unregistering): Port device team_slave_1 removed [ 460.815520][ T6173] team0 (unregistering): Port device team_slave_0 removed [ 467.594267][ T8701] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 467.617703][ T8701] overlayfs: failed to resolve './bus': -2 [ 468.359132][ T8339] chnl_net:caif_netlink_parms(): no params data found [ 468.392806][ T5866] usb 5-1: USB disconnect, device number 30 [ 468.941277][ T8363] chnl_net:caif_netlink_parms(): no params data found [ 470.708693][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.708818][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.709048][ T8339] bridge_slave_0: entered allmulticast mode [ 470.711692][ T8339] bridge_slave_0: entered promiscuous mode [ 470.797274][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.797405][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.797602][ T8339] bridge_slave_1: entered allmulticast mode [ 470.800207][ T8339] bridge_slave_1: entered promiscuous mode [ 471.512454][ T8746] ptrace attach of ""[8750] was attempted by "./syz-executor exec"[8746] [ 472.549850][ T8339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.865099][ T8339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.869943][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.870154][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.870361][ T8363] bridge_slave_0: entered allmulticast mode [ 472.905652][ T8363] bridge_slave_0: entered promiscuous mode [ 473.064868][ T8363] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.064939][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.065085][ T8363] bridge_slave_1: entered allmulticast mode [ 473.066699][ T8363] bridge_slave_1: entered promiscuous mode [ 473.492849][ T8363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.511966][ T8363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.004077][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 474.004096][ T37] audit: type=1326 audit(1767255664.649:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8774 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 474.004144][ T37] audit: type=1326 audit(1767255664.649:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8774 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 474.063583][ T5919] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 474.199619][ T37] audit: type=1326 audit(1767255664.879:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8774 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 474.213786][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 474.233815][ T5919] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 474.233833][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.233843][ T5919] usb 4-1: Product: syz [ 474.233858][ T5919] usb 4-1: Manufacturer: syz [ 474.233871][ T5919] usb 4-1: SerialNumber: syz [ 474.241505][ T5919] usb 4-1: config 0 descriptor?? [ 474.310764][ T37] audit: type=1326 audit(1767255664.879:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8774 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3e17f749 code=0x7ffc0000 [ 474.343088][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 474.380060][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 474.381213][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 474.406198][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 474.407234][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 474.855982][ T8363] team0: Port device team_slave_0 added [ 474.941102][ T8363] team0: Port device team_slave_1 added [ 474.941348][ T6173] bridge_slave_1: left allmulticast mode [ 474.941368][ T6173] bridge_slave_1: left promiscuous mode [ 474.941632][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.046418][ T6173] bridge_slave_0: left allmulticast mode [ 475.046448][ T6173] bridge_slave_0: left promiscuous mode [ 475.046628][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.118928][ T6173] bridge_slave_1: left allmulticast mode [ 475.118949][ T6173] bridge_slave_1: left promiscuous mode [ 475.119108][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.239146][ T6173] bridge_slave_0: left allmulticast mode [ 475.239168][ T6173] bridge_slave_0: left promiscuous mode [ 475.239345][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.855812][ T6173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.954425][ T6173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.015883][ T6173] bond0 (unregistering): Released all slaves [ 476.483591][ T5806] Bluetooth: hci0: command tx timeout [ 476.523999][ T6173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.604112][ T6173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.689002][ T6173] bond0 (unregistering): Released all slaves [ 476.865274][ T8009] usb 4-1: USB disconnect, device number 29 [ 477.205077][ T6173] hsr_slave_0: left promiscuous mode [ 477.252627][ T6173] hsr_slave_1: left promiscuous mode [ 477.443594][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.487149][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.255053][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.274143][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.568753][ T5809] Bluetooth: hci0: command tx timeout [ 478.584162][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.937019][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.939071][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 478.970197][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 478.975292][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 480.818451][ T61] Bluetooth: hci0: command tx timeout [ 481.043733][ T61] Bluetooth: hci2: command tx timeout [ 482.846435][ T6173] team0 (unregistering): Port device team_slave_1 removed [ 482.883856][ T61] Bluetooth: hci0: command tx timeout [ 483.253481][ T61] Bluetooth: hci2: command tx timeout [ 483.518587][ T6173] team0 (unregistering): Port device team_slave_0 removed [ 484.141839][ T8857] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 484.162723][ T8857] overlayfs: failed to resolve './bus': -2 [ 485.305031][ T61] Bluetooth: hci2: command tx timeout [ 487.443523][ T61] Bluetooth: hci2: command tx timeout [ 489.184241][ T6173] team0 (unregistering): Port device team_slave_1 removed [ 489.312076][ T8890] netlink: 'syz.4.725': attribute type 1 has an invalid length. [ 489.334631][ T8890] overlayfs: failed to resolve './bus': -2 [ 490.272712][ T6173] team0 (unregistering): Port device team_slave_0 removed [ 494.483875][ T5960] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 494.823451][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 494.825985][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.826031][ T5960] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 494.826054][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.901277][ T5960] usb 3-1: config 0 descriptor?? [ 497.682391][ T5960] usbhid 3-1:0.0: can't add hid device: -71 [ 497.682513][ T5960] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 497.727498][ T5960] usb 3-1: USB disconnect, device number 30 [ 498.149947][ T8784] chnl_net:caif_netlink_parms(): no params data found [ 499.663791][ T8819] chnl_net:caif_netlink_parms(): no params data found [ 501.567839][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.567909][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.467641][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.490782][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.490965][ T8784] bridge_slave_0: entered allmulticast mode [ 502.517084][ T8784] bridge_slave_0: entered promiscuous mode [ 502.569318][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.569451][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.569609][ T8784] bridge_slave_1: entered allmulticast mode [ 502.737538][ T8784] bridge_slave_1: entered promiscuous mode [ 504.338629][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.124783][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.124856][ T8819] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.125017][ T8819] bridge_slave_0: entered allmulticast mode [ 505.152297][ T8819] bridge_slave_0: entered promiscuous mode [ 505.178117][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.267336][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.267702][ T8819] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.267890][ T8819] bridge_slave_1: entered allmulticast mode [ 505.290621][ T8819] bridge_slave_1: entered promiscuous mode [ 511.255627][ T8784] team0: Port device team_slave_0 added [ 511.402305][ T8819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.419929][ T8784] team0: Port device team_slave_1 added [ 511.425620][ T8819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.566329][ T6173] bridge_slave_1: left allmulticast mode [ 513.566357][ T6173] bridge_slave_1: left promiscuous mode [ 513.566610][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.573074][ T6173] bridge_slave_0: left allmulticast mode [ 514.573103][ T6173] bridge_slave_0: left promiscuous mode [ 514.591457][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.023257][ T6173] bridge_slave_1: left allmulticast mode [ 515.023285][ T6173] bridge_slave_1: left promiscuous mode [ 515.042162][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.904850][ T6173] bridge_slave_0: left allmulticast mode [ 515.904880][ T6173] bridge_slave_0: left promiscuous mode [ 515.905133][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.404469][ T6173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.494211][ T6173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.558035][ T6173] bond0 (unregistering): Released all slaves [ 518.834028][ T6173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.113954][ T6173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.583648][ T6173] bond0 (unregistering): Released all slaves [ 520.826708][ T9168] netlink: 'syz.3.787': attribute type 1 has an invalid length. [ 520.830313][ T9168] overlayfs: failed to resolve './bus': -2 [ 521.981315][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.981333][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.981359][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.243006][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.243018][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.243033][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.254014][ T8819] team0: Port device team_slave_0 added [ 523.282163][ T8819] team0: Port device team_slave_1 added [ 524.529302][ T9195] Device name cannot be null; rc = [-22] [ 526.551751][ T9208] netlink: 'syz.4.795': attribute type 1 has an invalid length. [ 526.576396][ T9208] overlayfs: failed to resolve './bus': -2 [ 527.066657][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.066675][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.066701][ T8819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.383157][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.383175][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.383202][ T8819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.757028][ T6173] team0 (unregistering): Port device team_slave_1 removed [ 531.064313][ T6173] team0 (unregistering): Port device team_slave_0 removed [ 534.273771][ T9267] Device name cannot be null; rc = [-22] [ 535.932182][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 536.003988][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 536.009830][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 536.012437][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 536.023532][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 537.751412][ T8784] hsr_slave_0: entered promiscuous mode [ 537.776998][ T8784] hsr_slave_1: entered promiscuous mode [ 538.083610][ T61] Bluetooth: hci5: command tx timeout [ 538.539258][ T9280] chnl_net:caif_netlink_parms(): no params data found [ 539.027572][ T9319] Device name cannot be null; rc = [-22] [ 540.176864][ T61] Bluetooth: hci5: command tx timeout [ 540.942261][ T5806] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 540.951827][ T5806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 540.956178][ T5806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 540.957856][ T5806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 540.958663][ T5806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 541.892125][ T9280] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.892259][ T9280] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.892418][ T9280] bridge_slave_0: entered allmulticast mode [ 541.894302][ T9280] bridge_slave_0: entered promiscuous mode [ 541.905369][ T9280] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.913137][ T9280] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.914758][ T9280] bridge_slave_1: entered allmulticast mode [ 541.946362][ T9280] bridge_slave_1: entered promiscuous mode [ 542.243449][ T5806] Bluetooth: hci5: command tx timeout [ 543.383939][ T5806] Bluetooth: hci6: command tx timeout [ 543.762726][ T9280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.037111][ T9280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.852433][ T5806] Bluetooth: hci5: command tx timeout [ 545.449919][ T5806] Bluetooth: hci6: command tx timeout [ 546.690771][ T9280] team0: Port device team_slave_0 added [ 546.750427][ T9280] team0: Port device team_slave_1 added [ 547.187431][ T9280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.187448][ T9280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.187472][ T9280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.205041][ T9280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.205057][ T9280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.205084][ T9280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.844400][ T5806] Bluetooth: hci6: command tx timeout [ 549.502239][ T9280] hsr_slave_0: entered promiscuous mode [ 549.503027][ T9280] hsr_slave_1: entered promiscuous mode [ 549.981486][ T9280] debugfs: 'hsr0' already exists in 'hsr' [ 549.981514][ T9280] Cannot create hsr debugfs directory [ 551.112778][ T61] Bluetooth: hci6: command tx timeout [ 552.843932][ T6173] bridge_slave_1: left allmulticast mode [ 552.843962][ T6173] bridge_slave_1: left promiscuous mode [ 552.844224][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.805765][ T6173] bridge_slave_0: left allmulticast mode [ 553.805793][ T6173] bridge_slave_0: left promiscuous mode [ 553.806069][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.902712][ T6173] bridge_slave_1: left allmulticast mode [ 553.902733][ T6173] bridge_slave_1: left promiscuous mode [ 553.902881][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.165157][ T6173] bridge_slave_0: left allmulticast mode [ 554.165186][ T6173] bridge_slave_0: left promiscuous mode [ 554.165427][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.664213][ T9474] ptrace attach of "./syz-executor exec"[9475] was attempted by "./syz-executor exec"[9474] [ 556.703506][ T5960] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 556.833477][ T5960] usb 3-1: device descriptor read/64, error -71 [ 557.073482][ T5960] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 557.204140][ T5960] usb 3-1: device descriptor read/64, error -71 [ 557.319731][ T5960] usb usb3-port1: attempt power cycle [ 557.904348][ T6173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.947890][ T9489] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20004 [ 558.013483][ T5960] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 558.014876][ T6173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.039943][ T5960] usb 3-1: device descriptor read/8, error -71 [ 558.082258][ T6173] bond0 (unregistering): Released all slaves [ 558.185304][ T6045] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 558.293475][ T5960] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 558.405676][ T5960] usb 3-1: device descriptor read/8, error -71 [ 558.521987][ T5960] usb usb3-port1: unable to enumerate USB device [ 558.798675][ T6045] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 558.798697][ T6045] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 558.798719][ T6045] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 558.798730][ T6045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.811375][ T9489] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 558.819748][ T6045] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.981768][ T6173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.094177][ T6173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.228683][ T6173] bond0 (unregistering): Released all slaves [ 559.319128][ T6045] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 559.493534][ T6045] usb 4-1: Using ep0 maxpacket: 32 [ 559.497185][ T6045] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.500174][ T6045] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 559.500202][ T6045] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 559.500220][ T6045] usb 4-1: Manufacturer: syz [ 559.500234][ T6045] usb 4-1: SerialNumber: syz [ 559.506383][ T6045] usb 4-1: config 0 descriptor?? [ 559.696420][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.746817][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.864239][ T9501] overlayfs: failed to resolve './bus': -2 [ 559.866056][ T6173] hsr_slave_0: left promiscuous mode [ 559.925013][ T6173] hsr_slave_1: left promiscuous mode [ 559.926489][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.984329][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.714196][ T6173] team0 (unregistering): Port device team_slave_1 removed [ 560.965520][ T6173] team0 (unregistering): Port device team_slave_0 removed [ 561.264097][ T6069] usb 5-1: USB disconnect, device number 31 [ 562.962122][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.962189][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.542627][ T6069] usb 4-1: USB disconnect, device number 30 [ 564.643268][ T6173] team0 (unregistering): Port device team_slave_1 removed [ 565.004156][ T6173] team0 (unregistering): Port device team_slave_0 removed [ 565.991444][ T9328] chnl_net:caif_netlink_parms(): no params data found [ 569.090648][ T9573] ptrace attach of ""[9574] was attempted by "./syz-executor exec"[9573] [ 569.924296][ T8009] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 570.106278][ T8009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.106297][ T8009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.106320][ T8009] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 570.106331][ T8009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.111168][ T8009] usb 4-1: config 0 descriptor?? [ 570.195154][ T9328] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.195303][ T9328] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.195495][ T9328] bridge_slave_0: entered allmulticast mode [ 570.197340][ T9328] bridge_slave_0: entered promiscuous mode [ 570.238700][ T9328] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.238851][ T9328] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.239039][ T9328] bridge_slave_1: entered allmulticast mode [ 570.271403][ T9328] bridge_slave_1: entered promiscuous mode [ 570.772407][ T9328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.792447][ T8009] usbhid 4-1:0.0: can't add hid device: -71 [ 570.792558][ T8009] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 570.798159][ T8009] usb 4-1: USB disconnect, device number 31 [ 570.830280][ T9328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.838907][ T9280] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 571.116993][ T9280] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 572.180418][ T9280] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 572.278775][ T9328] team0: Port device team_slave_0 added [ 572.334140][ T9280] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 572.562269][ T9328] team0: Port device team_slave_1 added [ 574.874102][ T9614] netlink: 'syz.3.880': attribute type 1 has an invalid length. [ 574.900805][ T9614] overlayfs: failed to resolve './bus': -2 [ 575.475570][ T9328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.475581][ T9328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.475595][ T9328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.648937][ T9328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.648955][ T9328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.648978][ T9328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.233781][ T9629] netlink: 'syz.3.882': attribute type 1 has an invalid length. [ 581.030985][ T9328] hsr_slave_0: entered promiscuous mode [ 581.049990][ T9328] hsr_slave_1: entered promiscuous mode [ 581.315925][ T9651] 9pnet_fd: Insufficient options for proto=fd [ 594.421707][ T8009] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 594.575752][ T8009] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.575779][ T8009] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.577314][ T8009] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 594.577340][ T8009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 594.577358][ T8009] usb 5-1: SerialNumber: syz [ 594.966256][ T8009] usb 5-1: 0:2 : does not exist [ 595.018791][ T8009] usb 5-1: USB disconnect, device number 32 [ 595.257639][ T9715] udevd[9715]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.960300][ T9743] ptrace attach of "./syz-executor exec"[9744] was attempted by "./syz-executor exec"[9743] [ 600.534016][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 600.563030][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 600.732242][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 600.746104][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 600.746933][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 602.963538][ T61] Bluetooth: hci0: command tx timeout [ 603.846478][ T5946] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 603.985507][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 603.988793][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 603.993431][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 603.995823][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.997915][ T5946] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 603.997941][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 603.997960][ T5946] usb 4-1: Manufacturer: syz [ 603.997973][ T5946] usb 4-1: SerialNumber: syz [ 604.004591][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 604.010382][ T5946] usb 4-1: config 0 descriptor?? [ 604.015515][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 604.022967][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 604.800844][ T9782] overlayfs: failed to resolve './bus': -2 [ 605.091219][ T61] Bluetooth: hci0: command tx timeout [ 606.412067][ T61] Bluetooth: hci2: command tx timeout [ 607.130281][ T61] Bluetooth: hci0: command tx timeout [ 608.979345][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 608.979488][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 608.983261][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 609.793576][ T5806] Bluetooth: hci0: command tx timeout [ 609.793624][ T61] Bluetooth: hci2: command tx timeout [ 611.843497][ T61] Bluetooth: hci2: command tx timeout [ 613.475428][ T5919] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 613.923579][ T61] Bluetooth: hci2: command tx timeout [ 624.329101][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.329141][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.354589][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 625.545002][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 625.598723][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 625.679446][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 626.046290][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 629.193396][ T5806] Bluetooth: hci5: command tx timeout [ 631.209277][ T5806] Bluetooth: hci5: command tx timeout [ 631.513415][ T5919] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 632.123164][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 632.123205][ T9841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.929'. [ 633.433691][ T9750] chnl_net:caif_netlink_parms(): no params data found [ 634.043082][ T5806] Bluetooth: hci5: command tx timeout [ 636.329902][ T5806] Bluetooth: hci5: command tx timeout [ 639.512000][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 639.512099][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 639.514349][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 642.211415][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 642.238199][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 642.239478][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 642.292326][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 642.398614][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 644.724020][ T61] Bluetooth: hci3: command tx timeout [ 646.803451][ T61] Bluetooth: hci3: command tx timeout [ 647.675054][ T9771] chnl_net:caif_netlink_parms(): no params data found [ 648.893534][ T61] Bluetooth: hci3: command tx timeout [ 650.964807][ T61] Bluetooth: hci3: command tx timeout [ 654.106831][ T9912] ptrace attach of ""[9913] was attempted by "./syz-executor exec"[9912] [ 656.363473][ T6069] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 656.563548][ T6069] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.563574][ T6069] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 656.565386][ T6069] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 656.565412][ T6069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 656.565431][ T6069] usb 3-1: SerialNumber: syz [ 658.234560][ T6069] usb 3-1: 0:2 : does not exist [ 658.234664][ T6069] usb 3-1: unit 5 not found! [ 658.262119][ T6069] usb 3-1: USB disconnect, device number 37 [ 658.736876][ T9915] udevd[9915]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 661.181384][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 661.257392][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 661.259830][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 661.279529][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 661.280393][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 661.829530][ T9750] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.943504][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.943758][ T9750] bridge_slave_0: entered allmulticast mode [ 661.954231][ T9750] bridge_slave_0: entered promiscuous mode [ 661.999468][ T9771] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 663.368344][ T5806] Bluetooth: hci4: command tx timeout [ 664.233696][ T9939] ptrace attach of "./syz-executor exec"[9940] was attempted by "./syz-executor exec"[9939] [ 664.981341][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 665.001531][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 665.007587][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 665.929889][ T5809] Bluetooth: hci4: command tx timeout [ 665.962609][ T5809] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 666.437031][ T5809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 668.007106][ T5809] Bluetooth: hci6: command 0x0406 tx timeout [ 668.009606][ T5809] Bluetooth: hci4: command tx timeout [ 668.494728][ T9830] chnl_net:caif_netlink_parms(): no params data found [ 669.292969][ T5809] Bluetooth: hci7: command tx timeout [ 670.083444][ T5809] Bluetooth: hci4: command tx timeout [ 671.589342][ T61] Bluetooth: hci7: command tx timeout [ 673.613558][ T5809] Bluetooth: hci7: command tx timeout [ 675.757744][ T61] Bluetooth: hci7: command tx timeout [ 683.024551][ T9830] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 683.842896][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 684.133482][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 684.140665][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 684.157559][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 684.158360][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 685.793457][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.793555][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.779016][ T9873] chnl_net:caif_netlink_parms(): no params data found [ 687.048550][ T5809] Bluetooth: hci0: command tx timeout [ 689.133304][ T61] Bluetooth: hci0: command tx timeout [ 691.411950][ T61] Bluetooth: hci0: command tx timeout [ 691.535918][T10025] Device name cannot be null; rc = [-22] [ 692.871210][ T9926] chnl_net:caif_netlink_parms(): no params data found [ 693.231044][ T9943] chnl_net:caif_netlink_parms(): no params data found [ 693.443535][ T61] Bluetooth: hci0: command tx timeout [ 694.252951][ T5960] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 695.409096][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.409128][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.409149][ T5960] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 695.409191][ T5960] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 695.409212][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.503754][ T5960] usb 3-1: config 0 descriptor?? [ 697.923496][ T5960] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 698.035543][ T5960] usb 3-1: USB disconnect, device number 38 [ 700.663083][T10051] fido_id[10051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 704.746881][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 704.751656][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 704.752842][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 704.781774][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 704.783055][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 705.215513][T10074] Device name cannot be null; rc = [-22] [ 707.469447][ T61] Bluetooth: hci2: command tx timeout [ 709.533598][ T61] Bluetooth: hci2: command tx timeout [ 710.729407][ T5994] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 711.120568][ T5994] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.120595][ T5994] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 711.122050][ T5994] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 711.122075][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 711.122094][ T5994] usb 3-1: SerialNumber: syz [ 711.603586][ T61] Bluetooth: hci2: command tx timeout [ 711.608484][ T5994] usb 3-1: 0:2 : does not exist [ 711.893785][ T5994] usb 3-1: USB disconnect, device number 39 [ 711.988688][T10103] udevd[10103]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.683370][ T61] Bluetooth: hci2: command tx timeout [ 715.625554][ T9926] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.625673][ T9926] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.625893][ T9926] bridge_slave_0: entered allmulticast mode [ 715.628442][ T9926] bridge_slave_0: entered promiscuous mode [ 715.670585][ T9943] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.670709][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.670921][ T9943] bridge_slave_0: entered allmulticast mode [ 715.711226][ T9943] bridge_slave_0: entered promiscuous mode [ 716.071597][ T9926] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.071743][ T9926] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.071950][ T9926] bridge_slave_1: entered allmulticast mode [ 716.114545][ T9926] bridge_slave_1: entered promiscuous mode [ 716.116619][ T9943] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.116748][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.116944][ T9943] bridge_slave_1: entered allmulticast mode [ 716.120590][ T9943] bridge_slave_1: entered promiscuous mode [ 718.777883][T10133] Device name cannot be null; rc = [-22] [ 720.962757][ T9926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.988192][ T9943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.182990][ T9943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.164437][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 723.217141][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 723.218356][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 723.219929][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 723.220923][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 725.409266][ T61] Bluetooth: hci3: command tx timeout [ 726.863656][ T6069] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 727.015705][ T6069] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.015730][ T6069] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 727.017335][ T6069] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 727.017362][ T6069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 727.017381][ T6069] usb 3-1: SerialNumber: syz [ 727.416808][ T6069] usb 3-1: 0:2 : does not exist [ 727.533346][ T6069] usb 3-1: USB disconnect, device number 40 [ 727.602590][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 727.613366][ T5806] Bluetooth: hci3: command tx timeout [ 727.695918][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 727.719768][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 727.749833][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 727.751271][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 728.336754][T10148] udevd[10148]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 729.697537][ T5809] Bluetooth: hci3: command tx timeout [ 729.843469][ T5809] Bluetooth: hci5: command tx timeout [ 731.773476][ T5809] Bluetooth: hci3: command tx timeout [ 732.863682][ T5809] Bluetooth: hci5: command tx timeout [ 734.883578][ T5809] Bluetooth: hci5: command tx timeout [ 736.963455][ T5809] Bluetooth: hci5: command tx timeout [ 742.706147][ T9986] chnl_net:caif_netlink_parms(): no params data found [ 744.466418][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 744.469511][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 744.480689][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 744.489793][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 744.509111][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 745.182638][T10067] chnl_net:caif_netlink_parms(): no params data found [ 745.803363][ T5879] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 746.245874][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.245900][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 746.248864][ T5879] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 746.248891][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.248910][ T5879] usb 3-1: Product: syz [ 746.248923][ T5879] usb 3-1: Manufacturer: syz [ 746.248936][ T5879] usb 3-1: SerialNumber: syz [ 746.673586][ T61] Bluetooth: hci4: command tx timeout [ 747.020981][ T5879] usb 3-1: cannot find UAC_HEADER [ 747.209501][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.209608][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.267892][ T5879] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 747.312492][ T5879] usb 3-1: USB disconnect, device number 41 [ 747.544718][T10195] udevd[10195]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.723324][ T61] Bluetooth: hci4: command tx timeout [ 750.803338][ T61] Bluetooth: hci4: command tx timeout [ 751.233370][ T5994] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 751.398375][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.398409][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.398430][ T5994] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 751.398472][ T5994] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 751.398494][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.994389][ T5994] usb 3-1: config 0 descriptor?? [ 752.886672][ T61] Bluetooth: hci4: command tx timeout [ 753.147177][ T5994] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 753.163452][ T5994] usb 3-1: USB disconnect, device number 42 [ 754.010880][T10067] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.011078][T10067] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.011363][T10067] bridge_slave_0: entered allmulticast mode [ 754.050114][T10214] fido_id[10214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 754.054459][T10067] bridge_slave_0: entered promiscuous mode [ 754.157482][T10147] chnl_net:caif_netlink_parms(): no params data found [ 754.192589][T10067] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.192738][T10067] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.193003][T10067] bridge_slave_1: entered allmulticast mode [ 754.201405][T10067] bridge_slave_1: entered promiscuous mode [ 759.978013][T10067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.297519][T10067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.793416][ T5879] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 761.484516][ T5879] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 761.484544][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.485718][ T5879] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 761.485743][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 761.485761][ T5879] usb 3-1: SerialNumber: syz [ 761.983576][ T5879] usb 3-1: 0:2 : does not exist [ 761.983667][ T5879] usb 3-1: unit 5 not found! [ 762.024161][ T5879] usb 3-1: USB disconnect, device number 43 [ 762.057282][T10167] chnl_net:caif_netlink_parms(): no params data found [ 762.136756][T10231] udevd[10231]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 762.520813][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 762.525654][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 762.553621][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 762.568650][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 762.569405][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 764.763394][ T5809] Bluetooth: hci0: command tx timeout [ 767.371045][ T5809] Bluetooth: hci0: command tx timeout [ 767.665460][T10147] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.665702][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.665979][T10147] bridge_slave_0: entered allmulticast mode [ 767.718353][T10147] bridge_slave_0: entered promiscuous mode [ 769.225141][T10147] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.225271][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.225569][T10147] bridge_slave_1: entered allmulticast mode [ 769.353444][T10147] bridge_slave_1: entered promiscuous mode [ 769.687560][ T5809] Bluetooth: hci0: command tx timeout [ 771.866359][ T61] Bluetooth: hci0: command tx timeout [ 774.438802][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 774.438828][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 774.438895][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 781.927611][T10147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.252867][T10167] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.673465][T10167] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.673756][T10167] bridge_slave_0: entered allmulticast mode [ 784.676474][T10167] bridge_slave_0: entered promiscuous mode [ 784.969145][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 784.990774][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 785.002465][T10191] chnl_net:caif_netlink_parms(): no params data found [ 785.034947][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 785.200448][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 785.201274][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 787.368603][ T61] Bluetooth: hci2: command tx timeout [ 788.017216][ T5809] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 788.033671][ T5809] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 788.035856][ T5809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 788.054360][ T5809] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 788.055051][ T5809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 789.443438][ T5809] Bluetooth: hci2: command tx timeout [ 790.239546][ T5809] Bluetooth: hci7: command tx timeout [ 791.754969][ T5809] Bluetooth: hci2: command tx timeout [ 792.243486][ T5809] Bluetooth: hci7: command tx timeout [ 793.996423][ T5809] Bluetooth: hci2: command tx timeout [ 794.333517][ T5809] Bluetooth: hci7: command tx timeout [ 794.563608][ T38] INFO: task syz.3.915:9770 blocked for more than 143 seconds. [ 794.563640][ T38] Tainted: G L syzkaller #0 [ 794.563652][ T38] Blocked by coredump. [ 794.563658][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 794.563667][ T38] task:syz.3.915 state:D stack:24792 pid:9770 tgid:9769 ppid:5814 task_flags:0x40054c flags:0x00080003 [ 794.563725][ T38] Call Trace: [ 794.563735][ T38] [ 794.563750][ T38] __schedule+0x145f/0x5070 [ 794.563825][ T38] ? __pfx___schedule+0x10/0x10 [ 794.563869][ T38] rt_mutex_schedule+0x77/0xf0 [ 794.563898][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 794.563923][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 794.563970][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 794.563997][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 794.564021][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 794.564057][ T38] ? rcu_barrier+0x4c/0x570 [ 794.564090][ T38] ? rcu_barrier+0x4c/0x570 [ 794.564117][ T38] ? rcu_barrier+0x4c/0x570 [ 794.564135][ T38] mutex_lock_nested+0x16a/0x1d0 [ 794.564156][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 794.564182][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 794.564207][ T38] rcu_barrier+0x4c/0x570 [ 794.564230][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 794.564250][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 794.564272][ T38] netdev_run_todo+0x327/0xea0 [ 794.564302][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 794.564323][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 794.564347][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 794.564382][ T38] ? netdev_state_change+0x1ca/0x220 [ 794.564406][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 794.564429][ T38] tun_chr_close+0x13f/0x1c0 [ 794.564453][ T38] __fput+0x45b/0xa80 [ 794.564488][ T38] task_work_run+0x1d4/0x260 [ 794.564519][ T38] ? __pfx_task_work_run+0x10/0x10 [ 794.564545][ T38] ? do_exit+0x68f/0x22f0 [ 794.564571][ T38] ? do_exit+0x68f/0x22f0 [ 794.564601][ T38] do_exit+0x694/0x22f0 [ 794.564629][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 794.564649][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 794.564669][ T38] ? __pfx_do_exit+0x10/0x10 [ 794.564692][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 794.564715][ T38] ? reacquire_held_locks+0x104/0x190 [ 794.564742][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 794.564779][ T38] do_group_exit+0x21c/0x2d0 [ 794.564805][ T38] ? rt_spin_unlock+0x161/0x200 [ 794.564831][ T38] get_signal+0x125d/0x1310 [ 794.564877][ T38] arch_do_signal_or_restart+0x9a/0x7a0 [ 794.564904][ T38] ? __fget_files+0x2a/0x420 [ 794.564924][ T38] ? __fget_files+0x3a6/0x420 [ 794.564945][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 794.564980][ T38] ? ksys_read+0x230/0x260 [ 794.565016][ T38] exit_to_user_mode_loop+0x87/0x4e0 [ 794.565041][ T38] ? rcu_is_watching+0x15/0xb0 [ 794.565064][ T38] do_syscall_64+0x2b7/0xf80 [ 794.565090][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.565109][ T38] ? trace_irq_disable+0x37/0x100 [ 794.565129][ T38] ? clear_bhb_loop+0x60/0xb0 [ 794.565153][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.565172][ T38] RIP: 0033:0x7f066eeff749 [ 794.565196][ T38] RSP: 002b:00007f066d15e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 794.565217][ T38] RAX: 0000000000018ff8 RBX: 00007f066f155fa0 RCX: 00007f066eeff749 [ 794.565232][ T38] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000006 [ 794.565244][ T38] RBP: 00007f066ef83f91 R08: 0000000000000000 R09: 0000000000000000 [ 794.565257][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.565269][ T38] R13: 00007f066f156038 R14: 00007f066f155fa0 R15: 00007fff920cc968 [ 794.565304][ T38] [ 794.565355][ T38] [ 794.565355][ T38] Showing all locks held in the system: [ 794.565366][ T38] 4 locks held by rcuc/0/20: [ 794.565379][ T38] 3 locks held by rcuc/1/28: [ 794.565391][ T38] 1 lock held by khungtaskd/38: [ 794.565402][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 794.565470][ T38] 2 locks held by kworker/u8:8/1120: [ 794.565481][ T38] #0: ffff8881452aa938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 794.565528][ T38] #1: ffffc900049efbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 794.565576][ T38] 4 locks held by kworker/u8:11/1824: [ 794.565599][ T38] 2 locks held by kworker/u8:14/3461: [ 794.565609][ T38] #0: ffff8881452aa938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 794.565656][ T38] #1: ffffc9000cd2fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 794.565703][ T38] 3 locks held by kworker/u8:18/3862: [ 794.565714][ T38] #0: ffff88814d7a4938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 794.565759][ T38] #1: ffffc9000d69fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 794.565806][ T38] #2: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 794.565858][ T38] 1 lock held by udevd/5173: [ 794.565870][ T38] 2 locks held by getty/5564: [ 794.565880][ T38] #0: ffff88814e0ef0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 794.565928][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 794.565973][ T38] 1 lock held by syz-executor/5792: [ 794.565985][ T38] 1 lock held by syz-executor/5815: [ 794.565995][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 794.566045][ T38] 3 locks held by kworker/u8:22/6173: [ 794.566056][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 794.566113][ T38] #1: ffffc90005bdfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 794.566159][ T38] #2: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 794.566209][ T38] 3 locks held by kworker/0:14/8009: [ 794.566221][ T38] 7 locks held by syz-executor/9328: [ 794.566231][ T38] #0: ffff888034702480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 794.566283][ T38] #1: ffff88803325d478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 794.566331][ T38] #2: ffff888026f52a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 794.566380][ T38] #3: ffffffff8e12c6f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 794.566428][ T38] #4: ffff88805bace0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 794.566476][ T38] #5: ffff88805bacc300 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 794.566528][ T38] #6: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 794.566574][ T38] 1 lock held by syz-executor/9750: [ 794.566584][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 794.566628][ T38] 1 lock held by syz.3.915/9770: [ 794.566639][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 794.566684][ T38] 1 lock held by syz-executor/9771: [ 794.566694][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 794.566740][ T38] 1 lock held by syz-executor/9830: [ 794.566750][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 794.566795][ T38] 1 lock held by syz-executor/9873: [ 794.566806][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 794.566851][ T38] 1 lock held by syz-executor/9926: [ 794.566862][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 794.566907][ T38] 1 lock held by syz-executor/9943: [ 794.566917][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 794.566962][ T38] 1 lock held by syz-executor/9986: [ 794.566973][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 794.567019][ T38] 1 lock held by syz-executor/10067: [ 794.567029][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 794.567075][ T38] 1 lock held by syz-executor/10147: [ 794.567093][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 794.567138][ T38] 1 lock held by syz-executor/10167: [ 794.567148][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 794.567195][ T38] 2 locks held by syz-executor/10191: [ 794.567206][ T38] #0: ffffffff8e021d88 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 794.567258][ T38] #1: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 794.567303][ T38] 1 lock held by syz-executor/10234: [ 794.567314][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37d/0x1df0 [ 794.567363][ T38] 6 locks held by kworker/u8:5/10264: [ 794.567374][ T38] 2 locks held by syz-executor/10284: [ 794.567385][ T38] #0: ffffffff8e898720 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 794.567428][ T38] #1: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 794.567476][ T38] 1 lock held by syz-executor/10293: [ 794.567486][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 794.567532][ T38] 1 lock held by vhost-10318/10319: [ 794.567543][ T38] [ 794.567548][ T38] ============================================= [ 794.567548][ T38] [ 794.567557][ T38] NMI backtrace for cpu 1 [ 794.567585][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 794.567611][ T38] Tainted: [L]=SOFTLOCKUP [ 794.567618][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.567629][ T38] Call Trace: [ 794.567637][ T38] [ 794.567645][ T38] dump_stack_lvl+0xe8/0x150 [ 794.567671][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 794.567695][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 794.567718][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 794.567744][ T38] sys_info+0x135/0x170 [ 794.567764][ T38] watchdog+0xf95/0xfe0 [ 794.567790][ T38] ? watchdog+0x20a/0xfe0 [ 794.567819][ T38] kthread+0x711/0x8a0 [ 794.567846][ T38] ? __pfx_watchdog+0x10/0x10 [ 794.567866][ T38] ? __pfx_kthread+0x10/0x10 [ 794.567888][ T38] ? rt_spin_unlock+0x150/0x200 [ 794.567916][ T38] ? rt_spin_unlock+0x161/0x200 [ 794.567938][ T38] ? __pfx_kthread+0x10/0x10 [ 794.567963][ T38] ret_from_fork+0x510/0xa50 [ 794.567986][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 794.568005][ T38] ? __switch_to+0xc9e/0x1480 [ 794.568035][ T38] ? __pfx_kthread+0x10/0x10 [ 794.568060][ T38] ret_from_fork_asm+0x1a/0x30 [ 794.568109][ T38] [ 794.568117][ T38] Sending NMI from CPU 1 to CPUs 0: [ 794.568148][ C0] NMI backtrace for cpu 0 [ 794.568165][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 794.568188][ C0] Tainted: [L]=SOFTLOCKUP [ 794.568195][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.568206][ C0] RIP: 0010:deref_stack_reg+0x9e/0x230 [ 794.568230][ C0] Code: 8b 04 24 48 be 00 00 00 00 00 fc ff df 4c 89 74 24 08 4d 8b 77 10 4c 89 fd 48 c1 ed 03 0f b6 44 35 00 84 c0 0f 85 3c 01 00 00 <41> 83 3f 00 0f 95 c0 4c 39 c3 0f 96 c1 20 c1 4d 39 c6 0f 97 c0 20 [ 794.568246][ C0] RSP: 0018:ffffc90000196940 EFLAGS: 00000246 [ 794.568262][ C0] RAX: 0000000000000000 RBX: ffffc90000190000 RCX: 0000000000000000 [ 794.568274][ C0] RDX: ffffc90000196aa8 RSI: dffffc0000000000 RDI: ffffc90000196a68 [ 794.568288][ C0] RBP: 1ffff92000032d4d R08: ffffc90000196df8 R09: 0000000000000000 [ 794.568301][ C0] R10: ffffc90000196ab8 R11: fffff52000032d59 R12: 1ffff92000032d4e [ 794.568314][ C0] R13: 1ffff92000032d4f R14: ffffc90000198000 R15: ffffc90000196a68 [ 794.568328][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 794.568343][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.568356][ C0] CR2: 000000110c3afc57 CR3: 0000000027ecc000 CR4: 00000000003526f0 [ 794.568372][ C0] Call Trace: [ 794.568378][ C0] [ 794.568389][ C0] unwind_next_frame+0x18cc/0x23d0 [ 794.568415][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 794.568436][ C0] ? __kasan_slab_free+0x5c/0x80 [ 794.568461][ C0] ? skb_release_data+0x62d/0x7c0 [ 794.568481][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 794.568503][ C0] arch_stack_walk+0x11c/0x150 [ 794.568526][ C0] ? kmem_cache_free+0x18f/0x8d0 [ 794.568554][ C0] stack_trace_save+0x9c/0xe0 [ 794.568573][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 794.568592][ C0] ? __asan_memcpy+0x40/0x70 [ 794.568616][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 794.568639][ C0] kasan_save_track+0x3e/0x80 [ 794.568660][ C0] ? kasan_save_track+0x3e/0x80 [ 794.568681][ C0] ? kasan_save_free_info+0x46/0x50 [ 794.568699][ C0] ? __kasan_slab_free+0x5c/0x80 [ 794.568750][ C0] kasan_save_free_info+0x46/0x50 [ 794.568769][ C0] __kasan_slab_free+0x5c/0x80 [ 794.568792][ C0] kmem_cache_free+0x18f/0x8d0 [ 794.568815][ C0] ? skb_release_data+0x62d/0x7c0 [ 794.568844][ C0] skb_release_data+0x62d/0x7c0 [ 794.568869][ C0] consume_skb+0x9e/0xf0 [ 794.568888][ C0] nft_synproxy_eval_v6+0x376/0x560 [ 794.568911][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 794.568931][ C0] ? nf_ip_checksum+0x13c/0x510 [ 794.568951][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 794.568973][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 794.569001][ C0] nft_do_chain+0x40c/0x1920 [ 794.569020][ C0] ? nft_do_chain+0x16a1/0x1920 [ 794.569042][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 794.569056][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 794.569096][ C0] nft_do_chain_inet+0x25d/0x340 [ 794.569114][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 794.569130][ C0] ? nf_conntrack_in+0x1a1/0x15d0 [ 794.569152][ C0] ? NF_HOOK+0x9a/0x3a0 [ 794.569168][ C0] ? NF_HOOK+0x9a/0x3a0 [ 794.569183][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 794.569201][ C0] nf_hook_slow+0xc5/0x220 [ 794.569226][ C0] NF_HOOK+0x206/0x3a0 [ 794.569242][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 794.569258][ C0] ? NF_HOOK+0x9a/0x3a0 [ 794.569273][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 794.569289][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 794.569312][ C0] ip6_input+0x16a/0x270 [ 794.569326][ C0] ? ip6_input+0x23/0x270 [ 794.569343][ C0] NF_HOOK+0x30c/0x3a0 [ 794.569357][ C0] ? skb_orphan+0xaf/0xd0 [ 794.569373][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 794.569397][ C0] ? NF_HOOK+0x9a/0x3a0 [ 794.569411][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 794.569427][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 794.569456][ C0] ? process_backlog+0x272/0x8f0 [ 794.569474][ C0] __netif_receive_skb+0xd3/0x380 [ 794.569493][ C0] ? process_backlog+0x272/0x8f0 [ 794.569510][ C0] process_backlog+0x315/0x8f0 [ 794.569534][ C0] __napi_poll+0xae/0x520 [ 794.569553][ C0] net_rx_action+0x64a/0xdb0 [ 794.569579][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 794.569595][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 794.569625][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 794.569659][ C0] handle_softirqs+0x1df/0x650 [ 794.569685][ C0] __local_bh_enable_ip+0x171/0x2c0 [ 794.569703][ C0] ? rcu_cpu_kthread+0x211/0x1af0 [ 794.569727][ C0] rcu_cpu_kthread+0xbec/0x1af0 [ 794.569754][ C0] ? rcu_cpu_kthread+0x211/0x1af0 [ 794.569785][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 794.569810][ C0] ? preempt_schedule_common+0x83/0xd0 [ 794.569839][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 794.569862][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 794.569881][ C0] smpboot_thread_fn+0x542/0xa60 [ 794.569902][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 794.569927][ C0] kthread+0x711/0x8a0 [ 794.569952][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 794.569971][ C0] ? __pfx_kthread+0x10/0x10 [ 794.569992][ C0] ? rt_spin_unlock+0x150/0x200 [ 794.570016][ C0] ? rt_spin_unlock+0x161/0x200 [ 794.570035][ C0] ? __pfx_kthread+0x10/0x10 [ 794.570058][ C0] ret_from_fork+0x510/0xa50 [ 794.570077][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 794.570094][ C0] ? __switch_to+0xc9e/0x1480 [ 794.570120][ C0] ? __pfx_kthread+0x10/0x10 [ 794.570142][ C0] ret_from_fork_asm+0x1a/0x30 [ 794.570176][ C0] [ 794.571151][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 794.571172][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 794.571199][ T38] Tainted: [L]=SOFTLOCKUP [ 794.571206][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.571216][ T38] Call Trace: [ 794.571224][ T38] [ 794.571232][ T38] vpanic+0x1e0/0x670 [ 794.571262][ T38] panic+0xb9/0xc0 [ 794.571285][ T38] ? __pfx_panic+0x10/0x10 [ 794.571319][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 794.571348][ T38] watchdog+0xfdf/0xfe0 [ 794.571374][ T38] ? watchdog+0x20a/0xfe0 [ 794.571403][ T38] kthread+0x711/0x8a0 [ 794.571430][ T38] ? __pfx_watchdog+0x10/0x10 [ 794.571449][ T38] ? __pfx_kthread+0x10/0x10 [ 794.571472][ T38] ? rt_spin_unlock+0x150/0x200 [ 794.571499][ T38] ? rt_spin_unlock+0x161/0x200 [ 794.571521][ T38] ? __pfx_kthread+0x10/0x10 [ 794.571546][ T38] ret_from_fork+0x510/0xa50 [ 794.571570][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 794.571588][ T38] ? __switch_to+0xc9e/0x1480 [ 794.571619][ T38] ? __pfx_kthread+0x10/0x10 [ 794.571644][ T38] ret_from_fork_asm+0x1a/0x30 [ 794.571687][ T38] [ 794.572066][ T38] Kernel Offset: disabled