last executing test programs: 14m35.35665729s ago: executing program 1 (id=9377): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000900)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xe, 0x4) 14m34.364889452s ago: executing program 1 (id=9396): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x0) fcntl$addseals(r0, 0x409, 0x7) 14m34.217382477s ago: executing program 1 (id=9400): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x26, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) 14m34.040284696s ago: executing program 1 (id=9402): unshare(0x2c020400) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f00000002c0)={0x2d, 0x0, 0x8000}, 0xc) 14m33.864783379s ago: executing program 1 (id=9406): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f00000001c0)) 14m33.796163109s ago: executing program 1 (id=9407): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYRES64=r0], 0x38}}, 0x0) 14m18.577979934s ago: executing program 32 (id=9407): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYRES64=r0], 0x38}}, 0x0) 7m6.942076009s ago: executing program 0 (id=16679): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0xab, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x48, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x1, 0x0, 0x4, {0x8, 0xb, 0x0, 0x2, 0x1, 0x5, 0x20, 0xd}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x0, 0x12, 0xe}, [@effect_unit={0x9, 0x24, 0x7, 0x4, 0x1, 0x3, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x1, 0x6, 0xc, "cd2b554b1415df"}, @as_header={0x10, 0x24, 0x1, 0x1, 0x3, 0x3, 0x1, 0x9, 0x300, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x9, 0x7f, {0x8, 0x25, 0x1, 0x1, 0x33, 0xd0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x81, 0x1, 0x0, 0xc}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x10, 0xd, 0x8, {0x8, 0x25, 0x1, 0x0, 0x33, 0x1, 0x40}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 7m3.644113283s ago: executing program 0 (id=16737): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x54, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5a10011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf01de50151803c474719193467201bd7c0b9cad1d390aec6d", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 7m3.490018451s ago: executing program 0 (id=16740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) 7m2.938612263s ago: executing program 0 (id=16749): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc0) 7m2.746423681s ago: executing program 0 (id=16751): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7m2.551923838s ago: executing program 0 (id=16754): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) 6m47.451994551s ago: executing program 33 (id=16754): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) 3m0.844641866s ago: executing program 2 (id=19728): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_buf(r0, 0x0, 0x26, 0x0, 0x0) 3m0.620855274s ago: executing program 2 (id=19731): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) openat$cgroup(r0, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 3m0.286653867s ago: executing program 2 (id=19736): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000300)={0x1, 0x2, &(0x7f0000000380)=[r2, 0x0], &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x2}) 3m0.165170658s ago: executing program 2 (id=19738): mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 2m59.951648978s ago: executing program 2 (id=19741): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m57.812677412s ago: executing program 2 (id=19759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m57.201668282s ago: executing program 34 (id=19759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m34.510128941s ago: executing program 4 (id=19945): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) 2m33.991233695s ago: executing program 4 (id=19947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000170a010300000000000000000200000a090001"], 0x20}, 0x1, 0x0, 0x0, 0x44004}, 0x8094) 2m33.679332719s ago: executing program 4 (id=19951): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 2m31.590912502s ago: executing program 4 (id=19966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m30.034694101s ago: executing program 4 (id=19982): unshare(0x600) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) copy_file_range(r1, &(0x7f00000008c0)=0x4, r0, &(0x7f0000000100), 0x8, 0x0) 2m29.7721052s ago: executing program 4 (id=19983): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m14.356395383s ago: executing program 35 (id=19983): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m11.533185625s ago: executing program 6 (id=20062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000001600)=ANY=[@ANYBLOB="14000000100001"], 0x334}, 0x1, 0x0, 0x0, 0x20000840}, 0x24000090) 2m10.428348826s ago: executing program 6 (id=20068): sched_setscheduler(0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m7.01821397s ago: executing program 6 (id=20077): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b7}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m6.314214412s ago: executing program 6 (id=20081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4e328000) ioprio_get$pid(0x2, r0) 2m5.332375622s ago: executing program 6 (id=20083): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x67, 0x1, 0x4, 0x5, 0x7f, 0x81}) 2m4.448957238s ago: executing program 3 (id=20085): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa000000000000711016000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m3.979975298s ago: executing program 6 (id=20087): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x8080000, 0xeeee0000, 0xc, 0x1, 0x81, 0x0, 0x0, 0x7}, {0x10000, 0xdddd1000, 0xc, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x9, 0xfc}, {0x10000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x1, 0x8}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xa, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x9000, 0x200000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x100000, 0x100000, 0x24ce77a1ea406df9, 0x8, 0x41, 0xfb, 0x7, 0x5, 0x1a, 0x2, 0x0, 0x4}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x14, 0x8, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {0x0, 0x2}, 0x9df9ffdf, 0x0, 0x0, 0x21, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) 2m2.507634119s ago: executing program 7 (id=20089): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m1.409477978s ago: executing program 3 (id=20091): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 1m59.155611423s ago: executing program 7 (id=20096): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 1m59.093044451s ago: executing program 3 (id=20098): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x53, 0x0, &(0x7f0000000180)="25c09437cd10e5f71a00a6d494b46a952a87d3b949d5d7b4d3d180947099c8ce9357d5b18b71c3ef77f7a87d8cec8f1e64f2b661dee657ec0c2d6349f3b7f1000114976a12f3ae3bb49f0263d734dac67f2fc1", 0x0, 0x100, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 1m58.887997818s ago: executing program 7 (id=20100): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x3, 0x0, 0x0, {0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x0, 0x5, 0x8}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfffc}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}, @NL80211_ATTR_BSS_SELECT={0x18, 0xe3, 0x0, 0x1, {0x14, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x3}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000060}, 0x40800) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}, 0x1, 0x0, 0x0, 0xf9612d57cd99e519}, 0x0) 1m58.740071347s ago: executing program 3 (id=20101): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 1m56.655173666s ago: executing program 3 (id=20110): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m56.653578609s ago: executing program 7 (id=20111): openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x80) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0xa, 0x4) 1m55.782344158s ago: executing program 3 (id=20119): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r1 = eventfd2(0x800, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x20) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x1, 0xb, r0, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r1}]) 1m55.772724615s ago: executing program 7 (id=20120): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 1m55.121333762s ago: executing program 7 (id=20126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m48.822393038s ago: executing program 36 (id=20087): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x8080000, 0xeeee0000, 0xc, 0x1, 0x81, 0x0, 0x0, 0x7}, {0x10000, 0xdddd1000, 0xc, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x9, 0xfc}, {0x10000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x1, 0x8}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xa, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x9000, 0x200000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x100000, 0x100000, 0x24ce77a1ea406df9, 0x8, 0x41, 0xfb, 0x7, 0x5, 0x1a, 0x2, 0x0, 0x4}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x14, 0x8, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {0x0, 0x2}, 0x9df9ffdf, 0x0, 0x0, 0x21, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) 1m40.687397677s ago: executing program 37 (id=20119): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r1 = eventfd2(0x800, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x20) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x1, 0xb, r0, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r1}]) 1m39.082609873s ago: executing program 38 (id=20126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 533.576558ms ago: executing program 5 (id=20906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) 394.533705ms ago: executing program 5 (id=20907): mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x7ff, @vifc_lcl_addr=@local, @broadcast}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 268.187829ms ago: executing program 5 (id=20908): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) sched_getattr(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 205.330059ms ago: executing program 5 (id=20909): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0xc800) 107.554043ms ago: executing program 5 (id=20910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0x7}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081139000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071106f00000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xff00}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r3, 0x0, 0x0}, 0x10) 0s ago: executing program 5 (id=20911): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x40) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc881, 0xc000, 0x0, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x71e7, 0x7721, 0x33, 0x0, 0x0) kernel console output (not intermixed with test programs): 1216.921961][T22170] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1216.921987][T22170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.159921][T10999] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1217.817943][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1217.818019][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1217.818092][T22170] usb 3-1: USB disconnect, device number 84 [ 1217.984316][T11030] program syz.3.17340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1218.303290][T11041] program syz.4.17344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1218.998175][T11061] input: syz0 as /devices/virtual/input/input63 [ 1219.741661][T11086] netlink: 64 bytes leftover after parsing attributes in process `syz.3.17361'. [ 1220.764299][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17373'. [ 1220.955037][T11122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17375'. [ 1220.955086][T11122] netlink: 'syz.4.17375': attribute type 2 has an invalid length. [ 1221.885799][ T8195] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1222.045660][ T8195] usb 7-1: Using ep0 maxpacket: 32 [ 1222.048042][ T8195] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1222.048072][ T8195] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1222.048095][ T8195] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1222.048149][ T8195] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1222.048173][ T8195] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1222.048197][ T8195] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1222.048220][ T8195] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1222.048242][ T8195] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1222.048285][ T8195] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1222.048310][ T8195] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.093225][ T8195] usb 7-1: config 0 descriptor?? [ 1222.429344][ T8195] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1222.916448][ T8622] usb 7-1: USB disconnect, device number 2 [ 1222.944260][ T8622] usblp0: removed [ 1223.580544][T10473] IPVS: starting estimator thread 0... [ 1223.645237][T11197] use of bytesused == 0 is deprecated and will be removed in the future, [ 1223.645258][T11197] use the actual size instead. [ 1223.664617][T11196] IPVS: using max 7 ests per chain, 16800 per kthread [ 1224.482042][ T7314] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.482096][ T7314] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.482138][ T7314] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.482178][ T7314] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.720586][T11229] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 1225.166514][T11246] GUP no longer grows the stack in syz.3.17416 (11246): 200000004000-200000005000 (200000001000) [ 1225.166553][T11246] CPU: 0 UID: 0 PID: 11246 Comm: syz.3.17416 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1225.166582][T11246] Tainted: [L]=SOFTLOCKUP [ 1225.166591][T11246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1225.166614][T11246] Call Trace: [ 1225.166624][T11246] [ 1225.166634][T11246] dump_stack_lvl+0xe8/0x150 [ 1225.166667][T11246] __get_user_pages+0x21cf/0x2570 [ 1225.166803][T11246] __gup_longterm_locked+0xdcf/0x1630 [ 1225.166869][T11246] ? process_vm_rw+0x626/0xba0 [ 1225.166902][T11246] pin_user_pages_remote+0xdc/0x130 [ 1225.166928][T11246] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 1225.166955][T11246] ? up_read+0x23/0x40 [ 1225.166978][T11246] ? mm_access+0x18d/0x2d0 [ 1225.167005][T11246] process_vm_rw+0x650/0xba0 [ 1225.167039][T11246] ? __pfx_process_vm_rw+0x10/0x10 [ 1225.167059][T11246] ? futex_wait+0x2a2/0x390 [ 1225.167114][T11246] ? __se_sys_mremap+0x1064/0x11d0 [ 1225.167260][T11246] ? rcu_is_watching+0x15/0xb0 [ 1225.167353][T11246] __x64_sys_process_vm_writev+0xe0/0x100 [ 1225.167396][T11246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.167423][T11246] do_syscall_64+0x15f/0xf80 [ 1225.167452][T11246] ? trace_irq_disable+0x3b/0x140 [ 1225.167481][T11246] ? clear_bhb_loop+0x40/0x90 [ 1225.167511][T11246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.167535][T11246] RIP: 0033:0x7f08ad92ce59 [ 1225.167558][T11246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.167577][T11246] RSP: 002b:00007f08abb7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 1225.167610][T11246] RAX: ffffffffffffffda RBX: 00007f08adba5fa0 RCX: 00007f08ad92ce59 [ 1225.167629][T11246] RDX: 000000000000002b RSI: 0000200000c22000 RDI: 00000000000001ec [ 1225.167643][T11246] RBP: 00007f08ad9c2d6f R08: 0000000000000001 R09: 0000000000000000 [ 1225.167659][T11246] R10: 0000200000c22fa0 R11: 0000000000000246 R12: 0000000000000000 [ 1225.167674][T11246] R13: 00007f08adba6038 R14: 00007f08adba5fa0 R15: 00007ffc92919538 [ 1225.167712][T11246] [ 1226.989897][T11312] program syz.3.17442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1231.415102][T11465] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17500'. [ 1231.785141][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17503'. [ 1232.168986][ T8622] hid-generic 0005:15C2:1012.0034: item fetching failed at offset 0/1 [ 1232.190305][ T8622] hid-generic 0005:15C2:1012.0034: probe with driver hid-generic failed with error -22 [ 1233.368460][T11532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1233.949672][T11550] netlink: 27 bytes leftover after parsing attributes in process `syz.2.17535'. [ 1234.323064][T11562] program syz.3.17541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1234.449434][ T8195] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1234.493400][ T37] audit: type=1326 audit(46809.873:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11565 comm="syz.3.17543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ad92ce59 code=0x7ffc0000 [ 1234.493719][ T37] audit: type=1326 audit(46809.873:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11565 comm="syz.3.17543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ad92ce59 code=0x7ffc0000 [ 1234.544655][ T37] audit: type=1326 audit(46809.913:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11565 comm="syz.3.17543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ad92ce59 code=0x7ffc0000 [ 1234.554906][ T37] audit: type=1326 audit(46809.933:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11565 comm="syz.3.17543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f08ad92ce59 code=0x7ffc0000 [ 1234.554972][ T37] audit: type=1326 audit(46809.933:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11565 comm="syz.3.17543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ad92ce59 code=0x7ffc0000 [ 1234.555032][ T37] audit: type=1326 audit(46809.933:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11565 comm="syz.3.17543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ad92ce59 code=0x7ffc0000 [ 1234.555083][ T37] audit: type=1326 audit(46809.933:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11565 comm="syz.3.17543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ad92ce59 code=0x7ffc0000 [ 1234.555134][ T37] audit: type=1326 audit(46809.933:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11565 comm="syz.3.17543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ad92ce59 code=0x7ffc0000 [ 1234.555184][ T37] audit: type=1326 audit(46809.933:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11565 comm="syz.3.17543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7f08ad92ce59 code=0x7ffc0000 [ 1234.555240][ T37] audit: type=1326 audit(46809.933:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11565 comm="syz.3.17543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ad92ce59 code=0x7ffc0000 [ 1234.630500][ T8195] usb 3-1: Using ep0 maxpacket: 32 [ 1234.782040][ T8195] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1234.782070][ T8195] usb 3-1: config 0 has no interface number 0 [ 1234.797046][ T8195] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1234.797080][ T8195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.797101][ T8195] usb 3-1: Product: syz [ 1234.797116][ T8195] usb 3-1: Manufacturer: syz [ 1234.797131][ T8195] usb 3-1: SerialNumber: syz [ 1234.863451][ T8195] usb 3-1: config 0 descriptor?? [ 1234.874501][ T8195] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1235.131781][ T8195] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1235.322398][ T8195] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1235.539563][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1235.540491][T10974] usb 3-1: USB disconnect, device number 85 [ 1235.618742][T10974] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1235.667618][T10974] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1235.683142][T10974] quatech2 3-1:0.51: device disconnected [ 1236.320311][T11599] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17558'. [ 1236.320344][T11599] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17558'. [ 1238.155267][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.543716][ T5631] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1240.543749][ T5631] CPU: 1 UID: 0 PID: 5631 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1240.543782][ T5631] Tainted: [L]=SOFTLOCKUP [ 1240.543791][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1240.543806][ T5631] Workqueue: hci2 hci_rx_work [ 1240.543853][ T5631] Call Trace: [ 1240.543862][ T5631] [ 1240.543872][ T5631] dump_stack_lvl+0xe8/0x150 [ 1240.543905][ T5631] sysfs_create_dir_ns+0x271/0x2a0 [ 1240.544080][ T5631] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1240.544108][ T5631] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1240.544147][ T5631] ? rt_spin_unlock+0x160/0x200 [ 1240.544174][ T5631] kobject_add_internal+0x631/0xd10 [ 1240.544218][ T5631] kobject_add+0x163/0x240 [ 1240.544256][ T5631] ? __pfx_kobject_add+0x10/0x10 [ 1240.544297][ T5631] ? get_device_parent+0x370/0x3a0 [ 1240.544330][ T5631] device_add+0x408/0xbb0 [ 1240.544365][ T5631] hci_conn_add_sysfs+0xd5/0x210 [ 1240.544398][ T5631] le_conn_complete_evt+0x10e6/0x16b0 [ 1240.544447][ T5631] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1240.544484][ T5631] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1240.544514][ T5631] ? lockdep_hardirqs_on+0x7a/0x110 [ 1240.544546][ T5631] ? skb_pull_data+0xfb/0x200 [ 1240.544586][ T5631] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1240.544623][ T5631] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1240.544665][ T5631] hci_event_packet+0x659/0xef0 [ 1240.544702][ T5631] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1240.544722][ T5631] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1240.544755][ T5631] ? __pfx_hci_event_packet+0x10/0x10 [ 1240.544784][ T5631] ? rt_spin_unlock+0x14f/0x200 [ 1240.544818][ T5631] ? hci_send_to_monitor+0xe2/0x590 [ 1240.544868][ T5631] hci_rx_work+0x3ee/0x1040 [ 1240.544906][ T5631] ? process_scheduled_works+0xa70/0x1860 [ 1240.544935][ T5631] process_scheduled_works+0xb5d/0x1860 [ 1240.544997][ T5631] ? __pfx_process_scheduled_works+0x10/0x10 [ 1240.545031][ T5631] ? assign_work+0x3d5/0x5e0 [ 1240.545063][ T5631] worker_thread+0xa53/0xfc0 [ 1240.545124][ T5631] kthread+0x388/0x470 [ 1240.545155][ T5631] ? __pfx_worker_thread+0x10/0x10 [ 1240.545178][ T5631] ? __pfx_kthread+0x10/0x10 [ 1240.545212][ T5631] ret_from_fork+0x514/0xb70 [ 1240.545243][ T5631] ? __pfx_ret_from_fork+0x10/0x10 [ 1240.545270][ T5631] ? __switch_to+0xc79/0x1410 [ 1240.545308][ T5631] ? __pfx_kthread+0x10/0x10 [ 1240.545341][ T5631] ret_from_fork_asm+0x1a/0x30 [ 1240.545391][ T5631] [ 1240.545454][ T5631] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1240.545499][ T5631] Bluetooth: hci2: failed to register connection device [ 1240.900778][T11748] input: syz0 as /devices/virtual/input/input66 [ 1241.761790][T11778] dummy0: entered promiscuous mode [ 1241.765827][T11777] dummy0: left promiscuous mode [ 1242.992388][T11808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1243.270779][ T2391] pvrusb2: request_firmware fatal error with code=-110 [ 1243.270800][ T2391] pvrusb2: Failure uploading firmware1 [ 1243.270811][ T2391] pvrusb2: Device initialization was not successful. [ 1243.270821][ T2391] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1243.270833][ T2391] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1243.270881][ T2391] pvrusb2: Failed to submit write-control URB status=-19 [ 1243.299258][ T36] pvrusb2: Device being rendered inoperable [ 1243.471718][ T2391] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1243.471748][ T2391] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1243.818215][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17663'. [ 1244.988496][T11877] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.17676'. [ 1245.422992][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17683'. [ 1245.562904][T11898] team0: entered allmulticast mode [ 1245.562929][T11898] team_slave_0: entered allmulticast mode [ 1245.562958][T11898] : entered allmulticast mode [ 1245.562987][T11898] macvlan1: entered allmulticast mode [ 1245.605498][T11898] team0: left allmulticast mode [ 1245.605525][T11898] team_slave_0: left allmulticast mode [ 1245.605554][T11898] : left allmulticast mode [ 1245.605582][T11898] macvlan1: left allmulticast mode [ 1245.605728][T11898] pim6reg: left allmulticast mode [ 1246.407729][T11920] netlink: 72 bytes leftover after parsing attributes in process `syz.3.17693'. [ 1246.407758][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17693'. [ 1246.467356][T11913] can0: slcan on ptm0. [ 1247.473970][T11949] program syz.2.17702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1247.495357][T11915] can0 (unregistered): slcan off ptm0. [ 1247.767381][T11957] sctp: [Deprecated]: syz.4.17705 (pid 11957) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1247.767381][T11957] Use struct sctp_sack_info instead [ 1248.368139][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 1248.368169][ T37] audit: type=1326 audit(46823.750:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11974 comm="syz.4.17713" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e9b9ce59 code=0x7ffc0000 [ 1248.368232][ T37] audit: type=1326 audit(46823.750:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11974 comm="syz.4.17713" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e9b9ce59 code=0x7ffc0000 [ 1248.419779][ T37] audit: type=1326 audit(46823.800:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11974 comm="syz.4.17713" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93e9b9ce59 code=0x7ffc0000 [ 1248.429629][ T37] audit: type=1326 audit(46823.800:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11974 comm="syz.4.17713" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e9b9ce59 code=0x7ffc0000 [ 1248.429700][ T37] audit: type=1326 audit(46823.810:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11974 comm="syz.4.17713" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e9b9ce59 code=0x7ffc0000 [ 1248.430943][ T37] audit: type=1326 audit(46823.810:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11974 comm="syz.4.17713" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f93e9b9ce59 code=0x7ffc0000 [ 1248.450375][ T37] audit: type=1326 audit(46823.830:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11974 comm="syz.4.17713" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e9b9ce59 code=0x7ffc0000 [ 1248.450597][ T37] audit: type=1326 audit(46823.830:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11974 comm="syz.4.17713" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e9b9ce59 code=0x7ffc0000 [ 1248.495202][ T37] audit: type=1326 audit(46823.850:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11974 comm="syz.4.17713" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f93e9b9ce59 code=0x7ffc0000 [ 1248.495423][ T37] audit: type=1326 audit(46823.850:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11974 comm="syz.4.17713" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e9b9ce59 code=0x7ffc0000 [ 1250.165386][T12029] netlink: 316 bytes leftover after parsing attributes in process `syz.4.17729'. [ 1250.272618][T12032] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.17730'. [ 1250.272727][T12032] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1250.401985][T12036] binder: 12033:12036 ioctl 40046205 0 returned -22 [ 1251.115528][ T8199] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1251.261351][ T8199] usb 3-1: Using ep0 maxpacket: 8 [ 1251.282345][ T8199] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1251.282396][ T8199] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1251.282419][ T8199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.374783][ T8199] usb 3-1: config 0 descriptor?? [ 1251.861193][ T8199] hid_parser_main: 451 callbacks suppressed [ 1251.861220][ T8199] isku 0003:1E7D:319C.0035: unknown main item tag 0x0 [ 1251.861253][ T8199] isku 0003:1E7D:319C.0035: unknown main item tag 0x0 [ 1251.861280][ T8199] isku 0003:1E7D:319C.0035: unknown main item tag 0x0 [ 1251.861308][ T8199] isku 0003:1E7D:319C.0035: unknown main item tag 0x0 [ 1251.861334][ T8199] isku 0003:1E7D:319C.0035: unknown main item tag 0x0 [ 1251.861362][ T8199] isku 0003:1E7D:319C.0035: unknown main item tag 0x0 [ 1251.861390][ T8199] isku 0003:1E7D:319C.0035: unknown main item tag 0x0 [ 1251.861426][ T8199] isku 0003:1E7D:319C.0035: unknown main item tag 0x0 [ 1251.861455][ T8199] isku 0003:1E7D:319C.0035: unknown main item tag 0x0 [ 1251.861483][ T8199] isku 0003:1E7D:319C.0035: unknown main item tag 0x0 [ 1251.861509][ T8199] isku 0003:1E7D:319C.0035: collection stack underflow [ 1251.861535][ T8199] isku 0003:1E7D:319C.0035: item 0 0 0 12 parsing failed [ 1251.862557][ T8199] isku 0003:1E7D:319C.0035: parse failed [ 1251.862641][ T8199] isku 0003:1E7D:319C.0035: probe with driver isku failed with error -22 [ 1252.075409][ T8199] usb 3-1: USB disconnect, device number 86 [ 1252.799059][T12101] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1253.404645][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1253.404667][ T37] audit: type=1804 audit(46828.693:1452): pid=12119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.17771" name="/newroot/277/cgroup.controllers" dev="tmpfs" ino=1415 res=1 errno=0 [ 1253.488731][ T37] audit: type=1800 audit(46828.873:1453): pid=12119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.17771" name="cgroup.controllers" dev="tmpfs" ino=1415 res=0 errno=0 [ 1253.492870][ T37] audit: type=1800 audit(46828.873:1454): pid=12123 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.17771" name="cgroup.controllers" dev="tmpfs" ino=1415 res=0 errno=0 [ 1254.549284][T10473] kernel read not supported for file /rfkill (pid: 10473 comm: kworker/1:2) [ 1254.788789][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17793'. [ 1255.129983][T12179] sctp: [Deprecated]: syz.3.17797 (pid 12179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1255.129983][T12179] Use struct sctp_sack_info instead [ 1255.278567][ T8622] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1255.428295][ T8622] usb 7-1: Using ep0 maxpacket: 16 [ 1255.431251][ T8622] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1255.431303][ T8622] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1255.436298][ T8622] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1255.436329][ T8622] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.436349][ T8622] usb 7-1: Product: syz [ 1255.436364][ T8622] usb 7-1: Manufacturer: syz [ 1255.436379][ T8622] usb 7-1: SerialNumber: syz [ 1255.522500][ T8622] usb 7-1: config 0 descriptor?? [ 1255.540484][ T8622] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1255.540522][ T8622] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1255.658929][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 1256.190950][ T8622] em28xx 7-1:0.0: chip ID is em28174 [ 1256.328801][T12211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17812'. [ 1256.476450][ T8199] usb 7-1: USB disconnect, device number 3 [ 1256.488975][T12214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17814'. [ 1256.512680][ T8199] em28xx 7-1:0.0: Disconnecting em28xx [ 1256.651690][T12218] loop4: detected capacity change from 0 to 524255231 [ 1257.017171][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17821'. [ 1257.051256][T12228] vlan1: entered promiscuous mode [ 1257.051281][T12228] veth0_to_bond: entered promiscuous mode [ 1257.051485][T12228] vlan1: entered allmulticast mode [ 1257.051501][T12228] veth0_to_bond: entered allmulticast mode [ 1258.519745][ T8199] em28xx 7-1:0.0: Freeing device [ 1258.610134][T12264] netlink: 'syz.4.17839': attribute type 19 has an invalid length. [ 1258.610161][T12264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17839'. [ 1259.178812][T12283] IPv6: NLM_F_CREATE should be specified when creating new route [ 1259.178945][T12283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1259.178958][T12283] IPv6: NLM_F_CREATE should be set when creating new route [ 1259.284027][T12288] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.17847'. [ 1259.299578][T12283] IPv6: NLM_F_CREATE should be set when creating new route [ 1259.299615][T12283] IPv6: NLM_F_CREATE should be set when creating new route [ 1259.879136][T12304] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1259.914834][T12304] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1260.826648][ T37] audit: type=1326 audit(46836.216:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12332 comm="syz.6.17870" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1260.826793][ T37] audit: type=1326 audit(46836.226:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12332 comm="syz.6.17870" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1260.827007][ T37] audit: type=1326 audit(46836.226:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12332 comm="syz.6.17870" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1260.830829][ T37] audit: type=1326 audit(46836.226:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12332 comm="syz.6.17870" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1260.831038][ T37] audit: type=1326 audit(46836.226:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12332 comm="syz.6.17870" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1260.831231][ T37] audit: type=1326 audit(46836.226:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12332 comm="syz.6.17870" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1260.832322][ T37] audit: type=1326 audit(46836.226:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12332 comm="syz.6.17870" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1260.832494][ T37] audit: type=1326 audit(46836.226:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12332 comm="syz.6.17870" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1260.834061][ T37] audit: type=1326 audit(46836.226:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12332 comm="syz.6.17870" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1260.834351][ T37] audit: type=1326 audit(46836.226:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12332 comm="syz.6.17870" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1260.999280][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888063ebcc00: rx timeout, send abort [ 1261.007156][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888063ebcc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1264.441300][T12427] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.17915'. [ 1264.789851][T12440] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 1265.423267][ T8199] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1265.603911][ T8199] usb 3-1: Using ep0 maxpacket: 32 [ 1265.610549][ T8199] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1265.610581][ T8199] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1265.610607][ T8199] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1265.639254][ T8199] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1265.639289][ T8199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.639334][ T8199] usb 3-1: Product: syz [ 1265.639374][ T8199] usb 3-1: Manufacturer: syz [ 1265.639389][ T8199] usb 3-1: SerialNumber: syz [ 1265.758631][ T8199] usb 3-1: config 0 descriptor?? [ 1266.125712][ T8199] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 1266.125770][ T8199] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1266.233941][ T8199] usb 3-1: USB disconnect, device number 87 [ 1266.901707][T12493] tap0: tun_chr_ioctl cmd 1074025677 [ 1266.901951][T12493] tap0: linktype set to 769 [ 1269.961932][T12581] netlink: 'syz.3.17986': attribute type 2 has an invalid length. [ 1270.869565][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18002'. [ 1272.344322][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18025'. [ 1272.882616][T12674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18031'. [ 1273.300270][T12688] netlink: 'syz.6.18038': attribute type 12 has an invalid length. [ 1273.300298][T12688] netlink: 'syz.6.18038': attribute type 2 has an invalid length. [ 1273.300314][T12688] netlink: 'syz.6.18038': attribute type 1 has an invalid length. [ 1273.300330][T12688] netlink: 'syz.6.18038': attribute type 37 has an invalid length. [ 1273.300344][T12688] netlink: 'syz.6.18038': attribute type 2 has an invalid length. [ 1273.300358][T12688] netlink: 340 bytes leftover after parsing attributes in process `syz.6.18038'. [ 1273.300469][T12688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.299945][T12717] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18051'. [ 1274.333825][T12717] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18051'. [ 1274.334067][T12717] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18051'. [ 1277.318138][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18096'. [ 1277.370913][T12809] veth1_macvtap: left promiscuous mode [ 1277.937674][ T8195] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1278.090043][ T8195] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1278.090079][ T8195] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.155673][ T8195] usb 7-1: config 0 descriptor?? [ 1278.422173][ T8195] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1279.425829][ T8195] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1279.425856][ T8195] [drm] Initialized udl on minor 2 [ 1279.852891][ T8195] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1280.121746][ T8195] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1280.685267][ T8195] usb 7-1: USB disconnect, device number 4 [ 1280.846273][T12873] netlink: 'syz.2.18122': attribute type 4 has an invalid length. [ 1280.934714][ T8199] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1282.520678][T12919] netlink: 56 bytes leftover after parsing attributes in process `syz.6.18144'. [ 1283.279916][T12948] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1283.279948][T12948] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1283.384772][T10473] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1283.535785][T10473] usb 7-1: Using ep0 maxpacket: 32 [ 1283.540811][T10473] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1283.561315][T10473] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1283.561350][T10473] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.561372][T10473] usb 7-1: Product: syz [ 1283.561387][T10473] usb 7-1: Manufacturer: syz [ 1283.561401][T10473] usb 7-1: SerialNumber: syz [ 1283.612215][T10473] usb 7-1: config 0 descriptor?? [ 1283.868773][ T8195] usb 7-1: USB disconnect, device number 5 [ 1284.013585][T12962] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18165'. [ 1284.171993][T12968] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18169'. [ 1284.346233][T10974] kernel write not supported for file /vcs (pid: 10974 comm: kworker/1:3) [ 1287.048992][T13049] loop8: detected capacity change from 0 to 7 [ 1287.383131][T13049] loop8: [POWERTEC] [ 1288.452414][T13088] macvlan1: Device is already in use. [ 1289.390419][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18238'. [ 1290.004389][T13138] sg_write: process 305 (syz.6.18247) changed security contexts after opening file descriptor, this is not allowed. [ 1290.681874][ T5631] Bluetooth: hci3: command 0x0405 tx timeout [ 1291.465125][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18262'. [ 1292.262463][T13197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1296.431392][ T8199] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1296.579967][ T8199] usb 7-1: Using ep0 maxpacket: 8 [ 1296.582366][ T8199] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1296.582419][ T8199] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1296.582447][ T8199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.640107][T22173] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1296.710736][ T8199] usb 7-1: config 0 descriptor?? [ 1296.833152][T22173] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1296.833187][T22173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.885596][T22173] usb 3-1: config 0 descriptor?? [ 1296.906795][T22173] cp210x 3-1:0.0: cp210x converter detected [ 1297.168749][ T8199] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1297.571386][T22173] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1297.571444][T22173] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1297.715723][T22173] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1297.755326][T22173] usb 3-1: USB disconnect, device number 88 [ 1297.785197][T22173] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1297.785771][T22173] cp210x 3-1:0.0: device disconnected [ 1297.866469][ T8199] usb 7-1: USB disconnect, device number 6 [ 1298.656318][T13355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18345'. [ 1298.656347][T13355] netlink: 'syz.3.18345': attribute type 1 has an invalid length. [ 1301.561433][T13437] program syz.4.18382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1302.884408][T13477] netlink: 'syz.2.18401': attribute type 3 has an invalid length. [ 1303.397108][T13494] tipc: Started in network mode [ 1303.397142][T13494] tipc: Node identity ff, cluster identity 4711 [ 1303.397193][T13494] tipc: Enabling of bearer rejected, failed to enable media [ 1304.320031][ T8199] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1304.469920][ T8199] usb 3-1: Using ep0 maxpacket: 32 [ 1304.476207][ T8199] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1304.476238][ T8199] usb 3-1: config 0 has no interface number 0 [ 1304.477523][ T8199] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1304.505569][ T8199] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1304.505663][ T8199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.505725][ T8199] usb 3-1: Product: syz [ 1304.505766][ T8199] usb 3-1: Manufacturer: syz [ 1304.505808][ T8199] usb 3-1: SerialNumber: syz [ 1304.563540][ T8199] usb 3-1: config 0 descriptor?? [ 1304.567127][T13512] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1304.793378][T13512] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1305.004325][ T8199] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1305.004605][ T8199] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1305.085808][ T8199] usb 3-1: USB disconnect, device number 89 [ 1305.205148][ T2391] pvrusb2: request_firmware fatal error with code=-110 [ 1305.205172][ T2391] pvrusb2: Failure uploading firmware1 [ 1305.205182][ T2391] pvrusb2: Device initialization was not successful. [ 1305.205191][ T2391] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1305.205203][ T2391] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1305.208582][ T36] pvrusb2: Device being rendered inoperable [ 1305.280230][T13540] vcan0: tx address claim with dest, not broadcast [ 1305.669327][T22232] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1305.820640][T22232] usb 7-1: Using ep0 maxpacket: 8 [ 1305.822826][T22232] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1305.822859][T22232] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1305.822886][T22232] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1305.822910][T22232] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1305.822950][T22232] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1305.822974][T22232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.113384][T22232] usb 7-1: GET_CAPABILITIES returned 0 [ 1306.113435][T22232] usbtmc 7-1:16.0: can't read capabilities [ 1306.560787][T22173] usb 7-1: USB disconnect, device number 7 [ 1306.720817][T13580] netlink: 84 bytes leftover after parsing attributes in process `syz.2.18450'. [ 1306.720850][T13580] netlink: 84 bytes leftover after parsing attributes in process `syz.2.18450'. [ 1308.653052][T13637] netlink: 'syz.3.18478': attribute type 3 has an invalid length. [ 1308.653082][T13637] netlink: 92 bytes leftover after parsing attributes in process `syz.3.18478'. [ 1309.970065][ T7460] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1310.131224][ T7460] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1310.131267][ T7460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.131291][ T7460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.131311][ T7460] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1310.132333][ T7460] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1310.132359][ T7460] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1310.132377][ T7460] usb 3-1: Manufacturer: syz [ 1310.219047][ T7460] usb 3-1: config 0 descriptor?? [ 1310.697088][ T7460] appleir 0003:05AC:8243.0036: item fetching failed at offset 0/1 [ 1310.697930][ T7460] appleir 0003:05AC:8243.0036: parse failed [ 1310.698046][ T7460] appleir 0003:05AC:8243.0036: probe with driver appleir failed with error -22 [ 1310.931229][T22232] usb 3-1: USB disconnect, device number 90 [ 1311.889841][ T37] audit: type=1326 audit(47144.304:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13707 comm="syz.4.18510" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e9b9ce59 code=0x7fc00000 [ 1312.439893][ T8199] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1312.590069][ T8199] usb 4-1: Using ep0 maxpacket: 32 [ 1312.593270][ T8199] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.593329][ T8199] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1312.593359][ T8199] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1312.593389][ T8199] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1312.665763][ T8199] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1312.665810][ T8199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.665833][ T8199] usb 4-1: Product: syz [ 1312.665848][ T8199] usb 4-1: Manufacturer: syz [ 1312.665864][ T8199] usb 4-1: SerialNumber: syz [ 1312.744758][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1312.863750][ T8199] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input67 [ 1312.913750][T13759] PID 13759 killed due to inadequate hugepage pool [ 1313.189972][ T8199] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1313.189998][ T8199] (id 0x00) [ 1313.393435][ T8199] rc_core: IR keymap rc-imon-pad not found [ 1313.393457][ T8199] Registered IR keymap rc-empty [ 1313.393561][ T8199] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1313.393582][ T8199] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1313.536388][ T8199] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1313.558929][ T8199] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input68 [ 1313.693340][ T8199] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:75> initialized [ 1313.725883][ T8199] usb 4-1: USB disconnect, device number 75 [ 1314.465521][T13804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18552'. [ 1314.604376][T13806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1316.311735][T13859] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18577'. [ 1316.987373][ T37] audit: type=1326 audit(47149.394:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13875 comm="syz.6.18586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1316.994471][ T37] audit: type=1326 audit(47149.404:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13875 comm="syz.6.18586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1317.008195][ T37] audit: type=1326 audit(47149.414:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13875 comm="syz.6.18586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1317.016843][ T37] audit: type=1326 audit(47149.414:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13875 comm="syz.6.18586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1317.032510][ T37] audit: type=1326 audit(47149.424:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13875 comm="syz.6.18586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1317.032745][ T37] audit: type=1326 audit(47149.434:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13875 comm="syz.6.18586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1317.047616][ T37] audit: type=1326 audit(47149.444:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13875 comm="syz.6.18586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1317.056132][ T37] audit: type=1326 audit(47149.454:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13875 comm="syz.6.18586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1317.065363][ T37] audit: type=1326 audit(47149.464:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13875 comm="syz.6.18586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1317.065550][ T37] audit: type=1326 audit(47149.474:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13875 comm="syz.6.18586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7ffc0000 [ 1317.425916][T13887] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18591'. [ 1317.467885][T13887] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18591'. [ 1317.468214][ T3390] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1317.478519][ T3390] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1317.478682][ T3390] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1317.478772][ T3390] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.483369][T13920] loop8: detected capacity change from 0 to 1 [ 1318.525886][T13920] Dev loop8: unable to read RDB block 1 [ 1318.525932][T13920] loop8: unable to read partition table [ 1318.526175][T13920] loop8: partition table beyond EOD, truncated [ 1318.526219][T13920] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1318.903976][T13932] input: syz1 as /devices/virtual/input/input69 [ 1318.975409][T13937] loop8: detected capacity change from 0 to 7 [ 1319.052965][T13937] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1319.053011][T13937] loop8: partition table partially beyond EOD, truncated [ 1319.056337][T13937] loop8: p1 size 3850834742 extends beyond EOD, truncated [ 1319.134417][T13937] loop8: p2 start 516240762 is beyond EOD, truncated [ 1319.696874][ T6636] udevd[6636]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1321.819371][T10473] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1321.969662][T10473] usb 4-1: Using ep0 maxpacket: 8 [ 1321.972268][T10473] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1321.972301][T10473] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1321.972327][T10473] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1321.972353][T10473] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1321.972398][T10473] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1321.972422][T10473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.267979][T10473] usb 4-1: GET_CAPABILITIES returned 0 [ 1322.268035][T10473] usbtmc 4-1:16.0: can't read capabilities [ 1322.524839][ T36] usb 4-1: USB disconnect, device number 76 [ 1322.741864][T14031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18657'. [ 1323.195145][T14044] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1324.149977][ T8199] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1324.300887][ T8199] usb 7-1: Using ep0 maxpacket: 32 [ 1324.347518][ T8199] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1324.347552][ T8199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.388254][ T8199] usb 7-1: config 0 descriptor?? [ 1324.405059][ T8199] as10x_usb: device has been detected [ 1324.591006][ T8199] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1324.708526][ T8199] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1325.273006][T22173] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1325.420052][T22173] usb 4-1: Using ep0 maxpacket: 8 [ 1325.443626][T22173] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1325.443692][T22173] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1325.443718][T22173] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1325.443746][T22173] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1325.443772][T22173] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1325.443817][T22173] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1325.443842][T22173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.701801][ T8199] as10x_usb: error during firmware upload part1 [ 1325.702966][ T8199] Registered device nBox DVB-T Dongle [ 1325.720280][ T8199] usb 7-1: USB disconnect, device number 8 [ 1325.796852][T22173] usb 4-1: usb_control_msg returned -32 [ 1325.796908][T22173] usbtmc 4-1:16.0: can't read capabilities [ 1325.973194][ T8199] Unregistered device nBox DVB-T Dongle [ 1325.977199][ T8199] as10x_usb: device has been disconnected [ 1326.319070][T14114] sch_tbf: peakrate 188 is lower than or equals to rate 7012629537550284465 ! [ 1326.902528][T14130] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 1326.902562][T14130] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1327.972409][T14152] IPVS: Scheduler module ip_vs_sip not found [ 1328.087465][ T36] usb 4-1: USB disconnect, device number 77 [ 1328.736795][T14187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18725'. [ 1329.867174][T14206] loop8: detected capacity change from 0 to 7 [ 1329.943261][T14206] Dev loop8: unable to read RDB block 7 [ 1329.943296][T14206] loop8: unable to read partition table [ 1329.943537][T14206] loop8: partition table beyond EOD, truncated [ 1329.943581][T14206] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1330.386294][T14220] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.18741'. [ 1330.750742][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18746'. [ 1330.897167][T14231] bond5: option updelay: invalid value (18446744073595400532) [ 1330.897202][T14231] bond5: option updelay: allowed values 0 - 2147483647 [ 1330.980253][T14231] bond5 (unregistering): Released all slaves [ 1333.174383][T14299] netlink: 'syz.3.18776': attribute type 83 has an invalid length. [ 1333.580030][T22173] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1333.601191][T14316] netlink: 'syz.2.18784': attribute type 3 has an invalid length. [ 1333.601213][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18784'. [ 1333.732506][T22173] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1333.732538][T22173] usb 7-1: config 1 has no interface number 0 [ 1333.732586][T22173] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1333.732615][T22173] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1333.732644][T22173] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1333.737938][T22173] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1333.738045][T22173] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.738068][T22173] usb 7-1: Product: syz [ 1333.738083][T22173] usb 7-1: Manufacturer: syz [ 1333.738098][T22173] usb 7-1: SerialNumber: syz [ 1333.843323][T14306] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1334.058503][T14306] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1334.096336][T22173] usb 7-1: No status endpoint found [ 1334.286682][T22173] usb 7-1: USB disconnect, device number 9 [ 1334.555006][T14337] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1335.743479][T14385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18816'. [ 1336.481838][ T8199] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1336.725783][ T8199] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1336.745664][ T8199] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.745696][ T8199] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1336.776712][ T8199] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1336.776745][ T8199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.776763][ T8199] usb 4-1: Product: syz [ 1336.776773][ T8199] usb 4-1: Manufacturer: syz [ 1336.776784][ T8199] usb 4-1: SerialNumber: syz [ 1337.053123][T14407] netlink: 'syz.3.18825': attribute type 4 has an invalid length. [ 1337.053150][T14407] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18825'. [ 1337.122248][ T8199] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1337.157215][ T8199] usb 4-1: USB disconnect, device number 78 [ 1344.728546][T14655] syz.6.18933 (14655) used greatest stack depth: 18144 bytes left [ 1345.999306][ T36] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1346.149276][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 1346.161956][ T36] usb 3-1: config 2 has an invalid interface number: 200 but max is 0 [ 1346.161986][ T36] usb 3-1: config 2 has no interface number 0 [ 1346.162020][ T36] usb 3-1: config 2 interface 200 has no altsetting 0 [ 1346.194023][ T36] usb 3-1: New USB device found, idVendor=0707, idProduct=0100, bcdDevice=32.ec [ 1346.194060][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.194082][ T36] usb 3-1: Product: syz [ 1346.194098][ T36] usb 3-1: Manufacturer: syz [ 1346.194113][ T36] usb 3-1: SerialNumber: syz [ 1346.490309][ T36] kaweth 3-1:2.200: couldn't find required endpoints [ 1346.531351][ T36] usb 3-1: USB disconnect, device number 91 [ 1346.559498][ T5970] udevd[5970]: setting owner of /dev/bus/usb/003/091 to uid=0, gid=0 failed: No such file or directory [ 1347.009716][T22232] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1347.268520][T22232] usb 7-1: Using ep0 maxpacket: 8 [ 1347.290441][T22232] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1347.290507][T22232] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1347.290536][T22232] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1347.290561][T22232] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1347.290591][T22232] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1347.290616][T22232] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1347.290660][T22232] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1347.290686][T22232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.622830][T22232] usb 7-1: usb_control_msg returned -32 [ 1347.622887][T22232] usbtmc 7-1:16.0: can't read capabilities [ 1348.144053][T14737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18975'. [ 1349.727093][T14787] netlink: 256 bytes leftover after parsing attributes in process `syz.4.18998'. [ 1349.727122][T14787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18998'. [ 1349.727145][T14787] netlink: 256 bytes leftover after parsing attributes in process `syz.4.18998'. [ 1349.971377][T22173] usb 7-1: USB disconnect, device number 10 [ 1350.526146][T14809] netlink: 256 bytes leftover after parsing attributes in process `syz.2.19009'. [ 1352.165446][T14863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19031'. [ 1352.993328][T14895] netlink: 736 bytes leftover after parsing attributes in process `syz.3.19043'. [ 1353.025770][T14895] netlink: 104 bytes leftover after parsing attributes in process `syz.3.19043'. [ 1353.653390][T14916] binder: 14914:14916 ioctl c0306201 2000000003c0 returned -14 [ 1353.960637][T14920] input: syz1 as /devices/virtual/input/input71 [ 1354.475205][T14944] netlink: 'syz.6.19067': attribute type 2 has an invalid length. [ 1355.104218][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19077'. [ 1355.104241][T14967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19077'. [ 1355.528802][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 1355.528825][ T37] audit: type=1326 audit(47187.934:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14975 comm="syz.6.19081" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c85ce59 code=0x7fc00000 [ 1355.650018][ T8199] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1355.809987][ T8199] usb 3-1: Using ep0 maxpacket: 16 [ 1355.815849][ T8199] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1355.815889][ T8199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1355.849985][ T8199] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1355.850023][ T8199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.850045][ T8199] usb 3-1: Product: syz [ 1355.850062][ T8199] usb 3-1: Manufacturer: syz [ 1355.850078][ T8199] usb 3-1: SerialNumber: syz [ 1355.858915][ T8199] usb 3-1: config 0 descriptor?? [ 1355.943872][ T8199] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1355.943911][ T8199] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1356.221087][ T37] audit: type=1326 audit(47188.634:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14975 comm="syz.6.19081" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f370c81d68e code=0x7fc00000 [ 1356.556308][ T8199] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1356.557716][ T8199] em28xx 3-1:0.0: Config register raw data: 0x41 [ 1356.782329][ T8199] usb 3-1: USB disconnect, device number 92 [ 1356.802628][ T8199] em28xx 3-1:0.0: Disconnecting em28xx [ 1356.891234][ T8199] em28xx 3-1:0.0: Freeing device [ 1359.120427][T15091] loop9: detected capacity change from 0 to 7 [ 1359.402532][T15091] Dev loop9: unable to read RDB block 7 [ 1359.402587][T15091] loop9: AHDI p2 p3 [ 1359.402619][T15091] loop9: partition table partially beyond EOD, truncated [ 1359.402912][T15091] loop9: p2 size 150995456 extends beyond EOD, truncated [ 1359.918239][T15107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1360.165853][ T6636] udevd[6636]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1363.076114][ T5199] Bluetooth: hci3: command 0x0405 tx timeout [ 1363.909679][ T8195] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1364.066188][ T8195] usb 3-1: config 0 has no interfaces? [ 1364.101794][ T8195] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1364.101830][ T8195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.101850][ T8195] usb 3-1: Product: syz [ 1364.101864][ T8195] usb 3-1: Manufacturer: syz [ 1364.101879][ T8195] usb 3-1: SerialNumber: syz [ 1364.175287][ T8195] usb 3-1: config 0 descriptor?? [ 1364.457356][ T8195] usb 3-1: USB disconnect, device number 93 [ 1365.863504][T15251] Invalid argument reading file caps for ./file0 [ 1369.373106][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19248'. [ 1369.443318][T15343] hsr_slave_0: left promiscuous mode [ 1369.486342][T15343] hsr_slave_1: left promiscuous mode [ 1370.267291][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19256'. [ 1371.114080][T15394] Bluetooth: MGMT ver 1.23 [ 1371.213325][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19272'. [ 1371.213354][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19272'. [ 1371.433642][T15403] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.19274'. [ 1371.532604][T15407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19278'. [ 1371.532643][T15407] netlink: 'syz.6.19278': attribute type 5 has an invalid length. [ 1371.532661][T15407] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19278'. [ 1371.587380][T15407] geneve2: entered promiscuous mode [ 1371.587408][T15407] geneve2: entered allmulticast mode [ 1371.589687][ T3390] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1371.590673][ T55] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1371.590734][ T55] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1371.590773][ T55] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1372.415636][T15429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1372.653709][T15439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19291'. [ 1372.653747][T15439] bond0: invalid ARP target 0.0.0.0 specified for addition [ 1372.653768][T15439] bond0: option arp_ip_target: invalid value (0) [ 1372.676012][T22232] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1372.841478][T22232] usb 7-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1372.841516][T22232] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1372.841539][T22232] usb 7-1: Product: syz [ 1372.841555][T22232] usb 7-1: Manufacturer: syz [ 1372.841571][T22232] usb 7-1: SerialNumber: syz [ 1372.929476][T22232] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1373.121642][T22232] vp7045: USB control message 'out' went wrong. [ 1373.121665][T22232] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1373.121706][T22232] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1373.224465][T22232] usb 7-1: USB disconnect, device number 11 [ 1373.605092][ T825] Bluetooth: hci0: Frame reassembly failed (-84) [ 1373.681053][ T825] Bluetooth: hci0: Frame reassembly failed (-84) [ 1374.017583][T22232] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1374.170446][T22232] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1374.170485][T22232] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1374.170522][T22232] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1374.170568][T22232] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1374.170598][T22232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.212068][T22232] usb 7-1: config 0 descriptor?? [ 1374.530290][ T8195] kernel write not supported for file bpf-prog (pid: 8195 comm: kworker/0:3) [ 1374.966102][T22232] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1375.011902][T22232] usb 7-1: USB disconnect, device number 12 [ 1375.188031][T15501] trusted_key: syz.4.19320 sent an empty control message without MSG_MORE. [ 1375.244417][T15497] fido_id[15497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1375.332950][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19322'. [ 1375.630456][ T5631] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1377.883144][T15568] input: syz1 as /devices/virtual/input/input72 [ 1378.482423][T15587] netlink: 'syz.2.19356': attribute type 1 has an invalid length. [ 1380.664369][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19382'. [ 1381.262173][T15665] loop5: detected capacity change from 0 to 7 [ 1381.339263][T15665] Dev loop5: unable to read RDB block 7 [ 1381.339320][T15665] loop5: unable to read partition table [ 1381.339580][T15665] loop5: partition table beyond EOD, truncated [ 1381.339626][T15665] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1381.387698][ T4972] Dev loop5: unable to read RDB block 7 [ 1381.387746][ T4972] loop5: unable to read partition table [ 1381.388010][ T4972] loop5: partition table beyond EOD, truncated [ 1381.416134][T15653] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19385'. [ 1381.417807][T15664] netem: change failed [ 1383.381305][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19415'. [ 1383.846606][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19421'. [ 1384.975275][T15763] team0 (unregistering): Port device team_slave_0 removed [ 1385.078288][T15763] team0 (unregistering): Port device team_slave_1 removed [ 1385.235704][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19434'. [ 1387.324767][T15839] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19465'. [ 1387.324799][T15839] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19465'. [ 1387.514461][T15851] loop8: detected capacity change from 0 to 7 [ 1387.533557][T15851] Dev loop8: unable to read RDB block 7 [ 1387.533614][T15851] loop8: unable to read partition table [ 1387.533851][T15851] loop8: partition table beyond EOD, truncated [ 1387.533871][T15851] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1388.146277][T22232] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1388.299227][T22232] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1388.299263][T22232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.333662][T22232] usb 7-1: config 0 descriptor?? [ 1388.361082][T22232] cp210x 7-1:0.0: cp210x converter detected [ 1388.753268][T22232] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1388.818595][T22232] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1388.857769][T15887] tun0: tun_chr_ioctl cmd 1074812118 [ 1388.964258][T22232] usb 7-1: USB disconnect, device number 13 [ 1389.105587][T22232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1389.272423][T22232] cp210x 7-1:0.0: device disconnected [ 1390.397313][T15939] netlink: 'syz.3.19510': attribute type 12 has an invalid length. [ 1390.397339][T15939] netlink: 'syz.3.19510': attribute type 29 has an invalid length. [ 1390.397355][T15939] netlink: 148 bytes leftover after parsing attributes in process `syz.3.19510'. [ 1390.397404][T15939] netlink: 'syz.3.19510': attribute type 3 has an invalid length. [ 1390.397419][T15939] netlink: 'syz.3.19510': attribute type 2 has an invalid length. [ 1390.397434][T15939] netlink: 35 bytes leftover after parsing attributes in process `syz.3.19510'. [ 1390.593174][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19512'. [ 1391.089142][T15963] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19521'. [ 1393.074406][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.287523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.288144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.084653][T10974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.085280][ T8195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.399055][T16068] sch_tbf: burst 5607 is lower than device lo mtu (65550) ! [ 1395.561638][T16106] netlink: 'syz.6.19587': attribute type 11 has an invalid length. [ 1395.561666][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19587'. [ 1395.845038][ T5631] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 1396.901541][ T8195] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1397.061964][ T8195] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1397.061998][ T8195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.062020][ T8195] usb 7-1: Product: syz [ 1397.062034][ T8195] usb 7-1: Manufacturer: syz [ 1397.062051][ T8195] usb 7-1: SerialNumber: syz [ 1397.175917][ T8195] usb 7-1: config 0 descriptor?? [ 1397.630455][ T8195] usb 7-1: Firmware version (0.0) predates our first public release. [ 1397.630485][ T8195] usb 7-1: Please update to version 0.2 or newer [ 1397.632763][ T8195] usb 7-1: Firmware: build [ 1398.207919][ T8195] usb 7-1: USB disconnect, device number 14 [ 1398.752577][T10974] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1398.903643][T10974] usb 4-1: Using ep0 maxpacket: 8 [ 1398.906194][T10974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1398.906223][T10974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1398.906240][T10974] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1398.906257][T10974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1398.906273][T10974] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1398.906302][T10974] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1398.906320][T10974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.096515][T10974] usb 4-1: config 0 descriptor?? [ 1400.069722][T16241] batadv_slave_1: entered promiscuous mode [ 1400.074605][T16240] batadv_slave_1: left promiscuous mode [ 1400.673032][ T5631] Bluetooth: hci0: urb ffff88823be8e000 submission failed (90) [ 1400.710235][T10974] usb 4-1: USB disconnect, device number 79 [ 1401.116021][T16271] binder_alloc: binder_alloc_mmap_handler: 16270 200000ffe000-200001000000 already mapped failed -16 [ 1401.852505][ T8199] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1402.004034][ T8199] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.004073][ T8199] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1402.004115][ T8199] usb 7-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 1402.004140][ T8199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.057177][ T8199] usb 7-1: config 0 descriptor?? [ 1402.564709][ T8199] hid-generic 0003:18D1:503C.0038: unknown main item tag 0x0 [ 1402.564751][ T8199] hid-generic 0003:18D1:503C.0038: unknown main item tag 0x0 [ 1402.564780][ T8199] hid-generic 0003:18D1:503C.0038: unknown main item tag 0x0 [ 1402.564808][ T8199] hid-generic 0003:18D1:503C.0038: unknown main item tag 0x0 [ 1402.564836][ T8199] hid-generic 0003:18D1:503C.0038: unknown main item tag 0x0 [ 1402.564865][ T8199] hid-generic 0003:18D1:503C.0038: unknown main item tag 0x0 [ 1402.564894][ T8199] hid-generic 0003:18D1:503C.0038: unknown main item tag 0x0 [ 1402.674295][ T8199] hid-generic 0003:18D1:503C.0038: hidraw0: USB HID ve6.e6 Device [HID 18d1:503c] on usb-dummy_hcd.6-1/input0 [ 1402.820264][T10974] usb 7-1: USB disconnect, device number 15 [ 1403.039697][T16321] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1403.185229][T16314] fido_id[16314]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1403.208814][ T8199] kernel write not supported for file /audio1 (pid: 8199 comm: kworker/0:6) [ 1406.520287][T16419] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19732'. [ 1407.020903][ T8199] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1407.210893][ T8199] usb 7-1: Using ep0 maxpacket: 8 [ 1407.213019][ T8199] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.213080][ T8199] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1407.213104][ T8199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.265198][ T8199] usb 7-1: config 0 descriptor?? [ 1407.323809][ T8199] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1408.381048][ T8199] gspca_vc032x: reg_r err -71 [ 1408.381149][ T8199] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 1408.387965][ T8199] usb 7-1: USB disconnect, device number 16 [ 1410.125659][T22173] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1410.301070][T22173] usb 4-1: Using ep0 maxpacket: 16 [ 1410.308514][T22173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.308552][T22173] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1410.308601][T22173] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1410.308625][T22173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.375668][T22173] usb 4-1: config 0 descriptor?? [ 1410.947294][ T5199] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1411.028659][ T5199] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1411.073254][ T5199] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1411.147379][ T5199] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1411.153720][ T5199] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1412.831392][T16543] netlink: 132 bytes leftover after parsing attributes in process `syz.6.19785'. [ 1412.991063][T22173] usbhid 4-1:0.0: can't add hid device: -71 [ 1412.991226][T22173] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1413.025093][T22173] usb 4-1: USB disconnect, device number 80 [ 1413.427620][ T5199] Bluetooth: hci0: command tx timeout [ 1415.141889][T16586] Bluetooth: MGMT ver 1.23 [ 1415.501111][ T5199] Bluetooth: hci0: command tx timeout [ 1416.299693][T16505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.299929][T16505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.316334][T16505] bridge_slave_0: entered allmulticast mode [ 1416.336822][T16505] bridge_slave_0: entered promiscuous mode [ 1416.356260][T16505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.358889][T16505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.359135][T16505] bridge_slave_1: entered allmulticast mode [ 1416.386802][T16505] bridge_slave_1: entered promiscuous mode [ 1416.822834][T16505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.854325][T16505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1417.302273][T16505] team0: Port device team_slave_0 added [ 1417.304063][T16631] input: syz1 as /devices/virtual/input/input75 [ 1417.342965][T16505] team0: Port device team_slave_1 added [ 1417.432488][T16637] netlink: 176 bytes leftover after parsing attributes in process `syz.6.19823'. [ 1417.571119][ T5199] Bluetooth: hci0: command tx timeout [ 1417.978909][T16505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.978927][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.978957][T16505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.999395][T16505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.999416][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.999451][T16505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.571855][T16505] hsr_slave_0: entered promiscuous mode [ 1418.578875][T16505] hsr_slave_1: entered promiscuous mode [ 1419.660811][ T5199] Bluetooth: hci0: command tx timeout [ 1422.202958][T16725] bridge0: port 1(bridge_slave_0) entered listening state [ 1422.203058][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19863'. [ 1423.566580][T16505] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1423.619791][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1423.634971][T16505] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1423.736004][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1423.738801][T16505] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1423.854613][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1423.858148][T16505] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1423.915340][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1424.689775][T16783] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input76 [ 1424.860867][T16505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.061756][T16505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.117150][ T825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.118487][ T825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.251983][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.252151][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.692007][T16853] netlink: 'syz.3.19913': attribute type 6 has an invalid length. [ 1427.716049][T16505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.983511][T16505] veth0_vlan: entered promiscuous mode [ 1429.138383][T16505] veth1_vlan: entered promiscuous mode [ 1429.277165][T16878] netlink: 'syz.3.19922': attribute type 2 has an invalid length. [ 1429.304906][T16880] vivid-004: disconnect [ 1429.305271][T16879] vivid-004: reconnect [ 1429.307191][T16878] netlink: 'syz.3.19922': attribute type 2 has an invalid length. [ 1429.377133][T16505] veth0_macvtap: entered promiscuous mode [ 1429.415708][T16505] veth1_macvtap: entered promiscuous mode [ 1429.566825][T16505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1429.760861][T16505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1429.842298][T13752] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.842376][T13752] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.842419][T13752] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.842460][T13752] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.326213][T16901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19932'. [ 1432.010173][ T825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.010192][ T825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.185304][T10619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.185328][T10619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.239227][T16967] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.19958'. [ 1437.238098][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19983'. [ 1437.238138][T17021] netlink: 'syz.4.19983': attribute type 30 has an invalid length. [ 1438.043266][T22232] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1438.192954][T22232] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.193007][T22232] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1438.196763][T22232] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1438.196795][T22232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.196818][T22232] usb 7-1: Product: syz [ 1438.196833][T22232] usb 7-1: Manufacturer: syz [ 1438.196847][T22232] usb 7-1: SerialNumber: syz [ 1438.512460][T17014] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1440.647397][T22232] cdc_ncm 7-1:1.0: bind() failure [ 1440.713288][T22232] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1440.713339][T22232] cdc_ncm 7-1:1.1: bind() failure [ 1440.811208][T22232] usb 7-1: USB disconnect, device number 17 [ 1446.920880][ T7460] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1447.098214][ T7460] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.098273][ T7460] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1447.098298][ T7460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.183491][ T7460] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1447.591217][ T6636] udevd[6636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1447.628855][ T7460] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1448.636283][T16912] usb 4-1: USB disconnect, device number 81 [ 1452.165855][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19983'. [ 1452.165895][T17021] netlink: 'syz.4.19983': attribute type 30 has an invalid length. [ 1454.425960][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1454.829123][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1454.856337][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1454.882090][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1454.883077][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1456.141428][ T7460] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1456.570576][ T8622] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1456.595588][ T7460] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 4 [ 1456.595642][ T7460] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 1456.624540][ T7460] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 1456.624572][ T7460] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.624594][ T7460] usb 8-1: Product: syz [ 1456.624610][ T7460] usb 8-1: Manufacturer: syz [ 1456.624626][ T7460] usb 8-1: SerialNumber: syz [ 1456.741776][ T8622] usb 4-1: Using ep0 maxpacket: 8 [ 1456.745883][ T8622] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1456.745944][ T8622] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1456.745971][ T8622] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1456.745997][ T8622] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1456.746024][ T8622] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1456.746069][ T8622] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1456.746094][ T8622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.054212][ T8195] kernel write not supported for file /input/mice (pid: 8195 comm: kworker/0:3) [ 1457.171025][ T5199] Bluetooth: hci1: command tx timeout [ 1457.419863][ T7460] usb 8-1: Can't get UAC3 power state for id 10 [ 1457.436448][ T7460] usb 8-1: 2:0: failed to get current value for ch 0 (-71) [ 1457.459731][ T7460] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1457.459763][ T7460] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1457.459783][ T7460] usb 8-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 1458.051238][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1458.518202][ T8622] usb 4-1: usb_control_msg returned -32 [ 1458.518263][ T8622] usbtmc 4-1:16.0: can't read capabilities [ 1458.612362][ T8622] usb 4-1: USB disconnect, device number 82 [ 1458.637965][ T7460] usb 8-1: USB disconnect, device number 2 [ 1459.115340][T17242] netlink: 27 bytes leftover after parsing attributes in process `syz.7.20074'. [ 1459.260858][ T5199] Bluetooth: hci1: command tx timeout [ 1460.118339][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20077'. [ 1460.118363][T17268] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20077'. [ 1460.118578][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20077'. [ 1460.118592][T17268] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20077'. [ 1461.334297][ T5199] Bluetooth: hci1: command tx timeout [ 1461.730890][ T7460] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1461.914218][ T7460] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1461.914254][ T7460] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1462.093179][ T7460] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1462.093213][ T7460] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.093235][ T7460] usb 8-1: Product: syz [ 1462.093250][ T7460] usb 8-1: Manufacturer: syz [ 1462.093282][ T7460] usb 8-1: SerialNumber: syz [ 1462.176622][ T7460] usb 8-1: config 0 descriptor?? [ 1462.177798][T17310] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1462.177998][T17310] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1462.463455][T17310] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1462.463606][T17310] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1462.947725][ T7460] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1463.419799][ T5199] Bluetooth: hci1: command tx timeout [ 1463.692109][ T7460] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1464.898854][ T7460] dm9601 8-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet, 16:6b:df:df:d9:50 [ 1464.972414][ T7460] usb 8-1: USB disconnect, device number 3 [ 1464.989115][ T7460] dm9601 8-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet [ 1468.415132][T17402] netlink: 'syz.7.20100': attribute type 29 has an invalid length. [ 1468.453377][T17402] netlink: 500 bytes leftover after parsing attributes in process `syz.7.20100'. [ 1470.110167][T17192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.110302][T17192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.110600][T17192] bridge_slave_0: entered allmulticast mode [ 1470.113379][T17192] bridge_slave_0: entered promiscuous mode [ 1470.115733][T17405] netlink: 'syz.7.20100': attribute type 29 has an invalid length. [ 1470.227332][T17192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.227465][T17192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.227750][T17192] bridge_slave_1: entered allmulticast mode [ 1470.241135][T17192] bridge_slave_1: entered promiscuous mode [ 1471.259123][T17192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.316434][T17192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.614330][T17192] team0: Port device team_slave_0 added [ 1471.636363][T17192] team0: Port device team_slave_1 added [ 1471.997244][T17192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1471.997265][T17192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1471.997297][T17192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1472.013777][T17192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1472.013845][T17192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1472.013956][T17192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.394294][T17192] hsr_slave_0: entered promiscuous mode [ 1473.395870][T17192] hsr_slave_1: entered promiscuous mode [ 1473.396964][T17192] debugfs: 'hsr0' already exists in 'hsr' [ 1473.396991][T17192] Cannot create hsr debugfs directory [ 1478.825782][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1478.957674][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1478.969247][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1479.023833][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1479.033263][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1480.342720][T17192] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1480.691061][T17192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1480.692920][T17192] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1480.893107][T17192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1480.894912][T17192] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1481.285006][ T5199] Bluetooth: hci6: command tx timeout [ 1481.643067][T17192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1481.645861][T17192] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1481.742806][T17192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1482.503420][T17192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.769216][T17192] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.839267][T17331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.839548][T17331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1483.226380][T17331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.226576][T17331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1483.330999][ T5199] Bluetooth: hci6: command tx timeout [ 1484.920316][T17578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.920453][T17578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.920779][T17578] bridge_slave_0: entered allmulticast mode [ 1484.975102][T17578] bridge_slave_0: entered promiscuous mode [ 1485.012729][T17578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.014558][T17578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.039084][T17578] bridge_slave_1: entered allmulticast mode [ 1485.064643][T17578] bridge_slave_1: entered promiscuous mode [ 1485.359199][T17578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.420657][ T5199] Bluetooth: hci6: command tx timeout [ 1485.467716][T17578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1485.535630][T17578] team0: Port device team_slave_0 added [ 1485.546302][T17578] team0: Port device team_slave_1 added [ 1487.121237][ T5631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1487.243828][ T5631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1487.247868][ T5631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1487.371324][ T5631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1487.374618][ T5631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1487.503045][ T5631] Bluetooth: hci6: command tx timeout [ 1488.856662][T17578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.856694][T17578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.856727][T17578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.919398][T17578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.919418][T17578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.919449][T17578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1489.028066][T10060] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1489.189673][T10060] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1489.209534][T10060] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1489.246738][T10060] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1489.247676][T10060] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1489.571386][ T5199] Bluetooth: hci7: command tx timeout [ 1489.684146][T17578] hsr_slave_0: entered promiscuous mode [ 1489.685642][T17578] hsr_slave_1: entered promiscuous mode [ 1489.686659][T17578] debugfs: 'hsr0' already exists in 'hsr' [ 1489.686684][T17578] Cannot create hsr debugfs directory [ 1491.344049][T10060] Bluetooth: hci8: command tx timeout [ 1491.651095][T10060] Bluetooth: hci7: command tx timeout [ 1493.421195][T10060] Bluetooth: hci8: command tx timeout [ 1493.707137][T17192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1493.731805][T10060] Bluetooth: hci7: command tx timeout [ 1495.501066][T10060] Bluetooth: hci8: command tx timeout [ 1495.821533][T10060] Bluetooth: hci7: command tx timeout [ 1497.335941][T17578] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1497.581232][ T5199] Bluetooth: hci8: command tx timeout [ 1498.075861][T17578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1498.141144][T17578] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1498.837747][T17578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1498.958402][T17578] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1499.625675][T17578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1499.726079][T17578] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1500.883816][T17578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1503.609887][T17192] veth0_vlan: entered promiscuous mode [ 1505.549248][T17021] syz_tun (unregistering): left allmulticast mode [ 1505.789388][T17021] team0: Port device syz_tun removed [ 1509.718472][T17683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.718605][T17683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.718848][T17683] bridge_slave_0: entered allmulticast mode [ 1509.745433][T17683] bridge_slave_0: entered promiscuous mode [ 1509.826439][T17683] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.826672][T17683] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.826963][T17683] bridge_slave_1: entered allmulticast mode [ 1509.851483][T17683] bridge_slave_1: entered promiscuous mode [ 1509.878289][T17192] veth1_vlan: entered promiscuous mode [ 1510.066662][T17683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1510.202722][T17683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1510.206356][T17695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.206514][T17695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.206679][T17695] bridge_slave_0: entered allmulticast mode [ 1510.221986][T17695] bridge_slave_0: entered promiscuous mode [ 1510.448560][T17695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.448720][T17695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.449019][T17695] bridge_slave_1: entered allmulticast mode [ 1510.477806][T17695] bridge_slave_1: entered promiscuous mode [ 1511.245985][T17683] team0: Port device team_slave_0 added [ 1511.453374][T17683] team0: Port device team_slave_1 added [ 1511.467229][T17695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.547535][T17695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1511.716965][T17683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.716984][T17683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1511.717033][T17683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1511.817303][T17683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1511.817324][T17683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1511.817355][T17683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1511.871322][T17695] team0: Port device team_slave_0 added [ 1512.563488][T17695] team0: Port device team_slave_1 added [ 1513.007121][T17695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1513.007141][T17695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.007172][T17695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.104985][T17683] hsr_slave_0: entered promiscuous mode [ 1513.116294][T17683] hsr_slave_1: entered promiscuous mode [ 1513.123313][T17683] debugfs: 'hsr0' already exists in 'hsr' [ 1513.123345][T17683] Cannot create hsr debugfs directory [ 1513.195327][T17695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.195347][T17695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.195379][T17695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.464394][T17578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.708489][T10060] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1513.776150][T10060] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1513.880373][T10060] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1513.941593][T10060] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1513.985539][T10060] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1515.033853][T17695] hsr_slave_0: entered promiscuous mode [ 1515.051763][T17695] hsr_slave_1: entered promiscuous mode [ 1515.056753][T17695] debugfs: 'hsr0' already exists in 'hsr' [ 1515.056783][T17695] Cannot create hsr debugfs directory [ 1516.169393][T17578] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.217262][ T5199] Bluetooth: hci3: command tx timeout [ 1516.438615][T17319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.459303][T17319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.892170][T17331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.892414][T17331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1518.319739][ T5199] Bluetooth: hci3: command tx timeout [ 1520.370985][ T5199] Bluetooth: hci3: command tx timeout [ 1522.461170][ T5199] Bluetooth: hci3: command tx timeout [ 1526.553022][T18073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.553158][T18073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.553505][T18073] bridge_slave_0: entered allmulticast mode [ 1526.596450][T18073] bridge_slave_0: entered promiscuous mode [ 1526.698626][T18073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.698848][T18073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.699160][T18073] bridge_slave_1: entered allmulticast mode [ 1526.743179][T18073] bridge_slave_1: entered promiscuous mode [ 1527.101233][T18073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1527.142656][T18073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1527.783367][T18073] team0: Port device team_slave_0 added [ 1527.918529][T18073] team0: Port device team_slave_1 added [ 1529.649420][T18073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.649442][T18073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.649475][T18073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.721088][T18073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.721108][T18073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.721139][T18073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1530.129787][T18073] hsr_slave_0: entered promiscuous mode [ 1530.198588][T18073] hsr_slave_1: entered promiscuous mode [ 1530.208794][T18073] debugfs: 'hsr0' already exists in 'hsr' [ 1530.208825][T18073] Cannot create hsr debugfs directory [ 1532.454286][T17578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1533.299609][T17578] veth0_vlan: entered promiscuous mode [ 1533.378756][T17578] veth1_vlan: entered promiscuous mode [ 1533.846516][T17578] veth0_macvtap: entered promiscuous mode [ 1533.873414][T17578] veth1_macvtap: entered promiscuous mode [ 1534.194730][T17578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1534.262619][T17578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1534.320024][T17325] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.320081][T17325] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.320124][T17325] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.320163][T17325] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.679173][T17300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.679198][T17300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.959967][T10060] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1539.063857][T10060] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1539.119300][T10060] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1539.185674][T10060] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1539.201343][T10060] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1541.491350][ T5199] Bluetooth: hci1: command tx timeout [ 1543.390745][T18412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.390873][T18412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.391178][T18412] bridge_slave_0: entered allmulticast mode [ 1543.394327][T18412] bridge_slave_0: entered promiscuous mode [ 1543.398070][T18412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.398275][T18412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.398557][T18412] bridge_slave_1: entered allmulticast mode [ 1543.406647][T18412] bridge_slave_1: entered promiscuous mode [ 1543.562244][T18412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.577043][T18412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.580033][ T5199] Bluetooth: hci1: command tx timeout [ 1543.680957][T18412] team0: Port device team_slave_0 added [ 1543.685757][T18412] team0: Port device team_slave_1 added [ 1545.203198][T18412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.203218][T18412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.203249][T18412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.205854][T18412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.205870][T18412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.205901][T18412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1545.661254][ T5199] Bluetooth: hci1: command tx timeout [ 1545.746727][T18412] hsr_slave_0: entered promiscuous mode [ 1545.748373][T18412] hsr_slave_1: entered promiscuous mode [ 1545.749394][T18412] debugfs: 'hsr0' already exists in 'hsr' [ 1545.749421][T18412] Cannot create hsr debugfs directory [ 1547.077401][T10060] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1547.157521][T10060] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1547.159663][T10060] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1547.516600][T10060] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1547.517630][T10060] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1547.741428][ T5199] Bluetooth: hci1: command tx timeout [ 1549.239315][T10060] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1549.362728][T10060] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1549.493254][T10060] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1549.548531][T10060] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1549.638044][T10060] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1549.738266][T10060] Bluetooth: hci4: command tx timeout [ 1550.947013][T18546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.947249][T18546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.949762][T18546] bridge_slave_0: entered allmulticast mode [ 1550.984789][T18546] bridge_slave_0: entered promiscuous mode [ 1551.079815][T18546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.091143][T18546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.091489][T18546] bridge_slave_1: entered allmulticast mode [ 1551.139145][T18546] bridge_slave_1: entered promiscuous mode [ 1551.218341][T18546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.266025][T18546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1551.437967][T18546] team0: Port device team_slave_0 added [ 1551.478959][T18546] team0: Port device team_slave_1 added [ 1551.820522][ T5199] Bluetooth: hci4: command tx timeout [ 1551.890183][ T5199] Bluetooth: hci6: command tx timeout [ 1553.612994][T18546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1553.613013][T18546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1553.613044][T18546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1553.679997][T18546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1553.680019][T18546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1553.680050][T18546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1553.892033][ T5199] Bluetooth: hci4: command tx timeout [ 1553.914428][T18546] hsr_slave_0: entered promiscuous mode [ 1553.915965][T18546] hsr_slave_1: entered promiscuous mode [ 1553.917035][T18546] debugfs: 'hsr0' already exists in 'hsr' [ 1553.917061][T18546] Cannot create hsr debugfs directory [ 1553.970248][ T5199] Bluetooth: hci6: command tx timeout [ 1556.051440][ T5199] Bluetooth: hci4: command tx timeout [ 1556.052087][T10060] Bluetooth: hci6: command tx timeout [ 1557.045334][T18566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.045566][T18566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.045804][T18566] bridge_slave_0: entered allmulticast mode [ 1557.048959][T18566] bridge_slave_0: entered promiscuous mode [ 1557.082033][T18566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.082280][T18566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.082587][T18566] bridge_slave_1: entered allmulticast mode [ 1557.111497][T18566] bridge_slave_1: entered promiscuous mode [ 1557.172100][T18566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.176942][T18566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.246427][T18566] team0: Port device team_slave_0 added [ 1557.269573][T18566] team0: Port device team_slave_1 added [ 1557.321830][T18566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.321849][T18566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1557.321880][T18566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1557.324453][T18566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1557.324469][T18566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1557.324501][T18566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1557.524928][T18566] hsr_slave_0: entered promiscuous mode [ 1557.527197][T18566] hsr_slave_1: entered promiscuous mode [ 1557.528398][T18566] debugfs: 'hsr0' already exists in 'hsr' [ 1557.528426][T18566] Cannot create hsr debugfs directory [ 1558.141280][T10060] Bluetooth: hci6: command tx timeout [ 1573.417144][ T5199] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1573.495793][ T5199] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1573.528084][ T5199] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1573.636419][ T5199] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1573.637340][ T5199] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1575.990440][T10060] Bluetooth: hci0: command tx timeout [ 1577.078933][T19027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.079156][T19027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.079417][T19027] bridge_slave_0: entered allmulticast mode [ 1577.121719][T19027] bridge_slave_0: entered promiscuous mode [ 1577.127469][T19027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.127720][T19027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.129240][T19027] bridge_slave_1: entered allmulticast mode [ 1577.174901][T19027] bridge_slave_1: entered promiscuous mode [ 1577.505291][T19027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1577.563618][T19027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1578.061525][T10060] Bluetooth: hci0: command tx timeout [ 1578.847550][T19027] team0: Port device team_slave_0 added [ 1578.878225][T19027] team0: Port device team_slave_1 added [ 1578.973333][T19027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1578.973353][T19027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.973384][T19027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.978896][T19027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.978913][T19027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.978945][T19027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1579.375899][T19027] hsr_slave_0: entered promiscuous mode [ 1579.377596][T19027] hsr_slave_1: entered promiscuous mode [ 1579.378802][T19027] debugfs: 'hsr0' already exists in 'hsr' [ 1579.378829][T19027] Cannot create hsr debugfs directory [ 1580.131094][T10060] Bluetooth: hci0: command tx timeout [ 1582.221773][T10060] Bluetooth: hci0: command tx timeout [ 1598.917832][ T5199] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1599.067528][ T5199] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1599.092394][ T5199] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1599.140906][ T5199] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1599.160912][ T5199] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1601.019295][T19293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.019534][T19293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.043379][T19293] bridge_slave_0: entered allmulticast mode [ 1601.046602][T19293] bridge_slave_0: entered promiscuous mode [ 1601.066042][T19293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.066271][T19293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.066641][T19293] bridge_slave_1: entered allmulticast mode [ 1601.069783][T19293] bridge_slave_1: entered promiscuous mode [ 1601.199712][T19293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.233142][T19293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.376820][T19293] team0: Port device team_slave_0 added [ 1601.392994][T19293] team0: Port device team_slave_1 added [ 1601.453188][T19293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.453209][T19293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.453240][T19293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.456704][T19293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.456722][T19293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.456782][T19293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.491191][ T5199] Bluetooth: hci2: command tx timeout [ 1603.038059][T19293] hsr_slave_0: entered promiscuous mode [ 1603.047172][T19293] hsr_slave_1: entered promiscuous mode [ 1603.049185][T19293] debugfs: 'hsr0' already exists in 'hsr' [ 1603.049216][T19293] Cannot create hsr debugfs directory [ 1603.610805][ T5199] Bluetooth: hci2: command tx timeout [ 1605.650949][ T5199] Bluetooth: hci2: command tx timeout [ 1606.926240][T10060] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1606.985331][T10060] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1606.987124][T10060] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1606.988324][T10060] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1606.989545][T10060] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1607.731279][T10060] Bluetooth: hci2: command tx timeout [ 1608.726984][ T5199] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1608.826549][ T5199] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1608.852929][ T5199] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1608.881417][ T5199] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1608.917838][ T5199] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1609.411254][ T5199] Bluetooth: hci9: command tx timeout [ 1610.481036][T19314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.481172][T19314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.481566][T19314] bridge_slave_0: entered allmulticast mode [ 1610.484710][T19314] bridge_slave_0: entered promiscuous mode [ 1610.488139][T19314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.488269][T19314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.488897][T19314] bridge_slave_1: entered allmulticast mode [ 1610.575994][T19314] bridge_slave_1: entered promiscuous mode [ 1610.834236][T19314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1610.915307][T19314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1611.074779][T19314] team0: Port device team_slave_0 added [ 1611.105450][ T5199] Bluetooth: hci10: command tx timeout [ 1611.129791][T19314] team0: Port device team_slave_1 added [ 1611.491184][ T5199] Bluetooth: hci9: command tx timeout [ 1611.589718][T19314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1611.589738][T19314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1611.589780][T19314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1611.717987][T19314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1611.718006][T19314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1611.718038][T19314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1612.053639][T19314] hsr_slave_0: entered promiscuous mode [ 1612.056322][T19314] hsr_slave_1: entered promiscuous mode [ 1612.057548][T19314] debugfs: 'hsr0' already exists in 'hsr' [ 1612.057576][T19314] Cannot create hsr debugfs directory [ 1613.171047][T19344] Bluetooth: hci10: command tx timeout [ 1613.571299][T19343] Bluetooth: hci9: command tx timeout [ 1613.817648][T19343] Bluetooth: hci7: command 0x0406 tx timeout [ 1613.817679][T19344] Bluetooth: hci8: command 0x0406 tx timeout [ 1614.254294][T19327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.254541][T19327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.254834][T19327] bridge_slave_0: entered allmulticast mode [ 1614.257940][T19327] bridge_slave_0: entered promiscuous mode [ 1614.321151][T19327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.321304][T19327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.322449][T19327] bridge_slave_1: entered allmulticast mode [ 1614.325771][T19327] bridge_slave_1: entered promiscuous mode [ 1614.474556][T19327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.494729][T19327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.608198][T19327] team0: Port device team_slave_0 added [ 1614.621409][T19327] team0: Port device team_slave_1 added [ 1614.829398][T19327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1614.829419][T19327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1614.829449][T19327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1614.833549][T19327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1614.833570][T19327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1614.833600][T19327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1615.068635][T19327] hsr_slave_0: entered promiscuous mode [ 1615.077854][T19327] hsr_slave_1: entered promiscuous mode [ 1615.079091][T19327] debugfs: 'hsr0' already exists in 'hsr' [ 1615.079120][T19327] Cannot create hsr debugfs directory [ 1615.250995][T10060] Bluetooth: hci10: command tx timeout [ 1615.666826][T10060] Bluetooth: hci9: command tx timeout [ 1617.330054][T10060] Bluetooth: hci10: command tx timeout [ 1633.398205][ T5199] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1633.550132][ T5199] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1633.624863][ T5199] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1633.682506][ T5199] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1633.841048][ T5199] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1636.017531][T19357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.019405][T19357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.038625][T19357] bridge_slave_0: entered allmulticast mode [ 1636.057833][T19357] bridge_slave_0: entered promiscuous mode [ 1636.094978][T19357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.095208][T19357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.095571][T19357] bridge_slave_1: entered allmulticast mode [ 1636.098680][T19357] bridge_slave_1: entered promiscuous mode [ 1636.130919][ T5199] Bluetooth: hci11: command tx timeout [ 1636.229217][T19357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1636.266640][T19357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1636.423035][T19357] team0: Port device team_slave_0 added [ 1636.427595][T19357] team0: Port device team_slave_1 added [ 1636.519678][T19357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1636.519699][T19357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1636.519730][T19357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1637.335532][T19357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1637.335564][T19357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.335597][T19357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1637.482463][T19357] hsr_slave_0: entered promiscuous mode [ 1637.484819][T19357] hsr_slave_1: entered promiscuous mode [ 1637.486014][T19357] debugfs: 'hsr0' already exists in 'hsr' [ 1637.486042][T19357] Cannot create hsr debugfs directory [ 1638.211000][ T5199] Bluetooth: hci11: command tx timeout [ 1639.343376][ T5199] Bluetooth: hci3: command 0x0406 tx timeout [ 1640.299434][ T5199] Bluetooth: hci11: command tx timeout [ 1642.383805][T10060] Bluetooth: hci11: command tx timeout [ 1658.983775][T17319] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1658.983819][T17319] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.983849][T17319] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1659.972807][ T5199] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1660.123102][ T5199] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1660.277192][ T5199] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1660.299350][T19344] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1660.324024][T19344] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1662.621229][T10060] Bluetooth: hci12: command tx timeout [ 1664.118742][T19393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.118879][T19393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.119279][T19393] bridge_slave_0: entered allmulticast mode [ 1664.175928][T19393] bridge_slave_0: entered promiscuous mode [ 1664.247298][T19393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.247436][T19393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.247840][T19393] bridge_slave_1: entered allmulticast mode [ 1664.287476][T19393] bridge_slave_1: entered promiscuous mode [ 1664.384155][T19393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.389400][T19393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1664.467362][T19393] team0: Port device team_slave_0 added [ 1664.479006][T19393] team0: Port device team_slave_1 added [ 1664.675253][T19393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1664.675275][T19393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1664.675307][T19393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1664.691113][T10060] Bluetooth: hci12: command tx timeout [ 1664.736399][T19393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1664.736420][T19393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1664.736453][T19393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1665.011127][T10060] Bluetooth: hci1: command 0x0406 tx timeout [ 1665.015946][T19393] hsr_slave_0: entered promiscuous mode [ 1665.039591][T19393] hsr_slave_1: entered promiscuous mode [ 1665.052105][T19393] debugfs: 'hsr0' already exists in 'hsr' [ 1665.052137][T19393] Cannot create hsr debugfs directory [ 1666.773402][T19344] Bluetooth: hci12: command tx timeout [ 1667.347952][T10060] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1667.488651][T10060] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1667.502283][T10060] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1667.521762][T10060] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1667.542778][T10060] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1668.611919][ T38] INFO: task syz-executor:17695 blocked for more than 143 seconds. [ 1668.611953][ T38] Tainted: G L syzkaller #0 [ 1668.611967][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1668.611987][ T38] task:syz-executor state:D stack:18760 pid:17695 tgid:17695 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1668.612050][ T38] Call Trace: [ 1668.612059][ T38] [ 1668.612076][ T38] __schedule+0x16ec/0x5620 [ 1668.612149][ [ 1668.612149][ T38] ? __pfx___schedule+0x10/0x10 [ 1668.612175][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1668.612231][ T38] rt_mutex_schedule+0x76/0xf0 [ 1668.612255][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1668.612308][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1668.612349][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 1668.612376][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 1668.612401][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1668.612438][ T38] ? del_device_store+0xd7/0x370 [ 1668.612469][ T38] ? del_device_store+0xd7/0x370 [ 1668.612500][ T38] ? del_device_store+0xd7/0x370 [ 1668.612522][ T38] mutex_lock_nested+0x168/0x1d0 [ 1668.612565][ T38] del_device_store+0xd7/0x370 [ 1668.612587][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1668.612624][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1668.612648][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1668.612681][ T38] ? sysfs_kf_write+0x166/0x260 [ 1668.612719][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1668.612749][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1668.612787][ T38] vfs_write+0x629/0xba0 [ 1668.612906][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1668.612936][ T38] ? do_sys_openat2+0x14c/0x200 [ 1668.612970][ T38] ? kmem_cache_free+0x187/0x6c0 [ 1668.613053][ T38] ksys_write+0x156/0x270 [ 1668.613084][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1668.613122][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.613150][ T38] do_syscall_64+0x15f/0xf80 [ 1668.613180][ T38] ? trace_irq_disable+0x3b/0x140 [ 1668.613209][ T38] ? clear_bhb_loop+0x40/0x90 [ 1668.613239][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.613285][ T38] RIP: 0033:0x7f2ef01ed68e [ 1668.613307][ T38] RSP: 002b:00007ffff6374ff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1668.613332][ T38] RAX: ffffffffffffffda RBX: 0000555555dec500 RCX: 00007f2ef01ed68e [ 1668.613385][ T38] RDX: 0000000000000001 RSI: 00007ffff6375080 RDI: 0000000000000005 [ 1668.613402][ T38] RBP: 00007f2ef02c35f2 R08: 0000000000000000 R09: 0000000000000000 [ 1668.613417][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1668.613432][ T38] R13: 00007ffff6375080 R14: 00007f2ef0fd4620 R15: 0000000000000003 [ 1668.613469][ T38] [ 1668.613537][ T38] [ 1668.613537][ T38] Showing all locks held in the system: [ 1668.613552][ T38] 4 locks held by rcuc/1/28: [ 1668.613572][ T38] 4 locks held by ksoftirqd/1/30: [ 1668.613585][ T38] 1 lock held by khungtaskd/38: [ 1668.613597][ T38] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1668.613695][ T38] 2 locks held by getty/5362: [ 1668.613709][ T38] #0: ffff888036bd40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1668.613804][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1668.613872][ T38] 2 locks held by kworker/0:5/22170: [ 1668.613887][ T38] #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1668.613946][ T38] #1: ffffc9000436fc40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1668.614012][ T38] 2 locks held by kworker/1:9/22232: [ 1668.614033][ T38] 3 locks held by kworker/u9:2/10060: [ 1668.614046][ T38] #0: ffff88807a8ba138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1668.614103][ T38] #1: ffffc9000448fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1668.614161][ T38] #2: ffff8880840f0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1668.614228][ T38] 6 locks held by kworker/u8:38/17319: [ 1668.614241][ T38] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1668.614302][ T38] #1: ffffc90007537c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1668.614456][ T38] #2: ffffffff8f3487a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1668.614513][ T38] #3: ffff88805f5a8160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1668.614580][ T38] #4: ffff888021aa6310 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1668.614650][ T38] #5: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1668.618836][ T38] 2 locks held by kworker/u8:42/17325: [ 1668.618859][ T38] #0: ffff88801a074938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1668.618931][ T38] #1: ffffc90006c57c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1668.619010][ T38] 2 locks held by kworker/u8:46/17337: [ 1668.619029][ T38] 1 lock held by syz.3.20119/17448: [ 1668.619042][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1668.619105][ T38] 1 lock held by syz.7.20126/17458: [ 1668.619119][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1668.619173][ T38] 7 locks held by syz-executor/17683: [ 1668.619187][ T38] #0: ffff888033f62480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1668.619249][ T38] #1: ffff88803e769c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1668.619308][ T38] #2: ffff888029d3af08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1668.619368][ T38] #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1668.619420][ T38] #4: ffff888060d0c160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1668.619479][ T38] #5: ffff88803dbea310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1668.619543][ T38] #6: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1668.619597][ T38] 4 locks held by syz-executor/17695: [ 1668.619611][ T38] #0: ffff888033f62480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1668.619670][ T38] #1: ffff888061fdfc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1668.619729][ T38] #2: ffff888029d3af08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1668.619793][ T38] #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1668.635040][ T38] 4 locks held by syz-executor/18073: [ 1668.635099][ T38] #0: ffff888033f62480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1668.635291][ T38] #1: ffff888060553478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1668.635425][ T38] #2: ffff888029d3af08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1668.635584][ T38] #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1668.635729][ T38] 4 locks held by syz-executor/18412: [ 1668.635761][ T38] #0: ffff888033f62480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1668.635914][ T38] #1: ffff8880745d3478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1668.645415][ T38] #2: ffff888029d3af08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1668.645558][ T38] #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1668.645705][ T38] 4 locks held by syz-executor/18546: [ 1668.645745][ T38] #0: ffff888033f62480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1668.645898][ T38] #1: ffff88803cbcd878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1668.646030][ T38] #2: ffff888029d3af08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1668.646195][ T38] #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1668.646331][ T38] 4 locks held by syz-executor/18566: [ 1668.646370][ T38] #0: ffff888033f62480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1668.646533][ T38] #1: ffff8880873b6078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1668.646682][ T38] #2: ffff888029d3af08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1668.646883][ T38] #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1668.647061][ T38] 4 locks held by syz-executor/19027: [ 1668.647094][ T38] #0: ffff888033f62480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1668.647230][ T38] #1: ffff88802b799878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1668.647327][ T38] #2: ffff888029d3af08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1668.647496][ T38] #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1668.647638][ T38] 4 locks held by syz-executor/19293: [ 1668.647671][ T38] #0: ffff888033f62480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1668.647825][ T38] #1: ffff8880543e7878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1668.647976][ T38] #2: ffff888029d3af08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1668.648153][ T38] #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1668.663543][ T38] 4 locks held by syz-executor/19314: [ 1668.663560][ T38] #0: ffff888033f62480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1668.663622][ T38] #1: ffff8880253a2478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1668.663682][ T38] #2: ffff888029d3af08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1668.663744][ T38] #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1668.663799][ T38] 2 locks held by syz-executor/19325: [ 1668.663812][ T38] 4 locks held by syz-executor/19327: [ 1668.663826][ T38] #0: ffff888033f62480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1668.663883][ T38] #1: ffff88806b315478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1668.663960][ T38] #2: ffff888029d3af08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1668.664032][ T38] #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1668.664088][ T38] 4 locks held by syz-executor/19357: [ 1668.664102][ T38] #0: ffff888033f62480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1668.664161][ T38] #1: ffff88805c753878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1668.664218][ T38] #2: ffff888029d3af08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1668.664281][ T38] #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1668.664336][ T38] 4 locks held by syz-executor/19393: [ 1668.664348][ T38] #0: ffff888033f62480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1668.664407][ T38] #1: ffff888054c25878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1668.664465][ T38] #2: ffff888029d3af08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1668.664526][ T38] #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1668.664667][ T38] [ 1668.664688][ T38] ============================================= [ 1668.664688][ T38] [ 1668.664742][ T38] NMI backtrace for cpu 1 [ 1668.664803][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1668.664872][ T38] Tainted: [L]=SOFTLOCKUP [ 1668.664886][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1668.664919][ T38] Call Trace: [ 1668.664947][ T38] [ 1668.664970][ T38] dump_stack_lvl+0xe8/0x150 [ 1668.665054][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1668.665152][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1668.665227][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1668.665331][ T38] sys_info+0x135/0x170 [ 1668.665399][ T38] watchdog+0xfd3/0x1030 [ 1668.665490][ T38] ? watchdog+0x1c9/0x1030 [ 1668.665580][ T38] kthread+0x388/0x470 [ 1668.665665][ T38] ? __pfx_watchdog+0x10/0x10 [ 1668.665727][ T38] ? __pfx_kthread+0x10/0x10 [ 1668.665774][ T38] ret_from_fork+0x514/0xb70 [ 1668.665861][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1668.665926][ T38] ? __switch_to+0xc79/0x1410 [ 1668.666040][ T38] ? __pfx_kthread+0x10/0x10 [ 1668.666123][ T38] ret_from_fork_asm+0x1a/0x30 [ 1668.666245][ T38] [ 1668.666308][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1668.666372][ C0] NMI backtrace for cpu 0 [ 1668.666390][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1668.666415][ C0] Tainted: [L]=SOFTLOCKUP [ 1668.666422][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1668.666434][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1668.666536][ C0] Code: e8 0e 3a 90 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 45 f7 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1668.666552][ C0] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 1668.666569][ C0] RAX: 1ffffffff3363200 RBX: 00000000000003fd RCX: 0000000000000000 [ 1668.666582][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1668.666593][ C0] RBP: ffffffff99b19970 R08: 0000000000000000 R09: 0000000000000000 [ 1668.666605][ C0] R10: dffffc0000000000 R11: ffffffff85343c70 R12: dffffc0000000000 [ 1668.666619][ C0] R13: 0000000000000000 R14: ffffffff99b196e0 R15: 0000000000000000 [ 1668.666631][ C0] FS: 0000000000000000(0000) GS:ffff888126176000(0000) knlGS:0000000000000000 [ 1668.666646][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1668.666658][ C0] CR2: 00007ffcb97fbecc CR3: 0000000011410000 CR4: 00000000003526f0 [ 1668.666675][ C0] Call Trace: [ 1668.666682][ C0] [ 1668.666693][ C0] wait_for_lsr+0x1aa/0x2f0 [ 1668.666723][ C0] serial8250_console_write+0x1391/0x1b90 [ 1668.666758][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1668.666784][ C0] ? console_flush_one_record+0xfa/0xb90 [ 1668.666868][ C0] ? console_flush_one_record+0x48f/0xb90 [ 1668.666896][ C0] console_flush_one_record+0x68b/0xb90 [ 1668.666924][ C0] ? console_flush_one_record+0xfa/0xb90 [ 1668.666951][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1668.666978][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1668.667006][ C0] legacy_kthread_func+0x1b6/0x250 [ 1668.667032][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1668.667056][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1668.667082][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1668.667109][ C0] kthread+0x388/0x470 [ 1668.667134][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1668.667157][ C0] ? __pfx_kthread+0x10/0x10 [ 1668.667183][ C0] ret_from_fork+0x514/0xb70 [ 1668.667205][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1668.667226][ C0] ? __switch_to+0xc79/0x1410 [ 1668.667255][ C0] ? __pfx_kthread+0x10/0x10 [ 1668.667281][ C0] ret_from_fork_asm+0x1a/0x30 [ 1668.667314][ C0] [ 1668.680221][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1668.680249][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1668.680281][ T38] Tainted: [L]=SOFTLOCKUP [ 1668.680290][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1668.680304][ T38] Call Trace: [ 1668.680314][ T38] [ 1668.680325][ T38] vpanic+0x56c/0xa60 [ 1668.680361][ T38] ? __pfx___schedule+0x10/0x10 [ 1668.680391][ T38] ? __pfx_vpanic+0x10/0x10 [ 1668.680432][ T38] panic+0xc5/0xd0 [ 1668.680460][ T38] ? __pfx_panic+0x10/0x10 [ 1668.680491][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1668.680527][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1668.680569][ T38] watchdog+0x102c/0x1030 [ 1668.680607][ T38] ? watchdog+0x1c9/0x1030 [ 1668.680641][ T38] kthread+0x388/0x470 [ 1668.680677][ T38] ? __pfx_watchdog+0x10/0x10 [ 1668.680702][ T38] ? __pfx_kthread+0x10/0x10 [ 1668.680734][ T38] ret_from_fork+0x514/0xb70 [ 1668.680763][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1668.680789][ T38] ? __switch_to+0xc79/0x1410 [ 1668.680825][ T38] ? __pfx_kthread+0x10/0x10 [ 1668.680855][ T38] ret_from_fork_asm+0x1a/0x30 [ 1668.680903][ T38] [ 1668.681811][ T38] Kernel Offset: disabled