last executing test programs: 36.714134795s ago: executing program 2 (id=706): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) 36.302289672s ago: executing program 2 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_DIRECTION={0x5, 0x3, 0xded035136f4c42fe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 35.089385626s ago: executing program 2 (id=718): openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000017144d"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24000880) 34.757962543s ago: executing program 2 (id=723): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 32.738727726s ago: executing program 2 (id=737): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20080, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000100)) 32.454118965s ago: executing program 2 (id=742): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) timerfd_create(0x9, 0x0) inotify_rm_watch(r0, 0x0) 17.347391311s ago: executing program 32 (id=742): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) timerfd_create(0x9, 0x0) inotify_rm_watch(r0, 0x0) 2.921133392s ago: executing program 1 (id=945): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) close(r0) 2.764306678s ago: executing program 1 (id=947): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, 0x16, 0xa01, 0x0, 0x1, {0xa}}, 0x14}}, 0x0) 2.605518006s ago: executing program 1 (id=949): syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 2.246954302s ago: executing program 1 (id=954): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000000)) 2.117347126s ago: executing program 0 (id=955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000f5ffffffffffffff02000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 1.934814658s ago: executing program 1 (id=956): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0xffffffff80498200, 0x0, 0x1, 0x8d, 0x40000003, 0x0, 0x0, 0x10, 0x2}}, 0x50) fcntl$setpipe(r0, 0x407, 0x2000000) 1.788776232s ago: executing program 1 (id=958): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x8000002, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000300), 0x5005) socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1.777938989s ago: executing program 0 (id=959): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 1.612111648s ago: executing program 3 (id=960): unshare(0x22020600) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r0}, 0x50) 1.557367867s ago: executing program 4 (id=961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000600)={0xa, 0x0, [{0xc0000019, 0x7, 0x2, 0xbe, 0x6, 0xf2, 0x58de}, {0x80000007, 0xa4c2, 0x4, 0x2, 0x6, 0x0, 0x8000}, {0x4, 0x9, 0x0, 0x7, 0x0, 0x4, 0xffffff41}, {0x80000007, 0xff, 0x5, 0x1, 0x5, 0x2, 0x2}, {0x40000001, 0x8, 0x1, 0x10, 0x4, 0x4, 0x5c}, {0x80000019, 0x2, 0x5, 0xfffffff8, 0x6, 0x100, 0x6}, {0xb, 0xd, 0x6, 0x6, 0xfa9, 0x8, 0x2}, {0x80000019, 0x9, 0x0, 0x3000000, 0x4, 0x10001, 0x401}, {0x2, 0x52, 0x4, 0x6, 0x5, 0xf0, 0x8}, {0x7b654a08a09e139f, 0x5, 0x0, 0x0, 0xffff, 0xe615, 0x5}]}) 1.430908677s ago: executing program 3 (id=962): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200c40c, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 1.34531672s ago: executing program 0 (id=963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x100002}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xffffffffffffffe4}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 1.267266929s ago: executing program 4 (id=964): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) dup(r0) 977.299549ms ago: executing program 0 (id=965): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000440)={0x3, 0x7fff, 0x9, 0x2, 0x1, 0xf580}) 881.026147ms ago: executing program 3 (id=966): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0x4b42c50c6168a75c}) 830.265152ms ago: executing program 4 (id=967): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 645.172345ms ago: executing program 0 (id=968): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x1, 0x4) 598.168077ms ago: executing program 4 (id=969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "9ac42000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xd, 0x1, 'CLASSIFY\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 406.048187ms ago: executing program 3 (id=970): bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 399.026575ms ago: executing program 0 (id=971): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x400) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020}, 0x2020) inotify_rm_watch(0xffffffffffffffff, r2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@volatile}, {@nfs_export_on}]}) syz_emit_ethernet(0x5e, &(0x7f0000000ac0)={@random="011e5c5dbbc1", @local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "91eb00", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 307.087111ms ago: executing program 4 (id=972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280140003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 125.898263ms ago: executing program 3 (id=973): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f000000000014"], 0x38}}, 0x0) 7.978772ms ago: executing program 4 (id=974): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 0s ago: executing program 3 (id=975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x7c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 89.806836][ T5791] cgroup: Unknown subsys name 'net' [ 90.047462][ T5791] cgroup: Unknown subsys name 'cpuset' [ 90.082295][ T5791] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.159251][ T5791] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.255027][ T44] cfg80211: failed to load regulatory.db [ 95.095990][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.143947][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.146656][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.147991][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.167592][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.173565][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.175102][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.176805][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.178700][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.180373][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.183768][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.184282][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.185100][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.188183][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.192062][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.193247][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.193853][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.196970][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.197450][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.203630][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.205370][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.205878][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.207879][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.208045][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.214902][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.362298][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 96.417577][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 96.429881][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 96.624271][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 96.817374][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 97.303028][ T5806] Bluetooth: hci2: command tx timeout [ 97.303544][ T61] Bluetooth: hci4: command tx timeout [ 97.303552][ T5806] Bluetooth: hci1: command tx timeout [ 97.303766][ T5814] Bluetooth: hci3: command tx timeout [ 97.362981][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.364584][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.365053][ T5804] bridge_slave_0: entered allmulticast mode [ 97.367225][ T5804] bridge_slave_0: entered promiscuous mode [ 97.381690][ T5814] Bluetooth: hci0: command tx timeout [ 97.601287][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.601404][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.603262][ T5804] bridge_slave_1: entered allmulticast mode [ 97.607154][ T5804] bridge_slave_1: entered promiscuous mode [ 97.623196][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.623347][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.623598][ T5808] bridge_slave_0: entered allmulticast mode [ 97.626944][ T5808] bridge_slave_0: entered promiscuous mode [ 97.654134][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.654296][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.657185][ T5805] bridge_slave_0: entered allmulticast mode [ 97.660152][ T5805] bridge_slave_0: entered promiscuous mode [ 97.880039][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.880168][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.880311][ T5808] bridge_slave_1: entered allmulticast mode [ 97.886465][ T5808] bridge_slave_1: entered promiscuous mode [ 97.892402][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.892559][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.892819][ T5805] bridge_slave_1: entered allmulticast mode [ 97.896111][ T5805] bridge_slave_1: entered promiscuous mode [ 98.332703][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.332878][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.333017][ T5803] bridge_slave_0: entered allmulticast mode [ 98.334970][ T5803] bridge_slave_0: entered promiscuous mode [ 98.343340][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.654704][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.654928][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.655163][ T5803] bridge_slave_1: entered allmulticast mode [ 98.657774][ T5803] bridge_slave_1: entered promiscuous mode [ 98.664160][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.664468][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.664620][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.664832][ T5810] bridge_slave_0: entered allmulticast mode [ 98.668627][ T5810] bridge_slave_0: entered promiscuous mode [ 98.688616][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.707716][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.902835][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.902960][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.903105][ T5810] bridge_slave_1: entered allmulticast mode [ 98.905077][ T5810] bridge_slave_1: entered promiscuous mode [ 98.908532][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.915448][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.265997][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.268405][ T5804] team0: Port device team_slave_0 added [ 99.371838][ T5814] Bluetooth: hci3: command tx timeout [ 99.371874][ T5814] Bluetooth: hci1: command tx timeout [ 99.371893][ T5814] Bluetooth: hci2: command tx timeout [ 99.371912][ T5814] Bluetooth: hci4: command tx timeout [ 99.451748][ T5806] Bluetooth: hci0: command tx timeout [ 99.475663][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.477488][ T5804] team0: Port device team_slave_1 added [ 99.483921][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.488223][ T5808] team0: Port device team_slave_0 added [ 99.492968][ T5805] team0: Port device team_slave_0 added [ 99.635440][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.637411][ T5808] team0: Port device team_slave_1 added [ 99.639517][ T5805] team0: Port device team_slave_1 added [ 100.414718][ T5803] team0: Port device team_slave_0 added [ 100.416592][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.416607][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.416627][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.705326][ T5803] team0: Port device team_slave_1 added [ 100.706357][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.706368][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.706388][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.708737][ T5810] team0: Port device team_slave_0 added [ 100.709895][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.709910][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.709940][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.711324][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.711338][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.711367][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.855493][ T5810] team0: Port device team_slave_1 added [ 100.856770][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.856786][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.856815][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.858903][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.858918][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.858948][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.109077][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.109097][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.109117][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.283473][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.283487][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.283506][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.285437][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.285454][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.285475][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.383922][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.383941][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.383961][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.451875][ T5814] Bluetooth: hci2: command tx timeout [ 101.451908][ T5814] Bluetooth: hci1: command tx timeout [ 101.451929][ T5814] Bluetooth: hci3: command tx timeout [ 101.452117][ T5806] Bluetooth: hci4: command tx timeout [ 101.533306][ T5806] Bluetooth: hci0: command tx timeout [ 101.569539][ T5804] hsr_slave_0: entered promiscuous mode [ 101.571131][ T5804] hsr_slave_1: entered promiscuous mode [ 101.743928][ T5805] hsr_slave_0: entered promiscuous mode [ 101.744970][ T5805] hsr_slave_1: entered promiscuous mode [ 101.746064][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 101.746153][ T5805] Cannot create hsr debugfs directory [ 101.754752][ T5808] hsr_slave_0: entered promiscuous mode [ 101.756344][ T5808] hsr_slave_1: entered promiscuous mode [ 101.757447][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 101.757474][ T5808] Cannot create hsr debugfs directory [ 102.319183][ T5803] hsr_slave_0: entered promiscuous mode [ 102.320281][ T5803] hsr_slave_1: entered promiscuous mode [ 102.320960][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 102.320985][ T5803] Cannot create hsr debugfs directory [ 102.609984][ T5810] hsr_slave_0: entered promiscuous mode [ 102.611018][ T5810] hsr_slave_1: entered promiscuous mode [ 102.613665][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 102.613695][ T5810] Cannot create hsr debugfs directory [ 103.532033][ T5809] Bluetooth: hci3: command tx timeout [ 103.532070][ T5809] Bluetooth: hci1: command tx timeout [ 103.532113][ T5809] Bluetooth: hci2: command tx timeout [ 103.532179][ T5806] Bluetooth: hci4: command tx timeout [ 103.621691][ T5806] Bluetooth: hci0: command tx timeout [ 103.954748][ T5804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.990850][ T5804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.033342][ T5804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.080651][ T5804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.190831][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.237330][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.277681][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.316354][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.457876][ T5808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.495554][ T5808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.540509][ T5808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.576265][ T5808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.737285][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.781122][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.820477][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.861245][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.970577][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.014498][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.076793][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.118674][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.162015][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.238294][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.280151][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.281131][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.316673][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.348481][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.348696][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.437013][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.476901][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.491325][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.491463][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.538908][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.539068][ T1211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.596199][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.646967][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.651372][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.653420][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.727112][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.728000][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.816758][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.865576][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.875966][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.876128][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.956375][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.956532][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.055173][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.107961][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.108110][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.186348][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.186500][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.203177][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.412411][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.778069][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.807094][ T5805] veth0_vlan: entered promiscuous mode [ 106.866935][ T5805] veth1_vlan: entered promiscuous mode [ 107.026642][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.068433][ T5808] veth0_vlan: entered promiscuous mode [ 107.103183][ T5805] veth0_macvtap: entered promiscuous mode [ 107.125002][ T5808] veth1_vlan: entered promiscuous mode [ 107.131038][ T5805] veth1_macvtap: entered promiscuous mode [ 107.149833][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.190303][ T5804] veth0_vlan: entered promiscuous mode [ 107.253976][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.255554][ T5804] veth1_vlan: entered promiscuous mode [ 107.294608][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.320627][ T5803] veth0_vlan: entered promiscuous mode [ 107.344996][ T5808] veth0_macvtap: entered promiscuous mode [ 107.348595][ T1557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.361905][ T1557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.377306][ T1557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.381337][ T5808] veth1_macvtap: entered promiscuous mode [ 107.395041][ T1557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.406364][ T5803] veth1_vlan: entered promiscuous mode [ 107.538315][ T5810] veth0_vlan: entered promiscuous mode [ 107.556900][ T5804] veth0_macvtap: entered promiscuous mode [ 107.569364][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.641178][ T5804] veth1_macvtap: entered promiscuous mode [ 107.648882][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.657828][ T5810] veth1_vlan: entered promiscuous mode [ 107.724638][ T71] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.747359][ T71] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.751381][ T71] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.772443][ T71] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.773069][ T5803] veth0_macvtap: entered promiscuous mode [ 107.780735][ T1482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.780756][ T1482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.817034][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.847490][ T5803] veth1_macvtap: entered promiscuous mode [ 107.892828][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.964374][ T1482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.964397][ T1482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.028272][ T1482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.046048][ T1482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.050906][ T1482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.085260][ T1482] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.088488][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.110715][ T5810] veth0_macvtap: entered promiscuous mode [ 108.200541][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.210028][ T5810] veth1_macvtap: entered promiscuous mode [ 108.224344][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.224366][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.323494][ T71] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.392405][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.441388][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.463269][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.484823][ T1482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.484845][ T1482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.546193][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.705998][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.741301][ T1482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.741324][ T1482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.850435][ T3574] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.897640][ T3574] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.901778][ T3574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.928039][ T3574] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.968344][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.968368][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.130676][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.130699][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.862777][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 109.862908][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 111.101897][ T5942] capability: warning: `syz.4.5' uses 32-bit capabilities (legacy support in use) [ 111.142752][ T5941] netlink: 'syz.1.10': attribute type 1 has an invalid length. [ 111.258103][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.258126][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.084516][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.084537][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.498473][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.498496][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.758695][ T5971] netlink: 'syz.2.3': attribute type 5 has an invalid length. [ 116.758714][ T5971] netlink: 'syz.2.3': attribute type 5 has an invalid length. [ 119.521633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.585427][ T5995] Zero length message leads to an empty skb [ 120.641706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.362040][ T6024] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 125.108346][ T6036] @: renamed from vlan0 (while UP) [ 125.224989][ T6040] netlink: 132 bytes leftover after parsing attributes in process `syz.3.31'. [ 125.331573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.458629][ T5814] Bluetooth: hci4: command 0x0405 tx timeout [ 125.593986][ T6046] netlink: 'syz.0.34': attribute type 2 has an invalid length. [ 126.823625][ T992] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 126.932725][ T6082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.934779][ T38] audit: type=1326 audit(1762509241.312:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 126.934835][ T38] audit: type=1326 audit(1762509241.362:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 126.957295][ T38] audit: type=1326 audit(1762509241.372:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 126.957367][ T38] audit: type=1326 audit(1762509241.372:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 126.957420][ T38] audit: type=1326 audit(1762509241.372:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 127.052229][ T992] usb 5-1: Using ep0 maxpacket: 16 [ 127.091725][ T992] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.147217][ T992] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.147288][ T992] usb 5-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.147318][ T992] usb 5-1: config 1 interface 0 has no altsetting 0 [ 127.187738][ T992] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 127.187771][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.187794][ T992] usb 5-1: Product: syz [ 127.187810][ T992] usb 5-1: Manufacturer: syz [ 127.187826][ T992] usb 5-1: SerialNumber: syz [ 127.439849][ T992] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input6 [ 127.613031][ T5158] bcm5974 5-1:1.0: could not read from device [ 127.695548][ T992] bcm5974 5-1:1.0: could not read from device [ 127.838474][ T5158] bcm5974 5-1:1.0: could not read from device [ 127.986619][ T992] input: failed to attach handler mousedev to device input6, error: -5 [ 128.031210][ T5158] bcm5974 5-1:1.0: could not read from device [ 128.098615][ T992] usb 5-1: USB disconnect, device number 2 [ 128.291580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.871557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.880580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.651567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.512755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c8!!! [ 130.516744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c8!!! [ 132.461110][ T6140] syz.4.60 (6140) used greatest stack depth: 18248 bytes left [ 132.972878][ T6149] IPv6: sit1: Disabled Multicast RS [ 133.328070][ T6154] netlink: 256 bytes leftover after parsing attributes in process `syz.0.66'. [ 133.328635][ T6154] unsupported nlmsg_type 40 [ 134.163012][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 134.163039][ T6180] netlink: 7 bytes leftover after parsing attributes in process `syz.3.75'. [ 134.163183][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 134.163334][ T6180] netlink: 7 bytes leftover after parsing attributes in process `syz.3.75'. [ 134.454643][ T6188] ieee802154 phy0 wpan0: encryption failed: -90 [ 134.456153][ T6190] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 134.506504][ T992] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.684099][ T992] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 134.684129][ T992] usb 5-1: config 1 has no interface number 0 [ 134.684180][ T992] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 134.684210][ T992] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 134.684238][ T992] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.689856][ T992] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 134.689889][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.689911][ T992] usb 5-1: Product: syz [ 134.689926][ T992] usb 5-1: Manufacturer: syz [ 134.689941][ T992] usb 5-1: SerialNumber: syz [ 134.891183][ T6183] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 135.172082][ T6183] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 135.398025][ T992] usb 5-1: Incompatible driver and firmware versions [ 135.454179][ T992] usb 5-1: USB disconnect, device number 3 [ 137.221362][ T6239] nbd: couldn't find device at index -37165402 [ 137.264936][ T6236] sit1: entered promiscuous mode [ 137.285300][ T6241] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 138.409556][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.409641][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.528127][ T6261] netlink: 'syz.2.108': attribute type 11 has an invalid length. [ 138.916868][ T6268] netlink: 'syz.4.112': attribute type 11 has an invalid length. [ 139.216177][ T6278] netlink: 680 bytes leftover after parsing attributes in process `syz.4.119'. [ 140.031820][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.444109][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.832254][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.226219][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.313002][ T6332] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 142.315156][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.365246][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.032358][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.541083][ T6356] netlink: 76 bytes leftover after parsing attributes in process `syz.0.150'. [ 144.541127][ T6356] netlink: 72 bytes leftover after parsing attributes in process `syz.0.150'. [ 144.541145][ T6356] netlink: 'syz.0.150': attribute type 3 has an invalid length. [ 144.541161][ T6356] netlink: 11 bytes leftover after parsing attributes in process `syz.0.150'. [ 144.587381][ T6348] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 145.326247][ T6373] netlink: 88 bytes leftover after parsing attributes in process `syz.4.159'. [ 146.128198][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.807027][ T6415] comedi comedi3: aio_aio12_8: I/O port conflict (0x8,32) [ 146.872051][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.017305][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.102006][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.168040][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.530848][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.407326][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.251026][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.674646][ T6447] netlink: 'syz.2.186': attribute type 1 has an invalid length. [ 149.674668][ T6447] netlink: 228 bytes leftover after parsing attributes in process `syz.2.186'. [ 149.837206][ T38] audit: type=1326 audit(1762509493.260:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 149.880496][ T38] audit: type=1326 audit(1762509493.260:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 149.880559][ T38] audit: type=1326 audit(1762509493.300:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 149.881414][ T38] audit: type=1326 audit(1762509493.300:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 149.881468][ T38] audit: type=1326 audit(1762509493.300:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 151.710837][ T6492] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.831804][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.207'. [ 152.074411][ T6503] netlink: 10420 bytes leftover after parsing attributes in process `syz.4.211'. [ 152.892236][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 153.908523][ T6525] bond1: option miimon: invalid value (18446744071902265346) [ 153.908552][ T6525] bond1: option miimon: allowed values 0 - 2147483647 [ 154.070830][ T6525] bond1 (unregistering): Released all slaves [ 154.209441][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 154.308846][ T31] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 154.441771][ T5895] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 154.488267][ T31] usb 4-1: config 7 has an invalid interface number: 30 but max is 0 [ 154.488298][ T31] usb 4-1: config 7 has no interface number 0 [ 154.488334][ T31] usb 4-1: config 7 interface 30 has no altsetting 0 [ 154.518910][ T31] usb 4-1: string descriptor 0 read error: -22 [ 154.519073][ T31] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=10.9c [ 154.519100][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.602372][ T6554] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.623928][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 154.626151][ T5895] usb 5-1: not running at top speed; connect to a high speed hub [ 154.636602][ T5895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.648485][ T31] usb_ehset_test 4-1:7.30: probe with driver usb_ehset_test failed with error -32 [ 154.662741][ T5895] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.662804][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.662830][ T5895] usb 5-1: Product: syz [ 154.662848][ T5895] usb 5-1: Manufacturer: syz [ 154.662866][ T5895] usb 5-1: SerialNumber: syz [ 154.786249][ T5895] usb 5-1: bad CDC descriptors [ 154.890471][ T31] usb 4-1: USB disconnect, device number 2 [ 155.096451][ T5895] usb 5-1: USB disconnect, device number 4 [ 155.142899][ T1238] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 155.913953][ T1238] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.913983][ T1238] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.915506][ T1238] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 155.915535][ T1238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 155.915558][ T1238] usb 3-1: SerialNumber: syz [ 156.258502][ T1238] usb 3-1: 0:2 : does not exist [ 156.416738][ T1238] usb 3-1: USB disconnect, device number 2 [ 156.521469][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.532231][ T6577] rtc_cmos 00:00: Alarms can be up to one day in the future [ 156.998078][ T6590] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.076475][ T6591] netlink: 132 bytes leftover after parsing attributes in process `syz.3.250'. [ 157.162045][ T6594] Non-string source [ 157.354323][ T38] audit: type=1326 audit(1762509500.780:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6600 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61f50f6c9 code=0x7ffc0000 [ 157.399858][ T38] audit: type=1326 audit(1762509500.780:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6600 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61f50f6c9 code=0x7ffc0000 [ 157.400027][ T38] audit: type=1326 audit(1762509500.820:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6600 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fa61f50f6c9 code=0x7ffc0000 [ 157.400278][ T38] audit: type=1326 audit(1762509500.820:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6600 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61f50f6c9 code=0x7ffc0000 [ 157.421445][ T38] audit: type=1326 audit(1762509500.820:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6600 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61f50f6c9 code=0x7ffc0000 [ 157.674108][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.675313][ T6609] batadv_slave_0: entered promiscuous mode [ 157.675341][ T6609] batadv_slave_0: entered allmulticast mode [ 158.261718][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 158.424493][ T31] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 158.424530][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 158.456188][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.456222][ T31] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 158.456243][ T31] usb 2-1: Product: syz [ 158.456258][ T31] usb 2-1: Manufacturer: syz [ 158.456273][ T31] usb 2-1: SerialNumber: syz [ 158.506866][ T31] usb 2-1: config 0 descriptor?? [ 158.524686][ T31] usb 2-1: selecting invalid altsetting 0 [ 158.794588][ T31] usb 2-1: USB disconnect, device number 2 [ 158.942460][ T6654] netlink: 'syz.4.281': attribute type 21 has an invalid length. [ 158.942580][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 159.041843][ T992] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 159.059871][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.207040][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.207078][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 49737, setting to 1024 [ 159.217183][ T992] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 159.217212][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.217230][ T992] usb 1-1: Product: syz [ 159.217244][ T992] usb 1-1: Manufacturer: syz [ 159.217256][ T992] usb 1-1: SerialNumber: syz [ 159.250653][ T992] usb 1-1: config 0 descriptor?? [ 159.359565][ T992] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 159.686242][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.738773][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.757775][ T6001] usb 1-1: USB disconnect, device number 2 [ 160.592070][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.876182][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.014436][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.399404][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.731671][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.511638][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.971872][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.950835][ T6742] netlink: 80 bytes leftover after parsing attributes in process `syz.3.319'. [ 165.140201][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 165.140228][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 165.656279][ T6737] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 165.656301][ T6737] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 165.674713][ T6737] vhci_hcd vhci_hcd.0: Device attached [ 165.763546][ T992] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 165.867584][ T6763] vhci_hcd: connection closed [ 165.873603][ T12] vhci_hcd: stop threads [ 165.874304][ T12] vhci_hcd: release socket [ 165.878111][ T12] vhci_hcd: disconnect device [ 165.941907][ T992] usb 5-1: Using ep0 maxpacket: 16 [ 165.952664][ T992] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 165.952701][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.952725][ T992] usb 5-1: Product: syz [ 165.952743][ T992] usb 5-1: Manufacturer: syz [ 165.952762][ T992] usb 5-1: SerialNumber: syz [ 165.974557][ T992] usb 5-1: config 0 descriptor?? [ 166.030957][ T992] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 166.299700][ T6778] netlink: 'syz.3.334': attribute type 10 has an invalid length. [ 166.300678][ T6778] veth0_vlan: entered allmulticast mode [ 166.449950][ T992] usb 5-1: clie_3_5_startup: get interface number failed: -71 [ 166.452564][ T992] visor 5-1:0.0: probe with driver visor failed with error -71 [ 166.510426][ T992] usb 5-1: USB disconnect, device number 5 [ 166.562442][ T6778] veth0_vlan: left promiscuous mode [ 166.660554][ T6778] veth0_vlan: entered promiscuous mode [ 166.711258][ T6778] team0: Device veth0_vlan failed to register rx_handler [ 166.891783][ T6790] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 168.334616][ T6813] netlink: 'syz.3.350': attribute type 4 has an invalid length. [ 172.287232][ T6873] vivid-007: ================= START STATUS ================= [ 172.287361][ T6873] vivid-007: Generate PTS: true [ 172.287396][ T6873] vivid-007: Generate SCR: true [ 172.287422][ T6873] tpg source WxH: 320x240 (Y'CbCr) [ 172.287436][ T6873] tpg field: 1 [ 172.287444][ T6873] tpg crop: (0,0)/320x240 [ 172.287458][ T6873] tpg compose: (0,0)/320x240 [ 172.287471][ T6873] tpg colorspace: 8 [ 172.287480][ T6873] tpg transfer function: 0/0 [ 172.287491][ T6873] tpg Y'CbCr encoding: 0/0 [ 172.287501][ T6873] tpg quantization: 0/0 [ 172.287510][ T6873] tpg RGB range: 0/2 [ 172.287520][ T6873] vivid-007: ================== END STATUS ================== [ 175.399691][ T6907] netlink: 32 bytes leftover after parsing attributes in process `syz.1.389'. [ 175.421398][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 178.892977][ T6950] nbd: illegal input index -1495182229 [ 179.248385][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 180.362000][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 180.402973][ T6987] netlink: 'syz.2.423': attribute type 2 has an invalid length. [ 180.402995][ T6987] netlink: 'syz.2.423': attribute type 11 has an invalid length. [ 180.403009][ T6987] netlink: 132 bytes leftover after parsing attributes in process `syz.2.423'. [ 180.518251][ T31] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.518291][ T31] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 180.518338][ T31] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.518363][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.585016][ T6978] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 180.607682][ T31] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 181.082860][ T1238] usb 5-1: USB disconnect, device number 6 [ 182.860585][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 186.668268][ T1238] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 187.133137][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.216517][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.239553][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.755982][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.800851][ T1238] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 187.800884][ T1238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.800905][ T1238] usb 3-1: Product: syz [ 187.800921][ T1238] usb 3-1: Manufacturer: syz [ 187.800936][ T1238] usb 3-1: SerialNumber: syz [ 187.851511][ T1238] usb 3-1: config 0 descriptor?? [ 187.876103][ T1238] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 187.998284][ T1238] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.999821][ T1238] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 187.999917][ T1238] usb 3-1: media controller created [ 188.079332][ T1238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.212417][ T7115] Driver unsupported XDP return value 0 on prog (id 39) dev N/A, expect packet loss! [ 188.284728][ T1238] DVB: Unable to find symbol mt352_attach() [ 188.471961][ T1238] DVB: Unable to find symbol nxt6000_attach() [ 188.471993][ T1238] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 188.518645][ T1238] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 188.548980][ T1238] dvb-usb: schedule remote query interval to 1000 msecs. [ 188.549006][ T1238] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 188.549368][ T1238] dvb-usb: bulk message failed: -22 (7/0) [ 188.549391][ T1238] dvb-usb: bulk message failed: -22 (7/0) [ 188.624241][ T1238] usb 3-1: USB disconnect, device number 3 [ 188.689597][ T38] audit: type=1326 audit(1762509532.070:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de249f6c9 code=0x7ffc0000 [ 188.689658][ T38] audit: type=1326 audit(1762509532.110:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1de249f6c9 code=0x7ffc0000 [ 188.689708][ T38] audit: type=1326 audit(1762509532.110:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de249f6c9 code=0x7ffc0000 [ 188.689756][ T38] audit: type=1326 audit(1762509532.110:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de249f6c9 code=0x7ffc0000 [ 188.699162][ T38] audit: type=1326 audit(1762509532.120:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f1de249f6c9 code=0x7ffc0000 [ 188.699227][ T38] audit: type=1326 audit(1762509532.120:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de249f6c9 code=0x7ffc0000 [ 188.699278][ T38] audit: type=1326 audit(1762509532.120:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de249f6c9 code=0x7ffc0000 [ 188.851768][ T7131] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 188.851791][ T7131] netlink: 232 bytes leftover after parsing attributes in process `syz.0.488'. [ 189.076478][ T1238] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 189.330966][ T7145] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 189.331070][ T1238] IPVS: starting estimator thread 0... [ 189.432008][ T7150] IPVS: using max 8 ests per chain, 19200 per kthread [ 189.509536][ T38] audit: type=1326 audit(1762509532.930:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 189.511668][ T38] audit: type=1326 audit(1762509532.930:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 189.520458][ T38] audit: type=1326 audit(1762509532.940:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 189.552559][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 189.552589][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'. [ 189.552629][ T7159] netlink: 'syz.2.502': attribute type 12 has an invalid length. [ 189.721626][ T31] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 189.896521][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.896557][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.921294][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.921328][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.921356][ T31] usb 5-1: Product: syz [ 189.921373][ T31] usb 5-1: Manufacturer: syz [ 189.921389][ T31] usb 5-1: SerialNumber: syz [ 190.501880][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.025983][ T31] usb 5-1: cannot find UAC_HEADER [ 191.116904][ T31] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 191.120957][ T31] usb 5-1: USB disconnect, device number 7 [ 191.221432][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.241789][ T992] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 191.336835][ T7174] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 191.336869][ T7174] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 191.394450][ T7179] netlink: 182 bytes leftover after parsing attributes in process `syz.1.511'. [ 191.409375][ T7174] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 191.415039][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.415081][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.415138][ T992] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.415167][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.452194][ T992] usb 4-1: config 0 descriptor?? [ 191.954758][ T992] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 192.114429][ T992] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input8 [ 192.202550][ T7196] rtc_cmos 00:00: Alarms can be up to one day in the future [ 192.784782][ T992] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 192.790554][ T992] usb 4-1: USB disconnect, device number 3 [ 193.872652][ T7228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.532'. [ 194.082196][ T5818] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 194.083673][ T7228] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 194.105005][ T7237] tmpfs: Cannot change global quota limit on remount [ 194.192119][ T7228] bond2 (unregistering): Released all slaves [ 194.218210][ T7233] fido_id[7233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 194.241653][ T5818] usb 5-1: Using ep0 maxpacket: 16 [ 194.247945][ T5818] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 194.247975][ T5818] usb 5-1: config 0 has no interface number 0 [ 194.248028][ T5818] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 194.251076][ T5818] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 194.251107][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.251129][ T5818] usb 5-1: Product: syz [ 194.251145][ T5818] usb 5-1: Manufacturer: syz [ 194.251160][ T5818] usb 5-1: SerialNumber: syz [ 194.370112][ T5818] usb 5-1: config 0 descriptor?? [ 194.827820][ T992] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 194.987191][ T992] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.987226][ T992] usb 4-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.987257][ T992] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.987295][ T992] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 194.987322][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.015994][ T992] usb 4-1: config 0 descriptor?? [ 195.032812][ T5818] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 195.074800][ T5818] usb 5-1: USB disconnect, device number 8 [ 195.236356][ T7257] EXT4-fs: Conflicting test_dummy_encryption options [ 195.347065][ T7261] capability: warning: `syz.0.548' uses deprecated v2 capabilities in a way that may be insecure [ 195.564838][ T992] sony 0003:054C:0268.0002: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 195.564880][ T992] sony 0003:054C:0268.0002: failed to claim input [ 195.759720][ T5818] usb 4-1: USB disconnect, device number 4 [ 195.885791][ T7276] netlink: zone id is out of range [ 195.985115][ T7271] fido_id[7271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 197.043933][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.435141][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.968648][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.647320][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.797066][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.797146][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.848201][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.530178][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.431507][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.931963][ T5818] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 206.092903][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 206.118503][ T5818] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 206.118536][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.118559][ T5818] usb 4-1: Product: syz [ 206.118575][ T5818] usb 4-1: Manufacturer: syz [ 206.118590][ T5818] usb 4-1: SerialNumber: syz [ 206.508071][ T5794] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 206.723743][ T5818] r8152-cfgselector 4-1: Unknown version 0x0000 [ 206.844224][ T5794] usb 2-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 206.844259][ T5794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.874392][ T5794] usb 2-1: config 0 descriptor?? [ 207.019552][ T6001] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 207.367364][ T5794] asus 0003:0B05:19B6.0003: hidraw0: USB HID v1.01 Device [HID 0b05:19b6] on usb-dummy_hcd.1-1/input0 [ 207.367402][ T5794] asus 0003:0B05:19B6.0003: Asus input not registered [ 207.409214][ T5794] asus 0003:0B05:19B6.0003: probe with driver asus failed with error -12 [ 207.561323][ T6001] usb 2-1: USB disconnect, device number 3 [ 207.636482][ T7444] netlink: 658 bytes leftover after parsing attributes in process `syz.0.623'. [ 208.573489][ T7445] fido_id[7445]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 208.612248][ T7450] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 208.612269][ T7450] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 208.638959][ T7450] vhci_hcd vhci_hcd.0: Device attached [ 209.051212][ T1238] usb 40-1: SetAddress Request (2) to port 0 [ 209.054182][ T1238] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 209.543698][ T7460] warning: `syz.1.628' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 210.742473][ T7451] vhci_hcd: connection reset by peer [ 210.743502][ T69] vhci_hcd: stop threads [ 210.743522][ T69] vhci_hcd: release socket [ 210.743601][ T69] vhci_hcd: disconnect device [ 211.064093][ T5173] udevd[5173]: worker [5938] terminated by signal 33 (Unknown signal 33) [ 211.064152][ T5173] udevd[5173]: worker [5938] failed while handling '/devices/virtual/block/loop0' [ 211.352998][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 211.354920][ T7494] netlink: 56 bytes leftover after parsing attributes in process `syz.1.642'. [ 211.724443][ T7504] netlink: 'syz.2.649': attribute type 1 has an invalid length. [ 211.724722][ T7504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.724893][ T7504] IPv6: NLM_F_CREATE should be set when creating new route [ 211.724927][ T7504] IPv6: NLM_F_CREATE should be set when creating new route [ 212.952046][ T5794] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 213.114261][ T5794] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.114297][ T5794] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.114334][ T5794] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 213.114360][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.167644][ T5794] usb 1-1: config 0 descriptor?? [ 213.664205][ T5794] maltron 0003:058F:9410.0004: unknown main item tag 0x0 [ 213.664248][ T5794] maltron 0003:058F:9410.0004: unknown main item tag 0x0 [ 213.664277][ T5794] maltron 0003:058F:9410.0004: unknown main item tag 0x0 [ 213.664305][ T5794] maltron 0003:058F:9410.0004: unknown main item tag 0x0 [ 213.664334][ T5794] maltron 0003:058F:9410.0004: unknown main item tag 0x0 [ 213.664363][ T5794] maltron 0003:058F:9410.0004: unknown main item tag 0x0 [ 213.664391][ T5794] maltron 0003:058F:9410.0004: unknown main item tag 0x0 [ 213.725218][ T5794] maltron 0003:058F:9410.0004: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.0-1/input0 [ 213.752475][ T6001] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 213.864212][ T5818] usb 1-1: USB disconnect, device number 3 [ 213.917845][ T6001] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 213.917880][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.917903][ T6001] usb 3-1: Product: syz [ 213.917919][ T6001] usb 3-1: Manufacturer: syz [ 213.917935][ T6001] usb 3-1: SerialNumber: syz [ 214.008554][ T6001] usb 3-1: config 0 descriptor?? [ 214.059003][ T6001] gspca_main: sq930x-2.14.0 probing 2770:930c [ 214.172077][ T1238] usb 40-1: device descriptor read/8, error -110 [ 214.224705][ T7555] fido_id[7555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 214.578377][ T1238] usb usb40-port1: attempt power cycle [ 214.732368][ T6001] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 214.952293][ T6001] gspca_sq930x: Sensor ov9630 not yet treated [ 214.952411][ T6001] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 215.163458][ T1238] usb usb40-port1: unable to enumerate USB device [ 215.286410][ T6001] usb 3-1: USB disconnect, device number 4 [ 216.721675][ T5895] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 216.871804][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 216.880393][ T5895] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 217.757328][ T5895] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 217.757364][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.757387][ T5895] usb 5-1: Product: syz [ 217.757403][ T5895] usb 5-1: Manufacturer: syz [ 217.757419][ T5895] usb 5-1: SerialNumber: syz [ 217.834086][ T5895] usb 5-1: config 0 descriptor?? [ 217.840049][ T7596] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 217.887202][ T5895] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 217.922628][ T7613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.696'. [ 218.992329][ T992] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 219.312053][ T992] usb 2-1: Using ep0 maxpacket: 32 [ 219.314458][ T992] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.314493][ T992] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.314517][ T992] usb 2-1: config 0 interface 0 has no altsetting 0 [ 219.314554][ T992] usb 2-1: New USB device found, idVendor=056a, idProduct=0004, bcdDevice= 0.00 [ 219.314580][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.320694][ T5895] usb 5-1: USB disconnect, device number 9 [ 219.320810][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 219.382059][ T992] usb 2-1: config 0 descriptor?? [ 219.889512][ T992] wacom 0003:056A:0004.0005: unknown main item tag 0x0 [ 219.889551][ T992] wacom 0003:056A:0004.0005: unknown main item tag 0x0 [ 219.972119][ T7638] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 219.972182][ T7638] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 220.015234][ T7640] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 220.015296][ T7640] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 220.015408][ T7640] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 220.015548][ T7640] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 220.015604][ T7640] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 220.015653][ T7640] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 220.085667][ T5895] usb 2-1: USB disconnect, device number 4 [ 220.501260][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.804033][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.003228][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.544164][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.734840][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 222.134393][ T7688] random: crng reseeded on system resumption [ 222.170865][ T7686] Bluetooth: MGMT ver 1.23 [ 222.339937][ T5122] Bluetooth: hci3: command 0x0406 tx timeout [ 222.339980][ T5122] Bluetooth: hci0: command 0x0406 tx timeout [ 222.340002][ T5122] Bluetooth: hci1: command 0x0406 tx timeout [ 222.340465][ T5122] Bluetooth: hci2: command 0x0406 tx timeout [ 222.759458][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.007192][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.506531][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.491192][ T7726] process 'syz.4.745' launched '/dev/fd/3' with NULL argv: empty string added [ 225.765363][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.423008][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.780527][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.760'. [ 227.009435][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.343049][ T7776] [U]  [ 228.387858][ T7779] tipc: Enabling of bearer rejected, failed to enable media [ 229.079765][ T5806] Bluetooth: hci3: Malformed LE Event: 0x0b [ 230.924412][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 230.924432][ T38] audit: type=1326 audit(1762509574.350:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 230.925988][ T38] audit: type=1326 audit(1762509574.350:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 230.928477][ T38] audit: type=1326 audit(1762509574.350:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 230.928925][ T38] audit: type=1326 audit(1762509574.350:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 230.929230][ T38] audit: type=1326 audit(1762509574.350:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 230.954821][ T38] audit: type=1326 audit(1762509574.380:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 230.954891][ T38] audit: type=1326 audit(1762509574.380:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 230.954945][ T38] audit: type=1326 audit(1762509574.380:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d0d5f6c9 code=0x7ffc0000 [ 230.982424][ T5893] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 231.139288][ T5893] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 231.139323][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.139346][ T5893] usb 2-1: Product: syz [ 231.139363][ T5893] usb 2-1: Manufacturer: syz [ 231.139378][ T5893] usb 2-1: SerialNumber: syz [ 231.230110][ T5893] usb 2-1: config 0 descriptor?? [ 231.535076][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'. [ 231.578295][ T5893] usb 2-1: USB disconnect, device number 5 [ 231.818662][ T7837] ======================================================= [ 231.818662][ T7837] WARNING: The mand mount option has been deprecated and [ 231.818662][ T7837] and is ignored by this kernel. Remove the mand [ 231.818662][ T7837] option from the mount to silence this warning. [ 231.818662][ T7837] ======================================================= [ 232.254689][ T6553] udevd[6553]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.981637][ T5895] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 234.163842][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 234.163944][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.163988][ T5895] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 234.164012][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.227576][ T5895] usb 1-1: config 0 descriptor?? [ 234.228785][ T7858] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.405994][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 234.691983][ T5895] cypress 0003:04B4:07B1.0006: unknown main item tag 0x0 [ 234.692022][ T5895] cypress 0003:04B4:07B1.0006: item fetching failed at offset 3/5 [ 234.692879][ T5895] cypress 0003:04B4:07B1.0006: parse failed [ 234.692960][ T5895] cypress 0003:04B4:07B1.0006: probe with driver cypress failed with error -22 [ 234.804029][ T7873] netlink: 165 bytes leftover after parsing attributes in process `syz.4.807'. [ 234.872250][ T5895] usb 1-1: USB disconnect, device number 4 [ 240.475008][ T7938] usb usb8: usbfs: process 7938 (syz.1.834) did not claim interface 5 before use [ 241.499544][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.513015][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.515318][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.517013][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.517883][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.201681][ T5818] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 242.202207][ T6001] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 242.351606][ T5818] usb 5-1: Using ep0 maxpacket: 16 [ 242.352360][ T6001] usb 2-1: Using ep0 maxpacket: 16 [ 242.354228][ T5818] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.354254][ T5818] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.354890][ T6001] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.354914][ T6001] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.359435][ T5818] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.359466][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.359488][ T5818] usb 5-1: Product: syz [ 242.359510][ T5818] usb 5-1: Manufacturer: syz [ 242.359526][ T5818] usb 5-1: SerialNumber: syz [ 242.360166][ T6001] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.360193][ T6001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.360215][ T6001] usb 2-1: Product: syz [ 242.360230][ T6001] usb 2-1: Manufacturer: syz [ 242.360326][ T6001] usb 2-1: SerialNumber: syz [ 242.590500][ T6001] usb 2-1: 0:2 : does not exist [ 242.621065][ T6001] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 242.720898][ T6001] usb 2-1: USB disconnect, device number 6 [ 242.914600][ T5818] usb 5-1: cannot find UAC_HEADER [ 242.985137][ T5818] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 243.037232][ T5818] usb 5-1: USB disconnect, device number 10 [ 243.160291][ T6567] udevd[6567]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 243.239200][ T1211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.310325][ T7000] udevd[7000]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.701835][ T61] Bluetooth: hci5: command tx timeout [ 244.466488][ T7958] chnl_net:caif_netlink_parms(): no params data found [ 244.826980][ T8023] netlink: 7056 bytes leftover after parsing attributes in process `syz.0.869'. [ 244.827013][ T8023] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 245.100925][ T1211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.771995][ T61] Bluetooth: hci5: command tx timeout [ 246.014608][ T1211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.129140][ T7958] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.129682][ T7958] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.129971][ T7958] bridge_slave_0: entered allmulticast mode [ 246.139562][ T7958] bridge_slave_0: entered promiscuous mode [ 246.222226][ T992] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 246.320001][ T1211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.372200][ T992] usb 4-1: Using ep0 maxpacket: 8 [ 246.373052][ T7958] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.373190][ T7958] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.373449][ T7958] bridge_slave_1: entered allmulticast mode [ 246.374539][ T992] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.378669][ T992] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 246.378699][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.378721][ T992] usb 4-1: Product: syz [ 246.378737][ T992] usb 4-1: Manufacturer: syz [ 246.378753][ T992] usb 4-1: SerialNumber: syz [ 246.387908][ T7958] bridge_slave_1: entered promiscuous mode [ 246.502830][ T992] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 246.502938][ T992] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 246.747404][ T5792] usb 4-1: USB disconnect, device number 6 [ 247.076525][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.851611][ T61] Bluetooth: hci5: command tx timeout [ 247.897309][ T7958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.953355][ T7958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.000742][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 248.000768][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 248.000796][ T8081] netlink: 'syz.4.894': attribute type 18 has an invalid length. [ 248.176725][ T8083] netlink: 'syz.0.893': attribute type 49 has an invalid length. [ 248.360666][ T7958] team0: Port device team_slave_0 added [ 248.536443][ T7958] team0: Port device team_slave_1 added [ 248.601681][ T992] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 248.752201][ T992] usb 1-1: Using ep0 maxpacket: 16 [ 248.754734][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.754770][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.754810][ T992] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 248.754833][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.770748][ T992] usb 1-1: config 0 descriptor?? [ 248.942390][ T5893] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 249.036866][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.036886][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.036917][ T7958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.098738][ T5893] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.098778][ T5893] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 249.098808][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 249.098904][ T5893] usb 2-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 249.098931][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.193038][ T5893] usb 2-1: config 0 descriptor?? [ 249.221400][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.221419][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.232478][ T7958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.276019][ T992] mcp2200 0003:04D8:00DF.0007: unknown main item tag 0x2 [ 249.276059][ T992] mcp2200 0003:04D8:00DF.0007: item fetching failed at offset 4/5 [ 249.276927][ T992] mcp2200 0003:04D8:00DF.0007: can't parse reports [ 249.277053][ T992] mcp2200 0003:04D8:00DF.0007: probe with driver mcp2200 failed with error -22 [ 249.519902][ T992] usb 1-1: USB disconnect, device number 5 [ 249.707095][ T5893] betop 0003:8380:1850.0008: item fetching failed at offset 0/2 [ 249.707801][ T5893] betop 0003:8380:1850.0008: parse failed [ 249.707874][ T5893] betop 0003:8380:1850.0008: probe with driver betop failed with error -22 [ 249.741048][ T1211] bridge_slave_1: left allmulticast mode [ 249.741243][ T1211] bridge_slave_1: left promiscuous mode [ 249.750330][ T1211] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.833587][ T1211] bridge_slave_0: left allmulticast mode [ 249.833612][ T1211] bridge_slave_0: left promiscuous mode [ 249.834269][ T1211] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.906356][ T992] usb 2-1: USB disconnect, device number 7 [ 249.931678][ T61] Bluetooth: hci5: command tx timeout [ 250.173196][ T38] audit: type=1326 audit(1762509593.600:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.4.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 250.175022][ T38] audit: type=1326 audit(1762509593.600:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.4.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 250.181345][ T38] audit: type=1326 audit(1762509593.600:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.4.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 250.181412][ T38] audit: type=1326 audit(1762509593.600:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.4.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 250.183389][ T38] audit: type=1326 audit(1762509593.610:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.4.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 250.183680][ T38] audit: type=1326 audit(1762509593.610:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.4.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 250.185198][ T38] audit: type=1326 audit(1762509593.610:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.4.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 250.186793][ T38] audit: type=1326 audit(1762509593.610:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.4.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 250.186850][ T38] audit: type=1326 audit(1762509593.610:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.4.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 250.187616][ T38] audit: type=1326 audit(1762509593.610:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.4.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f8b4480f6c9 code=0x7ffc0000 [ 251.197378][ T8154] ./file0: Can't open blockdev [ 251.640112][ T8164] netlink: 'syz.3.933': attribute type 3 has an invalid length. [ 253.112540][ T1211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.172419][ T1211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.217864][ T1211] bond0 (unregistering): Released all slaves [ 253.237752][ T1211] bond1 (unregistering): Released all slaves [ 253.436299][ T7958] hsr_slave_0: entered promiscuous mode [ 253.437601][ T7958] hsr_slave_1: entered promiscuous mode [ 253.438526][ T7958] debugfs: 'hsr0' already exists in 'hsr' [ 253.438550][ T7958] Cannot create hsr debugfs directory [ 253.922566][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'. [ 255.885543][ T8230] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 255.885572][ T8230] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 255.885663][ T8230] vhci_hcd vhci_hcd.0: Device attached [ 256.011409][ T8252] vhci_hcd: connection closed [ 256.028418][ T1482] vhci_hcd: stop threads [ 256.028444][ T1482] vhci_hcd: release socket [ 256.028481][ T1482] vhci_hcd: disconnect device [ 256.672825][ C1] ------------[ cut here ]------------ [ 256.672845][ C1] WARNING: CPU: 1 PID: 29 at kernel/time/timer.c:1785 __run_timer_base+0x777/0x970 [ 256.672897][ C1] Modules linked in: [ 256.672935][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 256.672960][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.672978][ C1] RIP: 0010:__run_timer_base+0x777/0x970 [ 256.673007][ C1] Code: 26 4d 85 e4 74 7d e8 68 f6 12 00 e9 48 fe ff ff e8 5e f6 12 00 48 8b 5c 24 28 43 80 7c 3d 00 00 75 d4 eb da e8 4a f6 12 00 90 <0f> 0b 90 48 8b 44 24 40 42 80 3c 38 00 48 8b 5c 24 28 74 a9 48 89 [ 256.673027][ C1] RSP: 0018:ffffc90000a3f9a0 EFLAGS: 00010046 [ 256.673046][ C1] RAX: ffffffff81abc9d6 RBX: 0000000000000000 RCX: ffff88801ba91e00 [ 256.673062][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 256.673076][ C1] RBP: ffffc90000a3fb10 R08: 0000000000000000 R09: 0000000000000100 [ 256.673091][ C1] R10: dffffc0000000000 R11: fffffbfff1dac6cf R12: ffff888059408410 [ 256.673108][ C1] R13: 1ffff92000147f4c R14: ffffc90000a3fa60 R15: dffffc0000000000 [ 256.673126][ C1] FS: 0000000000000000(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 256.673144][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.673160][ C1] CR2: 0000001b2f623ffc CR3: 000000004eace000 CR4: 00000000003526f0 [ 256.673188][ C1] Call Trace: [ 256.673202][ C1] [ 256.673234][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 256.673287][ C1] run_timer_softirq+0xb7/0x180 [ 256.673320][ C1] handle_softirqs+0x22f/0x710 [ 256.673362][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 256.673402][ C1] run_ktimerd+0xcf/0x190 [ 256.673435][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 256.673465][ C1] ? schedule+0x91/0x360 [ 256.673505][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 256.673533][ C1] smpboot_thread_fn+0x542/0xa60 [ 256.673565][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 256.673606][ C1] kthread+0x711/0x8a0 [ 256.673644][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 256.673674][ C1] ? __pfx_kthread+0x10/0x10 [ 256.673706][ C1] ? rt_spin_unlock+0x150/0x200 [ 256.673740][ C1] ? rt_spin_unlock+0x161/0x200 [ 256.673766][ C1] ? __pfx_kthread+0x10/0x10 [ 256.673804][ C1] ret_from_fork+0x4bc/0x870 [ 256.673837][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 256.673876][ C1] ? __switch_to_asm+0x39/0x70 [ 256.673900][ C1] ? __switch_to_asm+0x33/0x70 [ 256.673922][ C1] ? __pfx_kthread+0x10/0x10 [ 256.673960][ C1] ret_from_fork_asm+0x1a/0x30 [ 256.674007][ C1] [ 256.674019][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 256.674038][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 256.674065][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.674079][ C1] Call Trace: [ 256.674088][ C1] [ 256.674097][ C1] dump_stack_lvl+0x99/0x250 [ 256.674136][ C1] ? __asan_memcpy+0x40/0x70 [ 256.674174][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.674213][ C1] ? __pfx__printk+0x10/0x10 [ 256.674260][ C1] vpanic+0x237/0x6d0 [ 256.674284][ C1] ? __pfx_vpanic+0x10/0x10 [ 256.674321][ C1] panic+0xb9/0xc0 [ 256.674344][ C1] ? __pfx_panic+0x10/0x10 [ 256.674386][ C1] __warn+0x31b/0x4b0 [ 256.674408][ C1] ? __run_timer_base+0x777/0x970 [ 256.674441][ C1] ? __run_timer_base+0x777/0x970 [ 256.674470][ C1] report_bug+0x2be/0x4f0 [ 256.674502][ C1] ? __run_timer_base+0x777/0x970 [ 256.674532][ C1] ? __run_timer_base+0x777/0x970 [ 256.674561][ C1] ? __run_timer_base+0x779/0x970 [ 256.674590][ C1] handle_bug+0x84/0x160 [ 256.674614][ C1] exc_invalid_op+0x1a/0x50 [ 256.674637][ C1] asm_exc_invalid_op+0x1a/0x20 [ 256.674660][ C1] RIP: 0010:__run_timer_base+0x777/0x970 [ 256.674689][ C1] Code: 26 4d 85 e4 74 7d e8 68 f6 12 00 e9 48 fe ff ff e8 5e f6 12 00 48 8b 5c 24 28 43 80 7c 3d 00 00 75 d4 eb da e8 4a f6 12 00 90 <0f> 0b 90 48 8b 44 24 40 42 80 3c 38 00 48 8b 5c 24 28 74 a9 48 89 [ 256.674710][ C1] RSP: 0018:ffffc90000a3f9a0 EFLAGS: 00010046 [ 256.674731][ C1] RAX: ffffffff81abc9d6 RBX: 0000000000000000 RCX: ffff88801ba91e00 [ 256.674749][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 256.674763][ C1] RBP: ffffc90000a3fb10 R08: 0000000000000000 R09: 0000000000000100 [ 256.674779][ C1] R10: dffffc0000000000 R11: fffffbfff1dac6cf R12: ffff888059408410 [ 256.674796][ C1] R13: 1ffff92000147f4c R14: ffffc90000a3fa60 R15: dffffc0000000000 [ 256.674825][ C1] ? __run_timer_base+0x776/0x970 [ 256.674885][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 256.674937][ C1] run_timer_softirq+0xb7/0x180 [ 256.674970][ C1] handle_softirqs+0x22f/0x710 [ 256.675012][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 256.675056][ C1] run_ktimerd+0xcf/0x190 [ 256.675090][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 256.675121][ C1] ? schedule+0x91/0x360 [ 256.675169][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 256.675199][ C1] smpboot_thread_fn+0x542/0xa60 [ 256.675232][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 256.675274][ C1] kthread+0x711/0x8a0 [ 256.675315][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 256.675347][ C1] ? __pfx_kthread+0x10/0x10 [ 256.675381][ C1] ? rt_spin_unlock+0x150/0x200 [ 256.675414][ C1] ? rt_spin_unlock+0x161/0x200 [ 256.675440][ C1] ? __pfx_kthread+0x10/0x10 [ 256.675479][ C1] ret_from_fork+0x4bc/0x870 [ 256.675511][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 256.675551][ C1] ? __switch_to_asm+0x39/0x70 [ 256.675574][ C1] ? __switch_to_asm+0x33/0x70 [ 256.675597][ C1] ? __pfx_kthread+0x10/0x10 [ 256.675636][ C1] ret_from_fork_asm+0x1a/0x30 [ 256.675683][ C1] [ 256.675991][ C1] Kernel Offset: disabled