last executing test programs: 4m33.624080491s ago: executing program 2 (id=594): socket(0xa, 0x3, 0x3a) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000001b40)) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000380)={0x140, 0x1, {0x0, 0x0, 0x6, 0x1, 0x5}, 0xa4}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r5, 0x303, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m32.270905045s ago: executing program 2 (id=598): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) unshare(0x400) unshare(0x60080) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) listen(r0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 4m30.473165304s ago: executing program 2 (id=601): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9", 0x5, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 4m20.247685035s ago: executing program 2 (id=626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf25020000cdff00000102000100080006000000000005001500"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x40810) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001500)=""/4112, 0xffffff61}], 0x1}, 0x10100) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000300)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x4}, 0xff}, 0x18) fanotify_init(0x2, 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @local, 0xffffffff, 0x3}, 0x20) ftruncate(0xffffffffffffffff, 0xffff) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getroute={0x14, 0x1a, 0x300, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbb62511f3"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r5, 0x4b52, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 4m17.811096053s ago: executing program 2 (id=631): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x1) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x892b}, 0x1a, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x10a1, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x8) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) 4m17.388451158s ago: executing program 2 (id=634): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xc022d, 0x7]) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x800) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a6", 0x15) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c000) sched_setattr(0x0, 0x0, 0x0) memfd_create(0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 4m1.186258131s ago: executing program 32 (id=634): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xc022d, 0x7]) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x800) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a6", 0x15) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c000) sched_setattr(0x0, 0x0, 0x0) memfd_create(0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 6.76508051s ago: executing program 4 (id=1733): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x89}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000140)={r5, 0x9}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$getregset(0x4204, r1, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000800400000000000000000000000000000000000000000000009080ea895ceb48580fdc2c28c38799bac9f7e75d8176912a178da0a0ad81848eafb7aeebde4da87fa2af31a49b89714facd5c0cdd6576f5eaae5f75ac39f73abae4c3fafcac81066c7131697a27105ab676b5edb43524f52e1845f2e8ed6e8ae385cd553fc09d0b0e3e635ffd4af16a2e7d1746b627378"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140022df92d435a26c3a90ded400007200170003010000000000001c000000"], 0x14}}, 0x0) 5.490031752s ago: executing program 4 (id=1738): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x8, 0xfd, 0x94, 0x7, 0x755, 0x7f, 0x400, 0x4, 0x5, 0x800, 0x2, 0x9, 0x8000, 0x81, 0x3b], 0x100000, 0x20002}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0) 5.297485682s ago: executing program 4 (id=1742): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x4, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x0, @local}, 0x10) 4.181664779s ago: executing program 4 (id=1747): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x20000400) getsockopt$inet_buf(r0, 0x118, 0x29, 0x0, &(0x7f00000003c0)) 3.911089684s ago: executing program 4 (id=1752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x6006}, @val={0x1, 0x5, 0x0, 0x2, 0x80, 0x6}, @ipv6=@gre_packet={0xe, 0x6, "5e4da1", 0x60, 0x2f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "d6"}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x88, 0x2, 0x1, 0x2, 0x4, 0x5f}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xcd, 0x2, 0x0, 0x3, 0x4, 0x6}, 0x2, {0x5, 0xa, 0x0, 0xb, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "43d38af0fc83cef0f5fba0c9c0d8bbe268e17662081b5e860aa840"}}}}}, 0x96) 2.87493288s ago: executing program 4 (id=1754): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1000000) 1.725737299s ago: executing program 1 (id=1763): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x3000) msgctl$IPC_RMID(r0, 0x0) 1.388161853s ago: executing program 1 (id=1768): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001580)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03ef000000000000240012800c0001006d6163766c616e00140002800800010008000000060002200100000008000500", @ANYRES32=r1], 0x54}}, 0x0) 1.047974798s ago: executing program 0 (id=1770): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x2000005, @dev={0xfe, 0x80, '\x00', 0x13}, 0xb}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c) 943.26389ms ago: executing program 0 (id=1772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000093c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000094c0)={0x0, 0x0, &(0x7f0000009480)={&(0x7f0000009400)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) 919.913532ms ago: executing program 1 (id=1773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000026c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 828.055544ms ago: executing program 3 (id=1774): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000040)=@ethtool_channels={0x3c, 0x7ff, 0x3af2, 0x4, 0x9, 0xda0, 0x10db794e, 0x8f4}}) 716.553081ms ago: executing program 3 (id=1775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x8, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ff80850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 702.227942ms ago: executing program 0 (id=1776): r0 = socket$inet(0x2, 0x3, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000400002000000400004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a300000000014000180"], 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004) 521.862591ms ago: executing program 1 (id=1777): iopl(0x3) ioperm(0x0, 0x1, 0x1) ioperm(0x0, 0x40, 0x0) 521.14261ms ago: executing program 0 (id=1778): r0 = socket(0x10, 0x803, 0x4) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0xb, 0x4) 464.058009ms ago: executing program 3 (id=1779): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) fstat(r0, &(0x7f0000000440)) 453.505278ms ago: executing program 5 (id=677): r0 = io_uring_setup(0x59d2, &(0x7f0000000000)={0x0, 0xa14a, 0x800, 0x2, 0x235}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) socket$qrtr(0x2a, 0x2, 0x0) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800}) close_range(r0, 0xffffffffffffffff, 0x0) 405.9792ms ago: executing program 3 (id=1780): setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x163) copy_file_range(r0, 0x0, r0, 0x0, 0x9, 0x0) 296.015455ms ago: executing program 0 (id=1781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 252.461392ms ago: executing program 1 (id=1782): capset(&(0x7f00000006c0)={0x20080522}, &(0x7f0000000780)={0x0, 0x9, 0x5, 0x0, 0xeffffbfc, 0xb}) r0 = socket(0x1, 0x3, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) 223.148058ms ago: executing program 3 (id=1783): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 117.407853ms ago: executing program 0 (id=1784): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000a00)={0xf, {"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", 0x1000}}, 0x1006) 95.850158ms ago: executing program 1 (id=1785): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ff}]}, 0x38}}, 0x0) 0s ago: executing program 3 (id=1786): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 0x1001 length: 249 > 9 [ 94.942045][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.957029][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.959963][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.008772][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.023611][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.038244][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.085171][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.085924][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.104685][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.111967][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.118552][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.132613][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.135190][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.331761][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 96.385103][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 96.452453][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 96.546206][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 96.571820][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 96.822272][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.823160][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.823554][ T5799] bridge_slave_0: entered allmulticast mode [ 96.825491][ T5799] bridge_slave_0: entered promiscuous mode [ 96.904194][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.904315][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.904507][ T5799] bridge_slave_1: entered allmulticast mode [ 96.906588][ T5799] bridge_slave_1: entered promiscuous mode [ 96.915476][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.915785][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.916259][ T5802] bridge_slave_0: entered allmulticast mode [ 96.923374][ T5802] bridge_slave_0: entered promiscuous mode [ 97.010322][ T5812] Bluetooth: hci3: command tx timeout [ 97.014694][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.014819][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.014954][ T5802] bridge_slave_1: entered allmulticast mode [ 97.016863][ T5802] bridge_slave_1: entered promiscuous mode [ 97.063392][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.063504][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.063633][ T5798] bridge_slave_0: entered allmulticast mode [ 97.065482][ T5798] bridge_slave_0: entered promiscuous mode [ 97.099663][ T5812] Bluetooth: hci4: command tx timeout [ 97.159229][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.159434][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.160030][ T5798] bridge_slave_1: entered allmulticast mode [ 97.161984][ T5798] bridge_slave_1: entered promiscuous mode [ 97.168174][ T5812] Bluetooth: hci2: command tx timeout [ 97.209143][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.232500][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.232659][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.232838][ T5800] bridge_slave_0: entered allmulticast mode [ 97.234973][ T5800] bridge_slave_0: entered promiscuous mode [ 97.248211][ T5811] Bluetooth: hci0: command tx timeout [ 97.248385][ T5812] Bluetooth: hci1: command tx timeout [ 97.292046][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.292151][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.292282][ T5801] bridge_slave_0: entered allmulticast mode [ 97.294117][ T5801] bridge_slave_0: entered promiscuous mode [ 97.311190][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.338291][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.338553][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.338687][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.338872][ T5800] bridge_slave_1: entered allmulticast mode [ 97.341072][ T5800] bridge_slave_1: entered promiscuous mode [ 97.385014][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.386478][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.386712][ T5801] bridge_slave_1: entered allmulticast mode [ 97.401990][ T5801] bridge_slave_1: entered promiscuous mode [ 97.436512][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.462055][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.533718][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.563806][ T5799] team0: Port device team_slave_0 added [ 97.594028][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.631438][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.633708][ T5799] team0: Port device team_slave_1 added [ 97.635907][ T5802] team0: Port device team_slave_0 added [ 97.651899][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.685844][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.709034][ T5802] team0: Port device team_slave_1 added [ 97.728982][ T5798] team0: Port device team_slave_0 added [ 97.803310][ T5798] team0: Port device team_slave_1 added [ 97.822935][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.822952][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.822980][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.878788][ T5800] team0: Port device team_slave_0 added [ 97.900219][ T5801] team0: Port device team_slave_0 added [ 97.901180][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.901197][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.901226][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.902378][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.902389][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.902408][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.905041][ T5800] team0: Port device team_slave_1 added [ 98.010836][ T5801] team0: Port device team_slave_1 added [ 98.029476][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.029495][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.029558][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.084365][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.084378][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.084399][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.167878][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.167897][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.167926][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.226229][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.226243][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.226264][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.731241][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.731256][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.731276][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.776413][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.776466][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.776543][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.808588][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.808642][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.808719][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.933620][ T5799] hsr_slave_0: entered promiscuous mode [ 98.934836][ T5799] hsr_slave_1: entered promiscuous mode [ 98.988726][ T5802] hsr_slave_0: entered promiscuous mode [ 98.989730][ T5802] hsr_slave_1: entered promiscuous mode [ 98.990580][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 98.990677][ T5802] Cannot create hsr debugfs directory [ 99.037272][ T5798] hsr_slave_0: entered promiscuous mode [ 99.040625][ T5798] hsr_slave_1: entered promiscuous mode [ 99.043277][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 99.043354][ T5798] Cannot create hsr debugfs directory [ 99.088572][ T5812] Bluetooth: hci3: command tx timeout [ 99.168272][ T5812] Bluetooth: hci4: command tx timeout [ 99.170615][ T5800] hsr_slave_0: entered promiscuous mode [ 99.171643][ T5800] hsr_slave_1: entered promiscuous mode [ 99.172301][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 99.172318][ T5800] Cannot create hsr debugfs directory [ 99.191752][ T5801] hsr_slave_0: entered promiscuous mode [ 99.195684][ T5801] hsr_slave_1: entered promiscuous mode [ 99.205263][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 99.205342][ T5801] Cannot create hsr debugfs directory [ 99.248214][ T5812] Bluetooth: hci2: command tx timeout [ 99.328226][ T5812] Bluetooth: hci1: command tx timeout [ 99.328269][ T5812] Bluetooth: hci0: command tx timeout [ 100.210697][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.268085][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.304221][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.362977][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.515434][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.566531][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.613112][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.661403][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.860407][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.897547][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.946934][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.002828][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.158982][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.175421][ T5811] Bluetooth: hci3: command tx timeout [ 101.203339][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.248409][ T5811] Bluetooth: hci4: command tx timeout [ 101.267195][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.328344][ T5811] Bluetooth: hci2: command tx timeout [ 101.333778][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.408570][ T5811] Bluetooth: hci1: command tx timeout [ 101.408605][ T5811] Bluetooth: hci0: command tx timeout [ 101.517881][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.619578][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.671373][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.724986][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.761768][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.835714][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.885284][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.917931][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.920720][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.990655][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.990769][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.071009][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.119879][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.120316][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.173269][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.213740][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.213954][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.335591][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.372184][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.401138][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.401358][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.481055][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.481186][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.571900][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.632852][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.646085][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.646293][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.753989][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.754124][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.885448][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.003833][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.004048][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.102757][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.143017][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.143166][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.248315][ T5812] Bluetooth: hci3: command tx timeout [ 103.330131][ T5812] Bluetooth: hci4: command tx timeout [ 103.409724][ T5812] Bluetooth: hci2: command tx timeout [ 103.455688][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.488486][ T5811] Bluetooth: hci1: command tx timeout [ 103.488538][ T5812] Bluetooth: hci0: command tx timeout [ 103.686334][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.805199][ T5798] veth0_vlan: entered promiscuous mode [ 103.935293][ T5798] veth1_vlan: entered promiscuous mode [ 104.031465][ T5799] veth0_vlan: entered promiscuous mode [ 104.074833][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.123297][ T5800] veth0_vlan: entered promiscuous mode [ 104.142231][ T5799] veth1_vlan: entered promiscuous mode [ 104.181110][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.187756][ T5800] veth1_vlan: entered promiscuous mode [ 104.243814][ T5798] veth0_macvtap: entered promiscuous mode [ 104.284916][ T5798] veth1_macvtap: entered promiscuous mode [ 104.366989][ T5799] veth0_macvtap: entered promiscuous mode [ 104.402634][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.419982][ T5799] veth1_macvtap: entered promiscuous mode [ 104.443048][ T5802] veth0_vlan: entered promiscuous mode [ 104.457242][ T5800] veth0_macvtap: entered promiscuous mode [ 104.466934][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.501427][ T5800] veth1_macvtap: entered promiscuous mode [ 104.523714][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.541084][ T5801] veth0_vlan: entered promiscuous mode [ 104.544912][ T5802] veth1_vlan: entered promiscuous mode [ 104.565446][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.591952][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.607840][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.615875][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.711242][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.716586][ T5801] veth1_vlan: entered promiscuous mode [ 104.750659][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.807658][ T3505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.826044][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.826941][ T3505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.895989][ T3505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.952780][ T3505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.017585][ T3505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.085182][ T3505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.137147][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.152998][ T66] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.193849][ T5802] veth0_macvtap: entered promiscuous mode [ 105.230190][ T1561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.230213][ T1561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.430819][ T5802] veth1_macvtap: entered promiscuous mode [ 105.681877][ T5801] veth0_macvtap: entered promiscuous mode [ 105.831481][ T5801] veth1_macvtap: entered promiscuous mode [ 105.846279][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.846299][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.952476][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.984592][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.984615][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.023573][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.105062][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.155098][ T1561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.170423][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.170444][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.212938][ T1561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.245643][ T1561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.279688][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.342648][ T1561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.371946][ T1561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.371966][ T1561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.444787][ T66] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.493121][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.539319][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.561407][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.647373][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.647392][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.877596][ T5913] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 107.013196][ T5913] gretap1: entered allmulticast mode [ 108.105122][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.105146][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.364566][ T37] audit: type=1326 audit(1776222982.522:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5917 comm="syz.0.1" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed27fbc819 code=0x0 [ 108.367501][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.367521][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.553433][ T5924] ======================================================= [ 108.553433][ T5924] WARNING: The mand mount option has been deprecated and [ 108.553433][ T5924] and is ignored by this kernel. Remove the mand [ 108.553433][ T5924] option from the mount to silence this warning. [ 108.553433][ T5924] ======================================================= [ 109.084987][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.085010][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.174151][ T1561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.174173][ T1561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.514663][ T809] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 109.766897][ T809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.767090][ T809] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 109.767112][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 109.767131][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 109.767148][ T809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 109.836220][ T809] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 109.836244][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 109.836259][ T809] usb 2-1: Product: syz [ 109.836270][ T809] usb 2-1: Manufacturer: syz [ 109.836280][ T809] usb 2-1: SerialNumber: syz [ 109.881978][ T809] usb 2-1: config 0 descriptor?? [ 110.314669][ T809] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 110.314694][ T809] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 110.490945][ T809] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 110.490971][ T809] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 110.491001][ T809] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 110.699377][ T809] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 111.493487][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.837149][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.867450][ T809] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 111.867819][ T809] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 111.912364][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.922463][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.960422][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.962359][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.230161][ T809] usb 2-1: USB disconnect, device number 2 [ 112.310924][ T1015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.071242][ T1015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.756621][ T1015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.128327][ T5811] Bluetooth: hci3: command tx timeout [ 114.456162][ T1015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.210626][ T5811] Bluetooth: hci3: command tx timeout [ 116.668353][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.765039][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.045260][ T6007] process 'syz.3.30' launched './file1' with NULL argv: empty string added [ 118.289700][ T5811] Bluetooth: hci3: command tx timeout [ 118.328836][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.360276][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.137048][ T6051] netlink: 48 bytes leftover after parsing attributes in process `syz.2.47'. [ 120.195968][ T6052] netlink: 48 bytes leftover after parsing attributes in process `syz.2.47'. [ 120.368208][ T5811] Bluetooth: hci3: command tx timeout [ 120.857547][ T152] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.980456][ T152] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.155739][ T6059] netlink: 'syz.3.49': attribute type 1 has an invalid length. [ 121.283885][ T152] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.284367][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 121.409660][ T152] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.450194][ T6065] veth1_to_batadv: entered promiscuous mode [ 121.450227][ T6065] veth1_to_batadv: entered allmulticast mode [ 122.017642][ T6074] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.801043][ T1015] bridge_slave_1: left allmulticast mode [ 122.862289][ T1015] bridge_slave_1: left promiscuous mode [ 122.920058][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.055922][ T1015] bridge_slave_0: left allmulticast mode [ 123.055955][ T1015] bridge_slave_0: left promiscuous mode [ 123.057164][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.432115][ T37] audit: type=1326 audit(1776222999.632:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 125.432518][ T37] audit: type=1326 audit(1776222999.632:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 125.432858][ T37] audit: type=1326 audit(1776222999.632:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 125.433492][ T37] audit: type=1326 audit(1776222999.632:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 125.465903][ T37] audit: type=1326 audit(1776222999.662:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 125.472791][ T37] audit: type=1326 audit(1776222999.672:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 125.695181][ T1015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.840861][ T1015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.893705][ T1015] bond0 (unregistering): Released all slaves [ 126.130125][ T808] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.205962][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.206056][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.206238][ T5936] bridge_slave_0: entered allmulticast mode [ 126.239079][ T5936] bridge_slave_0: entered promiscuous mode [ 126.313261][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.313348][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.313535][ T5936] bridge_slave_1: entered allmulticast mode [ 126.318383][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 126.357587][ T808] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 126.357611][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.357626][ T808] usb 1-1: Product: syz [ 126.357656][ T808] usb 1-1: Manufacturer: syz [ 126.357672][ T808] usb 1-1: SerialNumber: syz [ 126.432534][ T5936] bridge_slave_1: entered promiscuous mode [ 126.726017][ T808] usb 1-1: config 0 descriptor?? [ 126.744775][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.776017][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.946671][ T6132] random: crng reseeded on system resumption [ 127.026064][ T808] as10x_usb: device has been detected [ 127.049431][ T808] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 127.796673][ T808] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 128.402938][ T808] as10x_usb: error during firmware upload part1 [ 128.403705][ T808] Registered device Sky IT Digital Key (green led) [ 128.500054][ T808] usb 1-1: USB disconnect, device number 2 [ 128.741735][ T5127] kernel write not supported for file bpf-map (pid: 5127 comm: kworker/1:3) [ 128.798343][ T808] Unregistered device Sky IT Digital Key (green led) [ 128.806511][ T808] as10x_usb: device has been disconnected [ 129.573153][ T5936] team0: Port device team_slave_0 added [ 129.634203][ T5936] team0: Port device team_slave_1 added [ 130.174198][ T6189] Zero length message leads to an empty skb [ 130.921838][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.921857][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.948090][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.047078][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.047099][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.047131][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.406657][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'. [ 132.657197][ T6216] macvlan2: entered promiscuous mode [ 132.657233][ T6216] macvlan2: entered allmulticast mode [ 133.111701][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.111769][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.223250][ T5936] hsr_slave_0: entered promiscuous mode [ 133.229867][ T5936] hsr_slave_1: entered promiscuous mode [ 133.246172][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 133.246201][ T5936] Cannot create hsr debugfs directory [ 133.761604][ T36] IPVS: starting estimator thread 0... [ 133.774977][ T1015] hsr_slave_0: left promiscuous mode [ 133.804482][ T1015] hsr_slave_1: left promiscuous mode [ 133.805859][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.805938][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.868494][ T6234] IPVS: using max 7 ests per chain, 16800 per kthread [ 133.875212][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.875241][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.181098][ T6242] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 134.262892][ T1015] veth1_macvtap: left promiscuous mode [ 134.263827][ T1015] veth0_macvtap: left promiscuous mode [ 134.264039][ T1015] veth1_vlan: left promiscuous mode [ 134.264257][ T1015] veth0_vlan: left promiscuous mode [ 134.298100][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 134.471727][ T9] usb 3-1: New USB device found, idVendor=17cc, idProduct=1915, bcdDevice= 0.40 [ 134.471761][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.471784][ T9] usb 3-1: Product: syz [ 134.471800][ T9] usb 3-1: Manufacturer: syz [ 134.471816][ T9] usb 3-1: SerialNumber: syz [ 134.489173][ T36] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.725937][ T36] usb 2-1: config 0 has no interfaces? [ 134.725993][ T36] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 134.726021][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.890279][ T36] usb 2-1: config 0 descriptor?? [ 135.058382][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 135.492621][ T10] usb 2-1: USB disconnect, device number 3 [ 135.771157][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 135.840753][ T9] usb 3-1: selecting invalid altsetting 1 [ 135.840796][ T9] snd-usb-caiaq 3-1:1.0: can't set alt interface. [ 135.840811][ T9] usb 3-1: unable to init card! (ret=-5) [ 135.844288][ T9] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 135.887198][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.107'. [ 135.909991][ T9] usb 3-1: selecting invalid altsetting 1 [ 135.910016][ T9] snd-usb-caiaq 3-1:1.1: can't set alt interface. [ 135.910031][ T9] usb 3-1: unable to init card! (ret=-5) [ 135.910518][ T9] snd-usb-caiaq 3-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 135.961727][ T9] usb 3-1: selecting invalid altsetting 1 [ 135.961754][ T9] snd-usb-caiaq 3-1:1.2: can't set alt interface. [ 135.961770][ T9] usb 3-1: unable to init card! (ret=-5) [ 135.962241][ T9] snd-usb-caiaq 3-1:1.2: probe with driver snd-usb-caiaq failed with error -5 [ 136.002983][ T9] usb 3-1: USB disconnect, device number 2 [ 136.085397][ T6169] udevd[6169]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.998184][ T10] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 137.180442][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.180471][ T10] usb 3-1: config 0 has no interface number 0 [ 137.180519][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 137.180548][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 137.180594][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.180620][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.336542][ T10] usb 3-1: config 0 descriptor?? [ 137.337840][ T6265] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.454203][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 137.647543][ T10] usb 3-1: USB disconnect, device number 3 [ 137.648656][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 137.842435][ T6284] 9p: Bad value for 'wfdno' [ 138.201339][ T1015] team0 (unregistering): Port device team_slave_1 removed [ 138.220219][ T5885] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.315539][ T1015] team0 (unregistering): Port device team_slave_0 removed [ 138.455011][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.455037][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.455067][ T5885] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 138.455084][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.523874][ T5885] usb 1-1: config 0 descriptor?? [ 139.261428][ T5885] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 139.261475][ T5885] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 139.261504][ T5885] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 139.261532][ T5885] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 139.261560][ T5885] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 139.261588][ T5885] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 139.261616][ T5885] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 139.464878][ T5885] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 139.561557][ T5885] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 140.602810][ T5885] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 140.849453][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'. [ 140.849493][ T6319] netlink: 'syz.0.129': attribute type 7 has an invalid length. [ 140.849509][ T6319] netlink: 'syz.0.129': attribute type 8 has an invalid length. [ 140.849522][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 140.916504][ T5885] usb 1-1: USB disconnect, device number 3 [ 141.202545][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.131'. [ 141.212430][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.131'. [ 141.592232][ T5127] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.738122][ T5127] usb 3-1: Using ep0 maxpacket: 16 [ 141.742449][ T5127] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.742507][ T5127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.742538][ T5127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 141.742561][ T5127] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 141.742586][ T5127] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.743811][ T5127] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 141.743841][ T5127] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 141.743863][ T5127] usb 3-1: Manufacturer: syz [ 141.839069][ T5127] usb 3-1: config 0 descriptor?? [ 141.880770][ T6341] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.299038][ T5127] rc_core: IR keymap rc-hauppauge not found [ 142.299060][ T5127] Registered IR keymap rc-empty [ 142.299685][ T5127] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 142.318279][ T5127] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 142.356336][ T5127] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 142.374548][ T5127] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 142.422033][ T5127] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 142.452948][ T5127] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 142.486663][ T5127] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 142.495938][ C1] rc rc0: IR event FIFO is full! [ 142.495965][ C1] rc rc0: IR event FIFO is full! [ 142.495981][ C1] rc rc0: IR event FIFO is full! [ 142.495996][ C1] rc rc0: IR event FIFO is full! [ 142.496010][ C1] rc rc0: IR event FIFO is full! [ 142.496023][ C1] rc rc0: IR event FIFO is full! [ 142.496038][ C1] rc rc0: IR event FIFO is full! [ 142.496284][ C1] rc rc0: IR event FIFO is full! [ 142.496300][ C1] rc rc0: IR event FIFO is full! [ 142.496314][ C1] rc rc0: IR event FIFO is full! [ 142.496328][ C1] rc rc0: IR event FIFO is full! [ 142.496342][ C1] rc rc0: IR event FIFO is full! [ 142.496356][ C1] rc rc0: IR event FIFO is full! [ 142.496370][ C1] rc rc0: IR event FIFO is full! [ 142.496385][ C1] rc rc0: IR event FIFO is full! [ 142.496622][ C1] rc rc0: IR event FIFO is full! [ 142.496641][ C1] rc rc0: IR event FIFO is full! [ 142.496655][ C1] rc rc0: IR event FIFO is full! [ 142.496669][ C1] rc rc0: IR event FIFO is full! [ 142.496683][ C1] rc rc0: IR event FIFO is full! [ 142.496914][ C1] rc rc0: IR event FIFO is full! [ 142.496930][ C1] rc rc0: IR event FIFO is full! [ 142.496944][ C1] rc rc0: IR event FIFO is full! [ 142.496972][ C1] rc rc0: IR event FIFO is full! [ 142.496986][ C1] rc rc0: IR event FIFO is full! [ 142.496999][ C1] rc rc0: IR event FIFO is full! [ 142.497013][ C1] rc rc0: IR event FIFO is full! [ 142.497253][ C1] rc rc0: IR event FIFO is full! [ 142.497270][ C1] rc rc0: IR event FIFO is full! [ 142.497284][ C1] rc rc0: IR event FIFO is full! [ 142.497299][ C1] rc rc0: IR event FIFO is full! [ 142.497535][ C1] rc rc0: IR event FIFO is full! [ 142.497550][ C1] rc rc0: IR event FIFO is full! [ 142.497564][ C1] rc rc0: IR event FIFO is full! [ 142.498085][ C1] rc rc0: IR event FIFO is full! [ 142.498294][ C1] rc rc0: IR event FIFO is full! [ 142.498503][ C1] rc rc0: IR event FIFO is full! [ 142.498515][ C1] rc rc0: IR event FIFO is full! [ 142.498729][ C1] rc rc0: IR event FIFO is full! [ 142.498940][ C1] rc rc0: IR event FIFO is full! [ 142.498952][ C1] rc rc0: IR event FIFO is full! [ 142.499155][ C1] rc rc0: IR event FIFO is full! [ 142.499167][ C1] rc rc0: IR event FIFO is full! [ 142.499177][ C1] rc rc0: IR event FIFO is full! [ 142.499188][ C1] rc rc0: IR event FIFO is full! [ 142.499199][ C1] rc rc0: IR event FIFO is full! [ 142.499210][ C1] rc rc0: IR event FIFO is full! [ 142.499222][ C1] rc rc0: IR event FIFO is full! [ 142.499233][ C1] rc rc0: IR event FIFO is full! [ 142.499245][ C1] rc rc0: IR event FIFO is full! [ 142.499256][ C1] rc rc0: IR event FIFO is full! [ 142.499478][ C1] rc rc0: IR event FIFO is full! [ 142.499491][ C1] rc rc0: IR event FIFO is full! [ 142.499503][ C1] rc rc0: IR event FIFO is full! [ 142.499722][ C1] rc rc0: IR event FIFO is full! [ 142.499737][ C1] rc rc0: IR event FIFO is full! [ 142.499747][ C1] rc rc0: IR event FIFO is full! [ 142.499757][ C1] rc rc0: IR event FIFO is full! [ 142.499767][ C1] rc rc0: IR event FIFO is full! [ 142.499778][ C1] rc rc0: IR event FIFO is full! [ 142.499974][ C1] rc rc0: IR event FIFO is full! [ 142.499986][ C1] rc rc0: IR event FIFO is full! [ 142.499996][ C1] rc rc0: IR event FIFO is full! [ 142.500006][ C1] rc rc0: IR event FIFO is full! [ 142.500016][ C1] rc rc0: IR event FIFO is full! [ 142.500027][ C1] rc rc0: IR event FIFO is full! [ 142.500038][ C1] rc rc0: IR event FIFO is full! [ 142.500257][ C1] rc rc0: IR event FIFO is full! [ 142.500269][ C1] rc rc0: IR event FIFO is full! [ 142.500280][ C1] rc rc0: IR event FIFO is full! [ 142.500289][ C1] rc rc0: IR event FIFO is full! [ 142.500299][ C1] rc rc0: IR event FIFO is full! [ 142.500309][ C1] rc rc0: IR event FIFO is full! [ 142.500523][ C1] rc rc0: IR event FIFO is full! [ 142.500535][ C1] rc rc0: IR event FIFO is full! [ 142.500545][ C1] rc rc0: IR event FIFO is full! [ 142.500962][ C1] rc rc0: IR event FIFO is full! [ 142.500975][ C1] rc rc0: IR event FIFO is full! [ 142.501193][ C1] rc rc0: IR event FIFO is full! [ 142.501207][ C1] rc rc0: IR event FIFO is full! [ 142.501219][ C1] rc rc0: IR event FIFO is full! [ 142.501228][ C1] rc rc0: IR event FIFO is full! [ 142.501239][ C1] rc rc0: IR event FIFO is full! [ 142.502074][ C1] rc rc0: IR event FIFO is full! [ 142.502088][ C1] rc rc0: IR event FIFO is full! [ 142.502397][ C1] rc rc0: IR event FIFO is full! [ 142.502410][ C1] rc rc0: IR event FIFO is full! [ 142.502434][ C1] rc rc0: IR event FIFO is full! [ 142.502446][ C1] rc rc0: IR event FIFO is full! [ 142.515201][ T5127] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 142.997905][ T5127] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 143.018270][ T5127] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 143.038166][ T5127] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 143.058166][ T5127] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 143.078218][ T5127] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 143.103701][ T5127] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 143.133431][ T5127] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 143.133462][ T5127] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 143.181162][ T5127] usb 3-1: USB disconnect, device number 4 [ 145.058646][ T36] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.219343][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.219411][ T36] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 145.219439][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.279446][ T36] usb 1-1: config 0 descriptor?? [ 145.307320][ T36] pwc: Askey VC010 type 2 USB webcam detected. [ 145.759705][ T36] pwc: recv_control_msg error -32 req 02 val 2b00 [ 145.786771][ T36] pwc: recv_control_msg error -32 req 02 val 2700 [ 145.795130][ T36] pwc: recv_control_msg error -32 req 02 val 2c00 [ 145.796010][ T36] pwc: recv_control_msg error -32 req 04 val 1000 [ 145.819772][ T36] pwc: recv_control_msg error -32 req 04 val 1300 [ 145.831512][ T36] pwc: recv_control_msg error -32 req 04 val 1400 [ 146.038940][ T36] pwc: recv_control_msg error -71 req 02 val 2100 [ 146.039438][ T36] pwc: recv_control_msg error -71 req 04 val 1500 [ 146.040047][ T36] pwc: recv_control_msg error -71 req 02 val 2500 [ 146.042424][ T36] pwc: recv_control_msg error -71 req 02 val 2400 [ 146.042936][ T36] pwc: recv_control_msg error -71 req 02 val 2600 [ 146.043429][ T36] pwc: recv_control_msg error -71 req 02 val 2900 [ 146.043842][ T36] pwc: recv_control_msg error -71 req 02 val 2800 [ 146.106598][ T36] pwc: recv_control_msg error -71 req 04 val 1100 [ 146.120951][ T36] pwc: recv_control_msg error -71 req 04 val 1200 [ 146.245416][ T36] pwc: Registered as video103. [ 146.272661][ T36] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 146.304603][ T36] usb 1-1: USB disconnect, device number 4 [ 146.409817][ T6394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.149'. [ 146.625216][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 147.947795][ T36] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.118200][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 148.141321][ T36] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.141343][ T36] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.217478][ T36] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.217506][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.217527][ T36] usb 1-1: Product: syz [ 148.217541][ T36] usb 1-1: Manufacturer: syz [ 148.217555][ T36] usb 1-1: SerialNumber: syz [ 148.857118][ T36] usb 1-1: 0:2 : does not exist [ 149.540910][ T36] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 150.339591][ T36] usb 1-1: USB disconnect, device number 5 [ 150.846982][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 151.001282][ T6443] vlan2: entered promiscuous mode [ 151.001307][ T6443] syz_tun: entered promiscuous mode [ 151.037851][ T6169] udevd[6169]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.314254][ T6461] block nbd0: server does not support multiple connections per device. [ 152.451443][ T6461] block nbd0: shutting down sockets [ 153.818907][ T5936] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.309170][ T5936] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.431874][ T5936] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.052313][ T6524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.133956][ T5936] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.157614][ T6524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.277077][ T6524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.328320][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.587855][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.677221][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.677360][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.739878][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.740113][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.908261][ T5787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 158.068208][ T5787] usb 4-1: Using ep0 maxpacket: 32 [ 158.075715][ T5787] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 158.075748][ T5787] usb 4-1: config 0 has no interface number 0 [ 158.075801][ T5787] usb 4-1: config 0 interface 12 has no altsetting 0 [ 158.108489][ T5787] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 158.108525][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.108549][ T5787] usb 4-1: Product: syz [ 158.108566][ T5787] usb 4-1: Manufacturer: syz [ 158.108584][ T5787] usb 4-1: SerialNumber: syz [ 158.187654][ T5787] usb 4-1: config 0 descriptor?? [ 158.296383][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.498197][ T5885] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 158.678172][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 158.681261][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 158.730910][ T5885] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 158.730942][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.730961][ T5885] usb 3-1: Product: syz [ 158.730976][ T5885] usb 3-1: Manufacturer: syz [ 158.730990][ T5885] usb 3-1: SerialNumber: syz [ 158.802720][ T5885] usb 3-1: config 0 descriptor?? [ 158.890995][ T5885] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 158.891034][ T5885] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 159.056299][ T6599] overlayfs: failed to clone upperpath [ 159.513158][ T5885] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 159.806937][ T5936] veth0_vlan: entered promiscuous mode [ 160.161128][ T5936] veth1_vlan: entered promiscuous mode [ 160.282447][ T5787] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 160.282510][ T5787] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 160.282528][ T5787] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 160.282624][ T5787] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 160.361648][ T5787] usb 4-1: USB disconnect, device number 2 [ 160.463069][ T5885] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 160.463116][ T5885] em28xx 3-1:0.0: board has no eeprom [ 160.748244][ T5885] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 160.748295][ T5885] em28xx 3-1:0.0: dvb set to bulk mode. [ 160.751212][ T5865] em28xx 3-1:0.0: Binding DVB extension [ 161.586193][ T5936] veth0_macvtap: entered promiscuous mode [ 161.672095][ T5885] usb 3-1: USB disconnect, device number 5 [ 161.675471][ T5885] em28xx 3-1:0.0: Disconnecting em28xx [ 161.847082][ T5936] veth1_macvtap: entered promiscuous mode [ 162.303058][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.318169][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 162.354791][ T5865] em28xx 3-1:0.0: Registering input extension [ 162.367191][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.389290][ T5885] em28xx 3-1:0.0: Closing input extension [ 162.460788][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.463069][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.486173][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 162.494991][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 162.501582][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 162.501614][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.501636][ T10] usb 4-1: Product: syz [ 162.501652][ T10] usb 4-1: Manufacturer: syz [ 162.501667][ T10] usb 4-1: SerialNumber: syz [ 162.547582][ T10] usb 4-1: config 0 descriptor?? [ 162.556351][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.615645][ T1561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.838519][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 162.838547][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 163.311169][ T10] em28xx 4-1:0.0: chip ID is em2874 [ 164.104426][ T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 164.104450][ T10] em28xx 4-1:0.0: board has no eeprom [ 164.555150][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 164.555173][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 164.556116][ T808] em28xx 4-1:0.0: Binding DVB extension [ 165.040844][ T808] em28xx 4-1:0.0: Registering input extension [ 165.122663][ T10] usb 4-1: USB disconnect, device number 3 [ 165.134402][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 165.448250][ T808] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 165.448270][ T808] Registered IR keymap rc-empty [ 165.486589][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.486612][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.554219][ T5811] Bluetooth: hci2: Malformed LE Event: 0x02 [ 165.746830][ T5885] em28xx 3-1:0.0: Freeing device [ 165.747338][ T808] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 165.839549][ T808] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 166.227981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.298030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.366685][ T3593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.366708][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.616396][ T808] em28xx 4-1:0.0: Input extension successfully initialized [ 166.616472][ T10] em28xx 4-1:0.0: Closing input extension [ 170.240936][ T6692] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 170.436410][ T6697] overlayfs: failed to clone upperpath [ 170.665342][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 170.665384][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 170.742500][ T10] em28xx 4-1:0.0: Freeing device [ 172.829771][ T6716] Illegal XDP return value 4294967294 on prog (id 29) dev syz_tun, expect packet loss! [ 173.888161][ T9] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 174.052858][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.052889][ T9] usb 4-1: config 0 has no interface number 0 [ 174.052934][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 174.052963][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 174.052996][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.053013][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.196766][ T9] usb 4-1: config 0 descriptor?? [ 174.197624][ T6730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 174.462705][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 174.494146][ T9] usb 4-1: USB disconnect, device number 4 [ 174.612468][ T6730] iowarrior_open - error, can't find device for minor 0 [ 175.260646][ T37] audit: type=1326 audit(1776223049.462:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6752 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0acdc819 code=0x7ffc0000 [ 175.261742][ T37] audit: type=1326 audit(1776223049.462:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6752 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fbe0acdc819 code=0x7ffc0000 [ 175.262256][ T37] audit: type=1326 audit(1776223049.462:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6752 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0acdc819 code=0x7ffc0000 [ 175.262307][ T37] audit: type=1326 audit(1776223049.462:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6752 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0acdc819 code=0x7ffc0000 [ 175.262913][ T37] audit: type=1326 audit(1776223049.462:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6752 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0acdc819 code=0x7ffc0000 [ 175.267461][ T37] audit: type=1326 audit(1776223049.462:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6752 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0acdc819 code=0x7ffc0000 [ 175.267796][ T37] audit: type=1326 audit(1776223049.462:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6752 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0acdc819 code=0x7ffc0000 [ 175.324010][ T37] audit: type=1326 audit(1776223049.462:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6752 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0acdc819 code=0x7ffc0000 [ 175.324161][ T37] audit: type=1326 audit(1776223049.522:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6752 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbe0acdc819 code=0x7ffc0000 [ 175.324221][ T37] audit: type=1326 audit(1776223049.522:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6752 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0acdc819 code=0x7ffc0000 [ 180.146160][ T6802] capability: warning: `syz.1.268' uses deprecated v2 capabilities in a way that may be insecure [ 180.576178][ T6808] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 181.069223][ T6822] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 183.808758][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 183.958085][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 183.960396][ T31] usb 1-1: config 9 has an invalid interface number: 133 but max is 0 [ 183.960426][ T31] usb 1-1: config 9 has no interface number 0 [ 183.960459][ T31] usb 1-1: config 9 interface 133 has no altsetting 0 [ 183.964858][ T31] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice= 1.6d [ 183.964891][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.964913][ T31] usb 1-1: Product: syz [ 183.964928][ T31] usb 1-1: Manufacturer: syz [ 183.964944][ T31] usb 1-1: SerialNumber: syz [ 186.262962][ T6867] kvm: pic: level sensitive irq not supported [ 186.263205][ T6867] kvm: pic: level sensitive irq not supported [ 186.265435][ T6867] kvm: pic: level sensitive irq not supported [ 186.381576][ T31] usb 1-1: USB disconnect, device number 6 [ 187.468091][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 188.952368][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 189.419353][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 189.419390][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 189.453648][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 189.453682][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.453703][ T31] usb 4-1: Product: syz [ 189.453743][ T31] usb 4-1: Manufacturer: syz [ 189.453758][ T31] usb 4-1: SerialNumber: syz [ 189.500343][ T31] usb 4-1: config 0 descriptor?? [ 189.539880][ T31] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 189.539918][ T31] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 189.603231][ T37] kauditd_printk_skb: 82 callbacks suppressed [ 189.603251][ T37] audit: type=1326 audit(1776223063.802:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6897 comm="syz.2.299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe0acdc819 code=0x0 [ 190.125372][ T31] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 190.182115][ T31] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 190.212194][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.303'. [ 190.728157][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 190.812028][ T31] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 190.837702][ T31] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 190.958009][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 191.013181][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 191.013215][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 191.016462][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 191.016492][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.016511][ T9] usb 5-1: Product: syz [ 191.016526][ T9] usb 5-1: Manufacturer: syz [ 191.016539][ T9] usb 5-1: SerialNumber: syz [ 191.090316][ T31] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 191.090342][ T31] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 191.184807][ T6928] netlink: 'syz.2.308': attribute type 4 has an invalid length. [ 191.200497][ T9] usb 5-1: config 0 descriptor?? [ 191.281713][ T31] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 191.282154][ T31] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 191.282592][ T31] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 191.343022][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 191.343050][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 191.368801][ T6929] netlink: 'syz.2.308': attribute type 4 has an invalid length. [ 191.527698][ T31] usb 4-1: USB disconnect, device number 5 [ 191.909019][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 191.909865][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 192.932762][ T9] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 192.932787][ T9] em28xx 5-1:0.0: No AC97 audio processor [ 193.826330][ T6942] netlink: 'syz.2.312': attribute type 4 has an invalid length. [ 194.067993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 194.088002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 194.154835][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 194.346363][ T6959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.481490][ T9] usb 5-1: USB disconnect, device number 2 [ 194.498675][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 194.549097][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.549199][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.651462][ T9] em28xx 5-1:0.0: Freeing device [ 194.715971][ T6954] veth3: entered allmulticast mode [ 194.785336][ T6954] bond1: (slave veth3): Enslaving as an active interface with an up link [ 194.850474][ T6966] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 194.874811][ T6965] evm: overlay not supported [ 194.952083][ T6956] bond1 (unregistering): (slave veth3): Releasing backup interface [ 195.078454][ T6956] bond1 (unregistering): Released all slaves [ 195.265180][ T6961] team0: entered promiscuous mode [ 195.265206][ T6961] team_slave_0: entered promiscuous mode [ 195.265442][ T6961] team_slave_1: entered promiscuous mode [ 195.266710][ T6961] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.297736][ T6961] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 196.347673][ T6999] netlink: 'syz.0.333': attribute type 4 has an invalid length. [ 196.378189][ T6999] netlink: 'syz.0.333': attribute type 4 has an invalid length. [ 197.105581][ T7021] tmpfs: Unknown parameter 'fscontext' [ 198.951857][ T7015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.340'. [ 199.654497][ T7015] overlayfs: missing 'lowerdir' [ 201.508655][ T5127] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 201.678661][ T5127] usb 1-1: Using ep0 maxpacket: 16 [ 201.731664][ T5127] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 201.731699][ T5127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.731720][ T5127] usb 1-1: Product: syz [ 201.731737][ T5127] usb 1-1: Manufacturer: syz [ 201.731753][ T5127] usb 1-1: SerialNumber: syz [ 201.986572][ T5127] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 202.257179][ T5127] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 202.257457][ T5127] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 202.257493][ T5127] usb 1-1: media controller created [ 202.561216][ T5127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.838309][ T5127] zl10353_read_register: readreg error (reg=127, ret==-71) [ 203.712669][ T5127] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 203.751776][ T5127] usb 1-1: USB disconnect, device number 7 [ 207.458016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 207.478005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 207.488007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 207.498009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 207.508014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 207.518007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.393252][ T7128] delete_channel: no stack [ 210.332326][ T7152] syz_tun: entered allmulticast mode [ 210.877299][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.389'. [ 211.832834][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 211.832864][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 215.776528][ T7174] syz.4.391 (7174): drop_caches: 2 [ 216.314670][ T7186] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 222.240820][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 222.240862][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 222.240889][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 222.288084][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 224.323858][ T37] audit: type=1326 audit(1776223098.362:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d06efc819 code=0x7ffc0000 [ 224.324193][ T37] audit: type=1326 audit(1776223098.362:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d06efc819 code=0x7ffc0000 [ 224.324482][ T37] audit: type=1326 audit(1776223098.462:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f3d06efc819 code=0x7ffc0000 [ 224.324747][ T37] audit: type=1326 audit(1776223098.462:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d06efc819 code=0x7ffc0000 [ 224.502882][ T37] audit: type=1326 audit(1776223098.462:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d06efc819 code=0x7ffc0000 [ 226.572154][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 226.748122][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 226.834319][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.834355][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.834399][ T31] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 226.834425][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.930656][ T31] usb 5-1: config 0 descriptor?? [ 228.602086][ T7303] syz_tun: refused to change device tx_queue_len [ 228.602327][ T7303] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 228.901060][ T31] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 228.901100][ T31] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 228.901126][ T31] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 228.901149][ T31] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 228.901171][ T31] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 228.980219][ T31] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 229.102628][ T31] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -71). [ 229.157621][ T31] usb 5-1: USB disconnect, device number 3 [ 229.298315][ T7308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.424'. [ 229.298338][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.424'. [ 229.298357][ T7308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.424'. [ 229.399702][ T7311] fido_id[7311]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 231.246467][ T5127] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 231.428951][ T5127] usb 1-1: Using ep0 maxpacket: 32 [ 231.431575][ T5127] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 231.431610][ T5127] usb 1-1: config 0 has no interface number 0 [ 231.431663][ T5127] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 231.812209][ T5127] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 231.812246][ T5127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.812269][ T5127] usb 1-1: Product: syz [ 231.812284][ T5127] usb 1-1: Manufacturer: syz [ 231.812300][ T5127] usb 1-1: SerialNumber: syz [ 232.434098][ T5127] usb 1-1: config 0 descriptor?? [ 232.824216][ T5127] usb 1-1: can't set config #0, error -71 [ 232.841513][ T5127] usb 1-1: USB disconnect, device number 8 [ 234.798135][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 234.826937][ T59] Bluetooth: hci4: unexpected event for opcode 0x080b [ 234.948052][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 234.967708][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.967746][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.967771][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.967816][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.967841][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.032095][ T31] usb 1-1: config 0 descriptor?? [ 236.560463][ T31] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 236.560506][ T31] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 236.593888][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input10 [ 236.626449][ T31] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 240.177010][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 241.256347][ T7399] tipc: Enabling of bearer rejected, failed to enable media [ 241.375284][ T7395] syz.4.456 (7395) used greatest stack depth: 18432 bytes left [ 241.746618][ T7410] ubi16: attaching mtd0 [ 242.524683][ T7410] ubi16: scanning is finished [ 242.524721][ T7410] ubi16: empty MTD device detected [ 243.705129][ T808] usb 1-1: USB disconnect, device number 9 [ 246.447671][ T7443] __vm_enough_memory: pid: 7443, comm: syz.1.473, bytes: 11727183142912 not enough memory for the allocation [ 246.558345][ T7410] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 246.558366][ T7410] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 246.558379][ T7410] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 246.558401][ T7410] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 246.558414][ T7410] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 246.558426][ T7410] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 246.558439][ T7410] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1531673095 [ 246.558457][ T7410] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 246.561895][ T7444] ubi16: background thread "ubi_bgt16d" started, PID 7444 [ 247.562409][ T7456] mmap: syz.0.477 (7456) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 252.928745][ T7497] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 7497 comm: syz.1.491) [ 252.931865][ T37] audit: type=1800 audit(1776223127.132:107): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.491" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=16474 res=0 errno=0 [ 252.985613][ T7501] syz.2.494 uses obsolete (PF_INET,SOCK_PACKET) [ 253.358533][ T7506] tipc: Enabling of bearer rejected, failed to enable media [ 253.617563][ T7511] kvm: kvm [7508]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80000000 [ 253.622627][ T7511] kvm: kvm [7508]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 253.683939][ T7511] kvm: kvm [7508]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 253.684031][ T7511] kvm: kvm [7508]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 256.053191][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.053274][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.381365][ T7552] syzkaller0: entered promiscuous mode [ 256.381393][ T7552] syzkaller0: entered allmulticast mode [ 264.802808][ T7613] Bluetooth: MGMT ver 1.23 [ 264.831864][ T7614] netlink: 'syz.2.533': attribute type 5 has an invalid length. [ 264.900900][ T7613] capability: warning: `syz.4.535' uses 32-bit capabilities (legacy support in use) [ 264.924738][ T7613] program syz.4.535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.630989][ T809] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 267.531708][ T809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.531780][ T809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.531833][ T809] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 267.531858][ T809] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 267.531884][ T809] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.546753][ T809] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.546788][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.546819][ T809] usb 5-1: Product: syz [ 267.546836][ T809] usb 5-1: Manufacturer: syz [ 267.546852][ T809] usb 5-1: SerialNumber: syz [ 267.723359][ T809] cdc_ncm 5-1:1.0: skipping garbage [ 267.723393][ T809] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 267.723438][ T809] cdc_ncm 5-1:1.0: bind() failure [ 267.766743][ T809] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 267.766800][ T809] cdc_ncm 5-1:1.1: bind() failure [ 268.058065][ T5865] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 268.239211][ T809] usb 5-1: USB disconnect, device number 4 [ 268.277175][ T5865] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 268.277207][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.277228][ T5865] usb 1-1: Product: syz [ 268.277244][ T5865] usb 1-1: Manufacturer: syz [ 268.277259][ T5865] usb 1-1: SerialNumber: syz [ 268.382262][ T5865] usb 1-1: config 0 descriptor?? [ 268.599866][ T5865] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 271.840988][ T5865] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 273.445228][ T5885] usb 1-1: USB disconnect, device number 10 [ 273.905877][ T7709] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 273.905906][ T7709] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 274.947269][ T7720] vhci_hcd: connection closed [ 275.028315][ T7709] vhci_hcd vhci_hcd.0: Device attached [ 275.283788][ T1110] vhci_hcd vhci_hcd.0: stop threads [ 275.298473][ T1110] vhci_hcd vhci_hcd.0: release socket [ 275.556940][ T1110] vhci_hcd vhci_hcd.0: disconnect device [ 277.380769][ T31] usb usb34-port1: attempt power cycle [ 280.206639][ T31] usb usb34-port1: unable to enumerate USB device [ 287.203270][ T7810] team0: left promiscuous mode [ 287.203297][ T7810] team_slave_0: left promiscuous mode [ 287.203645][ T7810] team_slave_1: left promiscuous mode [ 290.737499][ T7865] bridge0: entered promiscuous mode [ 290.808129][ T7865] macsec1: entered promiscuous mode [ 291.265195][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 294.295883][ T7898] program syz.4.619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.376035][ T7985] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 305.566051][ T7976] syz.1.641 (7976) used greatest stack depth: 17560 bytes left [ 307.264117][ T8007] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 307.327840][ T8007] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 307.406737][ T8007] vhci_hcd vhci_hcd.0: Device attached [ 307.479475][ T8009] vhci_hcd: connection closed [ 307.505921][ T43] vhci_hcd vhci_hcd.0: stop threads [ 307.505952][ T43] vhci_hcd vhci_hcd.0: release socket [ 307.505994][ T43] vhci_hcd vhci_hcd.0: disconnect device [ 309.468069][ T5885] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 310.331124][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 310.331156][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 310.331185][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 310.331214][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 310.331243][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.400233][ T5885] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 310.400267][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.400289][ T5885] usb 1-1: Product: syz [ 310.400305][ T5885] usb 1-1: Manufacturer: syz [ 310.400321][ T5885] usb 1-1: SerialNumber: syz [ 310.505284][ T5885] usb 1-1: config 0 descriptor?? [ 310.515638][ T8035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.621310][ T5885] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 310.886518][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 311.315019][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 311.615338][ T10] usb 1-1: USB disconnect, device number 11 [ 311.738219][ T8070] netlink: 'syz.1.667': attribute type 10 has an invalid length. [ 311.738239][ T8070] netlink: 2 bytes leftover after parsing attributes in process `syz.1.667'. [ 311.738285][ T8070] hsr0: entered promiscuous mode [ 311.738593][ T8070] bridge0: port 3(hsr0) entered blocking state [ 311.741570][ T8070] bridge0: port 3(hsr0) entered disabled state [ 311.741830][ T8070] hsr0: entered allmulticast mode [ 311.741849][ T8070] hsr_slave_0: entered allmulticast mode [ 311.741871][ T8070] hsr_slave_1: entered allmulticast mode [ 312.871183][ T8070] bridge0: port 3(hsr0) entered blocking state [ 312.871346][ T8070] bridge0: port 3(hsr0) entered forwarding state [ 316.941521][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.021650][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.034451][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.059636][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.066030][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.261465][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.261530][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.400482][ T8132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.685'. [ 319.248081][ T5803] Bluetooth: hci5: command tx timeout [ 319.349730][ T8124] lo speed is unknown, defaulting to 1000 [ 319.350222][ T8124] lo speed is unknown, defaulting to 1000 [ 319.354520][ T8124] lo speed is unknown, defaulting to 1000 [ 319.365471][ T8124] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 319.382683][ T8124] infiniband sy0: RDMA CMA: cma_listen_on_dev, error -98 [ 319.481618][ T8124] lo speed is unknown, defaulting to 1000 [ 319.498858][ T8124] lo speed is unknown, defaulting to 1000 [ 319.514514][ T8124] lo speed is unknown, defaulting to 1000 [ 319.517300][ T8124] lo speed is unknown, defaulting to 1000 [ 319.524087][ T8124] lo speed is unknown, defaulting to 1000 [ 319.527184][ T8124] lo speed is unknown, defaulting to 1000 [ 321.515588][ T5803] Bluetooth: hci5: command tx timeout [ 323.474649][ T8178] netlink: 'syz.1.699': attribute type 10 has an invalid length. [ 323.747855][ T5803] Bluetooth: hci5: command tx timeout [ 324.116457][ T8178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.241601][ T8178] team0: Port device bond0 added [ 326.613079][ T5803] Bluetooth: hci5: command tx timeout [ 327.962860][ T8116] chnl_net:caif_netlink_parms(): no params data found [ 333.416286][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.726'. [ 333.416315][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.726'. [ 333.416332][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 333.416348][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.726'. [ 333.716604][ T3593] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.088504][ T8317] syz.0.734 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 336.103620][ T8317] ubi: mtd0 is already attached to ubi16 [ 336.738713][ T59] Bluetooth: Frame is too long (len 12, expected len 4) [ 337.066590][ T3593] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.189512][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.189659][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.189935][ T8116] bridge_slave_0: entered allmulticast mode [ 337.342454][ T8116] bridge_slave_0: entered promiscuous mode [ 337.438897][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.439029][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.439293][ T8116] bridge_slave_1: entered allmulticast mode [ 337.503656][ T8116] bridge_slave_1: entered promiscuous mode [ 339.655715][ T3593] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.860846][ T8116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.002979][ T8116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.628013][ T3593] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.027171][ T8116] team0: Port device team_slave_0 added [ 341.049800][ T8116] team0: Port device team_slave_1 added [ 341.247237][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.247251][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.247271][ T8116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.255525][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.255538][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.255560][ T8116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.761725][ T8116] hsr_slave_0: entered promiscuous mode [ 341.981388][ T8116] hsr_slave_1: entered promiscuous mode [ 342.222391][ T8367] warning: `syz.4.753' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 349.322853][ T3593] bridge_slave_1: left allmulticast mode [ 349.322883][ T3593] bridge_slave_1: left promiscuous mode [ 349.323125][ T3593] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.751094][ T3593] bridge_slave_0: left allmulticast mode [ 349.751127][ T3593] bridge_slave_0: left promiscuous mode [ 349.751375][ T3593] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.881242][ T8448] netlink: 'syz.4.779': attribute type 3 has an invalid length. [ 353.881264][ T8448] netlink: 'syz.4.779': attribute type 3 has an invalid length. [ 353.885896][ T8448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.779'. [ 354.159686][ T8455] openvswitch: netlink: Flow key attr not present in new flow. [ 357.322255][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 357.446677][ T3593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.487584][ T3593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.551535][ T3593] bond0 (unregistering): Released all slaves [ 360.365306][ T8508] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 360.365351][ T8508] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 360.365374][ T8508] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 360.644603][ T8518] fuse: Unknown parameter '0x0000000000000004' [ 363.250597][ T8545] IPv6: NLM_F_CREATE should be specified when creating new route [ 366.915623][ T8564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.791010][ T3593] hsr_slave_0: left promiscuous mode [ 369.845294][ T3593] hsr_slave_1: left promiscuous mode [ 369.846435][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.846462][ T3593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.885402][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.885430][ T3593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.950061][ T3593] veth1_macvtap: left promiscuous mode [ 369.950164][ T3593] veth0_macvtap: left promiscuous mode [ 369.950414][ T3593] veth1_vlan: left promiscuous mode [ 369.950588][ T3593] veth0_vlan: left promiscuous mode [ 372.917174][ T3593] team0 (unregistering): Port device team_slave_1 removed [ 372.975895][ T3593] team0 (unregistering): Port device team_slave_0 removed [ 373.361462][ T8591] kthread_run failed with err -4 [ 373.366915][ T8617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.833'. [ 376.756495][ T8116] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 376.909765][ T8116] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 378.887853][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.887940][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.538707][ T8706] netlink: 32 bytes leftover after parsing attributes in process `syz.4.857'. [ 380.679980][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.695581][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.723326][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.760919][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.761725][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.850151][ T3593] IPVS: stop unused estimator thread 0... [ 381.324900][ T8709] lo speed is unknown, defaulting to 1000 [ 382.925542][ T5803] Bluetooth: hci4: command tx timeout [ 385.355959][ T59] Bluetooth: hci4: command tx timeout [ 385.567040][ T8748] nvme_fabrics: missing parameter 'transport=%s' [ 385.567059][ T8748] nvme_fabrics: missing parameter 'nqn=%s' [ 386.172776][ T8771] netlink: 64 bytes leftover after parsing attributes in process `syz.4.874'. [ 387.404691][ T5803] Bluetooth: hci4: command tx timeout [ 389.388808][ T8709] chnl_net:caif_netlink_parms(): no params data found [ 389.485021][ T5803] Bluetooth: hci4: command tx timeout [ 392.878255][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.878392][ T8709] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.878594][ T8709] bridge_slave_0: entered allmulticast mode [ 392.881513][ T8709] bridge_slave_0: entered promiscuous mode [ 392.896826][ T8709] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.897009][ T8709] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.897226][ T8709] bridge_slave_1: entered allmulticast mode [ 392.900222][ T8709] bridge_slave_1: entered promiscuous mode [ 393.820326][ T8709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.892431][ T8709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.382948][ T8709] team0: Port device team_slave_0 added [ 395.917571][ T37] audit: type=1326 audit(2000000076.414:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8871 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 395.917616][ T37] audit: type=1326 audit(2000000076.414:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8871 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 395.917648][ T37] audit: type=1326 audit(2000000076.414:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8871 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 395.917680][ T37] audit: type=1326 audit(2000000076.414:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8871 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 395.917718][ T37] audit: type=1326 audit(2000000076.414:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8871 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 395.917750][ T37] audit: type=1326 audit(2000000076.414:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8871 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 395.917781][ T37] audit: type=1326 audit(2000000076.414:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8871 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 395.917837][ T37] audit: type=1326 audit(2000000076.414:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8871 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 395.917879][ T37] audit: type=1326 audit(2000000076.414:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8871 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 397.402716][ T8709] team0: Port device team_slave_1 added [ 397.564051][ T8709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.564071][ T8709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.564102][ T8709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.622318][ T8709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.622337][ T8709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.622368][ T8709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.043047][ T8709] hsr_slave_0: entered promiscuous mode [ 398.099786][ T8709] hsr_slave_1: entered promiscuous mode [ 398.104974][ T8709] debugfs: 'hsr0' already exists in 'hsr' [ 398.105052][ T8709] Cannot create hsr debugfs directory [ 407.773069][ T66] bridge_slave_1: left allmulticast mode [ 407.773099][ T66] bridge_slave_1: left promiscuous mode [ 407.773345][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.934253][ T66] bridge_slave_0: left allmulticast mode [ 407.934277][ T66] bridge_slave_0: left promiscuous mode [ 407.949708][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 407.949743][ T8970] openvswitch: netlink: Flow key attr not present in new flow. [ 408.187575][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.838676][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.056501][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.184440][ T66] bond0 (unregistering): Released all slaves [ 415.636207][ T66] hsr_slave_0: left promiscuous mode [ 415.684660][ T66] hsr_slave_1: left promiscuous mode [ 415.685495][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.730271][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.003479][ T37] audit: type=1326 audit(2000000096.495:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9048 comm="syz.0.962" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed27fbc819 code=0x0 [ 419.165933][ T66] team0 (unregistering): Port device team_slave_1 removed [ 420.164458][ T66] team0 (unregistering): Port device team_slave_0 removed [ 420.261922][ T9084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.971'. [ 421.099324][ T9095] netlink: 'syz.0.975': attribute type 3 has an invalid length. [ 421.099839][ T9095] netlink: 'syz.0.975': attribute type 3 has an invalid length. [ 421.489129][ T9095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.975'. [ 422.145877][ T9102] netlink: 132 bytes leftover after parsing attributes in process `syz.4.979'. [ 422.215903][ T9102] fuse: Bad value for 'user_id' [ 422.215926][ T9102] fuse: Bad value for 'user_id' [ 422.275750][ T9103] sctp: [Deprecated]: syz.4.979 (pid 9103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.275750][ T9103] Use struct sctp_sack_info instead [ 428.278666][ T9159] netlink: 'syz.4.997': attribute type 3 has an invalid length. [ 428.278687][ T9159] netlink: 'syz.4.997': attribute type 3 has an invalid length. [ 428.279276][ T9159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.997'. [ 434.846780][ T9197] netlink: 'syz.0.1009': attribute type 3 has an invalid length. [ 434.846806][ T9197] netlink: 'syz.0.1009': attribute type 3 has an invalid length. [ 435.241015][ T9197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1009'. [ 435.862388][ T8709] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 435.908369][ T8709] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 437.128539][ T9218] batman_adv: batadv0: Adding interface: dummy0 [ 437.128558][ T9218] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.128591][ T9218] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 438.649537][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 438.649602][ T9240] openvswitch: netlink: Key type 153 is out of range max 32 [ 440.305550][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.305631][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.352984][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 440.358761][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 440.363088][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 440.389758][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 440.392742][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 440.764752][ T9257] netlink: 'syz.4.1011': attribute type 1 has an invalid length. [ 440.768968][ T8709] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 442.601136][ T5803] Bluetooth: hci5: command tx timeout [ 444.125370][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 444.278319][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 444.278376][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.278420][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 444.278444][ T31] usb 1-1: config 1 has no interface number 0 [ 444.278500][ T31] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 444.278542][ T31] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 444.347859][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.347896][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.347912][ T31] usb 1-1: Product: syz [ 444.347922][ T31] usb 1-1: Manufacturer: syz [ 444.347933][ T31] usb 1-1: SerialNumber: syz [ 444.681193][ T5803] Bluetooth: hci5: command tx timeout [ 444.767502][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 444.876307][ T31] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -32 [ 444.968263][ T31] usb 1-1: USB disconnect, device number 12 [ 446.760828][ T5803] Bluetooth: hci5: command tx timeout [ 447.001254][ T5865] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 447.237105][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 447.237170][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.237208][ T5865] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 447.237231][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.348178][ T5865] usb 1-1: config 0 descriptor?? [ 447.970091][ T5865] aquacomputer_d5next 0003:0C70:F0B6.0004: unknown main item tag 0x0 [ 447.970131][ T5865] aquacomputer_d5next 0003:0C70:F0B6.0004: item fetching failed at offset 6/7 [ 447.988124][ T5865] aquacomputer_d5next 0003:0C70:F0B6.0004: probe with driver aquacomputer_d5next failed with error -22 [ 448.034498][ T9246] chnl_net:caif_netlink_parms(): no params data found [ 448.110066][ T5865] usb 1-1: USB disconnect, device number 13 [ 449.260855][ T5803] Bluetooth: hci5: command tx timeout [ 450.330732][ T808] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 450.490673][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 450.496037][ T808] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 450.496075][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 450.496104][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 450.496129][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 450.501625][ T808] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 450.501654][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.501674][ T808] usb 1-1: Product: syz [ 450.501687][ T808] usb 1-1: Manufacturer: syz [ 450.501701][ T808] usb 1-1: SerialNumber: syz [ 450.509895][ T808] usb 1-1: config 0 descriptor?? [ 450.729347][ T37] audit: type=1800 audit(2000000131.217:118): pid=9400 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1078" name="nullb0" dev="tmpfs" ino=672 res=0 errno=0 [ 451.548009][ T808] usb 1-1: USB disconnect, device number 14 [ 453.324253][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.383798][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.405865][ T9246] bridge_slave_0: entered allmulticast mode [ 453.460892][ T9246] bridge_slave_0: entered promiscuous mode [ 455.413924][ T9246] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.414218][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.414465][ T9246] bridge_slave_1: entered allmulticast mode [ 455.419881][ T9246] bridge_slave_1: entered promiscuous mode [ 455.773485][ T9246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.792496][ T9246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.011254][ T9246] team0: Port device team_slave_0 added [ 456.031313][ T9246] team0: Port device team_slave_1 added [ 456.234669][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.234689][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.234726][ T9246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.258919][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.258974][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.259107][ T9246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.010343][ T5803] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 458.084682][ T9246] hsr_slave_0: entered promiscuous mode [ 458.086415][ T9246] hsr_slave_1: entered promiscuous mode [ 460.744099][ T12] bridge_slave_1: left allmulticast mode [ 460.744123][ T12] bridge_slave_1: left promiscuous mode [ 460.744311][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.843354][ T12] bridge_slave_0: left allmulticast mode [ 460.845500][ T12] bridge_slave_0: left promiscuous mode [ 460.845775][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.133122][ T9568] ceph: No mds server is up or the cluster is laggy [ 463.204515][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.224939][ T5803] Bluetooth: hci0: Unexpected cc 0x0000 with no status [ 463.323471][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.403897][ T12] bond0 (unregistering): Released all slaves [ 465.021391][ T12] hsr_slave_0: left promiscuous mode [ 465.059853][ T12] hsr_slave_1: left promiscuous mode [ 465.067649][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.109830][ T5787] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 465.118213][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.264916][ T5787] usb 1-1: config 2 has an invalid interface number: 77 but max is 0 [ 465.264947][ T5787] usb 1-1: config 2 has no interface number 0 [ 465.265192][ T5787] usb 1-1: config 2 interface 77 altsetting 4 endpoint 0x5 is Bulk; changing to Interrupt [ 465.265219][ T5787] usb 1-1: config 2 interface 77 has no altsetting 0 [ 465.297451][ T5787] usb 1-1: string descriptor 0 read error: -22 [ 465.297653][ T5787] usb 1-1: New USB device found, idVendor=1608, idProduct=021e, bcdDevice=1e.1f [ 465.297681][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.338990][ T9640] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 465.355155][ T5787] io_ti 1-1:2.77: required endpoints missing [ 465.563807][ T5787] usb 1-1: USB disconnect, device number 15 [ 467.072105][ T12] team0 (unregistering): Port device team_slave_1 removed [ 468.142170][ T12] team0 (unregistering): Port device team_slave_0 removed [ 474.784464][ T9788] netlink: 'syz.1.1227': attribute type 3 has an invalid length. [ 474.784491][ T9788] netlink: 'syz.1.1227': attribute type 3 has an invalid length. [ 474.881906][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1227'. [ 484.506230][ T9246] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 485.516756][ T37] audit: type=1326 audit(2000000166.019:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9994 comm="syz.4.1305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d06efc819 code=0x0 [ 485.544341][ T9246] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 485.655679][ T9246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 485.710194][ T9246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 487.337974][ T9246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.641141][ T9246] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.705338][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.707677][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.030282][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.030507][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.099052][ T37] audit: type=1800 audit(2000000168.569:120): pid=10055 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.0.1326" name="/newroot/208/file0" dev="tmpfs" ino=1112 res=0 errno=0 [ 491.530249][ T9246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.818336][ T808] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 495.009143][ T808] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 495.009178][ T808] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 495.009206][ T808] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 495.009228][ T808] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 495.011419][ T808] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 495.011450][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 495.011470][ T808] usb 1-1: SerialNumber: syz [ 496.068531][ T9246] veth0_vlan: entered promiscuous mode [ 496.099452][ T9246] veth1_vlan: entered promiscuous mode [ 496.256785][ T9246] veth0_macvtap: entered promiscuous mode [ 496.375422][ T9246] veth1_macvtap: entered promiscuous mode [ 496.403680][ T808] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 496.403790][ T808] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 496.549148][ T808] usb 1-1: USB disconnect, device number 16 [ 496.552189][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.691578][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.780051][ T7276] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.780959][ T66] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.781488][ T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.781923][ T66] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.294499][T10201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1380'. [ 497.294542][T10201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1380'. [ 498.560386][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 498.627422][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 498.646938][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 498.660771][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 498.668556][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 500.312685][T10217] chnl_net:caif_netlink_parms(): no params data found [ 501.714914][ T5803] Bluetooth: hci4: command tx timeout [ 501.778369][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.778442][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.732625][ T5803] Bluetooth: hci4: command tx timeout [ 504.806367][ T7276] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.232405][ T5803] Bluetooth: hci4: command tx timeout [ 506.320649][T10217] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.322439][T10217] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.322681][T10217] bridge_slave_0: entered allmulticast mode [ 506.326826][T10217] bridge_slave_0: entered promiscuous mode [ 506.363304][T10217] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.363430][T10217] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.363671][T10217] bridge_slave_1: entered allmulticast mode [ 506.390030][T10217] bridge_slave_1: entered promiscuous mode [ 506.463945][T10217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.478742][T10217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.522663][T10346] netlink: 'syz.4.1440': attribute type 1 has an invalid length. [ 506.539584][T10217] team0: Port device team_slave_0 added [ 506.545273][T10217] team0: Port device team_slave_1 added [ 506.597903][T10217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.597923][T10217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.597953][T10217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.831949][T10217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.831968][T10217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.831999][T10217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.206130][T10356] delete_channel: no stack [ 507.903100][ T7276] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.038497][ T5803] Bluetooth: hci4: command tx timeout [ 509.915146][ T7276] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.271959][ T7276] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.489398][T10217] hsr_slave_0: entered promiscuous mode [ 511.490683][T10217] hsr_slave_1: entered promiscuous mode [ 511.491471][T10217] debugfs: 'hsr0' already exists in 'hsr' [ 511.491489][T10217] Cannot create hsr debugfs directory [ 511.604120][T10423] bond1: (slave veth0_to_batadv): Device is not bonding slave [ 511.604139][T10423] bond1: option active_slave: invalid value (veth0_to_batadv) [ 511.669399][T10423] bond1 (unregistering): Released all slaves [ 512.102925][T10440] bridge1: entered allmulticast mode [ 515.000582][T10479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1501'. [ 515.045324][T10478] netlink: 'syz.0.1500': attribute type 10 has an invalid length. [ 515.045355][T10478] openvswitch: netlink: Flow key attr not present in new flow. [ 515.884494][T10486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.111784][T10500] bond1: Removing last arp target with arp_interval on [ 516.194438][T10500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.363324][ T7276] bridge_slave_1: left allmulticast mode [ 517.363358][ T7276] bridge_slave_1: left promiscuous mode [ 517.363668][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.455884][T10536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.467673][T10539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1531'. [ 517.467705][T10539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1531'. [ 517.677701][ T7276] bridge_slave_0: left allmulticast mode [ 517.677732][ T7276] bridge_slave_0: left promiscuous mode [ 517.678018][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.565843][ T7276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.640527][ T7276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.863376][ T7276] bond0 (unregistering): Released all slaves [ 521.922381][T10582] netlink: 'syz.4.1546': attribute type 1 has an invalid length. [ 525.386585][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1572'. [ 525.540774][ T37] audit: type=1326 audit(2000000206.051:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10654 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed27fbc819 code=0x7ffc0000 [ 525.619678][ T37] audit: type=1326 audit(2000000206.091:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10654 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed27fbc819 code=0x7ffc0000 [ 525.628697][ T37] audit: type=1326 audit(2000000206.131:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10654 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed27fbc819 code=0x7ffc0000 [ 525.628851][ T37] audit: type=1326 audit(2000000206.141:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10654 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fed27fbc819 code=0x7ffc0000 [ 525.629002][ T37] audit: type=1326 audit(2000000206.141:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10654 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed27fbc819 code=0x7ffc0000 [ 525.629126][ T37] audit: type=1326 audit(2000000206.141:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10654 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed27fbc819 code=0x7ffc0000 [ 525.629246][ T37] audit: type=1326 audit(2000000206.141:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10654 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed27fbc819 code=0x7ffc0000 [ 525.629362][ T37] audit: type=1326 audit(2000000206.141:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10654 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fed27fbc819 code=0x7ffc0000 [ 525.643091][ T37] audit: type=1326 audit(2000000206.151:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10654 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fed27fbc819 code=0x7ffc0000 [ 526.078810][T10652] netlink: 'syz.4.1572': attribute type 2 has an invalid length. [ 527.344059][T10668] netlink: 'syz.1.1580': attribute type 10 has an invalid length. [ 527.344083][T10668] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1580'. [ 531.132515][ T7276] hsr_slave_0: left promiscuous mode [ 531.163033][ T7276] hsr_slave_1: left promiscuous mode [ 531.164234][ T7276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.164260][ T7276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.232540][ T7276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.232569][ T7276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.876086][ T7276] veth1_macvtap: left promiscuous mode [ 532.876160][ T7276] veth0_macvtap: left promiscuous mode [ 532.876352][ T7276] veth1_vlan: left promiscuous mode [ 532.876467][ T7276] veth0_vlan: left promiscuous mode [ 536.436705][ T7276] team0 (unregistering): Port device team_slave_1 removed [ 536.556494][ T7276] team0 (unregistering): Port device team_slave_0 removed [ 542.191134][ T37] audit: type=1326 audit(2000000222.702:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10866 comm="syz.0.1659" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed27fbc819 code=0x0 [ 544.416093][T10905] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1672'. [ 544.548709][T10913] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 545.351222][T10217] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 545.540353][T10217] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 545.688088][T10217] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 545.761784][T10217] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 545.815430][ T5885] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 545.988879][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 545.991394][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.991432][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.991474][ T5885] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 545.991500][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.228652][ T5885] usb 1-1: config 0 descriptor?? [ 546.715247][ T5885] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 546.715290][ T5885] savu 0003:1E7D:2D5A.0005: unbalanced delimiter at end of report description [ 546.719218][ T5885] savu 0003:1E7D:2D5A.0005: parse failed [ 546.719301][ T5885] savu 0003:1E7D:2D5A.0005: probe with driver savu failed with error -22 [ 546.846358][ T37] audit: type=1326 audit(2000000227.362:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 546.846551][ T37] audit: type=1326 audit(2000000227.362:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 546.852265][ T37] audit: type=1326 audit(2000000227.362:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 546.852433][ T37] audit: type=1326 audit(2000000227.362:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 546.859475][ T37] audit: type=1326 audit(2000000227.362:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 546.859650][ T37] audit: type=1326 audit(2000000227.362:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 546.900008][ T37] audit: type=1326 audit(2000000227.412:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 546.903609][ T37] audit: type=1326 audit(2000000227.412:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 546.958104][ T37] audit: type=1326 audit(2000000227.432:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.1.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7ff94cabc819 code=0x7ffc0000 [ 547.055289][ T36] usb 1-1: USB disconnect, device number 17 [ 547.238708][T10217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.386527][T10217] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.482570][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.482764][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.522758][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.522894][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.095597][T10217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.030638][T10217] veth0_vlan: entered promiscuous mode [ 552.149434][T10217] veth1_vlan: entered promiscuous mode [ 552.424486][T10217] veth0_macvtap: entered promiscuous mode [ 552.449553][T10217] veth1_macvtap: entered promiscuous mode [ 552.488961][T10217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.530247][T10217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.545365][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.546308][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.547688][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.550963][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.690570][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.690593][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.276458][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.276484][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.329825][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1768'. [ 557.664784][T11189] ================================================================== [ 557.664878][T11189] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 557.665112][T11189] Read of size 1 at addr ffff888040c73068 by task syz.5.677/11189 [ 557.665134][T11189] [ 557.665200][T11189] CPU: 1 UID: 0 PID: 11189 Comm: syz.5.677 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 557.665234][T11189] Tainted: [L]=SOFTLOCKUP [ 557.665243][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 557.665263][T11189] Call Trace: [ 557.665278][T11189] [ 557.665290][T11189] dump_stack_lvl+0xe8/0x150 [ 557.665415][T11189] print_report+0xba/0x230 [ 557.665454][T11189] ? _raw_spin_lock_irqsave+0x40/0x60 [ 557.665514][T11189] kasan_report+0x117/0x150 [ 557.665604][T11189] ? _raw_spin_lock_irqsave+0x40/0x60 [ 557.665644][T11189] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 557.665673][T11189] __kasan_check_byte+0x2a/0x40 [ 557.665706][T11189] lock_acquire+0x84/0x350 [ 557.665761][T11189] ? rcu_is_watching+0x15/0xb0 [ 557.665789][T11189] _raw_spin_lock_irqsave+0x40/0x60 [ 557.665825][T11189] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 557.665853][T11189] rt_mutex_slowunlock+0xbf/0x8b0 [ 557.665886][T11189] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 557.665918][T11189] ? __rcu_read_unlock+0x83/0xe0 [ 557.665953][T11189] ? rt_spin_unlock+0x160/0x200 [ 557.665982][T11189] dma_buf_fd+0x178/0x330 [ 557.666073][T11189] udmabuf_create+0xf26/0xfe0 [ 557.666147][T11189] ? __pfx_udmabuf_create+0x10/0x10 [ 557.666189][T11189] udmabuf_ioctl+0x1f6/0x310 [ 557.666218][T11189] ? __pfx_smack_file_ioctl+0x10/0x10 [ 557.666298][T11189] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 557.666339][T11189] ? bpf_lsm_file_ioctl+0x9/0x20 [ 557.666409][T11189] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 557.666439][T11189] __se_sys_ioctl+0xff/0x170 [ 557.666499][T11189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.666541][T11189] do_syscall_64+0x15f/0xf80 [ 557.666634][T11189] ? trace_irq_disable+0x3b/0x140 [ 557.666677][T11189] ? clear_bhb_loop+0x40/0x90 [ 557.666705][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.666730][T11189] RIP: 0033:0x7fb878bcc819 [ 557.666782][T11189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.666805][T11189] RSP: 002b:00007fb876ddc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.666870][T11189] RAX: ffffffffffffffda RBX: 00007fb878e46180 RCX: 00007fb878bcc819 [ 557.666889][T11189] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000006 [ 557.666906][T11189] RBP: 00007fb878c62c91 R08: 0000000000000000 R09: 0000000000000000 [ 557.666922][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.666937][T11189] R13: 00007fb878e46218 R14: 00007fb878e46180 R15: 00007ffc3460a558 [ 557.666966][T11189] [ 557.666976][T11189] [ 557.666982][T11189] Allocated by task 11189: [ 557.667021][T11189] kasan_save_track+0x3e/0x80 [ 557.667082][T11189] __kasan_kmalloc+0x93/0xb0 [ 557.667109][T11189] __kmalloc_noprof+0x3e7/0x7b0 [ 557.667155][T11189] dma_buf_export+0x3ba/0xad0 [ 557.667269][T11189] udmabuf_create+0xee5/0xfe0 [ 557.667297][T11189] udmabuf_ioctl+0x1f6/0x310 [ 557.667324][T11189] __se_sys_ioctl+0xff/0x170 [ 557.667346][T11189] do_syscall_64+0x15f/0xf80 [ 557.667379][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.667401][T11189] [ 557.667406][T11189] Freed by task 11190: [ 557.667417][T11189] kasan_save_track+0x3e/0x80 [ 557.667451][T11189] kasan_save_free_info+0x46/0x50 [ 557.667487][T11189] __kasan_slab_free+0x5c/0x80 [ 557.667507][T11189] kfree+0x1c1/0x6b0 [ 557.667562][T11189] __dentry_kill+0x211/0x5e0 [ 557.667608][T11189] finish_dput+0xc9/0x480 [ 557.667638][T11189] __fput+0x6a3/0xa70 [ 557.667716][T11189] task_work_run+0x1d9/0x270 [ 557.667747][T11189] exit_to_user_mode_loop+0xed/0x480 [ 557.667782][T11189] do_syscall_64+0x33e/0xf80 [ 557.667814][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.667836][T11189] [ 557.667842][T11189] The buggy address belongs to the object at ffff888040c73000 [ 557.667842][T11189] which belongs to the cache kmalloc-1k of size 1024 [ 557.667863][T11189] The buggy address is located 104 bytes inside of [ 557.667863][T11189] freed 1024-byte region [ffff888040c73000, ffff888040c73400) [ 557.667889][T11189] [ 557.667895][T11189] The buggy address belongs to the physical page: [ 557.667946][T11189] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40c70 [ 557.667968][T11189] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 557.667988][T11189] flags: 0x80000000000040(head|node=0|zone=1) [ 557.668012][T11189] page_type: f5(slab) [ 557.668034][T11189] raw: 0080000000000040 ffff88813fe19dc0 dead000000000100 dead000000000122 [ 557.668056][T11189] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 557.668079][T11189] head: 0080000000000040 ffff88813fe19dc0 dead000000000100 dead000000000122 [ 557.668105][T11189] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 557.668126][T11189] head: 0080000000000003 ffffea0001031c01 00000000ffffffff 00000000ffffffff [ 557.668145][T11189] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 557.668158][T11189] page dumped because: kasan: bad access detected [ 557.668175][T11189] page_owner tracks the page as allocated [ 557.668184][T11189] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5533, tgid 5533 (rcS), ts 66835291806, free_ts 66751782813 [ 557.668225][T11189] post_alloc_hook+0x231/0x280 [ 557.668271][T11189] get_page_from_freelist+0x28bb/0x2950 [ 557.668298][T11189] __alloc_frozen_pages_noprof+0x18d/0x380 [ 557.668324][T11189] allocate_slab+0x77/0x660 [ 557.668374][T11189] refill_objects+0x334/0x3c0 [ 557.668401][T11189] __pcs_replace_empty_main+0x35c/0x710 [ 557.668432][T11189] __kmalloc_noprof+0x530/0x7b0 [ 557.668453][T11189] load_elf_phdrs+0x13e/0x240 [ 557.668527][T11189] load_elf_binary+0xa18/0x29b0 [ 557.668551][T11189] bprm_execve+0x94a/0x1440 [ 557.668570][T11189] do_execveat_common+0x50d/0x690 [ 557.668614][T11189] __x64_sys_execve+0x97/0xc0 [ 557.668633][T11189] do_syscall_64+0x15f/0xf80 [ 557.668666][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.668688][T11189] page last free pid 5527 tgid 5527 stack trace: [ 557.668701][T11189] __free_frozen_pages+0xfe3/0x1170 [ 557.668724][T11189] __slab_free+0x24f/0x2a0 [ 557.668745][T11189] qlist_free_all+0x97/0x100 [ 557.668800][T11189] kasan_quarantine_reduce+0x148/0x160 [ 557.668836][T11189] __kasan_slab_alloc+0x22/0x80 [ 557.668856][T11189] kmem_cache_alloc_noprof+0x33b/0x680 [ 557.668893][T11189] do_getname+0x2e/0x250 [ 557.668918][T11189] vfs_fstatat+0x45/0x170 [ 557.668944][T11189] __x64_sys_newfstatat+0x151/0x200 [ 557.668974][T11189] do_syscall_64+0x15f/0xf80 [ 557.669007][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.669030][T11189] [ 557.669035][T11189] Memory state around the buggy address: [ 557.669077][T11189] ffff888040c72f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 557.669101][T11189] ffff888040c72f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 557.669142][T11189] >ffff888040c73000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.669155][T11189] ^ [ 557.669169][T11189] ffff888040c73080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.669185][T11189] ffff888040c73100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.669198][T11189] ================================================================== [ 557.669222][T11189] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 557.669243][T11189] CPU: 1 UID: 0 PID: 11189 Comm: syz.5.677 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 557.669277][T11189] Tainted: [L]=SOFTLOCKUP [ 557.669286][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 557.669309][T11189] Call Trace: [ 557.669320][T11189] [ 557.669330][T11189] vpanic+0x56c/0xa60 [ 557.669370][T11189] ? __pfx_vpanic+0x10/0x10 [ 557.669412][T11189] panic+0xc5/0xd0 [ 557.669447][T11189] ? __pfx_panic+0x10/0x10 [ 557.669483][T11189] ? _raw_spin_lock_irqsave+0x40/0x60 [ 557.669518][T11189] ? rcu_is_watching+0x15/0xb0 [ 557.669546][T11189] ? _raw_spin_lock_irqsave+0x40/0x60 [ 557.669587][T11189] ? _raw_spin_lock_irqsave+0x40/0x60 [ 557.669621][T11189] check_panic_on_warn+0x89/0xb0 [ 557.669665][T11189] ? _raw_spin_lock_irqsave+0x40/0x60 [ 557.669700][T11189] end_report+0x73/0x170 [ 557.669725][T11189] ? _raw_spin_lock_irqsave+0x40/0x60 [ 557.669759][T11189] kasan_report+0x128/0x150 [ 557.669786][T11189] ? _raw_spin_lock_irqsave+0x40/0x60 [ 557.669825][T11189] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 557.669853][T11189] __kasan_check_byte+0x2a/0x40 [ 557.669878][T11189] lock_acquire+0x84/0x350 [ 557.669904][T11189] ? rcu_is_watching+0x15/0xb0 [ 557.669932][T11189] _raw_spin_lock_irqsave+0x40/0x60 [ 557.669967][T11189] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 557.669996][T11189] rt_mutex_slowunlock+0xbf/0x8b0 [ 557.670029][T11189] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 557.670062][T11189] ? __rcu_read_unlock+0x83/0xe0 [ 557.670104][T11189] ? rt_spin_unlock+0x160/0x200 [ 557.670134][T11189] dma_buf_fd+0x178/0x330 [ 557.670159][T11189] udmabuf_create+0xf26/0xfe0 [ 557.670203][T11189] ? __pfx_udmabuf_create+0x10/0x10 [ 557.670246][T11189] udmabuf_ioctl+0x1f6/0x310 [ 557.670276][T11189] ? __pfx_smack_file_ioctl+0x10/0x10 [ 557.670302][T11189] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 557.670342][T11189] ? bpf_lsm_file_ioctl+0x9/0x20 [ 557.670369][T11189] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 557.670400][T11189] __se_sys_ioctl+0xff/0x170 [ 557.670432][T11189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.670458][T11189] do_syscall_64+0x15f/0xf80 [ 557.670494][T11189] ? trace_irq_disable+0x3b/0x140 [ 557.670527][T11189] ? clear_bhb_loop+0x40/0x90 [ 557.670555][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.670580][T11189] RIP: 0033:0x7fb878bcc819 [ 557.670601][T11189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.670622][T11189] RSP: 002b:00007fb876ddc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.670649][T11189] RAX: ffffffffffffffda RBX: 00007fb878e46180 RCX: 00007fb878bcc819 [ 557.670667][T11189] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000006 [ 557.670684][T11189] RBP: 00007fb878c62c91 R08: 0000000000000000 R09: 0000000000000000 [ 557.670700][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.670716][T11189] R13: 00007fb878e46218 R14: 00007fb878e46180 R15: 00007ffc3460a558 [ 557.670744][T11189] [ 557.671367][T11189] Kernel Offset: disabled