last executing test programs: 2m37.514984574s ago: executing program 1 (id=3525): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 2m37.17074963s ago: executing program 1 (id=3529): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 2m36.3719618s ago: executing program 1 (id=3530): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) 2m36.079193141s ago: executing program 1 (id=3533): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="ea", 0x1}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 2m36.032267403s ago: executing program 1 (id=3534): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) 2m35.478394347s ago: executing program 1 (id=3537): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x9, 0x4896, 0x81, 0x3, 0x7, "203c5e0000ff765e000080fffffffffffffff2", 0xa, 0x4}) ioctl$TIOCSTI(r0, 0x5412, 0x0) 1m47.189237041s ago: executing program 2 (id=3715): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000005600)={0x0, 0x0, &(0x7f00000055c0)={&(0x7f0000005540)=ANY=[@ANYBLOB="20000000020101"], 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0xc0) 1m42.514727976s ago: executing program 2 (id=3724): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) statx(0xffffffffffffffff, 0x0, 0x2000, 0x1, 0x0) 1m39.445191649s ago: executing program 2 (id=3732): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) 1m37.889285249s ago: executing program 2 (id=3733): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) 1m35.688155714s ago: executing program 2 (id=3736): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaac164957300000e08"], 0x0) 1m34.603904029s ago: executing program 2 (id=3741): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 1m26.351921066s ago: executing program 0 (id=3752): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x6, 0x0, 0x35314142, 0x0, 0x0, [{0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {0x20}]}}) 1m26.345738343s ago: executing program 0 (id=3754): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x84) 1m24.137628684s ago: executing program 0 (id=3755): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x0, 0x2}, 0x18, 0x0) 1m23.213736712s ago: executing program 0 (id=3757): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="ea", 0x1}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 1m22.360230743s ago: executing program 0 (id=3759): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) 1m20.43012081s ago: executing program 0 (id=3761): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) 1m18.710174687s ago: executing program 32 (id=3741): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 1m5.022327236s ago: executing program 33 (id=3761): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) 59.604084465s ago: executing program 3 (id=3783): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8000, 0x0, 0xfffc}}}}}}, 0x0) 59.072169624s ago: executing program 3 (id=3784): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) mount$overlay(0x0, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './file3'}}, {@xino_auto}, {@verity_on}]}) 57.722003252s ago: executing program 3 (id=3786): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) chdir(&(0x7f00000001c0)='./bus\x00') 54.757875031s ago: executing program 3 (id=3788): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xfdef) 53.245702687s ago: executing program 3 (id=3789): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 52.181457069s ago: executing program 3 (id=3791): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001040000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 36.743536871s ago: executing program 34 (id=3791): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001040000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 26.971194978s ago: executing program 4 (id=3808): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) 25.171294953s ago: executing program 4 (id=3809): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000180)=0x80) 24.359866714s ago: executing program 4 (id=3810): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 22.121539271s ago: executing program 4 (id=3811): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="ea", 0x1}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 20.58930126s ago: executing program 4 (id=3812): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x24004800) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x7ff) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) 16.57089778s ago: executing program 4 (id=3813): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 0s ago: executing program 35 (id=3813): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): dit(1763443942.019:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 394.315208][ T37] audit: type=1326 audit(1763443942.019:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 394.316268][ T37] audit: type=1326 audit(1763443942.019:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 394.317235][ T7998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.867'. [ 394.317594][ T37] audit: type=1326 audit(1763443942.019:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 394.449130][ T37] audit: type=1326 audit(1763443942.159:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 394.449533][ T37] audit: type=1326 audit(1763443942.159:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 394.450108][ T37] audit: type=1326 audit(1763443942.159:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 394.450594][ T37] audit: type=1326 audit(1763443942.159:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 394.451097][ T37] audit: type=1326 audit(1763443942.159:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 394.451543][ T37] audit: type=1326 audit(1763443942.159:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 397.701394][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 398.516643][ T8068] tmpfs: Bad value for 'nr_blocks' [ 399.032205][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 400.677884][ T3117] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 400.829005][ T3117] usb 5-1: device descriptor read/64, error -71 [ 400.964152][ T8118] netlink: 48 bytes leftover after parsing attributes in process `syz.3.913'. [ 401.098264][ T3117] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 401.238048][ T3117] usb 5-1: device descriptor read/64, error -71 [ 401.348413][ T3117] usb usb5-port1: attempt power cycle [ 401.687982][ T3117] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 401.714018][ T3117] usb 5-1: device descriptor read/8, error -71 [ 401.958009][ T3117] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 401.991192][ T3117] usb 5-1: device descriptor read/8, error -71 [ 402.098460][ T3117] usb usb5-port1: unable to enumerate USB device [ 403.076604][ T8150] netlink: 120 bytes leftover after parsing attributes in process `syz.0.928'. [ 403.076640][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.928'. [ 403.076655][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.928'. [ 403.591069][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 404.275095][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 405.125866][ T8186] tmpfs: Bad value for 'nr_blocks' [ 407.051043][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 407.051850][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 407.051873][ T10] usb 1-1: can't read configurations, error -71 [ 407.582501][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 408.631507][ T8214] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 408.631538][ T8214] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 408.815573][ T8214] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 408.815601][ T8214] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 408.933508][ T8214] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 408.933534][ T8214] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 409.052746][ T8214] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 409.052776][ T8214] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 409.137883][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 409.165371][ T8214] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 409.165396][ T8214] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 410.297001][ T8253] netlink: 'syz.1.973': attribute type 4 has an invalid length. [ 411.075425][ T8270] tmpfs: Bad value for 'nr_blocks' [ 411.962577][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 411.965780][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 411.965822][ T10] usb 1-1: can't read configurations, error -71 [ 412.660319][ T8292] netlink: 'syz.3.988': attribute type 4 has an invalid length. [ 425.999732][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 425.999753][ T37] audit: type=1326 audit(1763443973.709:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8458 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 425.999803][ T37] audit: type=1326 audit(1763443973.709:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8458 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 425.999847][ T37] audit: type=1326 audit(1763443973.709:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8458 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 426.008364][ T37] audit: type=1326 audit(1763443973.719:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8458 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 426.009107][ T37] audit: type=1326 audit(1763443973.719:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8458 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 426.009152][ T37] audit: type=1326 audit(1763443973.719:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8458 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 426.009191][ T37] audit: type=1326 audit(1763443973.719:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8458 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 426.020638][ T37] audit: type=1326 audit(1763443973.719:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8458 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 426.020688][ T37] audit: type=1326 audit(1763443973.729:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8458 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 426.021663][ T37] audit: type=1326 audit(1763443973.729:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8458 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 426.111107][ T8461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1053'. [ 426.904967][ T8474] tmpfs: Bad value for 'nr_blocks' [ 426.988456][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'. [ 426.988500][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'. [ 427.436065][ T8484] netlink: 580 bytes leftover after parsing attributes in process `syz.0.1063'. [ 429.161131][ T8509] netlink: 580 bytes leftover after parsing attributes in process `syz.1.1075'. [ 435.934804][ T8592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1111'. [ 440.308797][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.308883][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.443890][ T8611] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1118'. [ 440.443925][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'. [ 440.443940][ T8611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1118'. [ 441.715928][ T8641] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1131'. [ 441.715987][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'. [ 441.716003][ T8641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1131'. [ 446.360322][ T8690] netlink: 580 bytes leftover after parsing attributes in process `syz.1.1150'. [ 451.582486][ T8755] netlink: 580 bytes leftover after parsing attributes in process `syz.3.1177'. [ 451.957181][ T8761] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1179'. [ 454.384999][ T8787] netlink: 580 bytes leftover after parsing attributes in process `syz.0.1190'. [ 460.081688][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 460.081710][ T37] audit: type=1326 audit(1763444007.779:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 460.082340][ T37] audit: type=1326 audit(1763444007.789:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 460.130622][ T37] audit: type=1326 audit(1763444007.839:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 460.130922][ T37] audit: type=1326 audit(1763444007.839:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 460.159209][ T37] audit: type=1326 audit(1763444007.869:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 460.159575][ T37] audit: type=1326 audit(1763444007.869:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 460.159944][ T37] audit: type=1326 audit(1763444007.869:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 460.160223][ T37] audit: type=1326 audit(1763444007.869:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 460.160933][ T37] audit: type=1326 audit(1763444007.869:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 460.161335][ T37] audit: type=1326 audit(1763444007.869:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 461.493934][ T8874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1226'. [ 461.862290][ T8879] netlink: 'syz.3.1228': attribute type 4 has an invalid length. [ 465.340323][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1239'. [ 466.963639][ T5890] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 467.121776][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.121806][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.121828][ T5890] usb 5-1: config 1 has no interface number 0 [ 467.121892][ T5890] usb 5-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 467.121919][ T5890] usb 5-1: config 1 interface 2 has no altsetting 1 [ 467.179377][ T5890] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.179409][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.179440][ T5890] usb 5-1: Product: syz [ 467.179454][ T5890] usb 5-1: Manufacturer: syz [ 467.179469][ T5890] usb 5-1: SerialNumber: syz [ 467.386735][ T8941] netlink: 'syz.1.1253': attribute type 4 has an invalid length. [ 467.443029][ T5870] usb 5-1: USB disconnect, device number 8 [ 468.225596][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 468.225617][ T37] audit: type=1326 audit(1763444015.929:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8962 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 468.226984][ T37] audit: type=1326 audit(1763444015.929:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8962 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 468.227052][ T37] audit: type=1326 audit(1763444015.929:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8962 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 468.227100][ T37] audit: type=1326 audit(1763444015.929:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8962 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 468.324904][ T37] audit: type=1326 audit(1763444015.929:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8962 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 468.324972][ T37] audit: type=1326 audit(1763444015.929:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8962 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 468.325692][ T37] audit: type=1326 audit(1763444016.029:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8962 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 468.325744][ T37] audit: type=1326 audit(1763444016.029:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8962 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 468.326632][ T37] audit: type=1326 audit(1763444016.029:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8962 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 468.326683][ T37] audit: type=1326 audit(1763444016.029:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8962 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 470.293054][ T8987] netlink: 580 bytes leftover after parsing attributes in process `syz.4.1272'. [ 470.564266][ T8994] binder: Bad value for 'stats' [ 471.962322][ T9003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1279'. [ 472.451832][ T9012] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1285'. [ 472.707882][ T5890] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 472.860406][ T5890] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.860435][ T5890] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 472.860457][ T5890] usb 1-1: config 1 has no interface number 1 [ 472.860526][ T5890] usb 1-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 472.860555][ T5890] usb 1-1: config 1 interface 2 has no altsetting 1 [ 472.863840][ T5890] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 472.863870][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.863889][ T5890] usb 1-1: Product: syz [ 472.863904][ T5890] usb 1-1: Manufacturer: syz [ 472.863918][ T5890] usb 1-1: SerialNumber: syz [ 475.087963][ T5889] usb 1-1: USB disconnect, device number 6 [ 477.500109][ T9069] netlink: 'syz.0.1308': attribute type 4 has an invalid length. [ 477.573806][ T9073] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1310'. [ 479.286320][ T9101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1324'. [ 482.217663][ T9158] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1349'. [ 485.167848][ T5889] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 488.102145][ T5889] usb 1-1: unable to get BOS descriptor or descriptor too short [ 488.108473][ T5889] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 488.108515][ T5889] usb 1-1: can't read configurations, error -71 [ 489.179655][ T9226] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1376'. [ 490.776314][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 490.776337][ T37] audit: type=1326 audit(1763444038.479:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9248 comm="syz.2.1389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ac056f6c9 code=0x0 [ 491.012598][ T9251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1391'. [ 491.951246][ T37] audit: type=1326 audit(1763444039.659:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.2.1401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ac056f6c9 code=0x0 [ 492.114453][ T37] audit: type=1326 audit(1763444039.819:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 492.114516][ T37] audit: type=1326 audit(1763444039.819:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 492.114565][ T37] audit: type=1326 audit(1763444039.819:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 492.114613][ T37] audit: type=1326 audit(1763444039.819:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 492.114660][ T37] audit: type=1326 audit(1763444039.819:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 492.114708][ T37] audit: type=1326 audit(1763444039.819:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 492.114754][ T37] audit: type=1326 audit(1763444039.819:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 492.115568][ T37] audit: type=1326 audit(1763444039.819:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 494.088012][ T9295] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1412'. [ 496.720675][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 496.720696][ T37] audit: type=1326 audit(1763444044.429:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9329 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 496.723675][ T37] audit: type=1326 audit(1763444044.429:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9329 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 496.723739][ T37] audit: type=1326 audit(1763444044.429:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9329 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 496.723787][ T37] audit: type=1326 audit(1763444044.429:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9329 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 496.723834][ T37] audit: type=1326 audit(1763444044.429:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9329 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 496.726512][ T37] audit: type=1326 audit(1763444044.429:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9329 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 496.771761][ T37] audit: type=1326 audit(1763444044.479:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9329 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 496.771802][ T37] audit: type=1326 audit(1763444044.479:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9329 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 496.771827][ T37] audit: type=1326 audit(1763444044.479:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9329 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 496.771852][ T37] audit: type=1326 audit(1763444044.479:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9329 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x7ffc0000 [ 497.002503][ T9335] netlink: 580 bytes leftover after parsing attributes in process `syz.4.1430'. [ 497.568535][ T9342] tmpfs: Bad value for 'nr_blocks' [ 498.294209][ T9359] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 498.295191][ T9359] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 498.297458][ T9359] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 498.297971][ T9359] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 498.299152][ T9359] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 498.299404][ T9359] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 498.300429][ T9359] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 498.300647][ T9359] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 498.300667][ T9359] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 498.583443][ T9361] netlink: 580 bytes leftover after parsing attributes in process `syz.0.1442'. [ 500.070026][ T9373] tmpfs: Bad value for 'nr_blocks' [ 502.154535][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.154611][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.629145][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1465'. [ 503.613878][ T9435] binder: Bad value for 'stats' [ 503.636553][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'. [ 508.417936][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 508.448432][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'. [ 508.685046][ T9514] netlink: 580 bytes leftover after parsing attributes in process `syz.1.1506'. [ 510.546197][ T9527] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1512'. [ 512.594588][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 512.649405][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 512.649449][ T10] usb 5-1: can't read configurations, error -71 [ 512.896429][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1518'. [ 513.277469][ T9549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1523'. [ 517.062568][ T9596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1541'. [ 521.956323][ T9621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1549'. [ 522.817107][ T9643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1559'. [ 524.837912][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 524.837934][ T37] audit: type=1326 audit(1763444072.499:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9659 comm="syz.4.1565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31c19df6c9 code=0x0 [ 525.606595][ T9670] netlink: 'syz.3.1571': attribute type 4 has an invalid length. [ 529.269431][ T9736] netlink: 'syz.2.1600': attribute type 4 has an invalid length. [ 534.704821][ T9810] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.363848][ T37] audit: type=1326 audit(1763444085.069:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9858 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 537.369504][ T37] audit: type=1326 audit(1763444085.079:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9858 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 537.369562][ T37] audit: type=1326 audit(1763444085.079:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9858 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 537.369608][ T37] audit: type=1326 audit(1763444085.079:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9858 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 537.369655][ T37] audit: type=1326 audit(1763444085.079:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9858 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 537.372391][ T37] audit: type=1326 audit(1763444085.079:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9858 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 537.372443][ T37] audit: type=1326 audit(1763444085.079:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9858 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 537.381384][ T37] audit: type=1326 audit(1763444085.089:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9858 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 537.381440][ T37] audit: type=1326 audit(1763444085.089:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9858 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 537.381769][ T37] audit: type=1326 audit(1763444085.089:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9858 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 537.596254][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.446448][ T9886] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1668'. [ 538.447299][ T9884] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1668'. [ 538.474448][ T9887] tmpfs: Bad value for 'nr_blocks' [ 538.550693][ T9889] netlink: 'syz.1.1671': attribute type 4 has an invalid length. [ 538.747043][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'. [ 541.871029][ T9950] netlink: 580 bytes leftover after parsing attributes in process `syz.1.1697'. [ 544.581363][T10002] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1719'. [ 545.300516][T10022] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1729'. [ 545.648410][T10035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1734'. [ 545.922694][T10042] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 545.923413][T10042] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 545.924950][T10042] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 545.925247][T10042] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 545.926448][T10042] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 545.926686][T10042] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 545.927629][T10042] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 545.952254][T10042] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 545.952284][T10042] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 546.625234][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 546.625254][ T37] audit: type=1326 audit(1763444094.329:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 546.625790][ T37] audit: type=1326 audit(1763444094.329:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 546.626300][ T37] audit: type=1326 audit(1763444094.329:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 546.626792][ T37] audit: type=1326 audit(1763444094.329:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 546.627095][ T37] audit: type=1326 audit(1763444094.329:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 546.627416][ T37] audit: type=1326 audit(1763444094.329:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 546.767657][ T37] audit: type=1326 audit(1763444094.329:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 546.767762][ T37] audit: type=1326 audit(1763444094.469:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 546.767802][ T37] audit: type=1326 audit(1763444094.469:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 546.767849][ T37] audit: type=1326 audit(1763444094.469:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.1.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39b5ff6c9 code=0x7ffc0000 [ 549.428507][T10101] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1767'. [ 550.327219][T10126] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1779'. [ 551.173797][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1786'. [ 551.845936][T10160] syz.0.1789 uses obsolete (PF_INET,SOCK_PACKET) [ 551.846999][T10160] syzkaller1: entered promiscuous mode [ 551.847021][T10160] syzkaller1: entered allmulticast mode [ 552.910311][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'. [ 561.021176][T10299] netlink: 'syz.0.1854': attribute type 1 has an invalid length. [ 562.308757][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 562.308778][ T37] audit: type=1326 audit(1763444110.019:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 562.319530][ T37] audit: type=1326 audit(1763444110.019:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 562.319589][ T37] audit: type=1326 audit(1763444110.019:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 562.319637][ T37] audit: type=1326 audit(1763444110.019:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 562.319684][ T37] audit: type=1326 audit(1763444110.019:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 562.319740][ T37] audit: type=1326 audit(1763444110.019:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 562.319788][ T37] audit: type=1326 audit(1763444110.029:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 562.319837][ T37] audit: type=1326 audit(1763444110.029:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 562.319885][ T37] audit: type=1326 audit(1763444110.029:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 562.319932][ T37] audit: type=1326 audit(1763444110.029:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6ac056f6c9 code=0x7ffc0000 [ 563.234611][T10336] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1866'. [ 563.451373][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.453782][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.737815][ T5870] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 571.897792][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 571.900503][ T5870] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 571.900531][ T5870] usb 5-1: config 0 has no interface number 0 [ 571.905231][ T5870] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 571.905259][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.905280][ T5870] usb 5-1: Product: syz [ 571.905293][ T5870] usb 5-1: Manufacturer: syz [ 571.905307][ T5870] usb 5-1: SerialNumber: syz [ 571.932373][ T5870] usb 5-1: config 0 descriptor?? [ 571.950470][ T5870] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 572.339340][ T5870] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 572.377297][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 572.377318][ T37] audit: type=1326 audit(1763444120.079:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10492 comm="syz.2.1941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ac056f6c9 code=0x0 [ 572.423950][ T5870] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 572.575326][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 572.618412][ T5870] usb 5-1: USB disconnect, device number 11 [ 572.710792][ T5870] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 572.769141][ T5870] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 572.770302][ T5870] quatech2 5-1:0.51: device disconnected [ 574.607786][ T37] audit: type=1326 audit(1763444122.309:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10530 comm="syz.0.1959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f705bf6c9 code=0x0 [ 575.746710][ T37] audit: type=1326 audit(1763444123.449:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10555 comm="syz.1.1972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb39b5ff6c9 code=0x0 [ 575.866805][T10558] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.604076][T10725] 9pnet_fd: Insufficient options for proto=fd [ 591.216765][ T37] audit: type=1326 audit(1763444138.919:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10756 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cdd5f6c9 code=0x7ffc0000 [ 591.217401][ T37] audit: type=1326 audit(1763444138.919:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10756 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cdd5f6c9 code=0x7ffc0000 [ 591.218723][ T37] audit: type=1326 audit(1763444138.919:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10756 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0cdd5f6c9 code=0x7ffc0000 [ 591.219276][ T37] audit: type=1326 audit(1763444138.929:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10756 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cdd5f6c9 code=0x7ffc0000 [ 591.219901][ T37] audit: type=1326 audit(1763444138.929:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10756 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cdd5f6c9 code=0x7ffc0000 [ 591.220197][ T37] audit: type=1326 audit(1763444138.929:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10756 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa0cdd5f6c9 code=0x7ffc0000 [ 591.220515][ T37] audit: type=1326 audit(1763444138.929:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10756 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cdd5f6c9 code=0x7ffc0000 [ 591.220964][ T37] audit: type=1326 audit(1763444138.929:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10756 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cdd5f6c9 code=0x7ffc0000 [ 591.221289][ T37] audit: type=1326 audit(1763444138.929:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10756 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa0cdd5f6c9 code=0x7ffc0000 [ 591.221763][ T37] audit: type=1326 audit(1763444138.929:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10756 comm="syz.3.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cdd5f6c9 code=0x7ffc0000 [ 594.269303][ T5870] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 594.270257][T10814] 9pnet_fd: Insufficient options for proto=fd [ 594.440068][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.440098][ T5870] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 594.445078][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.445107][ T5870] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 594.446293][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.446315][ T5870] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 594.446356][ T5870] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 594.446380][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.534003][ T5870] usb 5-1: config 0 descriptor?? [ 594.773744][ T5870] usb 5-1: USB disconnect, device number 12 [ 595.894814][ T5870] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 596.053293][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 596.053352][ T5870] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 596.053377][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.064652][ T5870] usb 5-1: config 0 descriptor?? [ 596.754355][ T5870] usb 5-1: language id specifier not provided by device, defaulting to English [ 597.677156][ T5870] letsketch 0003:6161:4D15.0001: Device info: ใกต [ 597.783377][T10846] netlink: 'syz.2.2087': attribute type 4 has an invalid length. [ 597.926026][ T5870] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 597.926083][ T5870] letsketch 0003:6161:4D15.0001: probe with driver letsketch failed with error -71 [ 598.010357][ T5870] usb 5-1: USB disconnect, device number 13 [ 598.827824][ T5870] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 598.980443][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.980473][ T5870] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 598.981947][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.981969][ T5870] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 598.983444][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.983467][ T5870] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 598.983505][ T5870] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 598.983528][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.079890][ T5870] usb 5-1: config 0 descriptor?? [ 599.319897][ T5890] usb 5-1: USB disconnect, device number 14 [ 600.034696][T10881] process 'syz.0.2103' launched './file0' with NULL argv: empty string added [ 602.513377][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.719540][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.283188][T10972] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2142'. [ 610.520563][T11048] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 611.678008][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2184'. [ 612.897136][T11080] kernel profiling enabled (shift: 17) [ 617.307015][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2215'. [ 617.893044][T11150] tipc: Started in network mode [ 617.893078][T11150] tipc: Node identity ac1414aa, cluster identity 4711 [ 617.927802][T11150] tipc: Enabled bearer , priority 10 [ 618.967920][ T10] tipc: Node number set to 2886997162 [ 624.610510][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.610592][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.933911][T11361] syzkaller1: entered promiscuous mode [ 630.933940][T11361] syzkaller1: entered allmulticast mode [ 631.959065][ T5890] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 632.123112][ T5890] usb 1-1: config index 0 descriptor too short (expected 292, got 36) [ 632.123145][ T5890] usb 1-1: config 128 has too many interfaces: 254, using maximum allowed: 32 [ 632.123167][ T5890] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 632.123186][ T5890] usb 1-1: config 128 has 0 interfaces, different from the descriptor's value: 254 [ 632.123227][ T5890] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 632.123251][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.219975][T11375] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2315'. [ 632.413023][ T5890] usb 1-1: USB disconnect, device number 9 [ 633.787301][T11397] syzkaller1: entered promiscuous mode [ 633.787331][T11397] syzkaller1: entered allmulticast mode [ 634.682322][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 634.682341][ T37] audit: type=1326 audit(1763444182.389:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 634.682391][ T37] audit: type=1326 audit(1763444182.389:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 634.682511][ T37] audit: type=1326 audit(1763444182.389:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 634.682559][ T37] audit: type=1326 audit(1763444182.389:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 634.682605][ T37] audit: type=1326 audit(1763444182.389:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 634.683017][ T37] audit: type=1326 audit(1763444182.389:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 634.683507][ T37] audit: type=1326 audit(1763444182.389:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 634.683897][ T37] audit: type=1326 audit(1763444182.389:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 634.684450][ T37] audit: type=1326 audit(1763444182.389:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 634.684844][ T37] audit: type=1326 audit(1763444182.389:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0f705bf6c9 code=0x7ffc0000 [ 644.620208][T11515] syzkaller1: entered promiscuous mode [ 644.620236][T11515] syzkaller1: entered allmulticast mode [ 646.501539][T11532] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2381'. [ 647.754247][T11554] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2390'. [ 651.123834][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2405'. [ 651.229039][T11595] gtp0: entered promiscuous mode [ 651.229169][T11595] gtp0: entered allmulticast mode [ 654.350842][T11648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2428'. [ 656.498510][T11681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2443'. [ 659.487835][ T5890] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 659.647818][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 659.653276][ T5890] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 659.653357][ T5890] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 659.653380][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 659.653403][ T5890] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 659.653425][ T5890] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.653470][ T5890] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 659.653493][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.731773][ T5890] usbtmc 5-1:16.0: bulk endpoints not found [ 661.410093][T11749] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2475'. [ 662.352127][ T5870] usb 5-1: USB disconnect, device number 15 [ 662.456846][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2474'. [ 667.346221][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 667.346242][ T37] audit: type=1326 audit(1763444215.049:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11776 comm="syz.0.2487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f705bf6c9 code=0x0 [ 667.483172][T11783] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2488'. [ 670.560764][T11863] netlink: 'syz.3.2527': attribute type 4 has an invalid length. [ 670.605929][T11866] overlayfs: overlapping lowerdir path [ 670.948211][T11873] kAFS: No cell specified [ 672.709200][T11902] overlayfs: overlapping lowerdir path [ 675.151599][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2575'. [ 677.096857][T12000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'. [ 677.143398][T12000] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.102122][T12024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2601'. [ 679.169082][T12026] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2603'. [ 681.374167][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2619'. [ 681.429045][T12062] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.776906][T12098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2633'. [ 685.997853][ T5890] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 686.056007][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.056093][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.162397][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 686.162464][ T5890] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 686.162552][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.184281][ T5890] usb 1-1: config 0 descriptor?? [ 686.707807][ T991] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 686.842402][ T5890] usbhid 1-1:0.0: can't add hid device: -32 [ 686.842555][ T5890] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 686.863488][ T991] usb 5-1: config index 0 descriptor too short (expected 292, got 36) [ 686.863529][ T991] usb 5-1: config 128 has too many interfaces: 254, using maximum allowed: 32 [ 686.863549][ T991] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 686.863568][ T991] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 254 [ 686.863608][ T991] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 686.863630][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.879261][ T5890] usb 1-1: USB disconnect, device number 10 [ 687.130024][ T991] usb 5-1: USB disconnect, device number 16 [ 690.798810][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2695'. [ 693.528998][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'. [ 693.625545][T12271] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.095500][T12296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2721'. [ 696.142498][T12315] bridge_slave_0: left allmulticast mode [ 696.142532][T12315] bridge_slave_0: left promiscuous mode [ 696.142832][T12315] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.271904][T12315] bridge_slave_1: left promiscuous mode [ 696.272209][T12315] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.425636][T12315] bond0: (slave bond_slave_0): Releasing backup interface [ 696.569095][T12315] bond0: (slave bond_slave_1): Releasing backup interface [ 696.704056][T12315] team0: Port device team_slave_0 removed [ 696.777264][T12315] team0: Port device team_slave_1 removed [ 696.778652][T12315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.778682][T12315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.842872][T12315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.842905][T12315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.901900][T12315] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 697.054674][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 697.067571][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 697.082853][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 697.096114][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 697.097036][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 697.144180][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 697.146036][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 697.146581][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 697.148287][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 697.149086][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 698.416738][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.943166][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.237839][ T5816] Bluetooth: hci3: command tx timeout [ 699.531014][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.048657][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.725304][T12327] chnl_net:caif_netlink_parms(): no params data found [ 701.018733][ T12] bridge_slave_1: left promiscuous mode [ 701.022274][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.160639][ T12] bridge_slave_0: left allmulticast mode [ 701.160671][ T12] bridge_slave_0: left promiscuous mode [ 701.160978][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.238453][T12401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2766'. [ 701.317850][ T5816] Bluetooth: hci3: command tx timeout [ 703.397799][ T5816] Bluetooth: hci3: command tx timeout [ 703.545013][T12439] 9pnet_fd: Insufficient options for proto=fd [ 704.568465][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.629242][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.652458][ T12] bond0 (unregistering): Released all slaves [ 705.326280][ T12] bond1 (unregistering): Released all slaves [ 705.345745][ T12] bond2 (unregistering): Released all slaves [ 705.485683][ T5816] Bluetooth: hci3: command tx timeout [ 705.787158][T12460] 9pnet_fd: Insufficient options for proto=fd [ 706.183857][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2793'. [ 707.235771][T12327] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.236159][T12327] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.236421][T12327] bridge_slave_0: entered allmulticast mode [ 707.249505][T12327] bridge_slave_0: entered promiscuous mode [ 707.263323][T12327] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.269959][T12327] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.270191][T12327] bridge_slave_1: entered allmulticast mode [ 707.306989][T12327] bridge_slave_1: entered promiscuous mode [ 707.512621][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2807'. [ 707.834094][T12327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.977877][ T12] hsr_slave_0: left promiscuous mode [ 708.017862][ T12] hsr_slave_1: left promiscuous mode [ 708.019186][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.019360][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.044657][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.044686][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.182855][ T12] veth1_macvtap: left promiscuous mode [ 708.183169][ T12] veth0_macvtap: left promiscuous mode [ 708.183581][ T12] veth1_vlan: left promiscuous mode [ 708.183995][ T12] veth0_vlan: left promiscuous mode [ 709.511007][T12532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2821'. [ 710.607825][ T5870] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 710.784905][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 710.784962][ T5870] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 710.784986][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.791718][ T5870] usb 1-1: config 0 descriptor?? [ 711.659110][ T5870] letsketch 0003:6161:4D15.0002: Device info: [ 711.864624][ T12] team0 (unregistering): Port device team_slave_1 removed [ 711.908988][ T5870] usb 1-1: Max retries (5) exceeded reading string descriptor 201 [ 711.909075][ T5870] letsketch 0003:6161:4D15.0002: probe with driver letsketch failed with error -71 [ 711.935215][ T5870] usb 1-1: USB disconnect, device number 11 [ 712.128723][ T12] team0 (unregistering): Port device team_slave_0 removed [ 714.485007][T12554] 9pnet_fd: Insufficient options for proto=fd [ 715.142679][T12327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.157411][T12542] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2825'. [ 715.767490][T12327] team0: Port device team_slave_0 added [ 715.805127][T12327] team0: Port device team_slave_1 added [ 717.278469][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2848'. [ 717.584193][T12327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.584214][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.584243][T12327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.610953][T12327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.610972][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.610997][T12327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.549867][T12327] hsr_slave_0: entered promiscuous mode [ 718.558511][T12327] hsr_slave_1: entered promiscuous mode [ 718.575075][T12327] debugfs: 'hsr0' already exists in 'hsr' [ 718.575107][T12327] Cannot create hsr debugfs directory [ 719.429221][T12638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2860'. [ 721.156796][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.979014][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.967498][ C0] vkms_vblank_simulate: vblank timer overrun [ 724.967461][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.125128][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.242078][T12724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2888'. [ 726.496270][T12327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 726.615476][T12327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 726.663781][T12327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 726.847480][T12327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 727.464024][T12327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.572528][T12327] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.609748][ T9201] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.609976][ T9201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.690348][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.690965][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.940889][T12327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.222055][T12327] veth0_vlan: entered promiscuous mode [ 729.290417][T12327] veth1_vlan: entered promiscuous mode [ 729.502080][T12327] veth0_macvtap: entered promiscuous mode [ 729.523093][T12327] veth1_macvtap: entered promiscuous mode [ 729.581100][T12327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.639152][T12327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.677276][ T9201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.704011][ T9201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.708291][ T9201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.724961][ T9201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.476351][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.476372][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.953134][ T6196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.953158][ T6196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.101352][T12812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2912'. [ 734.080389][ T63] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 734.083842][ T63] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 734.086635][ T63] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 734.120676][ T63] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 734.124190][ T63] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 735.144258][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.192379][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.351515][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.973535][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.229380][ T63] Bluetooth: hci5: command tx timeout [ 736.278404][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.785729][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.932805][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2928'. [ 737.099251][ C0] vkms_vblank_simulate: vblank timer overrun [ 738.088243][ C0] vkms_vblank_simulate: vblank timer overrun [ 738.186972][ T3772] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.277788][ T63] Bluetooth: hci5: command tx timeout [ 738.805081][ T3772] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.341423][ T3772] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.358088][ T63] Bluetooth: hci5: command tx timeout [ 740.699995][ T3772] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.118826][T12847] chnl_net:caif_netlink_parms(): no params data found [ 741.253747][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2953'. [ 742.268640][T12847] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.268807][T12847] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.269064][T12847] bridge_slave_0: entered allmulticast mode [ 742.280880][T12847] bridge_slave_0: entered promiscuous mode [ 742.320855][T12847] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.321068][T12847] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.321361][T12847] bridge_slave_1: entered allmulticast mode [ 742.337912][T12847] bridge_slave_1: entered promiscuous mode [ 742.437759][ T63] Bluetooth: hci5: command tx timeout [ 742.903157][T12847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.954405][T12847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.113205][ T3772] bridge_slave_1: left promiscuous mode [ 743.113613][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.143104][T12980] 9pnet: Could not find request transport: fd0x0000000000000006 [ 743.230552][ T3772] bridge_slave_0: left allmulticast mode [ 743.230589][ T3772] bridge_slave_0: left promiscuous mode [ 743.230924][ T3772] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.714665][T13000] sctp: [Deprecated]: syz.1.2982 (pid 13000) Use of int in maxseg socket option. [ 743.714665][T13000] Use struct sctp_assoc_value instead [ 743.830115][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.047698][ T5891] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 744.130870][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.187830][ T5891] usb 1-1: device descriptor read/64, error -71 [ 744.437743][ T5891] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 744.597789][ T5891] usb 1-1: device descriptor read/64, error -71 [ 744.636074][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.735921][ T5891] usb usb1-port1: attempt power cycle [ 744.757517][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2988'. [ 745.440216][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.485768][ T5891] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 745.531584][ T5891] usb 1-1: device descriptor read/8, error -71 [ 745.657184][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.703104][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.765998][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.787753][ T5891] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 745.809820][ T5891] usb 1-1: device descriptor read/8, error -71 [ 745.883184][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.939729][ T5891] usb usb1-port1: unable to enumerate USB device [ 746.646799][T13021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2991'. [ 746.661813][ T3772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.738641][ T3772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.792158][ T3772] bond0 (unregistering): Released all slaves [ 747.509930][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.510027][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.608323][T13042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3001'. [ 747.741449][T12847] team0: Port device team_slave_0 added [ 747.763800][T13040] macvlan1: entered allmulticast mode [ 747.763824][T13040] veth1_vlan: entered allmulticast mode [ 747.798381][T12847] team0: Port device team_slave_1 added [ 748.092709][T13052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3007'. [ 748.957436][T12847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.957456][T12847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.957483][T12847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.998778][T12847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.998797][T12847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.998820][T12847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.495911][T13091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3023'. [ 750.818468][T12847] hsr_slave_0: entered promiscuous mode [ 750.820122][T12847] hsr_slave_1: entered promiscuous mode [ 750.825319][T12847] debugfs: 'hsr0' already exists in 'hsr' [ 750.825349][T12847] Cannot create hsr debugfs directory [ 751.230849][ T3772] hsr_slave_0: left promiscuous mode [ 751.384885][ T3772] hsr_slave_1: left promiscuous mode [ 751.386170][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.386207][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.759384][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.759415][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.902041][T13134] sctp: [Deprecated]: syz.1.3036 (pid 13134) Use of int in maxseg socket option. [ 752.902041][T13134] Use struct sctp_assoc_value instead [ 753.027780][ T3772] veth1_macvtap: left promiscuous mode [ 753.027913][ T3772] veth0_macvtap: left promiscuous mode [ 753.028263][ T3772] veth1_vlan: left promiscuous mode [ 753.028489][ T3772] veth0_vlan: left promiscuous mode [ 753.111261][T13136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3037'. [ 755.159394][T13157] sctp: [Deprecated]: syz.4.3046 (pid 13157) Use of int in maxseg socket option. [ 755.159394][T13157] Use struct sctp_assoc_value instead [ 755.806975][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3049'. [ 756.575321][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3053'. [ 757.461536][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3063'. [ 757.898506][ T3772] team0 (unregistering): Port device team_slave_1 removed [ 758.138958][ T3772] team0 (unregistering): Port device team_slave_0 removed [ 762.547933][ T5891] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 763.205174][T13268] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3085'. [ 765.435760][ T5891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 765.436973][ T5891] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 765.437014][ T5891] usb 1-1: can't read configurations, error -71 [ 766.383088][T12847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 766.773412][T12847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 766.823517][T12847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 766.869806][T12847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 767.428961][T12847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.543066][T12847] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.587185][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.587455][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.625010][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.625262][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.697743][T12153] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 768.849084][T12153] usb 1-1: Using ep0 maxpacket: 8 [ 768.853250][T12153] usb 1-1: no configurations [ 768.853271][T12153] usb 1-1: can't read configurations, error -22 [ 768.929153][T12847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.007749][T12153] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 769.165934][T12847] veth0_vlan: entered promiscuous mode [ 769.167534][T12153] usb 1-1: Using ep0 maxpacket: 8 [ 769.181050][T12153] usb 1-1: no configurations [ 769.181069][T12153] usb 1-1: can't read configurations, error -22 [ 769.181654][T12153] usb usb1-port1: attempt power cycle [ 769.235024][T12847] veth1_vlan: entered promiscuous mode [ 769.432427][T12847] veth0_macvtap: entered promiscuous mode [ 769.450993][T12847] veth1_macvtap: entered promiscuous mode [ 769.547797][T12153] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 769.568511][T12153] usb 1-1: Using ep0 maxpacket: 8 [ 769.569971][T12153] usb 1-1: no configurations [ 769.569988][T12153] usb 1-1: can't read configurations, error -22 [ 769.611857][T12847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.649904][T12847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.697931][T12153] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 769.718575][T12153] usb 1-1: Using ep0 maxpacket: 8 [ 769.719439][T12153] usb 1-1: no configurations [ 769.719455][T12153] usb 1-1: can't read configurations, error -22 [ 769.720697][T12153] usb usb1-port1: unable to enumerate USB device [ 769.752394][ T5962] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.759303][ T5962] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.786946][ T5962] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.791640][ T5962] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.263854][ T3772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.263878][ T3772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.397927][ T5962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.397950][ T5962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.264927][T13433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3141'. [ 772.266705][T13433] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.280449][T13433] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.874981][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 773.917838][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 774.056737][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 774.087883][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 774.089575][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 774.374182][T13451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3144'. [ 774.506655][ T991] IPVS: starting estimator thread 0... [ 774.599529][T13454] IPVS: using max 12 ests per chain, 28800 per kthread [ 775.664223][T13464] bridge_slave_0: left allmulticast mode [ 775.664246][T13464] bridge_slave_0: left promiscuous mode [ 775.664460][T13464] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.913034][T13464] bridge_slave_1: left allmulticast mode [ 775.913066][T13464] bridge_slave_1: left promiscuous mode [ 775.913390][T13464] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.058439][T13464] bond0: (slave bond_slave_0): Releasing backup interface [ 776.140814][T13464] bond0: (slave bond_slave_1): Releasing backup interface [ 776.197962][ T5816] Bluetooth: hci0: command tx timeout [ 776.246102][T13464] team0: Port device team_slave_0 removed [ 776.303218][T13464] team0: Port device team_slave_1 removed [ 776.304729][T13464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.304760][T13464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.350508][T13464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.350542][T13464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.400875][T13464] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 777.067570][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.648084][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.778993][ T991] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 777.827384][T13505] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 777.907948][ T991] usb 3-1: device descriptor read/64, error -71 [ 778.155069][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.177805][ T991] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 778.277873][ T5816] Bluetooth: hci0: command tx timeout [ 778.307812][ T991] usb 3-1: device descriptor read/64, error -71 [ 778.418463][ T991] usb usb3-port1: attempt power cycle [ 778.691898][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.759207][ T991] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 778.778573][ T991] usb 3-1: device descriptor read/8, error -71 [ 778.951977][T13443] chnl_net:caif_netlink_parms(): no params data found [ 779.027792][ T991] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 779.049118][ T991] usb 3-1: device descriptor read/8, error -71 [ 779.158687][ T991] usb usb3-port1: unable to enumerate USB device [ 779.852224][T13443] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.852404][T13443] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.852670][T13443] bridge_slave_0: entered allmulticast mode [ 779.862288][T13443] bridge_slave_0: entered promiscuous mode [ 779.947343][T13443] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.947505][T13443] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.948579][T13443] bridge_slave_1: entered allmulticast mode [ 779.958583][T13443] bridge_slave_1: entered promiscuous mode [ 780.348710][T13443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.358018][ T5816] Bluetooth: hci0: command tx timeout [ 780.363544][T13443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.706783][ T5816] Bluetooth: hci0: command tx timeout [ 783.577748][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 783.727866][ T10] usb 4-1: device descriptor read/64, error -71 [ 783.978628][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 784.118036][ T10] usb 4-1: device descriptor read/64, error -71 [ 784.228375][ T10] usb usb4-port1: attempt power cycle [ 784.342100][ T12] bond0 (unregistering): Released all slaves [ 784.577793][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 784.909536][ T10] usb 4-1: device descriptor read/8, error -71 [ 785.197809][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 785.218636][ T10] usb 4-1: device descriptor read/8, error -71 [ 785.330492][ T10] usb usb4-port1: unable to enumerate USB device [ 785.871742][ T12] bond1 (unregistering): Released all slaves [ 786.087971][T13536] bridge_slave_0: left allmulticast mode [ 786.088001][T13536] bridge_slave_0: left promiscuous mode [ 786.088285][T13536] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.189614][T13536] bridge_slave_1: left allmulticast mode [ 786.189649][T13536] bridge_slave_1: left promiscuous mode [ 786.189833][T13536] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.349110][T13536] bond0: (slave bond_slave_0): Releasing backup interface [ 786.470162][T13536] bond0: (slave bond_slave_1): Releasing backup interface [ 787.917902][T13536] team0: Port device team_slave_0 removed [ 788.006055][T13536] team0: Port device team_slave_1 removed [ 788.007528][T13536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.007558][T13536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.052221][T13536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.052255][T13536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.094710][T13536] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 788.242553][T13443] team0: Port device team_slave_0 added [ 789.110204][T13443] team0: Port device team_slave_1 added [ 790.227769][T12153] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 790.380578][T12153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 790.380616][T12153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.380659][T12153] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 790.380683][T12153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.455322][T12153] usb 3-1: config 0 descriptor?? [ 790.629856][T13443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.630288][T13443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.630321][T13443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.692134][T13443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.692156][T13443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.692188][T13443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.907745][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 790.908252][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 790.908709][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 790.908903][T12153] usbhid 3-1:0.0: can't add hid device: -32 [ 790.911141][T12153] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 791.074404][T12153] usb 3-1: USB disconnect, device number 7 [ 791.477069][T13443] hsr_slave_0: entered promiscuous mode [ 791.485724][T13443] hsr_slave_1: entered promiscuous mode [ 791.494739][T13443] debugfs: 'hsr0' already exists in 'hsr' [ 791.494771][T13443] Cannot create hsr debugfs directory [ 791.839065][ T12] hsr_slave_0: left promiscuous mode [ 791.927755][ T12] hsr_slave_1: left promiscuous mode [ 792.058342][ T12] veth1_macvtap: left promiscuous mode [ 792.058475][ T12] veth0_macvtap: left promiscuous mode [ 792.058798][ T12] veth1_vlan: left promiscuous mode [ 792.059013][ T12] veth0_vlan: left promiscuous mode [ 793.808068][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 793.975085][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.975157][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 793.975181][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.986910][ T10] usb 5-1: config 0 descriptor?? [ 794.002680][ T10] uvcvideo 5-1:0.0: Found UVC 0.00 device (046d:08c1) [ 794.002712][ T10] uvcvideo 5-1:0.0: No valid video chain found. [ 794.195883][T12671] usb 5-1: USB disconnect, device number 17 [ 795.523164][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.825257][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.107138][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.206988][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.307789][ T10] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 796.504203][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 796.504242][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.504284][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 796.504307][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.512638][ T10] usb 5-1: config 0 descriptor?? [ 796.740894][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.004372][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 797.004470][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 797.062452][ T10] usb 5-1: USB disconnect, device number 18 [ 797.642287][T13734] 9pnet: Could not find request transport: fd0x0000000000000004 [ 799.787763][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 799.896962][T13753] 9pnet_fd: Insufficient options for proto=fd [ 799.947469][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.947539][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 799.947678][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.012963][ T10] usb 5-1: config 0 descriptor?? [ 800.046234][ T10] uvcvideo 5-1:0.0: Found UVC 0.00 device (046d:08c1) [ 800.046271][ T10] uvcvideo 5-1:0.0: No valid video chain found. [ 800.221575][ T10] usb 5-1: USB disconnect, device number 19 [ 800.437093][T13762] 9pnet: Could not find request transport: fd0x0000000000000004 [ 801.238202][ T991] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 801.410500][ T991] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 801.410559][ T991] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 801.410584][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.462635][ T991] usb 5-1: config 0 descriptor?? [ 802.082181][ T991] usb 5-1: language id specifier not provided by device, defaulting to English [ 802.281333][ T991] letsketch 0003:6161:4D15.0003: Device info: ใกต [ 802.538331][ T991] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 802.538427][ T991] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -71 [ 802.584280][ T991] usb 5-1: USB disconnect, device number 20 [ 802.854738][T13797] 9pnet: Could not find request transport: fd0x0000000000000004 [ 803.966812][T13443] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 804.831428][T13443] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 804.966555][T13443] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 805.069392][T13443] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 805.347288][T13842] 9pnet_fd: Insufficient options for proto=fd [ 805.815757][T13443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.886405][T13443] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.920940][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.926894][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.985490][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.985677][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.146760][T13443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 807.352004][T13888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3313'. [ 807.532443][T13889] 9pnet_fd: Insufficient options for proto=fd [ 807.683001][T13443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.957420][T13443] veth0_vlan: entered promiscuous mode [ 808.048535][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 808.056468][T13443] veth1_vlan: entered promiscuous mode [ 808.199985][ T10] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 808.203198][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 808.203240][ T10] usb 5-1: can't read configurations, error -61 [ 808.258692][T13443] veth0_macvtap: entered promiscuous mode [ 808.304472][T13443] veth1_macvtap: entered promiscuous mode [ 808.328019][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 808.435651][T13443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.484571][ T10] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 808.500669][T13443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.506806][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 808.506849][ T10] usb 5-1: can't read configurations, error -61 [ 808.507335][ T10] usb usb5-port1: attempt power cycle [ 808.548231][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.548601][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.548661][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.548699][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.897883][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 808.924837][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.924917][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.944404][ T10] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 808.947026][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 808.947067][ T10] usb 5-1: can't read configurations, error -61 [ 809.117851][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 809.140685][ T10] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 809.145191][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 809.145235][ T10] usb 5-1: can't read configurations, error -61 [ 809.145719][ T10] usb usb5-port1: unable to enumerate USB device [ 809.203861][T13923] 9pnet_fd: Insufficient options for proto=fd [ 809.374926][ T5962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.374963][ T5962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.674385][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.674411][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.617444][T13952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3332'. [ 811.783987][T13975] 9pnet_fd: Insufficient options for proto=fd [ 812.690941][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 812.696099][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 812.699185][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 812.701854][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 812.703164][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 814.609649][ T999] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.768068][ T63] Bluetooth: hci1: command tx timeout [ 814.777756][ T3117] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 814.930737][ T3117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.930771][ T3117] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 814.930819][ T3117] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 814.930844][ T3117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.951423][ T3117] usb 1-1: config 0 descriptor?? [ 814.963670][ T3117] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 815.466894][ T999] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.828100][ T991] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 815.982020][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 815.982057][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.982098][ T991] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 815.982121][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.030110][ T991] usb 4-1: config 0 descriptor?? [ 816.064023][ T999] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.471835][ T991] usbhid 4-1:0.0: can't add hid device: -71 [ 816.472099][ T991] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 816.527853][ T991] usb 4-1: USB disconnect, device number 6 [ 816.848400][ T63] Bluetooth: hci1: command tx timeout [ 816.932119][ T999] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.278655][T13990] chnl_net:caif_netlink_parms(): no params data found [ 817.505778][ T5890] usb 1-1: USB disconnect, device number 22 [ 818.137760][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 818.298607][ T10] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 818.300786][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 818.300823][ T10] usb 3-1: can't read configurations, error -61 [ 818.427878][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 818.592086][ T10] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 818.594667][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 818.594709][ T10] usb 3-1: can't read configurations, error -61 [ 818.595436][ T10] usb usb3-port1: attempt power cycle [ 818.737987][T13990] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.738144][T13990] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.738416][T13990] bridge_slave_0: entered allmulticast mode [ 818.744479][T13990] bridge_slave_0: entered promiscuous mode [ 818.768241][T13990] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.768452][T13990] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.768696][T13990] bridge_slave_1: entered allmulticast mode [ 818.774576][T13990] bridge_slave_1: entered promiscuous mode [ 818.917905][ T63] Bluetooth: hci1: command tx timeout [ 818.937784][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 818.959496][ T10] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 818.961782][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 818.961818][ T10] usb 3-1: can't read configurations, error -61 [ 818.980965][ T999] bridge_slave_1: left allmulticast mode [ 818.980994][ T999] bridge_slave_1: left promiscuous mode [ 818.981211][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.087767][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 819.116172][ T10] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 819.122921][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 819.122962][ T10] usb 3-1: can't read configurations, error -61 [ 819.124311][ T10] usb usb3-port1: unable to enumerate USB device [ 819.164637][ T999] bridge_slave_0: left allmulticast mode [ 819.164671][ T999] bridge_slave_0: left promiscuous mode [ 819.165099][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.023857][ T5816] Bluetooth: hci1: command tx timeout [ 821.239228][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 823.049827][ T5906] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 823.278884][ T5906] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 823.281239][ T5906] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 823.281281][ T5906] usb 3-1: can't read configurations, error -61 [ 823.428819][ T5906] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 823.578509][ T5906] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 823.582703][ T5906] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 823.582748][ T5906] usb 3-1: can't read configurations, error -61 [ 823.591476][ T5906] usb usb3-port1: attempt power cycle [ 823.608833][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.627923][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 823.668469][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.691502][ T999] bond0 (unregistering): Released all slaves [ 823.798172][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 823.801260][ T10] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 823.801319][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 823.801342][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.885493][T13990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.917065][T13990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.937769][ T5906] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 823.965263][ T5906] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 823.999099][ T5906] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 823.999143][ T5906] usb 3-1: can't read configurations, error -61 [ 824.128276][ T5906] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 824.152206][ T5906] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 824.155202][ T5906] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 824.155244][ T5906] usb 3-1: can't read configurations, error -61 [ 824.155724][ T5906] usb usb3-port1: unable to enumerate USB device [ 824.698238][T13990] team0: Port device team_slave_0 added [ 824.702683][T13990] team0: Port device team_slave_1 added [ 826.221832][T13990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.221851][T13990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.221881][T13990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.249712][T13990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.249731][T13990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.249756][T13990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.410294][ T10] usb 4-1: USB disconnect, device number 7 [ 826.549534][ T999] hsr_slave_0: left promiscuous mode [ 826.635123][ T999] hsr_slave_1: left promiscuous mode [ 826.636278][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.636307][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.718456][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.718488][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.929617][T14165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3420'. [ 826.990329][ T999] veth1_macvtap: left promiscuous mode [ 826.990463][ T999] veth0_macvtap: left promiscuous mode [ 826.990769][ T999] veth1_vlan: left promiscuous mode [ 826.990996][ T999] veth0_vlan: left promiscuous mode [ 827.613615][T14180] evm: overlay not supported [ 830.247842][ T3117] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 830.401436][ T3117] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 830.401494][ T3117] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 830.401520][ T3117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.451005][ T3117] usb 1-1: config 0 descriptor?? [ 831.096461][ T3117] usb 1-1: language id specifier not provided by device, defaulting to English [ 831.269304][ T999] team0 (unregistering): Port device team_slave_1 removed [ 831.301063][ T3117] letsketch 0003:6161:4D15.0004: Device info: ใกต [ 831.668703][ T999] team0 (unregistering): Port device team_slave_0 removed [ 831.753154][ T3117] usb 1-1: Max retries (5) exceeded reading string descriptor 201 [ 831.753256][ T3117] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -71 [ 831.787611][ T3117] usb 1-1: USB disconnect, device number 23 [ 836.360519][T14167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 838.355142][T13990] hsr_slave_0: entered promiscuous mode [ 838.368463][T13990] hsr_slave_1: entered promiscuous mode [ 838.372115][T13990] debugfs: 'hsr0' already exists in 'hsr' [ 838.372145][T13990] Cannot create hsr debugfs directory [ 839.961984][T14283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3472'. [ 840.139936][T14283] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 844.860585][T13990] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 844.978246][T13990] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 845.062794][T13990] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 845.466473][T13990] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 846.378860][T13990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.493974][T13990] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.578403][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.578575][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.594784][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.623550][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.533503][T14403] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3509'. [ 848.946830][T13990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.839386][T14447] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3521'. [ 850.181987][T13990] veth0_vlan: entered promiscuous mode [ 850.231796][T13990] veth1_vlan: entered promiscuous mode [ 850.428745][T13990] veth0_macvtap: entered promiscuous mode [ 850.452712][T13990] veth1_macvtap: entered promiscuous mode [ 850.496455][T13990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.338807][T13990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.405645][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.405905][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.406919][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.407216][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.096753][ T1634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.096778][ T1634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.192636][ T9201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.192661][ T9201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.725794][T14504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3541'. [ 854.059825][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 854.102132][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 854.109587][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 854.119614][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 854.145860][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 854.571510][T14530] macvlan1: entered allmulticast mode [ 854.571535][T14530] veth1_vlan: entered allmulticast mode [ 855.032667][T14542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3559'. [ 855.032692][T14542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3559'. [ 856.281755][ T63] Bluetooth: hci2: command tx timeout [ 857.359282][ T63] Bluetooth: hci5: command 0x0406 tx timeout [ 857.738031][T14565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3564'. [ 857.745494][ T5906] IPVS: starting estimator thread 0... [ 857.847788][T14566] IPVS: using max 6 ests per chain, 14400 per kthread [ 858.112425][ T9201] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.347517][T14579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3571'. [ 858.356446][T14579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3571'. [ 858.362535][ T5816] Bluetooth: hci2: command tx timeout [ 859.464383][ T9201] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.438145][ T5816] Bluetooth: hci2: command tx timeout [ 860.690585][T14603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3578'. [ 860.717861][ T3117] IPVS: starting estimator thread 0... [ 860.827946][T14607] IPVS: using max 6 ests per chain, 14400 per kthread [ 861.155483][T14618] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3585'. [ 861.155508][T14618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3585'. [ 861.212467][ T9201] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.448427][T14527] chnl_net:caif_netlink_parms(): no params data found [ 862.518803][ T63] Bluetooth: hci2: command tx timeout [ 863.373739][T14655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3599'. [ 866.128039][ T9201] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.319979][T14697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3614'. [ 869.810921][T14704] overlayfs: failed to resolve './file0': -2 [ 870.366905][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.366992][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.041167][T14527] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.089398][T14527] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.089683][T14527] bridge_slave_0: entered allmulticast mode [ 875.115944][T14527] bridge_slave_0: entered promiscuous mode [ 875.131545][T14527] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.177819][T14527] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.178237][T14527] bridge_slave_1: entered allmulticast mode [ 875.181576][T14527] bridge_slave_1: entered promiscuous mode [ 879.009488][T14745] overlayfs: failed to resolve './file0': -2 [ 880.660258][T14527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.924875][T14527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.949411][T14752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3636'. [ 886.244901][T14527] team0: Port device team_slave_0 added [ 886.276564][T14527] team0: Port device team_slave_1 added [ 888.835038][T14791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3653'. [ 888.836474][ T3117] IPVS: starting estimator thread 0... [ 888.917987][T14792] IPVS: using max 6 ests per chain, 14400 per kthread [ 890.237769][ T5870] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 890.321693][ T9201] bridge_slave_1: left promiscuous mode [ 890.321987][ T9201] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.407131][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.407171][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.407194][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 890.407244][ T5870] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 890.407268][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.489464][ T5870] usb 5-1: config 0 descriptor?? [ 891.149925][ T5870] usbhid 5-1:0.0: can't add hid device: -71 [ 891.151036][ T5870] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 891.247406][ T5870] usb 5-1: USB disconnect, device number 25 [ 891.435588][ T9201] bridge_slave_0: left allmulticast mode [ 891.435619][ T9201] bridge_slave_0: left promiscuous mode [ 891.435962][ T9201] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.698116][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3662'. [ 892.272925][T14819] sd 0:0:1:0: device reset [ 893.193070][T14832] overlayfs: failed to resolve './file0': -2 [ 894.933019][T14858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3680'. [ 895.392061][T14864] overlayfs: failed to resolve './file1': -2 [ 896.941816][T14885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3692'. [ 897.707511][T14894] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3697'. [ 897.799282][T14895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3696'. [ 898.040879][ T63] Bluetooth: hci0: command 0x0406 tx timeout [ 898.548940][T14906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3703'. [ 902.823547][T14944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3718'. [ 916.996035][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 917.039981][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 917.042186][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 917.063169][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 917.064133][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 919.317769][ T63] Bluetooth: hci4: command tx timeout [ 921.397678][ T63] Bluetooth: hci4: command tx timeout [ 923.487669][ T63] Bluetooth: hci4: command tx timeout [ 925.607948][ T63] Bluetooth: hci4: command tx timeout [ 931.808306][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.808404][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.015378][T12329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 938.036996][T12329] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 938.047944][T12329] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 938.050533][T12329] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 938.051490][T12329] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 938.790851][T12671] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 939.257177][T15079] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 939.369211][T12671] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 939.369244][T12671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.369265][T12671] usb 4-1: Product: syz [ 939.369280][T12671] usb 4-1: Manufacturer: syz [ 939.369295][T12671] usb 4-1: SerialNumber: syz [ 939.998748][T12329] Bluetooth: hci1: command 0x0406 tx timeout [ 940.197673][T12329] Bluetooth: hci6: command tx timeout [ 941.284325][T12671] rtl8150 4-1:1.0: couldn't reset the device [ 941.284957][T12671] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 941.534031][T12671] usb 4-1: USB disconnect, device number 8 [ 942.277646][ T63] Bluetooth: hci6: command tx timeout [ 943.284516][T15090] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 944.377738][ T63] Bluetooth: hci6: command tx timeout [ 946.442889][ T63] Bluetooth: hci6: command tx timeout [ 947.198859][T15100] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 948.162753][T12329] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 948.198610][T12329] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 948.204419][T12329] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 948.218952][T12329] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 948.226754][T12329] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 948.372711][T15109] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 950.517689][T12329] Bluetooth: hci7: command tx timeout [ 950.824952][T15117] overlayfs: missing 'workdir' [ 952.597869][T12329] Bluetooth: hci7: command tx timeout [ 954.677775][T12329] Bluetooth: hci7: command tx timeout [ 956.429315][T15130] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3791'. [ 956.766890][T12329] Bluetooth: hci7: command tx timeout [ 962.556219][T15139] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 962.556297][T15139] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 977.534697][ T63] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 977.539263][ T63] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 977.543101][ T63] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 977.547485][ T63] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 977.555915][ T63] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 980.254886][T12329] Bluetooth: hci8: command tx timeout [ 980.255188][T12329] Bluetooth: hci2: command 0x0406 tx timeout [ 980.741971][T12329] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 980.763172][T12329] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 980.765276][T12329] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 980.887921][T12329] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 980.917903][T12329] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 982.287705][ T63] Bluetooth: hci8: command tx timeout [ 984.277748][ T63] Bluetooth: hci9: command tx timeout [ 984.367568][ T63] Bluetooth: hci8: command tx timeout [ 986.357707][ T63] Bluetooth: hci9: command tx timeout [ 986.437774][ T63] Bluetooth: hci8: command tx timeout [ 988.441156][ T63] Bluetooth: hci9: command tx timeout [ 990.577651][ T63] Bluetooth: hci9: command tx timeout [ 993.245734][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.245822][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.755607][ T5816] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 998.397998][ T5816] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 998.582773][ T5816] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 998.685399][ T5816] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 998.688403][ T5816] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1000.847869][ T5816] Bluetooth: hci10: command tx timeout [ 1002.926434][ T5816] Bluetooth: hci10: command tx timeout [ 1005.077759][ T5816] Bluetooth: hci10: command tx timeout [ 1007.157761][ T5816] Bluetooth: hci10: command tx timeout [ 1007.721072][ T9201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.068557][ T9201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.298290][ T9201] bond0 (unregistering): Released all slaves [ 1015.537771][T14527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.537792][T14527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.537822][T14527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.639038][ T63] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1016.698761][ T63] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1016.701671][ T63] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1016.703475][ T63] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1016.729978][ T63] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1016.984331][T15131] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1018.851864][ T5816] Bluetooth: hci11: command tx timeout [ 1020.918383][ T5816] Bluetooth: hci11: command tx timeout [ 1021.960843][ T63] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1022.147740][ T63] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1022.169343][ T63] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1022.191568][ T63] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1022.192593][ T63] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1023.007764][ T63] Bluetooth: hci11: command tx timeout [ 1024.434080][ T63] Bluetooth: hci12: command tx timeout [ 1025.087698][ T63] Bluetooth: hci11: command tx timeout [ 1026.437775][ T63] Bluetooth: hci12: command tx timeout [ 1028.521212][ T63] Bluetooth: hci12: command tx timeout [ 1030.597840][ T63] Bluetooth: hci12: command tx timeout [ 1033.240128][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1033.245653][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1033.259020][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1033.260582][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1033.261566][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1035.317744][ T63] Bluetooth: hci0: command tx timeout [ 1037.399851][ T63] Bluetooth: hci0: command tx timeout [ 1039.557659][ T63] Bluetooth: hci0: command tx timeout [ 1042.227664][ T63] Bluetooth: hci0: command tx timeout [ 1047.260096][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1047.286744][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1047.297032][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1047.311092][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1047.312566][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1050.357845][ T63] Bluetooth: hci1: command tx timeout [ 1052.449707][ T63] Bluetooth: hci1: command tx timeout [ 1054.523332][ T63] Bluetooth: hci1: command tx timeout [ 1054.686625][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.686715][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.598181][ T63] Bluetooth: hci1: command tx timeout [ 1074.090720][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1074.254249][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1074.275122][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1074.276569][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1074.278089][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1076.357884][ T5816] Bluetooth: hci2: command tx timeout [ 1078.437625][ T5816] Bluetooth: hci2: command tx timeout [ 1078.912596][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1078.940065][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1078.957788][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1078.963706][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1078.965809][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1080.522935][ T5816] Bluetooth: hci2: command tx timeout [ 1081.638266][ T5816] Bluetooth: hci3: command tx timeout [ 1082.598527][ T5816] Bluetooth: hci2: command tx timeout [ 1083.728729][ T5816] Bluetooth: hci3: command tx timeout [ 1084.378821][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1084.384528][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1084.471807][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1084.481098][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1084.481912][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1085.797654][ T63] Bluetooth: hci3: command tx timeout [ 1086.927550][ T63] Bluetooth: hci4: command tx timeout [ 1087.880221][ T63] Bluetooth: hci3: command tx timeout [ 1088.998160][ T63] Bluetooth: hci4: command tx timeout [ 1091.078238][ T63] Bluetooth: hci4: command tx timeout [ 1093.157699][ T63] Bluetooth: hci4: command tx timeout [ 1103.338683][T12329] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1103.352942][T12329] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1103.370951][T12329] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1103.381981][T12329] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1103.385671][T12329] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1105.587679][ T5816] Bluetooth: hci5: command tx timeout [ 1106.337147][ T63] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1106.357938][ T63] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1106.365291][ T63] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1106.380848][ T63] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1106.391537][ T63] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1107.667630][ T5816] Bluetooth: hci5: command tx timeout [ 1109.717795][ T5816] Bluetooth: hci5: command tx timeout [ 1110.197710][ T5816] Bluetooth: hci6: command tx timeout [ 1111.797560][ T5816] Bluetooth: hci5: command tx timeout [ 1112.278020][ T5816] Bluetooth: hci6: command tx timeout [ 1114.357553][ T5816] Bluetooth: hci6: command tx timeout [ 1116.245954][T15255] chnl_net:caif_netlink_parms(): no params data found [ 1116.497628][ T5816] Bluetooth: hci6: command tx timeout [ 1116.789512][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.789599][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.477575][ T63] Bluetooth: hci10: command 0x0406 tx timeout [ 1126.420248][T15250] chnl_net:caif_netlink_parms(): no params data found [ 1133.093788][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1133.127776][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1133.244504][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1133.380653][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1133.398929][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1136.628240][ T63] Bluetooth: hci0: command tx timeout [ 1138.677679][ T63] Bluetooth: hci0: command tx timeout [ 1140.970144][ T63] Bluetooth: hci0: command tx timeout [ 1143.017600][ T63] Bluetooth: hci0: command tx timeout [ 1143.419286][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1143.425456][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1143.444691][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1143.486694][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1143.507665][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1143.902197][ T63] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1143.912522][ T63] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1143.913905][ T63] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1143.918280][ T63] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1143.919161][ T63] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1145.727583][ T63] Bluetooth: hci2: command tx timeout [ 1146.273087][ T63] Bluetooth: hci7: command tx timeout [ 1147.821519][ T5816] Bluetooth: hci2: command tx timeout [ 1148.287537][ T5816] Bluetooth: hci7: command tx timeout [ 1149.247674][ T5816] Bluetooth: hci12: command 0x0406 tx timeout [ 1149.877651][ T5816] Bluetooth: hci2: command tx timeout [ 1150.357870][ T5816] Bluetooth: hci7: command tx timeout [ 1151.957614][ T63] Bluetooth: hci2: command tx timeout [ 1152.557614][ T63] Bluetooth: hci7: command tx timeout [ 1160.226684][ T9201] tipc: Disabling bearer [ 1160.227389][ T9201] tipc: Left network mode [ 1164.615612][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1164.829614][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1164.899195][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1166.842568][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1166.887724][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1168.997565][ T63] Bluetooth: hci3: command tx timeout [ 1170.142646][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1170.154961][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1170.157732][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1170.167655][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1170.182324][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1171.137624][ T5816] Bluetooth: hci3: command tx timeout [ 1173.167865][ T63] Bluetooth: hci3: command tx timeout [ 1174.517643][ T63] Bluetooth: hci4: command tx timeout [ 1174.615615][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 1175.237611][ T63] Bluetooth: hci3: command tx timeout [ 1176.597708][ T63] Bluetooth: hci4: command tx timeout [ 1177.563040][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.563144][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.807634][ T5816] Bluetooth: hci4: command tx timeout [ 1180.839579][ T63] Bluetooth: hci4: command tx timeout [ 1192.089021][ T63] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1192.105142][ T63] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1192.114498][ T63] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1192.143510][ T63] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1192.145055][ T63] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1194.849808][ T5816] Bluetooth: hci5: command tx timeout [ 1196.918434][ T5816] Bluetooth: hci5: command tx timeout [ 1197.409569][ T38] INFO: task syz-executor:14527 blocked for more than 143 seconds. [ 1197.409609][ T38] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1197.409620][ T38] Blocked by coredump. [ 1197.409627][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1197.409637][ T38] task:syz-executor state:D stack:21368 pid:14527 tgid:14527 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1197.409701][ T38] Call Trace: [ 1197.409709][ T38] [ 1197.409723][ T38] __schedule+0x16f3/0x4c20 [ 1197.409792][ T38] ? __pfx___schedule+0x10/0x10 [ 1197.409845][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1197.409881][ T38] rt_mutex_schedule+0x77/0xf0 [ 1197.409903][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1197.409929][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1197.409976][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1197.410005][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1197.410032][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1197.410055][ T38] ? __lock_acquire+0xab9/0xd20 [ 1197.410097][ T38] ? rcu_barrier+0x4c/0x570 [ 1197.410136][ T38] ? rcu_barrier+0x4c/0x570 [ 1197.410156][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1197.410179][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1197.410206][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1197.410329][ T38] rcu_barrier+0x4c/0x570 [ 1197.410357][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1197.410385][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1197.410412][ T38] netdev_run_todo+0x327/0xea0 [ 1197.410485][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 1197.410557][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1197.410592][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1197.410634][ T38] ? netdev_state_change+0x1ca/0x220 [ 1197.410659][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1197.410686][ T38] tun_chr_close+0x13f/0x1c0 [ 1197.410714][ T38] __fput+0x45b/0xa80 [ 1197.410752][ T38] task_work_run+0x1d4/0x260 [ 1197.410778][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1197.410799][ T38] ? do_exit+0x6b0/0x2300 [ 1197.410830][ T38] ? do_exit+0x6b0/0x2300 [ 1197.410867][ T38] do_exit+0x6b5/0x2300 [ 1197.410897][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1197.410941][ T38] ? __pfx_do_exit+0x10/0x10 [ 1197.410970][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1197.410994][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 1197.411036][ T38] do_group_exit+0x21c/0x2d0 [ 1197.411057][ T38] ? rt_spin_unlock+0x161/0x200 [ 1197.411085][ T38] get_signal+0x125d/0x1310 [ 1197.411138][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 1197.411160][ T38] ? fput_close_sync+0x119/0x200 [ 1197.411185][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1197.411230][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 1197.411263][ T38] exit_to_user_mode_loop+0x72/0x130 [ 1197.411293][ T38] do_syscall_64+0x2bd/0xfa0 [ 1197.411322][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1197.411349][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.411370][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1197.411396][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.411417][ T38] RIP: 0033:0x7f6e50b3155c [ 1197.411436][ T38] RSP: 002b:00007fff0ee05160 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1197.411458][ T38] RAX: 0000000000000028 RBX: 00007f6e518b4620 RCX: 00007f6e50b3155c [ 1197.411473][ T38] RDX: 0000000000000028 RSI: 00007f6e518b4670 RDI: 0000000000000003 [ 1197.411486][ T38] RBP: 0000000000000000 R08: 00007fff0ee051b4 R09: 000000000000000c [ 1197.411500][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1197.411514][ T38] R13: 0000000000000000 R14: 00007f6e518b4670 R15: 0000000000000000 [ 1197.411551][ T38] [ 1197.411596][ T38] [ 1197.411596][ T38] Showing all locks held in the system: [ 1197.411606][ T38] 4 locks held by kworker/0:1/10: [ 1197.411620][ T38] 4 locks held by rcuc/0/20: [ 1197.411633][ T38] 1 lock held by khungtaskd/38: [ 1197.411645][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1197.411703][ T38] 3 locks held by kworker/u8:4/59: [ 1197.411722][ T38] 3 locks held by kworker/0:2/991: [ 1197.411733][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1197.411787][ T38] #1: ffffc900045c7ba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1197.411840][ T38] #2: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.411890][ T38] 3 locks held by kworker/u8:6/1026: [ 1197.411906][ T38] 5 locks held by kworker/u8:8/1634: [ 1197.411929][ T38] 6 locks held by kworker/u8:9/3772: [ 1197.411941][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1197.412000][ T38] #1: ffffc9000dc2fba0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1197.412055][ T38] #2: ffff88805d0b3300 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1197.412143][ T38] #3: ffff88805dbabd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1197.412200][ T38] #4: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 1197.412252][ T38] #5: ffff8880b883fbe8 (&s->lock_key#20){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x1400 [ 1197.412308][ T38] 2 locks held by klogd/5155: [ 1197.412320][ T38] #0: ffffffff8d6ca9a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1197.412371][ T38] #1: ffff8880b883fbe8 (&s->lock_key#20){+.+.}-{3:3}, at: put_cpu_partial+0x9d/0x210 [ 1197.412427][ T38] 4 locks held by udevd/5166: [ 1197.412438][ T38] 2 locks held by dhcpcd/5462: [ 1197.412449][ T38] #0: ffff8880325e4920 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 1197.412522][ T38] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1197.412616][ T38] 2 locks held by getty/5556: [ 1197.412628][ T38] #0: ffff88823bf608a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1197.412735][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1197.412814][ T38] 3 locks held by kworker/0:4/5890: [ 1197.412827][ T38] 2 locks held by kworker/1:6/5891: [ 1197.412839][ T38] 3 locks held by kworker/u8:11/6196: [ 1197.412850][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1197.412908][ T38] #1: ffffc90005967ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1197.412960][ T38] #2: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1197.413013][ T38] 3 locks held by kworker/u8:1/9201: [ 1197.413025][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1197.413077][ T38] #1: ffffc9001c0bfba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1197.413155][ T38] #2: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1197.413206][ T38] 6 locks held by kworker/u8:7/10337: [ 1197.413218][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1197.413275][ T38] #1: ffffc9001d0dfba0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1197.413329][ T38] #2: ffff88805cbf1300 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1197.413390][ T38] #3: ffff88805e5b8520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1197.413447][ T38] #4: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 1197.413498][ T38] #5: ffff8880b883fbe8 (&s->lock_key#20){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x1400 [ 1197.413556][ T38] 6 locks held by kworker/u8:12/14132: [ 1197.413567][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1197.413673][ T38] #1: ffffc90005e3fba0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1197.413728][ T38] #2: ffff8880396af300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1197.413784][ T38] #3: ffff8880320a1520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1197.413849][ T38] #4: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 1197.413902][ T38] #5: ffff8880b883fbe8 (&s->lock_key#20){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x1400 [ 1197.413956][ T38] 6 locks held by kworker/u8:13/14133: [ 1197.413968][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1197.414027][ T38] #1: ffffc90005ddfba0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1197.414082][ T38] #2: ffff888023ca1300 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1197.414143][ T38] #3: ffff88805b92a120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1197.414201][ T38] #4: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 1197.414254][ T38] #5: ffff8880b883fbe8 (&s->lock_key#20){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x1400 [ 1197.414308][ T38] 1 lock held by syz-executor/14527: [ 1197.414320][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.414370][ T38] 1 lock held by syz.2.3741/15001: [ 1197.414382][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.414433][ T38] 1 lock held by syz.0.3761/15050: [ 1197.414444][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.414495][ T38] 1 lock held by syz.3.3791/15131: [ 1197.414506][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.414556][ T38] 1 lock held by syz-executor/15170: [ 1197.414568][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.414627][ T38] 1 lock held by syz-executor/15177: [ 1197.414639][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.414690][ T38] 1 lock held by syz.4.3813/15195: [ 1197.414701][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.414752][ T38] 2 locks held by syz-executor/15196: [ 1197.414764][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1197.414811][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.414862][ T38] 1 lock held by syz-executor/15203: [ 1197.414874][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.414923][ T38] 2 locks held by syz-executor/15210: [ 1197.414935][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1197.414983][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.415034][ T38] 2 locks held by syz-executor/15231: [ 1197.415047][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1197.415095][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.415145][ T38] 1 lock held by syz-executor/15244: [ 1197.415157][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.415207][ T38] 1 lock held by syz-executor/15250: [ 1197.415219][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.415268][ T38] 1 lock held by syz-executor/15255: [ 1197.415280][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.415331][ T38] 1 lock held by syz-executor/15269: [ 1197.415342][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.415393][ T38] 1 lock held by syz-executor/15277: [ 1197.415404][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.415455][ T38] 1 lock held by syz-executor/15295: [ 1197.415467][ T38] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1197.415520][ T38] 1 lock held by syz-executor/15303: [ 1197.415533][ T38] 2 locks held by syz-executor/15317: [ 1197.415546][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1197.415602][ T38] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 1197.415657][ T38] 2 locks held by syz-executor/15322: [ 1197.415669][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1197.415717][ T38] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 1197.415771][ T38] 1 lock held by syz-executor/15341: [ 1197.415783][ T38] 2 locks held by syz-executor/15342: [ 1197.415795][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1197.415843][ T38] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1197.415896][ T38] [ 1197.415901][ T38] ============================================= [ 1197.415901][ T38] [ 1197.415911][ T38] NMI backtrace for cpu 0 [ 1197.415926][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1197.415949][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1197.415961][ T38] Call Trace: [ 1197.415969][ T38] [ 1197.415978][ T38] dump_stack_lvl+0x189/0x250 [ 1197.416013][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1197.416044][ T38] ? __pfx__printk+0x10/0x10 [ 1197.416083][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1197.416111][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1197.416139][ T38] ? __pfx__printk+0x10/0x10 [ 1197.416169][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1197.416194][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1197.416222][ T38] watchdog+0xf60/0xfa0 [ 1197.416258][ T38] ? watchdog+0x1e2/0xfa0 [ 1197.416293][ T38] kthread+0x711/0x8a0 [ 1197.416327][ T38] ? __pfx_watchdog+0x10/0x10 [ 1197.416353][ T38] ? __pfx_kthread+0x10/0x10 [ 1197.416379][ T38] ? rt_spin_unlock+0x150/0x200 [ 1197.416408][ T38] ? rt_spin_unlock+0x161/0x200 [ 1197.416430][ T38] ? __pfx_kthread+0x10/0x10 [ 1197.416460][ T38] ret_from_fork+0x4bc/0x870 [ 1197.416489][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1197.416521][ T38] ? __switch_to_asm+0x39/0x70 [ 1197.416541][ T38] ? __switch_to_asm+0x33/0x70 [ 1197.416560][ T38] ? __pfx_kthread+0x10/0x10 [ 1197.416599][ T38] ret_from_fork_asm+0x1a/0x30 [ 1197.416639][ T38] [ 1197.416647][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1197.416678][ C1] NMI backtrace for cpu 1 [ 1197.416695][ C1] CPU: 1 UID: 0 PID: 1634 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1197.416714][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1197.416724][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1197.416748][ C1] RIP: 0010:stack_depot_save_flags+0x1c1/0x860 [ 1197.416771][ C1] Code: 24 04 85 db 75 5d 4d 8b 3f 4d 39 e7 74 52 41 39 6f 10 75 f2 45 39 57 14 75 ec 31 c0 49 8b 0c c6 49 3b 4c c7 20 75 df 48 ff c0 <41> 39 c5 75 ed 83 fe 02 72 2f 49 8d 7f 1c 41 8b 5f 1c 85 db 74 11 [ 1197.416785][ C1] RSP: 0018:ffffc900057c6518 EFLAGS: 00000202 [ 1197.416799][ C1] RAX: 000000000000001a RBX: 0000000000000000 RCX: ffffffff81685adc [ 1197.416811][ C1] RDX: 00000000c0fb408d RSI: 0000000000000001 RDI: 00000000a8959c22 [ 1197.416822][ C1] RBP: 000000002fc5e10d R08: 0000000020e0e907 R09: 00000000085af873 [ 1197.416833][ C1] R10: 000000000000001b R11: ffffffff81aacc60 R12: ffff88823b3e10d0 [ 1197.416844][ C1] R13: 000000000000001b R14: ffffc900057c6580 R15: ffff88807cdd13b0 [ 1197.416856][ C1] FS: 0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 1197.416869][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1197.416880][ C1] CR2: 000055bc56d08660 CR3: 000000004db68000 CR4: 00000000003526f0 [ 1197.416897][ C1] Call Trace: [ 1197.416904][ C1] [ 1197.416913][ C1] ? skb_release_data+0x62d/0x7c0 [ 1197.416971][ C1] kasan_save_track+0x4f/0x80 [ 1197.416989][ C1] ? kasan_save_track+0x3e/0x80 [ 1197.417006][ C1] ? __kasan_save_free_info+0x46/0x50 [ 1197.417021][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1197.417039][ C1] ? kmem_cache_free+0x19a/0x910 [ 1197.417058][ C1] ? skb_release_data+0x62d/0x7c0 [ 1197.417075][ C1] ? consume_skb+0x9e/0xf0 [ 1197.417089][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 1197.417146][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 1197.417166][ C1] ? nft_do_chain+0x40c/0x1920 [ 1197.417218][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 1197.417270][ C1] ? nf_hook_slow+0xc5/0x220 [ 1197.417301][ C1] ? NF_HOOK+0x206/0x3a0 [ 1197.417342][ C1] ? NF_HOOK+0x30c/0x3a0 [ 1197.417354][ C1] ? __netif_receive_skb+0x143/0x380 [ 1197.417376][ C1] ? process_backlog+0x31e/0x900 [ 1197.417389][ C1] ? __napi_poll+0xb6/0x540 [ 1197.417414][ C1] ? net_rx_action+0x5f7/0xda0 [ 1197.417428][ C1] ? handle_softirqs+0x22f/0x710 [ 1197.417445][ C1] ? __local_bh_enable_ip+0x1a0/0x2e0 [ 1197.417462][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x11fd/0x2af0 [ 1197.417483][ C1] ? ieee80211_iface_work+0x85f/0x12d0 [ 1197.417502][ C1] ? cfg80211_wiphy_work+0x2bb/0x470 [ 1197.417521][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 1197.417538][ C1] ? worker_thread+0x8a0/0xda0 [ 1197.417556][ C1] ? kthread+0x711/0x8a0 [ 1197.417575][ C1] ? ret_from_fork+0x4bc/0x870 [ 1197.417591][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1197.417622][ C1] __kasan_save_free_info+0x46/0x50 [ 1197.417638][ C1] __kasan_slab_free+0x5c/0x80 [ 1197.417658][ C1] kmem_cache_free+0x19a/0x910 [ 1197.417676][ C1] ? skb_release_data+0x62d/0x7c0 [ 1197.417696][ C1] skb_release_data+0x62d/0x7c0 [ 1197.417717][ C1] consume_skb+0x9e/0xf0 [ 1197.417734][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 1197.417757][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1197.417780][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1197.417822][ C1] nft_synproxy_do_eval+0x345/0x570 [ 1197.417846][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1197.417867][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 1197.417909][ C1] nft_do_chain+0x40c/0x1920 [ 1197.417936][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1197.417969][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1197.417985][ C1] nft_do_chain_inet+0x25d/0x340 [ 1197.418005][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1197.418031][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1197.418045][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1197.418066][ C1] nf_hook_slow+0xc5/0x220 [ 1197.418085][ C1] NF_HOOK+0x206/0x3a0 [ 1197.418100][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1197.418115][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1197.418129][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1197.418142][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1197.418159][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1197.418176][ C1] ? skb_dst+0x4f/0xd0 [ 1197.418191][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1197.418207][ C1] NF_HOOK+0x30c/0x3a0 [ 1197.418222][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1197.418237][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1197.418251][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1197.418266][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1197.418286][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1197.418299][ C1] __netif_receive_skb+0x143/0x380 [ 1197.418330][ C1] ? process_backlog+0x27b/0x900 [ 1197.418344][ C1] process_backlog+0x31e/0x900 [ 1197.418364][ C1] __napi_poll+0xb6/0x540 [ 1197.418387][ C1] net_rx_action+0x5f7/0xda0 [ 1197.418409][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1197.418426][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1197.418451][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1197.418473][ C1] handle_softirqs+0x22f/0x710 [ 1197.418495][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1197.418517][ C1] __local_bh_enable_ip+0x1a0/0x2e0 [ 1197.418535][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1197.418554][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1197.418570][ C1] ? rt_spin_unlock+0x150/0x200 [ 1197.418590][ C1] ? rt_spin_unlock+0x161/0x200 [ 1197.418609][ C1] ? cfg80211_put_bss+0x20e/0x270 [ 1197.418625][ C1] ? cfg80211_put_bss+0x45/0x270 [ 1197.418643][ C1] ieee80211_ibss_rx_queued_mgmt+0x11fd/0x2af0 [ 1197.418662][ C1] ? __lock_acquire+0xab9/0xd20 [ 1197.418686][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1197.418706][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xfab/0x2af0 [ 1197.418726][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1197.418744][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1197.418765][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1197.418786][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1197.418807][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1197.418833][ C1] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1197.418864][ C1] ieee80211_iface_work+0x85f/0x12d0 [ 1197.418896][ C1] cfg80211_wiphy_work+0x2bb/0x470 [ 1197.418916][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1197.418935][ C1] process_scheduled_works+0xae1/0x17b0 [ 1197.418966][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1197.418991][ C1] worker_thread+0x8a0/0xda0 [ 1197.419021][ C1] kthread+0x711/0x8a0 [ 1197.419043][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1197.419061][ C1] ? __pfx_kthread+0x10/0x10 [ 1197.419080][ C1] ? rt_spin_unlock+0x150/0x200 [ 1197.419099][ C1] ? rt_spin_unlock+0x161/0x200 [ 1197.419115][ C1] ? __pfx_kthread+0x10/0x10 [ 1197.419136][ C1] ret_from_fork+0x4bc/0x870 [ 1197.419155][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1197.419175][ C1] ? __switch_to_asm+0x39/0x70 [ 1197.419190][ C1] ? __switch_to_asm+0x33/0x70 [ 1197.419204][ C1] ? __pfx_kthread+0x10/0x10 [ 1197.419225][ C1] ret_from_fork_asm+0x1a/0x30 [ 1197.419248][ C1] [ 1199.031490][ T5816] Bluetooth: hci5: command tx timeout [ 1201.077747][ T5816] Bluetooth: hci5: command tx timeout