last executing test programs: 3m8.783774964s ago: executing program 4 (id=915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m8.65787947s ago: executing program 4 (id=918): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r0, &(0x7f0000000100)=""/42, 0x2a) getdents64(r0, 0x0, 0x43) 3m8.599274345s ago: executing program 4 (id=920): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x88000, 0x0) pidfd_send_signal(r0, 0x17, 0x0, 0x0) 3m8.469216216s ago: executing program 4 (id=924): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0xcc0c}], 0x1) 3m8.322685843s ago: executing program 4 (id=927): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 3m8.162373871s ago: executing program 4 (id=930): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x2}]}}, &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa, 0x0, 0x0, @void, @value}, 0x20) 2m53.06250862s ago: executing program 32 (id=930): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x2}]}}, &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa, 0x0, 0x0, @void, @value}, 0x20) 1m41.954924748s ago: executing program 2 (id=2323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)={0x54, r1, 0xfe12482fe0801d67, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1f40}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x44004) 1m41.745861471s ago: executing program 2 (id=2325): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x40) 1m41.506004819s ago: executing program 2 (id=2328): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000005200010000000000000000001c000000040002"], 0x18}}, 0x0) 1m41.246032807s ago: executing program 2 (id=2331): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 1m40.800301653s ago: executing program 2 (id=2334): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000002140)=@newtaction={0x18, 0x31, 0x829, 0x70bd2c, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 1m40.631788328s ago: executing program 2 (id=2335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="01000900000000000000aaaaaaaaaa3d000000000000018082000002000000000000aaaaaaaaaabb0180c2000000aaaaaaaaaaaaff"]) 1m39.429440872s ago: executing program 3 (id=2344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31070000000000000000380000000e0001"], 0x3c}, 0x1, 0x2}, 0x0) 1m39.210995787s ago: executing program 3 (id=2347): r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 1m39.069463365s ago: executing program 3 (id=2348): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000480)={0x8, 0x4, 0x4, 0x1000, &(0x7f0000001280)=""/4096, 0x0, 0x0, 0x0, 0x0}) 1m38.861944948s ago: executing program 3 (id=2350): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) 1m38.694258091s ago: executing program 3 (id=2352): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x200000000) 1m38.504035396s ago: executing program 3 (id=2354): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdb) 1m37.061639327s ago: executing program 5 (id=2371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x20, r1, 0x1, 0x70bd27, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200008c1}, 0x0) 1m36.906862942s ago: executing program 0 (id=2372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011000000000000000001000000008000900d25400001800018014000200776c616e310000000000000000000000080006"], 0x3c}, 0x1, 0x0, 0x0, 0x48005}, 0x0) 1m36.901038536s ago: executing program 5 (id=2373): r0 = timerfd_create(0x0, 0x80800) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x4) readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f00000006c0)=""/199, 0xc7}], 0x2) 1m36.72574518s ago: executing program 5 (id=2375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) 1m36.712790543s ago: executing program 0 (id=2376): capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x9, 0x0, 0x6}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000480)=""/187) 1m36.538921065s ago: executing program 5 (id=2378): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m36.529349298s ago: executing program 0 (id=2379): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd(0xffffffffffffffff, &(0x7f00000004c0)={[0x3]}, 0x8) setns(r0, 0x80) 1m36.358031958s ago: executing program 0 (id=2381): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) shutdown(r0, 0x1) 1m36.329870475s ago: executing program 5 (id=2382): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r0, &(0x7f0000000080)='r', 0x1, 0x1) pwrite64(r0, &(0x7f00000000c0)="c1db65", 0x3, 0x200) 1m36.128533004s ago: executing program 0 (id=2384): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='cramfs\x00', 0x8000, 0x0) 1m36.019497216s ago: executing program 5 (id=2385): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x45) 1m35.93531093s ago: executing program 0 (id=2386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000080)) 1m25.079434905s ago: executing program 33 (id=2335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="01000900000000000000aaaaaaaaaa3d000000000000018082000002000000000000aaaaaaaaaabb0180c2000000aaaaaaaaaaaaff"]) 1m23.167186117s ago: executing program 34 (id=2354): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdb) 1m21.075207241s ago: executing program 1 (id=2439): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='ext4_sync_fs\x00', r0, 0x0, 0x2}, 0x18) sync() 1m20.576227221s ago: executing program 35 (id=2386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000080)) 1m20.436206273s ago: executing program 36 (id=2385): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x45) 1m18.113727951s ago: executing program 1 (id=2442): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000180)={[{@gid}, {@uid={'uid', 0x3d, 0xee00}}]}) 1m17.947880039s ago: executing program 1 (id=2443): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x5, 0x3) 1m17.698559177s ago: executing program 1 (id=2444): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8000, 0x6) 1m17.167453545s ago: executing program 1 (id=2445): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x7f1, 0x84, 0xefcc, 0x6, 0x5, "f06fca79266e82a74b6c5e443a04683cc267a0", 0x6, 0xc}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 1m16.918944145s ago: executing program 1 (id=2446): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) io_submit(r1, 0x4, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe23}]) 1m3.042904238s ago: executing program 6 (id=2452): unshare(0x20600) r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) 1m2.48475044s ago: executing program 6 (id=2453): r0 = syz_io_uring_setup(0x70ee, &(0x7f00000020c0)={0x0, 0x0, 0x100, 0x0, 0x12d}, &(0x7f0000000080), &(0x7f0000000180)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f0000000000)={{}, {0x0, 0x9}}, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x16, &(0x7f0000000000), 0x1) 1m2.190993884s ago: executing program 6 (id=2454): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)="826dd3e3e1fc5c4e183f8800a571080d73e7b520c47d6aa6644a8b7e1d9165d4033f9be97d46c0a2cbec3c6fed45c98d4628080123ed495c48031015d9f093d93008b26017b68a2f6d72488a79a54258b4e4fa000889f0e6b3a9535a4785ea3ef8a096d1a0498ffbc51a57f91fef0dd7972f875a1e520df32a7c642ea3782a39f7e479a0d45e1186cedcb851ec56982293881316be21dcb0510560002c46978d5b1293632d5452b14c06e3de106d2dd3a3343e6e04ed48f1d69bf3a294b0744de517522064561ce525b8924c75b1620a3a8e012b75af11376b93f07a4db855d19adb84", 0xe3}, {&(0x7f0000002900)="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", 0xdde}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 1m2.004344584s ago: executing program 6 (id=2455): inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/169, 0xa9}], 0x1, 0x0, 0x0) 1m1.725312588s ago: executing program 37 (id=2446): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) io_submit(r1, 0x4, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe23}]) 1m1.712755402s ago: executing program 6 (id=2457): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/94, 0x5e) getdents(r0, 0xfffffffffffffffd, 0x3b) 1m1.409202289s ago: executing program 6 (id=2458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x18000}) 46.093644532s ago: executing program 38 (id=2458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x18000}) 33.763190115s ago: executing program 8 (id=2511): setreuid(0xffffffffffffffff, 0xee01) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080041900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000a00008500000005000000bf0920000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 33.401498235s ago: executing program 8 (id=2514): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) 32.806802359s ago: executing program 8 (id=2518): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) 32.380345079s ago: executing program 8 (id=2521): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpgid(0x0, r1) 32.007639434s ago: executing program 8 (id=2524): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x0, 0x3}, 0x10) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/37, 0x25}], 0x1, &(0x7f0000000880)=""/184, 0xb8}, 0x104}], 0x1, 0x40000003, 0x0) 31.637497233s ago: executing program 8 (id=2527): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0xc8c0) 20.743111852s ago: executing program 9 (id=2577): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r1, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x8}]}}}]}, 0x44}}, 0x0) 20.420392855s ago: executing program 9 (id=2580): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="284001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.423238785s ago: executing program 9 (id=2588): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x20) 17.956690639s ago: executing program 9 (id=2589): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 17.783159084s ago: executing program 7 (id=2590): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) 17.712928723s ago: executing program 9 (id=2591): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x1}) read$FUSE(r0, &(0x7f0000008440)={0x2020}, 0x2020) 17.57126585s ago: executing program 7 (id=2592): syz_80211_inject_frame(0x0, 0x0, 0xb5) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x10) 17.191109903s ago: executing program 9 (id=2593): r0 = io_uring_setup(0x7a4, &(0x7f00000003c0)={0x0, 0xdf09, 0x800, 0x5}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1400, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16.510887781s ago: executing program 39 (id=2527): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0xc8c0) 16.495354483s ago: executing program 7 (id=2595): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) 15.512953204s ago: executing program 7 (id=2596): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mbind(&(0x7f00001dc000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x0, 0x3) 15.336012611s ago: executing program 7 (id=2597): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DST={0x8}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010100}]}, 0x2c}}, 0x0) 15.20586136s ago: executing program 7 (id=2598): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x63, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x0, 0x10, 0x7, {0x7, 0x23, '\x00\x00\x00 \x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.980330248s ago: executing program 40 (id=2593): r0 = io_uring_setup(0x7a4, &(0x7f00000003c0)={0x0, 0xdf09, 0x800, 0x5}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1400, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 41 (id=2598): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x63, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x0, 0x10, 0x7, {0x7, 0x23, '\x00\x00\x00 \x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): gid=0 ses=4294967295 subj=_ pid=8515 comm="syz.3.1178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08d338e969 code=0x0 [ 147.778701][ T7785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.797905][ T7785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.813903][ T7785] bond0 (unregistering): Released all slaves [ 147.831892][ T8527] nbd: must specify at least one socket [ 147.980541][ T7785] IPVS: stopping master sync thread 6574 ... [ 148.212133][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.251565][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.290489][ T8450] bridge_slave_0: entered allmulticast mode [ 148.302455][ T8450] bridge_slave_0: entered promiscuous mode [ 148.375770][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.382913][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.444561][ T8450] bridge_slave_1: entered allmulticast mode [ 148.475701][ T8450] bridge_slave_1: entered promiscuous mode [ 148.876474][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.921453][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'. [ 148.957865][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.004262][ T5832] Bluetooth: hci5: command tx timeout [ 149.326157][ T7785] hsr_slave_0: left promiscuous mode [ 149.331468][ T7785] hsr_slave_1: left promiscuous mode [ 149.331865][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 149.331893][ T8599] netlink: 'syz.1.1209': attribute type 2 has an invalid length. [ 149.331914][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1209'. [ 149.332188][ T7785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.332222][ T7785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.334269][ T7785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.334291][ T7785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.356919][ T7785] veth1_macvtap: left promiscuous mode [ 149.410386][ T7785] veth0_macvtap: left promiscuous mode [ 149.410560][ T7785] veth1_vlan: left promiscuous mode [ 149.422796][ T7785] veth0_vlan: left promiscuous mode [ 149.799641][ T7785] team0 (unregistering): Port device team_slave_1 removed [ 149.829930][ T7785] team0 (unregistering): Port device team_slave_0 removed [ 150.124217][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 150.221636][ T8450] team0: Port device team_slave_0 added [ 150.230632][ T8450] team0: Port device team_slave_1 added [ 150.504774][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.512372][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.538309][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.548183][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.562629][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.569954][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.596629][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.877987][ T8450] hsr_slave_0: entered promiscuous mode [ 150.905054][ T8450] hsr_slave_1: entered promiscuous mode [ 150.923331][ T8450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.943232][ T8450] Cannot create hsr debugfs directory [ 151.084611][ T5832] Bluetooth: hci5: command tx timeout [ 151.696162][ T8676] tipc: Started in network mode [ 151.701456][ T8676] tipc: Node identity , cluster identity 4711 [ 151.709176][ T8676] tipc: Failed to set node id, please configure manually [ 151.716628][ T8676] tipc: Enabling of bearer rejected, failed to enable media [ 151.807746][ T8450] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 151.857063][ T8450] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.896154][ T8450] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.920140][ T8450] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.243752][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.332222][ T8450] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.401887][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.409071][ T7785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.472527][ T7808] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.479698][ T7808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.893724][ T8728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1259'. [ 153.157600][ T8450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.174291][ T5832] Bluetooth: hci5: command tx timeout [ 153.282689][ T8750] netlink: 'syz.0.1267': attribute type 32 has an invalid length. [ 153.292909][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 153.310805][ T8750] (unnamed net_device) (uninitialized): option coupled_control: invalid value (255) [ 153.697662][ T8767] nbd: must specify a size in bytes for the device [ 154.015255][ T8450] veth0_vlan: entered promiscuous mode [ 154.057053][ T8450] veth1_vlan: entered promiscuous mode [ 154.143054][ T8450] veth0_macvtap: entered promiscuous mode [ 154.191517][ T8450] veth1_macvtap: entered promiscuous mode [ 154.278174][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.324093][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.357577][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.380642][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.414798][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.431605][ T8808] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1286'. [ 154.457293][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.475073][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.510011][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.541349][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.628148][ T8808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1286'. [ 154.656955][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'. [ 154.736761][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.760106][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.779782][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.790803][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.821817][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.861727][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.870023][ T8827] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 154.894147][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.918008][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.937472][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.997843][ T8450] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.022538][ T8450] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.042343][ T8450] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.072992][ T8450] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.158663][ T53] kernel write not supported for file /sg0 (pid: 53 comm: kworker/1:1) [ 155.355758][ T7785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.363611][ T7785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.492235][ T7792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.555783][ T7792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.546177][ T8901] openvswitch: netlink: IPv6 tunnel dst address is zero [ 156.770001][ T8912] netlink: 'syz.3.1328': attribute type 27 has an invalid length. [ 156.854293][ T5867] IPVS: starting estimator thread 0... [ 156.954773][ T8916] IPVS: using max 37 ests per chain, 88800 per kthread [ 156.978876][ T8925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.257968][ T8942] netlink: 'syz.2.1340': attribute type 1 has an invalid length. [ 157.295944][ T8942] netlink: 'syz.2.1340': attribute type 2 has an invalid length. [ 157.677483][ T5950] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 157.698563][ T8966] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.707662][ T8966] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.716467][ T8966] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.725917][ T8966] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.785511][ T8966] Zero length message leads to an empty skb [ 157.907744][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 157.932932][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.981403][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.032797][ T5950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 158.096710][ T5950] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 158.134817][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1353'. [ 158.143777][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.181629][ T5950] usb 2-1: config 0 descriptor?? [ 158.500292][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1359'. [ 158.544492][ T9002] smc: net device bond0 applied user defined pnetid S [ 158.648548][ T5950] microsoft 0003:045E:07DA.0019: No inputs registered, leaving [ 158.707471][ T5950] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 158.736022][ T5950] microsoft 0003:045E:07DA.0019: no inputs found [ 158.768327][ T5950] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway [ 158.910846][ T5868] usb 2-1: USB disconnect, device number 12 [ 159.274113][ T5865] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 159.450361][ T5865] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 159.484469][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 159.510833][ T5865] usb 4-1: Product: syz [ 159.525293][ T5865] usb 4-1: Manufacturer: syz [ 159.538342][ T5865] usb 4-1: SerialNumber: syz [ 159.574256][ T5868] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 159.622981][ T5865] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 159.749455][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 159.778899][ T5868] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 159.818484][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.842298][ T5868] usb 6-1: config 0 descriptor?? [ 159.859838][ T120] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 159.889262][ T9067] tipc: Enabling of bearer rejected, failed to enable media [ 160.019441][ T5865] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 160.025789][ T9075] program syz.2.1381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.034177][ T5865] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 160.054286][ T120] usb 2-1: Using ep0 maxpacket: 16 [ 160.070949][ T120] usb 2-1: config 64 has an invalid interface number: 219 but max is 1 [ 160.081887][ T120] usb 2-1: config 64 has an invalid interface number: 145 but max is 1 [ 160.094323][ T120] usb 2-1: config 64 has no interface number 0 [ 160.100643][ T120] usb 2-1: config 64 has no interface number 1 [ 160.109296][ T120] usb 2-1: config 64 interface 145 has no altsetting 0 [ 160.137061][ T120] usb 2-1: New USB device found, idVendor=185b, idProduct=1e78, bcdDevice=33.a9 [ 160.147111][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.170343][ T120] usb 2-1: Product: syz [ 160.186432][ T120] usb 2-1: Manufacturer: syz [ 160.194639][ T120] usb 2-1: SerialNumber: syz [ 160.228616][ T9081] program syz.2.1383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.293985][ T53] usb 4-1: USB disconnect, device number 8 [ 160.309767][ T5868] glorious 0003:258A:0036.001A: hidraw0: USB HID v0.01 Device [Glorious Model O] on usb-dummy_hcd.5-1/input0 [ 160.435204][ T120] dvb-usb: found a 'Compro Videomate U500' in cold state, will try to load a firmware [ 160.501831][ T120] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 160.514332][ T5866] usb 6-1: USB disconnect, device number 2 [ 160.517728][ T120] dib0700: firmware download failed at 7 with -22 [ 160.558636][ T120] hub 2-1:64.145: Invalid hub with more than one config or interface [ 160.590561][ T120] hub 2-1:64.145: probe with driver hub failed with error -22 [ 160.602357][ T120] dvb-usb: found a 'Compro Videomate U500' in cold state, will try to load a firmware [ 160.618742][ T120] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 160.637082][ T120] dib0700: firmware download failed at 7 with -22 [ 160.656995][ T120] usb 2-1: USB disconnect, device number 13 [ 160.825110][ T9094] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 161.185060][ T5950] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 161.203165][ T30] audit: type=1326 audit(1746188431.287:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9112 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d2d8e969 code=0x7ffc0000 [ 161.264088][ T30] audit: type=1326 audit(1746188431.327:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9112 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5d2d8d2d0 code=0x7ffc0000 [ 161.341723][ T30] audit: type=1326 audit(1746188431.327:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9112 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5d2d8d2d0 code=0x7ffc0000 [ 161.408980][ T5950] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 161.437823][ T30] audit: type=1326 audit(1746188431.327:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9112 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d2d8e969 code=0x7ffc0000 [ 161.464057][ T5950] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.496178][ T9133] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 161.503457][ T5950] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 161.520020][ T30] audit: type=1326 audit(1746188431.327:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9112 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d2d8e969 code=0x7ffc0000 [ 161.541744][ T9133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.562706][ T5950] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.574596][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 161.582619][ T5950] usb 4-1: SerialNumber: syz [ 161.599193][ T30] audit: type=1326 audit(1746188431.327:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9112 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fd5d2d8e969 code=0x7ffc0000 [ 161.659477][ T30] audit: type=1326 audit(1746188431.327:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9112 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d2d8e969 code=0x7ffc0000 [ 161.689149][ T30] audit: type=1326 audit(1746188431.327:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9112 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d2d8e969 code=0x7ffc0000 [ 161.883189][ T9101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.919503][ T9101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.945118][ T5950] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 161.961955][ T5950] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 162.002865][ T5950] usb 4-1: USB disconnect, device number 9 [ 162.024958][ T5866] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 162.186979][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.201290][ T5866] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 162.213484][ T5866] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 162.222687][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.246164][ T5866] usb 2-1: config 0 descriptor?? [ 162.266208][ T5866] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 162.287376][ T5866] dvb-usb: bulk message failed: -22 (3/0) [ 162.305570][ T5866] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 162.332106][ T5866] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 162.351477][ T5866] usb 2-1: media controller created [ 162.359064][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.404632][ T5866] dvb-usb: bulk message failed: -22 (6/0) [ 162.410459][ T5866] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 162.462563][ T5866] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 162.503246][ T5866] dvb-usb: schedule remote query interval to 150 msecs. [ 162.524564][ T5866] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 162.566930][ T5866] usb 2-1: USB disconnect, device number 14 [ 162.639924][ T5866] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 162.961516][ T9187] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 163.224843][ T120] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 163.394728][ T120] usb 6-1: Using ep0 maxpacket: 16 [ 163.414544][ T120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.455272][ T120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.482339][ T120] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 163.508759][ T120] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.527157][ T120] usb 6-1: config 0 descriptor?? [ 163.868713][ T9245] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1451'. [ 163.992979][ T120] hid-multitouch 0003:1FD2:6007.001B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 164.063031][ T9249] tipc: Enabling not permitted [ 164.079271][ T9249] tipc: Enabling of bearer rejected, failed to enable media [ 164.302171][ T5950] usb 6-1: USB disconnect, device number 3 [ 164.495533][ T9262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1461'. [ 165.974165][ T5866] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 166.125724][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 166.127612][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.127640][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.127674][ T5866] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 166.127694][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.130576][ T5866] usb 2-1: config 0 descriptor?? [ 166.551474][ T5866] hid-picolcd 0003:04D8:F002.001C: collection stack underflow [ 166.551507][ T5866] hid-picolcd 0003:04D8:F002.001C: item 0 4 0 12 parsing failed [ 166.552189][ T5866] hid-picolcd 0003:04D8:F002.001C: device report parse failed [ 166.552289][ T5866] hid-picolcd 0003:04D8:F002.001C: probe with driver hid-picolcd failed with error -22 [ 166.646219][ T9360] "syz.0.1508" (9360) uses obsolete ecb(arc4) skcipher [ 166.770668][ T53] usb 2-1: USB disconnect, device number 15 [ 166.918145][ T5868] kernel write not supported for file /uinput (pid: 5868 comm: kworker/1:5) [ 167.118068][ T9395] sctp: [Deprecated]: syz.3.1523 (pid 9395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.118068][ T9395] Use struct sctp_sack_info instead [ 167.364557][ T53] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 167.443531][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1527'. [ 167.516582][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.540381][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.581304][ T53] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 167.598938][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.626620][ T53] usb 6-1: config 0 descriptor?? [ 167.857159][ T30] audit: type=1326 audit(1746188437.947:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9423 comm="syz.1.1537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9b438e969 code=0x0 [ 167.891469][ T9426] binder: 9425:9426 ioctl c018620b 200000000000 returned -14 [ 168.283982][ T53] hid-led 0003:0FC5:B080.001D: probe with driver hid-led failed with error -71 [ 168.322880][ T53] usb 6-1: USB disconnect, device number 4 [ 168.687235][ T30] audit: type=1326 audit(1746188438.777:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9462 comm="syz.2.1555" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f4bf8e969 code=0x0 [ 169.034174][ T5866] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 169.177416][ T53] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 169.216791][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 169.223869][ T5866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.257767][ T5866] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 169.270314][ T5866] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.284163][ T5866] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.291570][ T9498] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (35451) [ 169.307946][ T9498] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 169.328710][ T5866] usb 2-1: config 1 interface 1 has no altsetting 0 [ 169.334153][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 169.349915][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.363083][ T5866] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.376667][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.382539][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.404678][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 169.409475][ T5866] usb 2-1: Product: syz [ 169.423873][ T5866] usb 2-1: Manufacturer: syz [ 169.441880][ T5866] usb 2-1: SerialNumber: syz [ 169.443722][ T53] usb 6-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 169.474599][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.497399][ T53] usb 6-1: config 0 descriptor?? [ 169.611397][ T5867] kernel read not supported for file /swradio0 (pid: 5867 comm: kworker/0:4) [ 169.692696][ T5866] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 169.722908][ T5866] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 169.836242][ T5866] usb 2-1: USB disconnect, device number 16 [ 169.968195][ T9521] netlink: 201856 bytes leftover after parsing attributes in process `syz.3.1583'. [ 169.975964][ T6173] udevd[6173]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.021334][ T53] input: HID 0458:501a as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:501A.001E/input/input13 [ 170.062128][ T9521] netlink: zone id is out of range [ 170.096826][ T9521] netlink: zone id is out of range [ 170.116035][ T9521] netlink: zone id is out of range [ 170.121175][ T9521] netlink: zone id is out of range [ 170.141746][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'. [ 170.151503][ T9521] netlink: zone id is out of range [ 170.151871][ T53] input: HID 0458:501a as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:501A.001E/input/input14 [ 170.157162][ T9528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1585'. [ 170.163374][ T9521] netlink: zone id is out of range [ 170.191649][ T9528] vlan3: entered allmulticast mode [ 170.198783][ T9528] syz_tun: entered allmulticast mode [ 170.230383][ T9521] netlink: zone id is out of range [ 170.259650][ T9521] netlink: zone id is out of range [ 170.277895][ T9521] netlink: zone id is out of range [ 170.281211][ T53] kye 0003:0458:501A.001E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:501a] on usb-dummy_hcd.5-1/input0 [ 170.294125][ T9521] netlink: zone id is out of range [ 170.369580][ T53] usb 6-1: USB disconnect, device number 5 [ 171.149778][ T9552] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1596'. [ 171.529142][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1604'. [ 171.652622][ T9576] qrtr: Invalid version 0 [ 171.901116][ T9586] netlink: 201856 bytes leftover after parsing attributes in process `syz.2.1611'. [ 172.149551][ T9599] [U] W!TÁÍ—Ž}Ý©ÏS…L^Ï=ÍÝ [ 172.305089][ T5867] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 172.386663][ T9613] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1624'. [ 172.427699][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 172.477780][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 172.499776][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.540909][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.552751][ T5867] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.570076][ T120] IPVS: starting estimator thread 0... [ 172.573790][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.600559][ T5867] usb 2-1: Product: syz [ 172.612311][ T5867] usb 2-1: Manufacturer: syz [ 172.631404][ T5867] usb 2-1: SerialNumber: syz [ 172.676426][ T9623] IPVS: using max 29 ests per chain, 69600 per kthread [ 172.760680][ T9629] netlink: 'syz.5.1631': attribute type 2 has an invalid length. [ 173.083854][ T5867] usb 2-1: cannot find UAC_HEADER [ 173.107664][ T9649] overlayfs: conflicting options: nfs_export=on,index=off [ 173.153402][ T5867] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 173.209603][ T9655] syz.2.1644 uses obsolete (PF_INET,SOCK_PACKET) [ 173.242016][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.293223][ T9657] nbd: couldn't find a device at index 0 [ 173.304256][ T5866] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 173.400369][ T5867] usb 2-1: USB disconnect, device number 17 [ 173.464427][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 173.481719][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.497519][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.513830][ T5866] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 173.523248][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.534974][ T5866] usb 4-1: config 0 descriptor?? [ 173.992893][ T5866] gt683r_led 0003:1770:FF00.001F: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 174.208650][ T120] usb 4-1: USB disconnect, device number 10 [ 174.221807][ T53] gt683r_led 0003:1770:FF00.001F: failed to send set report request: -19 [ 174.463243][ T9718] UBIFS error (pid: 9718): cannot open "c:::", error -22 [ 174.610462][ T9726] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1677'. [ 174.890244][ T9744] sg_write: data in/out 2031668/4 bytes for SCSI command 0x26-- guessing data in; [ 174.890244][ T9744] program syz.2.1686 not setting count and/or reply_len properly [ 174.894691][ T120] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 174.918786][ T9746] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1687' resets device [ 174.994377][ T5866] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 175.011506][ T9750] sp0: Synchronizing with TNC [ 175.084398][ T120] usb 2-1: Using ep0 maxpacket: 8 [ 175.102474][ T120] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 175.106865][ T9754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1691'. [ 175.122537][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.139005][ T120] usb 2-1: Product: syz [ 175.146611][ T120] usb 2-1: Manufacturer: syz [ 175.151232][ T120] usb 2-1: SerialNumber: syz [ 175.168654][ T120] usb 2-1: config 0 descriptor?? [ 175.169418][ T5866] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 175.178828][ T120] gspca_main: sq905-2.14.0 probing 2770:9120 [ 175.198374][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.208403][ T5866] usb 6-1: Product: syz [ 175.212584][ T5866] usb 6-1: Manufacturer: syz [ 175.219730][ T5866] usb 6-1: SerialNumber: syz [ 175.267039][ T5866] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 175.314151][ T5950] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 175.346286][ T9760] tipc: Enabled bearer , priority 10 [ 175.782849][ T120] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 175.798798][ T120] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 175.838406][ T120] usb 2-1: USB disconnect, device number 18 [ 175.984615][ T53] usb 6-1: USB disconnect, device number 6 [ 176.186594][ T9794] geneve1: entered promiscuous mode [ 176.374157][ T5950] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 176.381361][ T5950] ath9k_htc: Failed to initialize the device [ 176.406196][ T53] usb 6-1: ath9k_htc: USB layer deinitialized [ 176.464831][ T120] tipc: Node number set to 3306029056 [ 176.691463][ T9821] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 176.833859][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 177.031895][ T9841] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 177.037167][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1735'. [ 177.068609][ T9843] nbd: socks must be embedded in a SOCK_ITEM attr [ 177.286726][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 177.459559][ T9870] netlink: 'syz.2.1749': attribute type 4 has an invalid length. [ 177.553290][ T9875] netlink: 'syz.1.1751': attribute type 16 has an invalid length. [ 177.571611][ T9875] netlink: 'syz.1.1751': attribute type 3 has an invalid length. [ 177.600150][ T9875] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1751'. [ 177.838603][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'. [ 178.841961][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 179.004756][ T53] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 179.177678][ T53] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.206040][ T53] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.229448][ T53] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 179.249981][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.271052][ T53] usb 4-1: SerialNumber: syz [ 179.453018][ T9985] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 179.461784][ T9984] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 179.504390][ T53] usb 4-1: 0:2 : does not exist [ 179.509395][ T53] usb 4-1: unit 48 not found! [ 179.575290][ T53] usb 4-1: USB disconnect, device number 11 [ 179.654734][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.696646][ T9993] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1807'. [ 179.961977][T10013] netlink: 'syz.5.1817': attribute type 3 has an invalid length. [ 179.970046][T10013] netlink: 'syz.5.1817': attribute type 1 has an invalid length. [ 179.981564][T10013] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.1817'. [ 181.115834][T10062] netlink: 'syz.3.1840': attribute type 3 has an invalid length. [ 181.123801][T10062] netlink: 'syz.3.1840': attribute type 1 has an invalid length. [ 181.141595][T10062] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1840'. [ 181.443567][T10073] program syz.2.1846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.790838][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1855'. [ 182.191476][T10119] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1869'. [ 182.217568][T10119] tipc: Invalid UDP bearer configuration [ 182.217619][T10119] tipc: Enabling of bearer rejected, failed to enable media [ 182.340747][T10125] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1872'. [ 182.350023][ T5867] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 182.474190][T10129] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1874'. [ 182.518712][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 182.540485][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.565369][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.595356][ T5867] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 182.608208][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.655532][ T5867] usb 4-1: config 0 descriptor?? [ 183.098504][ T5867] thrustmaster 0003:044F:B653.0020: unknown main item tag 0x0 [ 183.124134][ T5867] thrustmaster 0003:044F:B653.0020: unknown main item tag 0x0 [ 183.142239][ T5867] thrustmaster 0003:044F:B653.0020: hidraw0: USB HID v0.04 Device [HID 044f:b653] on usb-dummy_hcd.3-1/input0 [ 183.184351][ T5867] thrustmaster 0003:044F:B653.0020: no inputs found [ 183.324756][ T5868] usb 4-1: USB disconnect, device number 12 [ 184.024073][ T5868] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 184.107636][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1910'. [ 184.227265][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 184.245780][ T5868] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 184.264054][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.299455][ T5868] usb 3-1: Product: syz [ 184.308391][ T5868] usb 3-1: Manufacturer: syz [ 184.313024][ T5868] usb 3-1: SerialNumber: syz [ 184.334093][ T120] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 184.376200][ T5868] usb 3-1: config 0 descriptor?? [ 184.393983][ T5868] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 184.412632][ T5868] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 184.472833][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1916'. [ 184.524687][ T120] usb 2-1: Using ep0 maxpacket: 32 [ 184.540585][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1916'. [ 184.561776][ T120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.585516][ T120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.595703][ T120] usb 2-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 184.617251][ T5868] radio-raremono 3-1:0.0: Thanko's Raremono connected: (10C4:818A) [ 184.634998][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.686146][ T120] usb 2-1: config 0 descriptor?? [ 184.813328][T10231] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 184.828889][ T5868] radio-raremono 3-1:0.0: V4L2 device registered as radio48 [ 184.878539][T10235] delete_channel: no stack [ 184.893375][T10234] delete_channel: no stack [ 185.025159][T10241] netlink: 'syz.3.1925': attribute type 2 has an invalid length. [ 185.050962][T10241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1925'. [ 185.066127][ T53] usb 3-1: USB disconnect, device number 9 [ 185.075446][ T53] radio-raremono 3-1:0.0: Thanko's Raremono disconnected [ 185.092809][T10241] net_ratelimit: 34 callbacks suppressed [ 185.092822][T10241] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 185.161947][ T120] apple 0003:05AC:029C.0021: unbalanced collection at end of report description [ 185.200261][ T120] apple 0003:05AC:029C.0021: parse failed [ 185.208508][ T120] apple 0003:05AC:029C.0021: probe with driver apple failed with error -22 [ 185.371606][ T5868] usb 2-1: USB disconnect, device number 19 [ 185.500356][T10262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.723870][T10270] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1940'. [ 185.904624][T10281] macvlan2: entered promiscuous mode [ 185.909973][T10281] macvlan2: entered allmulticast mode [ 185.939084][T10281] erspan0: entered allmulticast mode [ 186.370944][T10310] __nla_validate_parse: 3 callbacks suppressed [ 186.370962][T10310] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1958'. [ 186.966417][T10351] ptrace attach of "./syz-executor exec"[5830] was attempted by " [ 187.217458][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 187.329813][T10367] vlan3: entered allmulticast mode [ 187.335239][T10367] gretap0: entered allmulticast mode [ 187.367410][T10323] ceph: No mds server is up or the cluster is laggy [ 187.444708][ T5866] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 187.615020][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 187.626898][ T5866] usb 4-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.655978][ T5866] usb 4-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.667062][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.675273][ T5866] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 187.696602][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.729919][ T5866] usb 4-1: config 0 descriptor?? [ 187.932567][T10395] [U]  [ 188.044127][ T5867] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 188.077641][T10404] [U] ^C [ 188.116924][T10407] binder: 10406:10407 ioctl c0385720 0 returned -22 [ 188.129250][T10407] binder: 10406:10407 ioctl c0306201 200000000480 returned -11 [ 188.150224][ T5866] hkems 0003:2006:0118.0022: bogus close delimiter [ 188.164120][ T5866] hkems 0003:2006:0118.0022: item 0 4 2 10 parsing failed [ 188.187556][ T5866] hkems 0003:2006:0118.0022: parse failed [ 188.196138][ T5866] hkems 0003:2006:0118.0022: probe with driver hkems failed with error -22 [ 188.207319][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 188.220990][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.244132][ T5867] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 188.248248][T10413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2006'. [ 188.255622][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.284639][ T5867] usb 6-1: config 0 descriptor?? [ 188.391237][ T5868] usb 4-1: USB disconnect, device number 13 [ 188.494817][T10419] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 188.501588][T10419] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 188.512734][T10419] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 188.519194][T10419] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 188.526816][T10419] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 188.533238][T10419] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 188.541505][T10419] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 188.547959][T10419] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 188.719852][ T5867] kone 0003:1E7D:2CED.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 188.841878][T10424] netlink: 'syz.2.2010': attribute type 2 has an invalid length. [ 188.866204][T10424] ave_0: entered promiscuous mode [ 188.940962][ T5867] usb 6-1: USB disconnect, device number 7 [ 189.153444][T10435] netlink: 'syz.1.2016': attribute type 1 has an invalid length. [ 189.267402][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 189.424156][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 189.430753][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.442017][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.451854][ T9] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 189.461368][T10450] vivid-000: disconnect [ 189.467394][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.468081][T10448] vivid-000: reconnect [ 189.494179][ T9] usb 4-1: config 0 descriptor?? [ 189.614244][ T5867] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 189.786473][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 189.797764][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.824218][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.836183][ T5867] usb 3-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 189.845536][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.858010][ T5867] usb 3-1: config 0 descriptor?? [ 189.957406][ T9] aquacomputer_d5next 0003:0C70:F014.0024: hidraw0: USB HID v0.04 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 190.011606][T10472] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 190.054296][T10472] CIFS mount error: No usable UNC path provided in device string! [ 190.054296][T10472] [ 190.065068][T10472] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 190.177195][ T5868] usb 4-1: USB disconnect, device number 14 [ 190.321292][ T5867] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0934.0025/input/input16 [ 190.412033][ T5867] uclogic 0003:28BD:0934.0025: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.2-1/input0 [ 190.545926][ T53] usb 3-1: USB disconnect, device number 10 [ 191.208689][T10513] netlink: 165 bytes leftover after parsing attributes in process `syz.5.2054'. [ 191.805120][ T120] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 191.847522][T10538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2065'. [ 191.881395][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 191.922003][T10541] ALSA: seq fatal error: cannot create timer (-22) [ 191.956320][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.966656][ T120] usb 3-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 192.007909][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.042359][ T120] usb 3-1: config 0 descriptor?? [ 192.291507][T10555] syz.3.2075 (10555): drop_caches: 4 [ 192.443906][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2079'. [ 192.500297][ T120] nzxt-smart2 0003:1E71:200F.0026: unknown main item tag 0x0 [ 192.530544][ T120] nzxt-smart2 0003:1E71:200F.0026: hidraw0: USB HID vff.fd Device [HID 1e71:200f] on usb-dummy_hcd.2-1/input0 [ 192.596849][ T53] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 192.719107][ T120] usb 3-1: USB disconnect, device number 11 [ 192.756097][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 192.781780][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 192.818698][ T53] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 192.848419][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.862354][ T53] usb 6-1: config 0 descriptor?? [ 192.868651][T10560] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 193.303784][ T53] cherry 0003:046A:0023.0027: unbalanced collection at end of report description [ 193.308177][T10586] netlink: 47 bytes leftover after parsing attributes in process `syz.3.2090'. [ 193.354848][ T53] cherry 0003:046A:0023.0027: probe with driver cherry failed with error -22 [ 193.527825][ T5867] usb 6-1: USB disconnect, device number 8 [ 194.174084][T10608] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 194.224689][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.233093][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.581421][T10644] random: crng reseeded on system resumption [ 196.214211][T10666] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2124'. [ 196.240484][ T5826] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 196.286385][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 196.364321][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 196.370806][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 196.630040][T10674] net_ratelimit: 1054 callbacks suppressed [ 196.630056][T10674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.673987][ T5867] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 196.892320][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.941539][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 196.973223][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.993367][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 197.032012][ T5867] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 197.054725][ T5867] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 197.085998][ T5867] usb 2-1: Manufacturer: syz [ 197.111467][ T5867] usb 2-1: config 0 descriptor?? [ 197.543853][ T5867] rc_core: IR keymap rc-hauppauge not found [ 197.576509][ T5867] Registered IR keymap rc-empty [ 197.616430][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.687797][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.757888][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 197.854003][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 197.943652][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.019059][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.094096][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.182934][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.274121][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.286787][T10707] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 198.328682][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.374640][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.434020][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.476567][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.536121][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 198.588649][ T5867] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 198.588671][ T5867] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 198.651661][ T5867] usb 2-1: USB disconnect, device number 20 [ 199.053869][ T5866] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 199.245078][ T5866] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.288933][ T5866] usb 3-1: config 0 has no interface number 0 [ 199.351678][ T5866] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 199.443593][ T5866] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 199.503692][ T5866] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 199.573831][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.634515][ T5866] usb 3-1: config 0 descriptor?? [ 199.642051][T10720] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.772737][ T5866] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 199.989526][ T5866] usb 3-1: USB disconnect, device number 12 [ 199.989579][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 200.298538][T10738] adf_ctl_ioctl: 15 callbacks suppressed [ 200.298555][T10738] QAT: Invalid ioctl 21531 [ 200.443387][ T30] audit: type=1326 audit(1746188470.517:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f238e969 code=0x7ffc0000 [ 200.464888][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.608371][ T30] audit: type=1326 audit(1746188470.517:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f238e969 code=0x7ffc0000 [ 200.770941][ T30] audit: type=1326 audit(1746188470.557:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fc3f238e969 code=0x7ffc0000 [ 200.994110][ T30] audit: type=1326 audit(1746188470.557:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f238e969 code=0x7ffc0000 [ 201.015587][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.184930][ T30] audit: type=1326 audit(1746188470.557:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f238e969 code=0x7ffc0000 [ 201.382258][ T30] audit: type=1326 audit(1746188470.557:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fc3f238e969 code=0x7ffc0000 [ 201.585038][ T30] audit: type=1326 audit(1746188470.557:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f238e969 code=0x7ffc0000 [ 201.747741][ T30] audit: type=1326 audit(1746188470.557:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f238e969 code=0x7ffc0000 [ 201.840252][T10773] netlink: 62967 bytes leftover after parsing attributes in process `syz.0.2176'. [ 201.856460][ T30] audit: type=1326 audit(1746188471.377:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10758 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d338e969 code=0x7ffc0000 [ 201.960699][ T30] audit: type=1326 audit(1746188471.417:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10758 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d338e969 code=0x7ffc0000 [ 201.982179][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.474160][T10817] delete_channel: no stack [ 204.031062][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2203'. [ 204.099191][T10832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2203'. [ 204.121197][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2204'. [ 204.195074][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'. [ 204.454071][T10841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2207'. [ 205.555536][T10871] netlink: 'syz.5.2221': attribute type 1 has an invalid length. [ 205.581257][T10871] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2221'. [ 205.631051][T10871] NCSI netlink: No device for ifindex 813332851 [ 206.172411][T10885] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 207.600695][T10927] program syz.0.2246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.626659][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 209.626675][ T30] audit: type=1326 audit(1746188479.717:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d338e969 code=0x7ffc0000 [ 209.825453][ T30] audit: type=1326 audit(1746188479.757:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f08d338e969 code=0x7ffc0000 [ 209.986363][ T30] audit: type=1326 audit(1746188479.757:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d338e969 code=0x7ffc0000 [ 210.143254][ T30] audit: type=1326 audit(1746188479.757:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d338e969 code=0x7ffc0000 [ 210.301035][ T30] audit: type=1326 audit(1746188479.757:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f08d338e969 code=0x7ffc0000 [ 210.446484][ T30] audit: type=1326 audit(1746188479.757:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d338e969 code=0x7ffc0000 [ 210.540170][ T30] audit: type=1326 audit(1746188479.757:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d338e969 code=0x7ffc0000 [ 210.615588][ T5866] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 210.813131][ T5866] usb 6-1: Using ep0 maxpacket: 16 [ 210.831739][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 210.869142][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 210.886422][ T5866] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 210.898720][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.917820][ T5866] usb 6-1: Product: syz [ 210.942849][ T5866] usb 6-1: Manufacturer: syz [ 210.952526][ T5866] usb 6-1: SerialNumber: syz [ 210.972447][ T5866] usb 6-1: config 0 descriptor?? [ 211.243578][ T5866] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 211.297658][ T5866] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 211.373180][ T5866] usb 6-1: USB disconnect, device number 9 [ 214.497065][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2317'. [ 215.791303][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 217.492142][T11128] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2341'. [ 217.733197][T11134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2344'. [ 218.817110][T11158] mkiss: ax0: crc mode is auto. [ 218.821689][T11161] tipc: Started in network mode [ 218.850011][T11161] tipc: Node identity , cluster identity 4711 [ 218.874717][T11161] tipc: Failed to set node id, please configure manually [ 218.909854][T11161] tipc: Enabling of bearer rejected, failed to enable media [ 219.364041][T11175] netlink: 'syz.1.2362': attribute type 1 has an invalid length. [ 219.393921][T11175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.013975][T11221] /dev/nullb0: Can't open blockdev [ 222.588332][T11235] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2390'. [ 222.611014][T11235] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2390'. [ 222.958508][T11243] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 223.378167][T11245] tipc: Enabling of bearer rejected, media not registered [ 223.412302][ C1] sched: DL replenish lagged too much [ 223.463871][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2396'. [ 223.476197][T11247] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 223.488529][T11247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.678380][T11251] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 224.762694][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 224.931681][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 224.944352][ T9] usb 2-1: config 0 interface 0 altsetting 142 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.961695][ T9] usb 2-1: config 0 interface 0 altsetting 142 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.978788][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.987372][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 225.005424][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.024657][ T9] usb 2-1: config 0 descriptor?? [ 225.460015][ T9] lenovo 0003:17EF:6009.0028: unknown main item tag 0x0 [ 225.476365][ T9] lenovo 0003:17EF:6009.0028: unknown main item tag 0x0 [ 225.491062][ T9] lenovo 0003:17EF:6009.0028: unknown main item tag 0x0 [ 225.502064][ T9] lenovo 0003:17EF:6009.0028: unknown main item tag 0x0 [ 225.511177][ T9] lenovo 0003:17EF:6009.0028: unknown main item tag 0x0 [ 225.538704][ T9] lenovo 0003:17EF:6009.0028: hidraw0: USB HID v0.05 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 225.698565][ T9] usb 2-1: USB disconnect, device number 21 [ 226.802669][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 226.965776][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.980558][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.996304][ T9] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 227.017619][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.029564][ T9] usb 2-1: config 0 descriptor?? [ 227.494206][ T9] dragonrise 0003:0079:0006.0029: unknown main item tag 0x0 [ 227.502044][ T9] dragonrise 0003:0079:0006.0029: unknown main item tag 0x0 [ 227.517343][ T9] dragonrise 0003:0079:0006.0029: unknown main item tag 0x0 [ 227.528037][ T9] dragonrise 0003:0079:0006.0029: unknown main item tag 0x0 [ 227.539474][ T9] dragonrise 0003:0079:0006.0029: unknown main item tag 0x0 [ 227.550348][ T9] dragonrise 0003:0079:0006.0029: unknown main item tag 0x0 [ 227.558739][ T9] dragonrise 0003:0079:0006.0029: unknown main item tag 0x0 [ 227.585118][ T9] dragonrise 0003:0079:0006.0029: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 227.607797][ T9] dragonrise 0003:0079:0006.0029: no inputs found [ 227.618282][ T9] dragonrise 0003:0079:0006.0029: force feedback init failed [ 227.743951][ T9] usb 2-1: USB disconnect, device number 22 [ 228.570938][T11274] netlink: 'syz.1.2408': attribute type 3 has an invalid length. [ 228.657663][ T30] audit: type=1326 audit(1746188498.749:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11275 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b438e969 code=0x7ffc0000 [ 228.707079][ T30] audit: type=1326 audit(1746188498.769:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11275 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b438e969 code=0x7ffc0000 [ 228.729382][ T30] audit: type=1326 audit(1746188498.779:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11275 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9b438e969 code=0x7ffc0000 [ 228.776296][ T30] audit: type=1326 audit(1746188498.779:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11275 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b438e969 code=0x7ffc0000 [ 228.801300][ T30] audit: type=1326 audit(1746188498.779:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11275 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b438e969 code=0x7ffc0000 [ 228.825432][ T30] audit: type=1326 audit(1746188498.779:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11275 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff9b438e969 code=0x7ffc0000 [ 228.870238][ T30] audit: type=1326 audit(1746188498.779:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11275 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b438e969 code=0x7ffc0000 [ 230.822038][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 230.985555][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.001744][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.021493][ T9] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 231.030871][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.043454][ T9] usb 2-1: Product: syz [ 231.047639][ T9] usb 2-1: Manufacturer: syz [ 231.055155][ T9] usb 2-1: SerialNumber: syz [ 231.071319][ T9] usb 2-1: config 0 descriptor?? [ 231.091688][ T9] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 231.105707][ T9] usb 2-1: No valid video chain found. [ 231.326469][ T9] usb 2-1: USB disconnect, device number 23 [ 232.507842][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.529876][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.541074][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.549935][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.561504][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.972362][T11309] chnl_net:caif_netlink_parms(): no params data found [ 233.388700][T11309] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.406615][T11309] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.418578][T11309] bridge_slave_0: entered allmulticast mode [ 233.429634][T11309] bridge_slave_0: entered promiscuous mode [ 233.440845][T11309] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.470453][T11309] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.489125][T11309] bridge_slave_1: entered allmulticast mode [ 233.519028][T11309] bridge_slave_1: entered promiscuous mode [ 233.580186][ T30] audit: type=1326 audit(1746188503.669:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11330 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b438e969 code=0x7ffc0000 [ 233.652005][ T30] audit: type=1326 audit(1746188503.669:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11330 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b438e969 code=0x7ffc0000 [ 233.719848][ T30] audit: type=1326 audit(1746188503.699:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11330 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ff9b438e969 code=0x7ffc0000 [ 233.742697][T11333] Bluetooth: MGMT ver 1.23 [ 233.777799][ T30] audit: type=1326 audit(1746188503.699:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11330 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b438e969 code=0x7ffc0000 [ 233.817552][ T30] audit: type=1326 audit(1746188503.699:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11330 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b438e969 code=0x7ffc0000 [ 233.868698][T11309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.930563][T11309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.359654][T11309] team0: Port device team_slave_0 added [ 234.390155][T11309] team0: Port device team_slave_1 added [ 234.557756][T11309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.574108][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.608670][ T5815] Bluetooth: hci0: command tx timeout [ 234.648800][T11309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.695219][T11309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.712030][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.786736][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 234.798265][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 234.807757][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 234.818793][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 234.827193][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 234.881395][T11309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.128638][T11309] hsr_slave_0: entered promiscuous mode [ 235.140061][T11309] hsr_slave_1: entered promiscuous mode [ 235.147341][T11309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.160856][T11309] Cannot create hsr debugfs directory [ 235.988697][T11341] chnl_net:caif_netlink_parms(): no params data found [ 236.035456][T11309] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 236.123991][T11309] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 236.161130][T11309] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 236.314945][T11309] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 236.609549][T11341] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.649637][T11341] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.681908][ T55] Bluetooth: hci0: command tx timeout [ 236.703412][T11341] bridge_slave_0: entered allmulticast mode [ 236.749249][T11341] bridge_slave_0: entered promiscuous mode [ 236.791263][T11341] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.835886][T11341] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.873411][T11341] bridge_slave_1: entered allmulticast mode [ 236.903572][T11341] bridge_slave_1: entered promiscuous mode [ 236.927059][ T55] Bluetooth: hci6: command tx timeout [ 237.167077][T11341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.251318][T11341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.680711][T11341] team0: Port device team_slave_0 added [ 237.711307][ T5815] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.729460][ T5815] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.744547][ T5815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.754529][ T5815] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.762912][ T5815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.786475][T11341] team0: Port device team_slave_1 added [ 237.884812][ T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 237.893805][ T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 237.901538][ T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 237.910462][ T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 237.918419][ T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 238.131437][T11341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.138901][T11341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.178378][T11341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.232381][T11341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.239378][T11341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.281239][T11341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.689016][T11341] hsr_slave_0: entered promiscuous mode [ 238.699525][T11341] hsr_slave_1: entered promiscuous mode [ 238.707723][T11341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.723710][T11341] Cannot create hsr debugfs directory [ 238.762142][ T55] Bluetooth: hci0: command tx timeout [ 239.006989][ T55] Bluetooth: hci6: command tx timeout [ 239.028168][T11309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.399538][T11309] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.610062][ T7773] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.617239][ T7773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.655935][T11358] chnl_net:caif_netlink_parms(): no params data found [ 239.801095][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.808296][ T7773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.881871][ T55] Bluetooth: hci7: command tx timeout [ 239.961934][ T55] Bluetooth: hci8: command tx timeout [ 240.843138][ T55] Bluetooth: hci0: command tx timeout [ 240.873255][T11356] chnl_net:caif_netlink_parms(): no params data found [ 241.087541][ T55] Bluetooth: hci6: command tx timeout [ 241.961637][ T55] Bluetooth: hci7: command tx timeout [ 242.045333][ T55] Bluetooth: hci8: command tx timeout [ 242.178335][T11358] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.223128][T11358] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.276657][T11358] bridge_slave_0: entered allmulticast mode [ 242.308475][T11358] bridge_slave_0: entered promiscuous mode [ 242.386298][T11341] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 243.020918][T11358] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.034886][T11358] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.047116][T11358] bridge_slave_1: entered allmulticast mode [ 243.060388][T11358] bridge_slave_1: entered promiscuous mode [ 243.163646][ T55] Bluetooth: hci6: command tx timeout [ 243.332190][T11341] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 243.396464][T11309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.660642][T11341] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 243.705972][T11341] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 243.762573][T11358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.780837][T11356] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.811856][T11356] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.819126][T11356] bridge_slave_0: entered allmulticast mode [ 243.862228][T11356] bridge_slave_0: entered promiscuous mode [ 243.884246][T11358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.045415][ T55] Bluetooth: hci7: command tx timeout [ 244.055310][T11356] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.069972][T11356] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.079908][T11356] bridge_slave_1: entered allmulticast mode [ 244.094698][T11356] bridge_slave_1: entered promiscuous mode [ 244.121711][ T55] Bluetooth: hci8: command tx timeout [ 244.388683][T11358] team0: Port device team_slave_0 added [ 244.441081][T11356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.463736][T11358] team0: Port device team_slave_1 added [ 244.558436][T11356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.796555][T11358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.807700][T11358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.850386][T11358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.875474][T11358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.888820][T11358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.926599][T11358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.074896][T11356] team0: Port device team_slave_0 added [ 245.120693][T11356] team0: Port device team_slave_1 added [ 245.138924][T11309] veth0_vlan: entered promiscuous mode [ 245.395386][T11356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.413060][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.515220][T11356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.652659][T11358] hsr_slave_0: entered promiscuous mode [ 245.670003][T11358] hsr_slave_1: entered promiscuous mode [ 245.676858][T11358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.691945][T11358] Cannot create hsr debugfs directory [ 245.698186][T11356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.715697][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.756614][T11356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.779731][T11309] veth1_vlan: entered promiscuous mode [ 246.122693][ T55] Bluetooth: hci7: command tx timeout [ 246.153645][T11309] veth0_macvtap: entered promiscuous mode [ 246.201755][ T55] Bluetooth: hci8: command tx timeout [ 246.335677][T11341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.356988][T11309] veth1_macvtap: entered promiscuous mode [ 246.396813][T11356] hsr_slave_0: entered promiscuous mode [ 246.415885][T11356] hsr_slave_1: entered promiscuous mode [ 246.428829][T11356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.437292][T11356] Cannot create hsr debugfs directory [ 246.708037][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.728158][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.750099][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.770771][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.791687][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.808699][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.818863][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.837647][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.861309][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.882779][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.900102][T11309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.994958][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.015238][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.029425][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.046642][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.059379][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.082060][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.098197][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.109147][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.127112][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.139060][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.158286][T11309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.188080][T11341] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.333701][ T7780] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.340872][ T7780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.383845][T11309] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.399841][T11309] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.423320][T11309] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.438667][T11309] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.572537][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.579795][ T7783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.074989][T11341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.127127][T11358] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 248.147057][T11358] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 248.210364][T11358] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 248.229044][ T7780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.250244][ T7780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.316200][T11358] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 248.526091][ T7809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.572606][ T7809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.633360][T11356] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 248.737238][T11356] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 248.774458][T11356] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 248.862106][T11356] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 249.075519][T11341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.467844][T11358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.550592][T11358] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.643632][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.650874][ T7782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.733832][T11356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.823259][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.830565][ T7782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.988227][T11356] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.156089][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.163281][ T7782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.325040][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.332229][ T7819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.528814][T11341] veth0_vlan: entered promiscuous mode [ 250.629861][T11356] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.731244][T11356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.880680][T11341] veth1_vlan: entered promiscuous mode [ 251.221451][T11341] veth0_macvtap: entered promiscuous mode [ 251.300405][T11341] veth1_macvtap: entered promiscuous mode [ 251.378701][T11358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.520831][ T5867] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 251.533138][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.598786][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.637436][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.671325][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.707098][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.729463][ T5867] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 251.747366][ T5867] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 251.757776][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.775818][ T5867] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 251.788947][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.812828][ T5867] usb 7-1: config 220 has no interface number 2 [ 251.819135][ T5867] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 251.833911][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.855198][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.873710][ T5867] usb 7-1: config 220 interface 0 has no altsetting 0 [ 251.891205][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.907645][ T5867] usb 7-1: config 220 interface 76 has no altsetting 0 [ 251.926496][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.945432][ T5867] usb 7-1: config 220 interface 1 has no altsetting 0 [ 251.955564][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.978276][ T5867] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 251.998670][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.008378][T11341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.027619][ T5867] usb 7-1: Product: syz [ 252.051845][ T5867] usb 7-1: Manufacturer: syz [ 252.065421][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.108224][ T5867] usb 7-1: SerialNumber: syz [ 252.150696][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.189978][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.231002][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.270688][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.307615][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.337902][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.381617][ T5867] uvcvideo 7-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 252.404543][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.423046][ T5867] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 252.429531][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.442133][ T5867] usb 7-1: No valid video chain found. [ 252.447694][ T5867] usb 7-1: selecting invalid altsetting 0 [ 252.467496][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.508055][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.532713][ T5867] usb 7-1: selecting invalid altsetting 0 [ 252.538491][ T5867] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 252.554122][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.581100][ T5867] usb 7-1: USB disconnect, device number 2 [ 252.590301][T11341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.715552][T11341] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.776371][T11341] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.834181][T11341] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.866908][T11341] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.953784][T11356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.286578][T11358] veth0_vlan: entered promiscuous mode [ 253.439551][T11358] veth1_vlan: entered promiscuous mode [ 253.557432][ T7788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.639814][ T7788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.848405][T11358] veth0_macvtap: entered promiscuous mode [ 253.904424][ T7819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.943616][T11358] veth1_macvtap: entered promiscuous mode [ 254.000634][ T7819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.078072][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.199275][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.240619][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.286557][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.305931][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.327949][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.350249][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.376006][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.389883][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.411074][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.428029][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.454679][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.469218][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.489630][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.552375][T11358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.654784][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.701506][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.740830][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.781117][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.809506][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.860942][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.911831][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.946147][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.987082][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.038704][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.085184][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.126661][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.171089][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.204007][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.275039][T11358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.614809][T11356] veth0_vlan: entered promiscuous mode [ 255.674345][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.680772][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.755172][T11358] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.802998][T11358] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.865759][T11358] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.926943][T11358] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.974659][T11453] tipc: Started in network mode [ 255.985296][T11453] tipc: Node identity 7a3e061a6399, cluster identity 4711 [ 256.012240][T11453] tipc: Enabled bearer , priority 10 [ 256.083202][T11356] veth1_vlan: entered promiscuous mode [ 256.730934][T11356] veth0_macvtap: entered promiscuous mode [ 256.798872][T11356] veth1_macvtap: entered promiscuous mode [ 256.862557][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.876862][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.886246][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.895050][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.909502][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.080119][ T7809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.130653][ T5950] tipc: Node number set to 430376474 [ 257.165855][ T7809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.235658][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.295016][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.346321][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.380784][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.434092][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.491907][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.529056][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.580691][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.609127][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.643795][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.681065][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.728919][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.774990][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.822913][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.850315][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.890865][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.947017][T11356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.095839][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.139095][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.190506][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.243662][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.280751][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.319847][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.345419][ T7773] Bluetooth: hci3: Frame reassembly failed (-84) [ 258.366910][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.389087][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.407206][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.420133][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.452459][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.472602][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.487992][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.509393][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.521871][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.545411][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.567497][T11356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.653873][T11356] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.668541][ T7782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.687375][ T7782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.696137][T11356] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.715141][T11356] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.734168][T11356] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.000905][ T55] Bluetooth: hci2: command tx timeout [ 259.329637][ T7773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.365311][ T7773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.550447][ T5866] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 259.575214][ T7773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.595328][ T7773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.736116][T11456] chnl_net:caif_netlink_parms(): no params data found [ 259.753706][ T5866] usb 10-1: Using ep0 maxpacket: 16 [ 259.786475][ T5866] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.832696][ T5866] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.900275][ T5866] usb 10-1: config 0 interface 0 has no altsetting 0 [ 259.930658][ T5866] usb 10-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 259.983475][ T5866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.042551][ T5866] usb 10-1: config 0 descriptor?? [ 260.371280][ T5815] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 260.401106][T11456] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.401249][T11456] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.401425][T11456] bridge_slave_0: entered allmulticast mode [ 260.403373][T11456] bridge_slave_0: entered promiscuous mode [ 260.446062][T11456] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.446251][T11456] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.446425][T11456] bridge_slave_1: entered allmulticast mode [ 260.458995][T11456] bridge_slave_1: entered promiscuous mode [ 260.524362][ T5866] ortek 0003:1223:3F07.002A: unknown main item tag 0x0 [ 260.524403][ T5866] ortek 0003:1223:3F07.002A: unknown main item tag 0x0 [ 260.524428][ T5866] ortek 0003:1223:3F07.002A: unknown main item tag 0x0 [ 260.524452][ T5866] ortek 0003:1223:3F07.002A: unknown main item tag 0x0 [ 260.524475][ T5866] ortek 0003:1223:3F07.002A: unknown main item tag 0x0 [ 260.553385][ T5866] ortek 0003:1223:3F07.002A: hidraw0: USB HID v0.05 Device [HID 1223:3f07] on usb-dummy_hcd.9-1/input0 [ 260.825107][T11456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.828290][T11456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.839089][ T5866] usb 10-1: USB disconnect, device number 2 [ 261.082272][ T55] Bluetooth: hci2: command tx timeout [ 261.159307][T11456] team0: Port device team_slave_0 added [ 261.194303][T11456] team0: Port device team_slave_1 added [ 261.732506][T11486] loop2: detected capacity change from 0 to 7 [ 261.820980][T11456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.827962][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.035042][T11486] Dev loop2: unable to read RDB block 7 [ 262.076047][T11456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.103817][T11486] loop2: unable to read partition table [ 262.156899][T11486] loop2: partition table beyond EOD, truncated [ 262.190600][T11456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.214921][T11486] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 262.240529][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.383398][T11456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.855851][T11456] hsr_slave_0: entered promiscuous mode [ 262.899212][T11456] hsr_slave_1: entered promiscuous mode [ 262.943528][T11456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.984627][T11456] Cannot create hsr debugfs directory [ 263.169247][ T55] Bluetooth: hci2: command tx timeout [ 263.302912][ T5869] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 263.460583][ T5869] usb 8-1: Using ep0 maxpacket: 8 [ 263.487981][ T5869] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.507081][ T5869] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 263.519669][ T5869] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 263.531833][T11474] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 263.596258][ T5869] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 263.638870][ T5869] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 263.678634][ T5869] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.708754][ T5869] hub 8-1:1.0: bad descriptor, ignoring hub [ 263.739481][ T5869] hub 8-1:1.0: probe with driver hub failed with error -5 [ 263.747420][T11474] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.781921][T11474] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 263.804270][T11474] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 263.819747][ T5869] cdc_wdm 8-1:1.0: skipping garbage [ 263.835750][ T5869] cdc_wdm 8-1:1.0: skipping garbage [ 263.850679][T11474] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.886398][ T5869] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 263.918064][ T5190] Dev loop2: unable to read RDB block 7 [ 263.928332][T11474] usb 9-1: config 0 descriptor?? [ 263.950361][ T5869] cdc_wdm 8-1:1.0: Unknown control protocol [ 263.957807][ T5190] loop2: unable to read partition table [ 263.984350][T11474] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 264.003353][ T5190] loop2: partition table beyond EOD, truncated [ 264.028733][T11474] dvb-usb: bulk message failed: -22 (3/0) [ 264.048432][ T5869] usb 8-1: USB disconnect, device number 2 [ 264.119730][T11474] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 264.229353][T11474] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 264.259627][T11474] usb 9-1: media controller created [ 264.302106][T11474] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.364906][T11474] dvb-usb: bulk message failed: -22 (6/0) [ 264.395114][T11474] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 264.453421][T11474] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input19 [ 264.522418][T11474] dvb-usb: schedule remote query interval to 150 msecs. [ 264.551143][T11474] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 264.598464][T11512] netlink: 6 bytes leftover after parsing attributes in process `syz.9.2479'. [ 264.668719][T11474] usb 9-1: USB disconnect, device number 2 [ 264.917898][T11474] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 265.031386][T11516] IPVS: stopping master sync thread 11517 ... [ 265.260824][ T55] Bluetooth: hci2: command tx timeout [ 271.685164][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.698916][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.722064][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.736638][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.748380][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.800228][ T55] Bluetooth: hci3: command tx timeout [ 275.882802][ T55] Bluetooth: hci3: command tx timeout [ 277.959670][ T55] Bluetooth: hci3: command tx timeout [ 280.041364][ T55] Bluetooth: hci3: command tx timeout [ 280.795175][T11573] netlink: zone id is out of range [ 280.832205][ T30] audit: type=1326 audit(1746188550.921:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.7.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7fc00000 [ 280.886576][T11573] netlink: zone id is out of range [ 280.920094][T11573] netlink: zone id is out of range [ 280.944382][T11573] netlink: zone id is out of range [ 280.965988][T11573] netlink: zone id is out of range [ 281.012698][ T30] audit: type=1326 audit(1746188550.921:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.7.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd471f8e969 code=0x7fc00000 [ 281.071762][T11573] netlink: zone id is out of range [ 281.106605][T11573] netlink: zone id is out of range [ 281.133545][T11573] netlink: zone id is out of range [ 281.147661][ T7783] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.191517][ T30] audit: type=1326 audit(1746188550.921:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.7.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7fc00000 [ 281.218053][T11573] netlink: zone id is out of range [ 281.272990][T11573] netlink: zone id is out of range [ 281.398812][ T30] audit: type=1326 audit(1746188550.921:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.7.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7fc00000 [ 281.671150][ T30] audit: type=1326 audit(1746188550.921:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.7.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7fc00000 [ 281.966673][ T30] audit: type=1326 audit(1746188550.921:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.7.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7fc00000 [ 282.203617][ T30] audit: type=1326 audit(1746188550.921:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.7.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7fc00000 [ 282.427754][ T30] audit: type=1326 audit(1746188550.921:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.7.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7fc00000 [ 282.649735][ T30] audit: type=1326 audit(1746188550.921:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.7.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7fc00000 [ 282.929079][ T30] audit: type=1326 audit(1746188550.921:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11574 comm="syz.7.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7fc00000 [ 283.338167][T11565] chnl_net:caif_netlink_parms(): no params data found [ 284.370945][T11565] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.378135][T11565] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.487007][T11565] bridge_slave_0: entered allmulticast mode [ 284.540279][T11565] bridge_slave_0: entered promiscuous mode [ 284.595034][T11565] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.636234][T11565] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.685893][T11565] bridge_slave_1: entered allmulticast mode [ 284.737154][T11565] bridge_slave_1: entered promiscuous mode [ 284.936625][T11622] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2522'. [ 285.131784][T11565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.242914][T11565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.406559][T11629] syz.7.2525 (11629): /proc/11628/oom_adj is deprecated, please use /proc/11628/oom_score_adj instead. [ 285.990218][T11565] team0: Port device team_slave_0 added [ 286.023071][T11565] team0: Port device team_slave_1 added [ 286.401839][T11565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.481529][T11565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.633238][T11565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.681876][T11565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.721359][T11565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.816197][T11565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.173287][T11565] hsr_slave_0: entered promiscuous mode [ 287.185762][T11565] hsr_slave_1: entered promiscuous mode [ 287.239909][T11565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.277911][T11565] Cannot create hsr debugfs directory [ 289.319028][ T1207] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 289.509002][ T1207] usb 8-1: Using ep0 maxpacket: 16 [ 289.521004][ T1207] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 289.549141][ T1207] usb 8-1: config 0 has no interface number 0 [ 289.581426][T11681] tipc: Started in network mode [ 289.586318][T11681] tipc: Node identity ac14140f, cluster identity 4711 [ 289.596337][ T1207] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 289.619150][T11681] tipc: Enabled bearer , priority 10 [ 289.627715][ T1207] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 289.656405][ T1207] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.698195][ T1207] usb 8-1: Product: syz [ 289.703767][ T1207] usb 8-1: Manufacturer: syz [ 289.739074][ T1207] usb 8-1: SerialNumber: syz [ 289.775700][ T1207] usb 8-1: config 0 descriptor?? [ 290.424361][ T1207] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 290.480954][ T1207] usb 8-1: USB disconnect, device number 3 [ 290.730189][ T1207] tipc: Node number set to 2886997007 [ 291.178718][T11474] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 291.397989][T11474] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 291.441891][T11474] usb 10-1: config 0 interface 0 has no altsetting 0 [ 291.469823][T11474] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 291.498976][T11474] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 291.532173][T11474] usb 10-1: Product: syz [ 291.541405][T11474] usb 10-1: Manufacturer: syz [ 291.547630][T11474] usb 10-1: SerialNumber: syz [ 291.576440][T11474] usb 10-1: config 0 descriptor?? [ 291.593762][T11474] usb 10-1: selecting invalid altsetting 0 [ 291.902871][ T1207] usb 10-1: USB disconnect, device number 3 [ 292.908928][T11474] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 293.048881][ T1207] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 293.068968][T11474] usb 10-1: Using ep0 maxpacket: 8 [ 293.083180][T11474] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 293.102618][T11474] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.116441][T11474] usb 10-1: Product: syz [ 293.124964][T11474] usb 10-1: Manufacturer: syz [ 293.136124][T11474] usb 10-1: SerialNumber: syz [ 293.157009][T11474] usb 10-1: config 0 descriptor?? [ 293.195948][T11474] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 293.206129][T11474] usb 10-1: setting power ON [ 293.220768][ T1207] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 293.230888][T11474] dvb-usb: bulk message failed: -22 (2/0) [ 293.257224][T11474] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 293.277617][ T1207] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.288819][T11474] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 293.297285][T11474] usb 10-1: media controller created [ 293.317009][ T1207] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 293.338167][ T1207] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 293.379612][ T1207] usb 8-1: Manufacturer: syz [ 293.406251][T11474] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.428981][ T1207] usb 8-1: config 0 descriptor?? [ 293.522218][T11474] usb 10-1: selecting invalid altsetting 6 [ 293.536660][T11474] usb 10-1: digital interface selection failed (-22) [ 293.563227][T11474] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 293.584548][T11474] usb 10-1: setting power OFF [ 293.589741][ T1207] rc_core: IR keymap rc-hauppauge not found [ 293.606076][ T1207] Registered IR keymap rc-empty [ 293.614349][T11474] dvb-usb: bulk message failed: -22 (2/0) [ 293.629496][ T1207] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 293.648678][T11474] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 293.681926][ T1207] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input21 [ 293.698726][T11474] (NULL device *): no alternate interface [ 293.817708][T11474] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 293.908864][T11474] usb 10-1: USB disconnect, device number 4 [ 294.079848][ C0] igorplugusb 8-1:0.0: receive overflow invalid: 33 [ 294.289957][T11474] usb 8-1: USB disconnect, device number 4 [ 296.429387][T11746] macvlan1: entered promiscuous mode [ 296.434734][T11746] macvlan1: entered allmulticast mode [ 296.988383][ T5866] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 297.155112][ T5866] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 297.182019][ T5866] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.217834][ T5866] usb 10-1: Product: syz [ 297.238198][ T5866] usb 10-1: Manufacturer: syz [ 297.268933][ T5866] usb 10-1: SerialNumber: syz [ 297.300840][ T5866] usb 10-1: config 0 descriptor?? [ 297.507888][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 297.507904][ T30] audit: type=1326 audit(1746188567.602:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11761 comm="syz.7.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7ffc0000 [ 297.623131][ T30] audit: type=1326 audit(1746188567.632:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11761 comm="syz.7.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7ffc0000 [ 297.757519][ T30] audit: type=1326 audit(1746188567.662:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11761 comm="syz.7.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd471f8e969 code=0x7ffc0000 [ 297.817679][ T30] audit: type=1326 audit(1746188567.662:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11761 comm="syz.7.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7ffc0000 [ 297.850045][ T30] audit: type=1326 audit(1746188567.662:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11761 comm="syz.7.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7ffc0000 [ 297.893328][ T30] audit: type=1326 audit(1746188567.662:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11761 comm="syz.7.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fd471f8e969 code=0x7ffc0000 [ 297.940190][ T30] audit: type=1326 audit(1746188567.662:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11761 comm="syz.7.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7ffc0000 [ 297.984805][ T5866] usb 10-1: Firmware version (0.0) predates our first public release. [ 298.007152][ T5866] usb 10-1: Please update to version 0.2 or newer [ 298.019152][ T30] audit: type=1326 audit(1746188567.662:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11761 comm="syz.7.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd471f8e969 code=0x7ffc0000 [ 298.127332][ T5866] usb 10-1: USB disconnect, device number 5 [ 299.563194][T11781] netlink: 'syz.7.2592': attribute type 10 has an invalid length. [ 299.751866][T11781] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 299.822062][T11779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.107888][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.115830][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 360.125584][ T5815] Bluetooth: hci6: command 0x0406 tx timeout [ 360.131669][ T55] Bluetooth: hci7: command 0x0406 tx timeout [ 360.481541][ T5190] udevd[5190]: worker [11569] /devices/platform/dummy_hcd.9/usb10/10-1 is taking a long time [ 373.611680][ T7783] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.548844][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.563595][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.606764][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 395.972347][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 431.818674][T11783] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 431.829549][T11783] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 432.101238][T11783] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 432.130546][T11783] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 432.277476][T11783] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 432.310892][T11783] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 432.393317][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 432.408586][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 432.418795][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 432.451340][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 432.458952][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 432.560583][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 432.599403][ T5827] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 432.612040][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 432.648124][T11826] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 432.657021][T11826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 432.665299][T11826] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 432.675006][T11826] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 432.688307][T11826] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 432.696297][T11828] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 432.711605][T11826] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 432.801513][T11826] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 432.813539][T11826] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 432.822461][T11826] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 432.830419][T11826] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 432.853946][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 432.862469][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 432.869803][ T5815] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 432.883438][ T5815] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 432.936027][ T5826] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 433.021545][ T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 433.857410][ T55] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 433.867447][ T55] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 433.885322][T11829] Bluetooth: hci6: command 0x0406 tx timeout [ 433.893044][ T55] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 433.914298][ T55] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 433.922572][ T55] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 433.931631][T11829] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 433.948554][T11829] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 433.956343][ T55] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 433.968078][ T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 433.977252][ T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 434.041911][ T5826] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 434.061556][T11829] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 434.069419][T11829] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 434.077652][ T5826] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 434.088367][ T5826] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 434.101467][ T5826] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 434.111895][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 434.149629][ T55] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 434.158529][ T55] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 434.167406][ T55] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 434.175945][ T55] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 434.295831][ T55] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 434.317860][T11829] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 434.356501][T11829] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 434.364372][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 434.372652][T11829] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 434.387827][T11829] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 434.396219][T11829] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 434.406782][T11829] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 434.427917][ T5827] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 434.437344][ T5827] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 434.466009][ T5827] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 434.833883][ T31] INFO: task syz-executor:11565 blocked for more than 143 seconds. [ 434.868094][ T31] Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 434.940459][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.949181][ T31] task:syz-executor state:D stack:22008 pid:11565 tgid:11565 ppid:1 task_flags:0x400140 flags:0x00000004 [ 435.003820][ T55] Bluetooth: hci4: command tx timeout [ 435.089919][ T55] Bluetooth: hci5: command tx timeout [ 435.096269][ T55] Bluetooth: hci10: command tx timeout [ 435.169135][ T31] Call Trace: [ 435.177980][ T31] [ 435.209854][ T31] __schedule+0x168f/0x4c70 [ 435.234221][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 435.239468][ T31] ? __lock_acquire+0xaac/0xd20 [ 435.261010][ T31] ? schedule+0x165/0x360 [ 435.265376][ T31] ? __pfx___schedule+0x10/0x10 [ 435.277826][ T31] ? schedule+0x91/0x360 [ 435.289251][ T31] schedule+0x165/0x360 [ 435.295145][ T31] schedule_preempt_disabled+0x13/0x30 [ 435.307909][ T31] __mutex_lock+0x724/0xe80 [ 435.312677][ T5827] Bluetooth: hci11: command tx timeout [ 435.320698][ T31] ? __mutex_lock+0x51b/0xe80 [ 435.325408][ T31] ? del_device_store+0xd1/0x360 [ 435.334628][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.339697][ T31] del_device_store+0xd1/0x360 [ 435.344916][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 435.349794][ T31] ? __pfx_del_device_store+0x10/0x10 [ 435.355934][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 435.361287][ T31] ? sysfs_kf_write+0x166/0x260 [ 435.366165][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 435.375131][ T31] kernfs_fop_write_iter+0x375/0x4f0 [ 435.380755][ T31] vfs_write+0x548/0xa90 [ 435.385031][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 435.391581][ T31] ? __pfx_vfs_write+0x10/0x10 [ 435.412764][ T31] ? do_sys_openat2+0x154/0x1c0 [ 435.417655][ T31] ksys_write+0x145/0x250 [ 435.429805][ T31] ? rcu_is_watching+0x15/0xb0 [ 435.435169][ T31] ? __pfx_ksys_write+0x10/0x10 [ 435.440059][ T31] ? do_syscall_64+0xba/0x210 [ 435.453066][ T31] do_syscall_64+0xf6/0x210 [ 435.457787][ T31] ? clear_bhb_loop+0x45/0xa0 [ 435.467702][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.491197][ T31] RIP: 0033:0x7f6008d8d41f [ 435.495663][ T31] RSP: 002b:00007ffc0d67af70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 435.515418][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f6008d8d41f [ 435.534853][ T31] RDX: 0000000000000001 RSI: 00007ffc0d67afc0 RDI: 0000000000000005 [ 435.549251][ T31] RBP: 00007f6008e11d05 R08: 0000000000000000 R09: 00007ffc0d67adc7 [ 435.573764][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 435.592110][ T31] R13: 00007ffc0d67afc0 R14: 00007f6009ae4620 R15: 0000000000000003 [ 435.600117][ T31] [ 435.655920][ T31] [ 435.655920][ T31] Showing all locks held in the system: [ 435.715349][ T31] 1 lock held by khungtaskd/31: [ 435.729248][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 435.743089][ T31] 2 locks held by getty/5568: [ 435.747786][ T31] #0: ffff888034fc20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 435.773744][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 435.797401][ T31] 5 locks held by kworker/1:4/5865: [ 435.816776][ T31] 3 locks held by kworker/u8:18/7782: [ 435.824192][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 435.840318][ T31] #1: ffffc90003e5fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 435.863526][ T31] #2: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 435.896569][ T31] 6 locks held by kworker/u8:19/7783: [ 435.905669][ T31] #0: ffff88801aef3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 435.925325][ T31] #1: ffffc90003e4fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 435.939446][ T31] #2: ffffffff8f2d5490 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 435.953980][ T31] #3: ffff88805b4bc0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 435.975932][ T31] #4: ffff88805b4bd250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 436.009872][ T31] #5: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 436.028285][ T31] 1 lock held by syz-executor/11358: [ 436.035093][ T5827] Bluetooth: hci13: command tx timeout [ 436.049647][ T31] #0: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 436.059509][ T31] 2 locks held by syz.1.2446/11377: [ 436.073008][ T31] #0: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 436.097706][ T31] #1: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 436.123391][ T31] 1 lock held by syz.6.2458/11450: [ 436.128531][ T31] #0: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 436.151324][ T31] 7 locks held by syz-executor/11456: [ 436.156711][ T31] #0: ffff8880351ae420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 436.172788][ T31] #1: ffff8880648d7888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 436.193472][ T31] #2: ffff888026f155a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 436.207451][ T5827] Bluetooth: hci15: command tx timeout [ 436.213380][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 436.239064][ T31] #3: ffffffff8eb820e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 436.250097][ T31] #4: ffff88807a4300e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 436.269629][ T31] #5: ffff88807a435250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 436.280815][ T55] Bluetooth: hci14: command tx timeout [ 436.300963][ T5827] Bluetooth: hci9: command tx timeout [ 436.309947][ T31] #6: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 436.335191][ T31] 4 locks held by syz-executor/11565: [ 436.349840][ T31] #0: ffff8880351ae420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 436.359275][ T31] #1: ffff88807da8fc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 436.378042][ T31] #2: ffff888026f155a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 436.390357][ T31] #3: ffffffff8eb820e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 436.416613][ T31] 1 lock held by syz.8.2527/11632: [ 436.426635][ T31] #0: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 436.436045][ T5827] Bluetooth: hci16: command tx timeout [ 436.443144][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 436.462682][ T31] 1 lock held by syz-executor/11788: [ 436.467983][ T31] #0: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 436.484840][ T31] 1 lock held by syz.7.2598/11794: [ 436.489969][ T31] #0: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 436.508180][ T31] 2 locks held by syz-executor/11797: [ 436.514598][ T55] Bluetooth: hci17: command tx timeout [ 436.530111][ T31] #0: ffffffff8f2d5490 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 436.540074][ T31] #1: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 436.556893][ T31] 1 lock held by syz-executor/11798: [ 436.582348][ T31] #0: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 436.610665][ T31] 2 locks held by syz-executor/11800: [ 436.616056][ T31] #0: ffffffff8f2d5490 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 436.633089][ T31] #1: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 436.647529][ T31] 2 locks held by syz-executor/11802: [ 436.655917][ T31] #0: ffffffff8f2d5490 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 436.680780][ T31] #1: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 436.689876][ T31] 1 lock held by syz-executor/11806: [ 436.709409][ T31] #0: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 436.724061][ T31] 1 lock held by syz-executor/11809: [ 436.729364][ T31] #0: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 436.744038][ T31] 1 lock held by syz-executor/11810: [ 436.749339][ T31] #0: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 436.765990][ T31] 2 locks held by syz-executor/11812: [ 436.776162][ T31] #0: ffffffff8f2d5490 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 436.799929][ T31] #1: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 436.825459][ T31] 1 lock held by syz-executor/11815: [ 436.841068][ T31] #0: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 436.858249][ T31] 1 lock held by syz-executor/11818: [ 436.864567][ T31] #0: ffffffff8f2e1fc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 436.910394][ T31] [ 436.912765][ T31] ============================================= [ 436.912765][ T31] [ 436.946553][ T31] NMI backtrace for cpu 0 [ 436.946578][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 436.946599][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 436.946608][ T31] Call Trace: [ 436.946616][ T31] [ 436.946623][ T31] dump_stack_lvl+0x189/0x250 [ 436.946647][ T31] ? __wake_up_klogd+0xd9/0x110 [ 436.946666][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.946687][ T31] ? __pfx__printk+0x10/0x10 [ 436.946722][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 436.946747][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 436.946767][ T31] ? _printk+0xcf/0x120 [ 436.946793][ T31] ? __pfx__printk+0x10/0x10 [ 436.946818][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 436.946843][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 436.946868][ T31] watchdog+0xfee/0x1030 [ 436.946889][ T31] ? watchdog+0x1de/0x1030 [ 436.946914][ T31] kthread+0x70e/0x8a0 [ 436.946935][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.946951][ T31] ? __pfx_kthread+0x10/0x10 [ 436.946969][ T31] ? __pfx_kthread+0x10/0x10 [ 436.946990][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.947015][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.947031][ T31] ? __pfx_kthread+0x10/0x10 [ 436.947047][ T31] ret_from_fork+0x4b/0x80 [ 436.947061][ T31] ? __pfx_kthread+0x10/0x10 [ 436.947078][ T31] ret_from_fork_asm+0x1a/0x30 [ 436.947114][ T31] [ 436.947120][ T31] Sending NMI from CPU 0 to CPUs 1: [ 437.105148][ C1] NMI backtrace for cpu 1 [ 437.105165][ C1] CPU: 1 UID: 0 PID: 5868 Comm: kworker/1:5 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 437.105185][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 437.105196][ C1] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 437.105221][ C1] RIP: 0010:check_preemption_disabled+0x1/0x120 [ 437.105242][ C1] Code: 00 fa c0 8b 48 c7 c6 40 fa c0 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 05 4e 0e 23 07 48 89 44 24 08 [ 437.105257][ C1] RSP: 0018:ffffc90000a07720 EFLAGS: 00000203 [ 437.105270][ C1] RAX: 0000000000000001 RBX: ffffffff90965701 RCX: e6c6aca4366a8000 [ 437.105282][ C1] RDX: ffffc90000a07801 RSI: ffffffff8bc0fa40 RDI: ffffffff8bc0fa00 [ 437.105294][ C1] RBP: dffffc0000000000 R08: ffffc90000a082f0 R09: 0000000000000000 [ 437.105305][ C1] R10: ffffc90000a078d8 R11: fffff52000140f1d R12: ffffc90000a08300 [ 437.105317][ C1] R13: ffffffff817199f5 R14: ffffffff8df3b860 R15: ffffffff817199f5 [ 437.105329][ C1] FS: 0000000000000000(0000) GS:ffff888126200000(0000) knlGS:0000000000000000 [ 437.105342][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.105353][ C1] CR2: 00007ff637f18310 CR3: 000000004ac50000 CR4: 00000000003526f0 [ 437.105367][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 437.105376][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 437.105386][ C1] Call Trace: [ 437.105392][ C1] [ 437.105399][ C1] rcu_is_watching+0x15/0xb0 [ 437.105421][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.105438][ C1] lock_release+0x4b/0x3e0 [ 437.105456][ C1] ? deref_stack_reg+0x19f/0x230 [ 437.105474][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.105490][ C1] unwind_next_frame+0x19a9/0x2390 [ 437.105509][ C1] ? unwind_next_frame+0xa5/0x2390 [ 437.105525][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 437.105545][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.105560][ C1] arch_stack_walk+0x11c/0x150 [ 437.105581][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 437.105600][ C1] stack_trace_save+0x9c/0xe0 [ 437.105614][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 437.105627][ C1] ? worker_thread+0x8a0/0xda0 [ 437.105654][ C1] kasan_save_track+0x3e/0x80 [ 437.105673][ C1] ? kasan_save_track+0x3e/0x80 [ 437.105690][ C1] ? kasan_save_free_info+0x46/0x50 [ 437.105726][ C1] ? __kasan_slab_free+0x62/0x70 [ 437.105744][ C1] ? kfree+0x193/0x440 [ 437.105763][ C1] ? nf_conntrack_free+0x2e8/0x380 [ 437.105777][ C1] ? nf_conntrack_in+0xa24/0x1600 [ 437.105792][ C1] ? nf_hook_slow+0xc2/0x220 [ 437.105812][ C1] ? nf_hook+0x217/0x380 [ 437.105827][ C1] ? __ip_local_out+0x4db/0x600 [ 437.105842][ C1] ? ip_local_out+0x26/0x70 [ 437.105856][ C1] ? synproxy_send_client_synack+0x8bb/0xe20 [ 437.105871][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 437.105909][ C1] kasan_save_free_info+0x46/0x50 [ 437.105925][ C1] __kasan_slab_free+0x62/0x70 [ 437.105944][ C1] ? nf_conntrack_free+0x2e8/0x380 [ 437.105958][ C1] kfree+0x193/0x440 [ 437.105975][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 437.105999][ C1] nf_conntrack_free+0x2e8/0x380 [ 437.106015][ C1] nf_conntrack_in+0xa24/0x1600 [ 437.106041][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 437.106062][ C1] ? ipt_do_table+0x2a3/0x1610 [ 437.106085][ C1] ? nf_hook+0x9d/0x380 [ 437.106101][ C1] ? nf_hook+0x9d/0x380 [ 437.106115][ C1] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 437.106134][ C1] ? ipv4_conntrack_local+0x126/0x210 [ 437.106147][ C1] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 437.106163][ C1] nf_hook_slow+0xc2/0x220 [ 437.106186][ C1] nf_hook+0x217/0x380 [ 437.106203][ C1] ? nf_hook+0x9d/0x380 [ 437.106218][ C1] ? __pfx_nf_hook+0x10/0x10 [ 437.106235][ C1] ? __pfx_dst_output+0x10/0x10 [ 437.106253][ C1] ? ip_fast_csum+0x1ee/0x2b0 [ 437.106273][ C1] __ip_local_out+0x4db/0x600 [ 437.106288][ C1] ? __pfx_dst_output+0x10/0x10 [ 437.106306][ C1] ip_local_out+0x26/0x70 [ 437.106322][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 437.106344][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 437.106366][ C1] ? nft_jhash_dump+0x2c8/0x400 [ 437.106380][ C1] ? synproxy_pernet+0x45/0x270 [ 437.106399][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 437.106419][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 437.106435][ C1] ? kasan_record_aux_stack+0xbc/0xd0 [ 437.106453][ C1] ? nf_ip_checksum+0x13c/0x510 [ 437.106471][ C1] nft_synproxy_do_eval+0x345/0x570 [ 437.106487][ C1] ? wg_packet_decrypt_worker+0xc6f/0xd10 [ 437.106506][ C1] ? process_scheduled_works+0xadb/0x17a0 [ 437.106526][ C1] ? worker_thread+0x8a0/0xda0 [ 437.106548][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 437.106573][ C1] nft_do_chain+0x409/0x1920 [ 437.106596][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 437.106631][ C1] nft_do_chain_inet+0x25d/0x340 [ 437.106647][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 437.106664][ C1] ? ipt_do_table+0x2a3/0x1610 [ 437.106686][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 437.106708][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 437.106730][ C1] nf_hook_slow+0xc2/0x220 [ 437.106753][ C1] NF_HOOK+0x206/0x3a0 [ 437.106775][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 437.106797][ C1] ? NF_HOOK+0x9a/0x3a0 [ 437.106817][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 437.106836][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 437.106851][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 437.106873][ C1] ? skb_dst+0x4f/0xd0 [ 437.106894][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 437.106917][ C1] NF_HOOK+0x309/0x3a0 [ 437.106938][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 437.106959][ C1] ? NF_HOOK+0x9a/0x3a0 [ 437.106978][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 437.106998][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 437.107019][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 437.107045][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 437.107064][ C1] __netif_receive_skb+0x143/0x380 [ 437.107088][ C1] ? process_backlog+0x2d5/0x14f0 [ 437.107103][ C1] process_backlog+0x60e/0x14f0 [ 437.107125][ C1] ? __pfx_process_backlog+0x10/0x10 [ 437.107144][ C1] __napi_poll+0xc4/0x480 [ 437.107163][ C1] ? net_rx_action+0x447/0xdf0 [ 437.107179][ C1] net_rx_action+0x6ea/0xdf0 [ 437.107192][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.107214][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 437.107245][ C1] handle_softirqs+0x283/0x870 [ 437.107268][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 437.107291][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 437.107317][ C1] __irq_exit_rcu+0xca/0x1f0 [ 437.107336][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 437.107362][ C1] irq_exit_rcu+0x9/0x30 [ 437.107381][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 437.107396][ C1] [ 437.107401][ C1] [ 437.107406][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.107423][ C1] RIP: 0010:__local_bh_enable_ip+0x135/0x1c0 [ 437.107444][ C1] Code: 8b e8 cf 3c c9 09 65 66 8b 05 0f 4a ec 10 66 85 c0 75 5a bf 01 00 00 00 e8 a8 08 0b 00 e8 83 86 41 00 fb 65 8b 05 eb 49 ec 10 <85> c0 75 05 e8 52 ce ad ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 437.107458][ C1] RSP: 0018:ffffc900044bf580 EFLAGS: 00000282 [ 437.107471][ C1] RAX: 0000000000000000 RBX: 0000000000000201 RCX: e6c6aca4366a8000 [ 437.107481][ C1] RDX: 0000000000000006 RSI: ffffffff8d73669d RDI: ffffffff8bc0fa60 [ 437.107492][ C1] RBP: ffffc900044bf610 R08: ffffffff8f7da977 R09: 1ffffffff1efb52e [ 437.107504][ C1] R10: dffffc0000000000 R11: fffffbfff1efb52f R12: ffffffff8652735f [ 437.107516][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92000897eb0 [ 437.107529][ C1] ? wg_packet_decrypt_worker+0xc6f/0xd10 [ 437.107555][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 437.107579][ C1] ? wg_packet_decrypt_worker+0xc6f/0xd10 [ 437.107600][ C1] wg_packet_decrypt_worker+0xc6f/0xd10 [ 437.107628][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 437.107649][ C1] ? finish_task_switch+0x266/0x950 [ 437.107667][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.107684][ C1] ? rcu_is_watching+0x15/0xb0 [ 437.107704][ C1] ? trace_sched_exit_tp+0x38/0x120 [ 437.107728][ C1] ? __schedule+0x16ad/0x4c70 [ 437.107750][ C1] ? preempt_schedule_common+0x83/0xd0 [ 437.107767][ C1] ? __pfx___schedule+0x10/0x10 [ 437.107785][ C1] ? look_up_lock_class+0x74/0x170 [ 437.107802][ C1] ? register_lock_class+0x51/0x320 [ 437.107823][ C1] ? __lock_acquire+0xaac/0xd20 [ 437.107845][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 437.107869][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 437.107890][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 437.107911][ C1] process_scheduled_works+0xadb/0x17a0 [ 437.107946][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 437.107974][ C1] worker_thread+0x8a0/0xda0 [ 437.107997][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 437.108024][ C1] ? __kthread_parkme+0x7b/0x200 [ 437.108042][ C1] kthread+0x70e/0x8a0 [ 437.108059][ C1] ? __pfx_worker_thread+0x10/0x10 [ 437.108079][ C1] ? __pfx_kthread+0x10/0x10 [ 437.108095][ C1] ? __pfx_kthread+0x10/0x10 [ 437.108110][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.108132][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.108147][ C1] ? __pfx_kthread+0x10/0x10 [ 437.108162][ C1] ret_from_fork+0x4b/0x80 [ 437.108175][ C1] ? __pfx_kthread+0x10/0x10 [ 437.108191][ C1] ret_from_fork_asm+0x1a/0x30 [ 437.108220][ C1] [ 438.076344][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 438.083241][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 438.095057][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 438.105126][ T31] Call Trace: [ 438.108414][ T31] [ 438.111356][ T31] dump_stack_lvl+0x99/0x250 [ 438.115965][ T31] ? __asan_memcpy+0x40/0x70 [ 438.120571][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.125782][ T31] ? __pfx__printk+0x10/0x10 [ 438.130400][ T31] panic+0x2db/0x790 [ 438.134328][ T31] ? __pfx_panic+0x10/0x10 [ 438.138773][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 438.144176][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 438.149562][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 438.155752][ T31] watchdog+0x102d/0x1030 [ 438.160096][ T31] ? watchdog+0x1de/0x1030 [ 438.164533][ T31] kthread+0x70e/0x8a0 [ 438.168615][ T31] ? __pfx_watchdog+0x10/0x10 [ 438.173312][ T31] ? __pfx_kthread+0x10/0x10 [ 438.177910][ T31] ? __pfx_kthread+0x10/0x10 [ 438.182530][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.187758][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.192972][ T31] ? __pfx_kthread+0x10/0x10 [ 438.197575][ T31] ret_from_fork+0x4b/0x80 [ 438.202014][ T31] ? __pfx_kthread+0x10/0x10 [ 438.206616][ T31] ret_from_fork_asm+0x1a/0x30 [ 438.211411][ T31] [ 438.214705][ T31] Kernel Offset: disabled [ 438.219022][ T31] Rebooting in 86400 seconds..