last executing test programs: 6m52.616800238s ago: executing program 4 (id=7192): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f00000002c0)="e7", 0x1) 6m51.442984199s ago: executing program 2 (id=7195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="78c5000000000000140003006e657464657673696d30000000000000300016802c00018028000100"], 0x64}, 0x1, 0x0, 0x0, 0x2000c041}, 0x200088c4) 6m50.522764116s ago: executing program 4 (id=7197): r0 = syz_io_uring_setup(0xad3, &(0x7f00000002c0)={0x0, 0x3594, 0x1012, 0x1003, 0x21e}, &(0x7f0000000240), &(0x7f0000000340)) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) 6m48.58414076s ago: executing program 4 (id=7201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e00010028bd70000400000002000000", @ANYRES32=0x0, @ANYBLOB="00000800080001"], 0x24}}, 0x200000d0) 6m48.568700298s ago: executing program 2 (id=7202): r0 = socket(0x25, 0x1, 0x0) sendto$inet_nvme_of_msg(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m46.595626382s ago: executing program 4 (id=7205): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$TIOCL_SELLOADLUT(r0, 0x80005520, 0x0) 6m46.39378227s ago: executing program 2 (id=7208): r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, 0x0) 6m45.633284098s ago: executing program 2 (id=7211): syz_emit_ethernet(0x23e, &(0x7f0000001100)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182245", 0x208, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x0, 0x7}, @fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x8, 0x66}, @dstopts={0x89, 0x3d, '\x00', [@generic={0x7, 0x1e7, "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"}]}]}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050e86dd6018232500282cfffe8000000000000000000000000000bbfe8000000000000000000000000000aa840202"], 0x0) 6m45.354494619s ago: executing program 4 (id=7213): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab440c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x20000000}, 0x2c) 6m43.925374453s ago: executing program 2 (id=7215): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x4000050) 6m42.937779173s ago: executing program 4 (id=7219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 6m42.554910101s ago: executing program 2 (id=7221): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x20000000, {}, [{0x58, 0x1, [@m_tunnel_key={0x54, 0x1, 0x0, 0x0, {{0xf}, {0xfffffffffffffffe, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) 6m42.196787539s ago: executing program 3 (id=7222): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) 6m40.530744328s ago: executing program 3 (id=7226): unshare(0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') 6m39.379782788s ago: executing program 3 (id=7232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000be40)={0x0, 0x0, &(0x7f000000be00)={&(0x7f00000029c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6m38.251119564s ago: executing program 3 (id=7236): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 6m37.960574s ago: executing program 3 (id=7238): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045017, 0x0) 6m36.640540764s ago: executing program 3 (id=7242): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6m36.431855227s ago: executing program 0 (id=7243): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000180)={@vsock={0x28, 0x0, 0x2711, @local}, {0x0}, 0x0}, 0xa0) 6m34.125478973s ago: executing program 0 (id=7245): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 6m32.839502267s ago: executing program 0 (id=7247): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=@other={'decodes', ' ', 'mem'}, 0xc) 6m31.089743533s ago: executing program 0 (id=7249): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2d, 0x0, 0x0) 6m29.669826623s ago: executing program 0 (id=7251): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) getresuid(0x0, 0x0, 0x0) 6m28.075003423s ago: executing program 0 (id=7253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_delroute={0x14c, 0x19, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0xa, 0x47, 0xc, 0x3, 0x0, "0fe0732bedb9bd1efa25ec9130859f15ff31896c815124838fd4e0eaad15713b9f40e6363b7be53a05a0b2f250884438a2ca6124d4150d634544ee8d61314c7af53a816248acaf1be3327f5003909873b01bc12e9cecf5bb6da33adac2b245669944f779c1595e7dda67bc5120b06378cd7902bfab44c3051791ba4d1779258c37420390a44064d15c1c856013d75e9c4bb15b10fe625ee94c38e25e88104edb055a2b2af6644bdfa81fcf675485c22c91919bc374fea7ae72f0848656e142682990e8a94ef765b9de6d61691a2d543e7b395d50ea6d69f1188ad7a877af05c38d2810244f17cf8a1e0b19d1096e288d709798e4a31333b2767fa5e26ac8b433", 0x3, "a0921e06fc4b1b4a4442d1211c243c98d0b597dc"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x0, 0x1}, 0x6, 0x7, 0x0, 0x0, "6092abf3e8967c51"}, 0x7}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20044680}, 0x200480c0) 6m26.701590742s ago: executing program 32 (id=7219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 6m25.157791914s ago: executing program 33 (id=7221): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x20000000, {}, [{0x58, 0x1, [@m_tunnel_key={0x54, 0x1, 0x0, 0x0, {{0xf}, {0xfffffffffffffffe, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) 6m20.224955399s ago: executing program 34 (id=7242): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6m11.613629682s ago: executing program 35 (id=7253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_delroute={0x14c, 0x19, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0xa, 0x47, 0xc, 0x3, 0x0, "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", 0x3, "a0921e06fc4b1b4a4442d1211c243c98d0b597dc"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x0, 0x1}, 0x6, 0x7, 0x0, 0x0, "6092abf3e8967c51"}, 0x7}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20044680}, 0x200480c0) 3m44.143935917s ago: executing program 8 (id=9892): unshare(0x6020400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) 3m43.977053369s ago: executing program 8 (id=9897): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) 3m43.78643833s ago: executing program 8 (id=9900): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2c, 0x25dfdbff, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}]}, 0x1c}}, 0x40004) 3m43.583589667s ago: executing program 8 (id=9906): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xd0fb8000) sendto$inet(r0, 0x0, 0x0, 0x200407f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3m43.379913789s ago: executing program 8 (id=9912): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14) 3m43.314037459s ago: executing program 8 (id=9914): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x11, r0, 0xd0b05000) 3m27.180066391s ago: executing program 36 (id=9914): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x11, r0, 0xd0b05000) 1m53.043478567s ago: executing program 5 (id=12102): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000440)="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", 0x358}, {&(0x7f0000000280)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f000001f4c0)="550c6d32758c9c16ffa4f109b112c63389068bee461d1744b4bf458233d3294ababe6c28c97e2640f849c401a026827bfb3d48b3b006ca", 0x37}, {&(0x7f0000000340)="87", 0x1}], 0x7}, 0x0) 1m52.301409693s ago: executing program 5 (id=12110): r0 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r0, &(0x7f0000000740), 0xff67) lseek(r0, 0x3, 0x4) 1m52.11929386s ago: executing program 5 (id=12112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4000}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 1m51.874995685s ago: executing program 5 (id=12116): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2000, r0, 0x20}, 0x38) 1m51.693168022s ago: executing program 5 (id=12118): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r0) 1m51.500045241s ago: executing program 5 (id=12120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000001200)={0x5, 0x0, 0x5, 0xfffffffffffffffd}) 1m38.294098993s ago: executing program 6 (id=12264): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xfffffffd}, 0x1c) 1m37.480861292s ago: executing program 6 (id=12274): pipe(&(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) 1m37.19991791s ago: executing program 6 (id=12277): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [], {}, [], {0x10, 0x3}, {0x20, 0x4}}, 0x24, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m36.883727878s ago: executing program 6 (id=12280): capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0x4f, 0x8, 0x3, 0x74c, 0x3}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1m36.610676023s ago: executing program 6 (id=12283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x10402}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xc880) 1m36.336454758s ago: executing program 6 (id=12286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, 0x0) 1m35.392574467s ago: executing program 37 (id=12120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000001200)={0x5, 0x0, 0x5, 0xfffffffffffffffd}) 1m23.440900814s ago: executing program 7 (id=12396): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) ioctl$TCXONC(r0, 0x4b45, 0x3) 1m22.880454493s ago: executing program 9 (id=12400): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x8801) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001680)=0x7) 1m22.386032177s ago: executing program 7 (id=12402): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x1a8, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x188, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x7}, {0x8, 0x18}, {0x8, 0x14}, {0x8, 0xc}, {0x8, 0xc, 0x0, 0x0, 0x8001}, {0x8, 0x19}, {0x8, 0x1f}]}}, @AF_INET6={0x78, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0xfffffffffffffe60, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x20, 0x0, 0x0, 0x3}]}}, @AF_INET6={0x54, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2f}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x10}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd9}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x3ffe}, {0x8}, {0x8, 0x4}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x11, 0x0, 0x0, 0x54}]}}]}]}, 0x1a8}}, 0x0) 1m22.138986239s ago: executing program 9 (id=12403): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 1m21.929604908s ago: executing program 7 (id=12406): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x3a, 0x229, 0x0, 0x25dfdbfa, {0x2}, [@typed={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1m21.60614375s ago: executing program 7 (id=12408): setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) setrlimit(0x0, &(0x7f00000000c0)={0x0, 0x1}) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) 1m20.694833162s ago: executing program 9 (id=12413): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m20.396093317s ago: executing program 7 (id=12415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1m19.972086707s ago: executing program 38 (id=12286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, 0x0) 1m19.91067415s ago: executing program 9 (id=12418): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x42589e0aa37b1f}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}]}, 0x5c}}, 0x0) 1m19.896702633s ago: executing program 7 (id=12419): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0xa, 0x4) 1m19.421251054s ago: executing program 9 (id=12422): modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) 1m19.180004298s ago: executing program 9 (id=12423): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x40, 0xff, 0x0, 0x16}]}) 1m3.784555564s ago: executing program 39 (id=12419): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0xa, 0x4) 1m3.106126355s ago: executing program 40 (id=12423): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x40, 0xff, 0x0, 0x16}]}) 255.715222ms ago: executing program 1 (id=13535): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x80044704, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 211.352811ms ago: executing program 1 (id=13536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x25, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000400900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 164.329288ms ago: executing program 1 (id=13537): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000200001030000000000000000010100800c0001"], 0x114}], 0x1}, 0x0) 59.770574ms ago: executing program 1 (id=13538): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)='\'', 0x1) setsockopt$inet_buf(r0, 0x0, 0x11, 0x0, 0x0) 59.653422ms ago: executing program 1 (id=13539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x70bd26, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x448c1}, 0x0) 0s ago: executing program 1 (id=13540): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800, 0x4, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) kernel console output (not intermixed with test programs): link: 28 bytes leftover after parsing attributes in process `syz.8.9684'. [ 711.573944][T26329] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9684'. [ 711.574183][T26329] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9684'. [ 711.802304][T26343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.889851][T26345] netlink: 'syz.7.9692': attribute type 2 has an invalid length. [ 712.062874][T26357] binder: 26356:26357 ioctl c0046209 0 returned -22 [ 712.294883][T26371] binder: binder_mmap: 26370 200000ffd000-200001000000 bad vm_flags failed -1 [ 713.086454][T26414] cgroup: subsys name conflicts with all [ 713.224757][T26425] __nla_validate_parse: 3 callbacks suppressed [ 713.224773][T26425] netlink: 340 bytes leftover after parsing attributes in process `syz.7.9729'. [ 713.224798][T26425] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9729'. [ 713.224838][T26425] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9729'. [ 713.743931][T26451] netlink: 'syz.7.9742': attribute type 1 has an invalid length. [ 714.945154][T26517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9775'. [ 714.945175][T26517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9775'. [ 715.343414][T26538] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9784'. [ 715.512791][T26549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 715.513004][T26549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 715.513138][T26549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 715.513273][T26549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 715.513402][T26549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 715.513543][T26549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 715.513667][T26549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 715.513790][T26549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 715.513913][T26549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 715.514037][T26549] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 715.697863][T26555] netlink: 'syz.6.9794': attribute type 1 has an invalid length. [ 715.697884][T26555] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9794'. [ 716.669358][T26576] netlink: 232 bytes leftover after parsing attributes in process `syz.6.9804'. [ 716.819049][T26597] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 718.385145][ T6496] Bluetooth: hci1: link tx timeout [ 718.386188][ T6496] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 718.676213][T26698] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9865'. [ 718.676273][T26698] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9865'. [ 718.742704][T26703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9867'. [ 719.224297][T26731] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 720.040545][T26775] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9900'. [ 720.620123][ T6492] Bluetooth: hci1: command 0x0406 tx timeout [ 720.723502][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 720.886243][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.888794][ T9] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 720.888820][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.888838][ T9] usb 8-1: Product: syz [ 720.888852][ T9] usb 8-1: Manufacturer: syz [ 720.888865][ T9] usb 8-1: SerialNumber: syz [ 720.895702][ T9] usb 8-1: config 0 descriptor?? [ 720.921398][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 721.001663][ T807] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 721.088023][T26831] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9927'. [ 721.165786][ T807] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 721.165813][ T807] usb 7-1: config 0 has no interface number 0 [ 721.188726][ T807] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 721.188753][ T807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.188772][ T807] usb 7-1: Product: syz [ 721.188785][ T807] usb 7-1: Manufacturer: syz [ 721.188797][ T807] usb 7-1: SerialNumber: syz [ 721.228894][ T807] usb 7-1: config 0 descriptor?? [ 721.248989][ T807] usb 7-1: selecting invalid altsetting 1 [ 721.252129][ T807] dvb_ttusb_budget: ttusb_init_controller: error [ 721.252147][ T807] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 721.336057][ T807] DVB: Unable to find symbol stv0299_attach() [ 721.389694][ T807] DVB: Unable to find symbol tda8083_attach() [ 721.389709][ T807] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 721.545074][ T825] usb 7-1: USB disconnect, device number 8 [ 721.654889][ T9] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 721.654997][ T9] gspca_pac7302 8-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 721.697784][ T9] usb 8-1: USB disconnect, device number 4 [ 722.703826][T26911] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9965'. [ 723.208907][T26941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9979'. [ 723.270043][T26942] team_slave_0: entered promiscuous mode [ 723.270111][T26942] team_slave_1: entered promiscuous mode [ 723.272507][T26942] macvtap1: entered promiscuous mode [ 723.272526][T26942] team0: entered promiscuous mode [ 723.277771][T26942] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 723.278005][T26942] team0: Device macvtap1 is already an upper device of the team interface [ 723.400858][T26942] team0: left promiscuous mode [ 723.401554][T26942] team_slave_0: left promiscuous mode [ 723.401620][T26942] team_slave_1: left promiscuous mode [ 723.464296][T26954] sg_write: data in/out 434652/160 bytes for SCSI command 0x0-- guessing data in; [ 723.464296][T26954] program syz.5.9987 not setting count and/or reply_len properly [ 724.104655][T26984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10002'. [ 724.860490][T27013] veth0: entered promiscuous mode [ 724.860735][T27013] macsec1: entered allmulticast mode [ 724.860750][T27013] veth0: entered allmulticast mode [ 724.885311][T27013] veth0: left allmulticast mode [ 724.885366][T27013] veth0: left promiscuous mode [ 725.138354][T27033] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10027'. [ 725.355151][T27041] devpts: Bad value for 'uid' [ 725.355170][T27041] devpts: Bad value for 'uid' [ 725.617596][T27055] netlink: 'syz.7.10037': attribute type 7 has an invalid length. [ 725.617618][T27055] netlink: 'syz.7.10037': attribute type 8 has an invalid length. [ 725.617631][T27055] netlink: 'syz.7.10037': attribute type 4 has an invalid length. [ 725.617643][T27055] netlink: 209728 bytes leftover after parsing attributes in process `syz.7.10037'. [ 726.012413][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.864933][ T807] kernel write not supported for file /uinput (pid: 807 comm: kworker/1:2) [ 727.708374][ T825] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 727.883701][T27182] vivid-004: ================= START STATUS ================= [ 727.884082][T27182] vivid-004: Radio HW Seek Mode: Bounded [ 727.886723][ T825] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 727.886768][ T825] usb 7-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 727.886790][ T825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.888630][T27182] [ 727.888641][T27182] vivid-004: Radio Programmable HW Seek: false [ 727.888662][T27182] vivid-004: RDS Rx I/O Mode: Block I/O [ 727.888679][T27182] vivid-004: Generate RBDS Instead of RDS: false [ 727.888696][T27182] vivid-004: RDS Reception: true [ 727.889271][T27182] vivid-004: RDS Program Type: 0 inactive [ 727.889351][T27182] vivid-004: RDS PS Name: inactive [ 727.889372][T27182] vivid-004: RDS Radio Text: inactive [ 727.889391][T27182] vivid-004: RDS Traffic Announcement: false inactive [ 727.889412][T27182] vivid-004: RDS Traffic Program: false inactive [ 727.889432][T27182] vivid-004: RDS Music: false inactive [ 727.889453][T27182] vivid-004: ================== END STATUS ================== [ 727.892773][ T825] usb 7-1: config 0 descriptor?? [ 728.089054][T27188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10104'. [ 728.089571][T27188] net_ratelimit: 4491 callbacks suppressed [ 728.089586][T27188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 728.089740][T27188] Zero length message leads to an empty skb [ 728.415241][ T825] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 728.415283][ T825] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 728.415309][ T825] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 728.415334][ T825] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 728.415359][ T825] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 728.415384][ T825] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 728.415409][ T825] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 728.415436][ T825] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 728.415462][ T825] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 728.415486][ T825] lg-g15 0003:046D:C22E.0001: unknown main item tag 0x0 [ 728.475098][ T825] lg-g15 0003:046D:C22E.0001: hidraw0: USB HID v7f.7d Device [HID 046d:c22e] on usb-dummy_hcd.6-1/input0 [ 728.600083][ T825] usb 7-1: USB disconnect, device number 9 [ 728.706618][T27204] fido_id[27204]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 729.646263][T27245] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.10129'. [ 730.121353][T27272] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10142'. [ 730.286724][ T36] audit: type=1326 audit(1773719044.252:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27280 comm="syz.5.10147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 730.289452][ T36] audit: type=1326 audit(1773719044.252:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27280 comm="syz.5.10147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 730.289496][ T36] audit: type=1326 audit(1773719044.252:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27280 comm="syz.5.10147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 730.291096][ T36] audit: type=1326 audit(1773719044.252:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27280 comm="syz.5.10147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 730.291140][ T36] audit: type=1326 audit(1773719044.252:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27280 comm="syz.5.10147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 730.291180][ T36] audit: type=1326 audit(1773719044.252:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27280 comm="syz.5.10147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 730.291533][ T36] audit: type=1326 audit(1773719044.252:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27280 comm="syz.5.10147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 730.291788][ T36] audit: type=1326 audit(1773719044.252:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27280 comm="syz.5.10147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 730.292500][ T36] audit: type=1326 audit(1773719044.252:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27280 comm="syz.5.10147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 730.292752][ T36] audit: type=1326 audit(1773719044.252:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27280 comm="syz.5.10147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 730.296883][ T825] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 730.459464][ T825] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 730.459519][ T825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.460645][ T825] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 730.460668][ T825] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 730.460686][ T825] usb 7-1: Manufacturer: syz [ 730.466205][ T825] usb 7-1: config 0 descriptor?? [ 730.629371][ T825] rc_core: IR keymap rc-hauppauge not found [ 730.629391][ T825] Registered IR keymap rc-empty [ 730.630447][ T825] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 730.632109][ T825] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input38 [ 730.749062][ T807] usb 7-1: USB disconnect, device number 10 [ 733.305847][T27411] netlink: 'syz.7.10195': attribute type 1 has an invalid length. [ 733.305869][T27411] netlink: 92 bytes leftover after parsing attributes in process `syz.7.10195'. [ 733.305884][T27411] netlink: 1 bytes leftover after parsing attributes in process `syz.7.10195'. [ 735.589253][T27531] netlink: 'syz.6.10254': attribute type 1 has an invalid length. [ 735.589276][T27531] netlink: 96 bytes leftover after parsing attributes in process `syz.6.10254'. [ 735.589291][T27531] netlink: 1 bytes leftover after parsing attributes in process `syz.6.10254'. [ 735.589304][T27531] netlink: 'syz.6.10254': attribute type 1 has an invalid length. [ 735.589318][T27531] netlink: 634 bytes leftover after parsing attributes in process `syz.6.10254'. [ 735.717350][T27536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10255'. [ 735.895701][T27548] netlink: 7060 bytes leftover after parsing attributes in process `syz.7.10262'. [ 736.918858][ T6492] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 736.927414][ T6492] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 736.947080][ T6492] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 736.948559][ T6492] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 736.949375][ T6492] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 737.323753][T27610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10291'. [ 737.323775][T27610] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10291'. [ 737.323788][T27610] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10291'. [ 737.323805][T27610] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10291'. [ 737.501933][T27596] chnl_net:caif_netlink_parms(): no params data found [ 737.860612][T27596] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.860725][T27596] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.860886][T27596] bridge_slave_0: entered allmulticast mode [ 737.863402][T27596] bridge_slave_0: entered promiscuous mode [ 737.866542][T27596] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.868395][T27596] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.868559][T27596] bridge_slave_1: entered allmulticast mode [ 737.881790][T27596] bridge_slave_1: entered promiscuous mode [ 738.078622][T27596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.098142][T27596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.181457][T27596] team0: Port device team_slave_0 added [ 738.184966][T27596] team0: Port device team_slave_1 added [ 738.283030][T27656] trusted_key: encrypted_key: insufficient parameters specified [ 738.290938][T27596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.290952][T27596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.290985][T27596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.295070][T27596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.295083][T27596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.295107][T27596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.490141][T27596] hsr_slave_0: entered promiscuous mode [ 738.497291][T27596] hsr_slave_1: entered promiscuous mode [ 738.498156][T27596] debugfs: 'hsr0' already exists in 'hsr' [ 738.498178][T27596] Cannot create hsr debugfs directory [ 739.187466][ T6492] Bluetooth: hci2: command tx timeout [ 739.782409][T27596] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 739.864455][T27596] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 739.947274][T27596] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 740.002471][T27596] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 740.398477][T27596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.474789][T27596] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.508073][T19411] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.508310][T19411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.541518][T19411] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.551383][T19411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.321705][T27596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.410595][ T6492] Bluetooth: hci2: command tx timeout [ 741.611937][T27811] netlink: 56 bytes leftover after parsing attributes in process `syz.6.10381'. [ 741.992677][T27596] veth0_vlan: entered promiscuous mode [ 742.042915][T27596] veth1_vlan: entered promiscuous mode [ 742.213800][T27596] veth0_macvtap: entered promiscuous mode [ 742.235567][T27596] veth1_macvtap: entered promiscuous mode [ 742.311678][T27596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.316280][T27596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.365384][T27848] netlink: 'syz.5.10397': attribute type 1 has an invalid length. [ 742.387869][T19410] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.390698][T19410] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.407557][T19410] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.410737][T19410] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.885735][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.885755][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.991720][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.991741][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.056585][T27870] sctp: [Deprecated]: syz.5.10409 (pid 27870) Use of int in maxseg socket option. [ 743.056585][T27870] Use struct sctp_assoc_value instead [ 743.163726][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 743.163745][ T36] audit: type=1326 audit(1773719056.284:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27876 comm="syz.5.10411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 743.164032][ T36] audit: type=1326 audit(1773719056.284:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27876 comm="syz.5.10411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 743.173467][ T36] audit: type=1326 audit(1773719056.293:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27876 comm="syz.5.10411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad57fcc42b code=0x7ffc0000 [ 743.173715][ T36] audit: type=1326 audit(1773719056.293:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27876 comm="syz.5.10411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 743.174342][ T36] audit: type=1326 audit(1773719056.293:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27876 comm="syz.5.10411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 743.178604][ T36] audit: type=1326 audit(1773719056.302:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27876 comm="syz.5.10411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 743.178905][ T36] audit: type=1326 audit(1773719056.302:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27876 comm="syz.5.10411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 743.180702][ T36] audit: type=1326 audit(1773719056.302:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27876 comm="syz.5.10411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 743.613329][T27891] netlink: 'syz.6.10417': attribute type 1 has an invalid length. [ 743.613348][T27891] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10417'. [ 743.635352][ T6492] Bluetooth: hci2: command tx timeout [ 743.793197][T27897] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 743.982589][T27908] netlink: 56 bytes leftover after parsing attributes in process `syz.9.10426'. [ 744.176881][T27919] qrtr: Invalid version 255 [ 745.357781][T22847] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 745.466608][ T807] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 745.518520][T22847] usb 8-1: Using ep0 maxpacket: 32 [ 745.520468][T22847] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 745.520490][T22847] usb 8-1: config 0 has no interface number 0 [ 745.520532][T22847] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.520557][T22847] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.520591][T22847] usb 8-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 745.520611][T22847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.534110][T22847] usb 8-1: config 0 descriptor?? [ 745.624900][ T807] usb 7-1: Using ep0 maxpacket: 16 [ 745.627812][ T807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.627842][ T807] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 745.627932][ T807] usb 7-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 745.627954][ T807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.721754][ T807] usb 7-1: config 0 descriptor?? [ 745.759510][T27994] ptrace attach of "./syz-executor exec"[27596] was attempted by ""[27994] [ 745.860348][ T6492] Bluetooth: hci2: command tx timeout [ 746.165896][ T807] hid_parser_main: 222 callbacks suppressed [ 746.165919][ T807] kye 0003:0458:0153.0003: unknown main item tag 0x0 [ 746.165947][ T807] kye 0003:0458:0153.0003: unknown main item tag 0x0 [ 746.165973][ T807] kye 0003:0458:0153.0003: unknown main item tag 0x0 [ 746.165998][ T807] kye 0003:0458:0153.0003: unknown main item tag 0x0 [ 746.166022][ T807] kye 0003:0458:0153.0003: unknown main item tag 0x0 [ 746.166047][ T807] kye 0003:0458:0153.0003: unknown main item tag 0x0 [ 746.166072][ T807] kye 0003:0458:0153.0003: unknown main item tag 0x0 [ 746.166096][ T807] kye 0003:0458:0153.0003: unknown main item tag 0x0 [ 746.166120][ T807] kye 0003:0458:0153.0003: unknown main item tag 0x0 [ 746.166144][ T807] kye 0003:0458:0153.0003: unknown main item tag 0x0 [ 746.179050][ T807] kye 0003:0458:0153.0003: hidraw0: USB HID v0.0a Device [HID 0458:0153] on usb-dummy_hcd.6-1/input0 [ 746.286994][ T9] usb 8-1: USB disconnect, device number 5 [ 746.411117][ T807] usb 7-1: USB disconnect, device number 11 [ 746.747989][ T6489] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 746.919104][ T6489] usb 10-1: Using ep0 maxpacket: 16 [ 746.921081][ T6489] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 746.921107][ T6489] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.928040][ T6489] usb 10-1: config 0 descriptor?? [ 746.968888][ T6489] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 747.150034][ T6489] usb 10-1: Detected FT232B [ 747.581249][ T6489] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 747.608538][ T6489] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 747.633710][ T6489] usb 10-1: USB disconnect, device number 2 [ 747.656758][ T6489] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 747.667959][ T6489] ftdi_sio 10-1:0.0: device disconnected [ 747.859304][T28080] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.10509'. [ 748.146720][T28088] sp0: Synchronizing with TNC [ 748.424999][T28108] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10522'. [ 748.865488][T28131] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10533'. [ 748.876099][T28131] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10533'. [ 749.400705][ T807] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 749.561235][ T807] usb 10-1: Using ep0 maxpacket: 16 [ 749.563730][ T807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.563759][ T807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.563781][ T807] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 749.563819][ T807] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 749.563841][ T807] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.568589][ T807] usb 10-1: config 0 descriptor?? [ 750.039654][ T807] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 750.039687][ T807] microsoft 0003:045E:07DA.0004: no inputs found [ 750.039700][ T807] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 750.234585][ T6476] usb 10-1: USB disconnect, device number 3 [ 750.906073][T28218] tipc: Started in network mode [ 750.906105][T28218] tipc: Node identity fe80000000000000000000000000003a, cluster identity 4711 [ 750.928013][T28218] tipc: Enabled bearer , priority 10 [ 751.279760][ T7985] Process accounting resumed [ 751.343457][T28237] Process accounting resumed [ 751.970172][ T36] audit: type=1326 audit(1773719064.530:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28272 comm="syz.6.10602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 751.972620][ T36] audit: type=1326 audit(1773719064.530:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28272 comm="syz.6.10602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 751.972889][ T36] audit: type=1326 audit(1773719064.530:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28272 comm="syz.6.10602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 751.973460][ T36] audit: type=1326 audit(1773719064.530:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28272 comm="syz.6.10602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 751.975009][ T36] audit: type=1326 audit(1773719064.530:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28272 comm="syz.6.10602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 751.975588][ T36] audit: type=1326 audit(1773719064.530:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28272 comm="syz.6.10602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 751.976067][ T36] audit: type=1326 audit(1773719064.530:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28272 comm="syz.6.10602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 752.102796][ T9] tipc: Node number set to 4269801530 [ 752.143014][ T36] audit: type=1326 audit(1773719064.530:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28272 comm="syz.6.10602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 752.486879][T28295] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 752.486879][T28295] program syz.7.10613 not setting count and/or reply_len properly [ 752.755934][T28307] tipc: Enabled bearer , priority 10 [ 753.399966][ T2367] pvrusb2: request_firmware fatal error with code=-110 [ 753.399986][ T2367] pvrusb2: Failure uploading firmware1 [ 753.399995][ T2367] pvrusb2: Device initialization was not successful. [ 753.400003][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 753.400012][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 753.400135][ T987] pvrusb2: Device being rendered inoperable [ 754.180387][T28362] dvmrp0: entered allmulticast mode [ 754.183716][T28361] dvmrp0: left allmulticast mode [ 754.633096][ T36] audit: type=1326 audit(1773719067.016:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28379 comm="syz.6.10655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 754.635343][ T36] audit: type=1326 audit(1773719067.016:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28379 comm="syz.6.10655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 755.230247][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 755.405580][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.405633][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.405657][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.405694][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 755.405715][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.422778][ T9] usb 6-1: config 0 descriptor?? [ 755.535103][T28410] ipvlan2: entered allmulticast mode [ 755.535125][T28410] syz_tun: entered allmulticast mode [ 756.166598][ T6476] usb 6-1: USB disconnect, device number 3 [ 756.200026][ T3684] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.329451][T28443] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10687'. [ 756.577723][ T3684] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.053577][ T3684] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.527629][ T3684] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.657341][ T3684] bridge_slave_1: left allmulticast mode [ 758.657368][ T3684] bridge_slave_1: left promiscuous mode [ 758.657599][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.800767][ T3684] bridge_slave_0: left allmulticast mode [ 758.800793][ T3684] bridge_slave_0: left promiscuous mode [ 758.801029][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.170810][ T6489] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 759.330708][ T6489] usb 6-1: Using ep0 maxpacket: 16 [ 759.334015][ T6489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.334044][ T6489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.334064][ T6489] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 759.334104][ T6489] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 759.334125][ T6489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.352973][ T6489] usb 6-1: config 0 descriptor?? [ 759.819501][ T6489] microsoft 0003:045E:07DA.0006: unbalanced collection at end of report description [ 759.820413][ T6489] microsoft 0003:045E:07DA.0006: parse failed [ 759.820498][ T6489] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 760.022380][ T31] usb 6-1: USB disconnect, device number 4 [ 760.363881][T28616] netlink: 14601 bytes leftover after parsing attributes in process `syz.9.10769'. [ 760.633457][ T3684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.735590][ T3684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.774718][ T3684] bond0 (unregistering): Released all slaves [ 760.796939][ T3684] bond1 (unregistering): Released all slaves [ 761.489656][T28672] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10792'. [ 762.091623][T28703] kAFS: unable to lookup cell 'ÿ' [ 762.091992][T28703] kAFS: unable to lookup cell '(,c¾Ì' [ 762.602692][T28708] tipc: Bearer : already 2 bearers with priority 10 [ 762.602711][T28708] tipc: Bearer : trying with adjusted priority [ 762.603044][T28708] tipc: New replicast peer: 10.1.1.0 [ 762.603332][T28708] tipc: Enabled bearer , priority 9 [ 762.744855][T28734] genirq: Flags mismatch irq 4. 00202000 (pcmmio) vs. 00202080 (ttyS0) [ 763.072143][ T3684] hsr_slave_0: left promiscuous mode [ 763.130670][ T3684] hsr_slave_1: left promiscuous mode [ 763.133794][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.133814][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.163947][T28756] netlink: 116 bytes leftover after parsing attributes in process `syz.6.10829'. [ 763.205735][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.205761][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.293634][ T3684] veth1_macvtap: left promiscuous mode [ 763.293730][ T3684] veth0_macvtap: left promiscuous mode [ 763.293969][ T3684] veth1_vlan: left promiscuous mode [ 763.313314][ T3684] veth0_vlan: left promiscuous mode [ 764.301596][ T3684] team0 (unregistering): Port device team_slave_1 removed [ 764.365730][ T3684] team0 (unregistering): Port device team_slave_0 removed [ 764.893027][T28831] xt_l2tp: missing protocol rule (udp|l2tpip) [ 764.913647][T28751] kthread_run failed with err -4 [ 765.011804][T28770] macsec1: entered promiscuous mode [ 765.011818][T28770] bridge0: entered promiscuous mode [ 765.011921][T28770] macsec1: entered allmulticast mode [ 765.011928][T28770] bridge0: entered allmulticast mode [ 765.013127][T28770] bridge0: port 1(macsec1) entered blocking state [ 765.047253][T28770] bridge0: port 1(macsec1) entered disabled state [ 765.104719][T28841] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 765.141250][T28770] bridge0: left allmulticast mode [ 765.141276][T28770] bridge0: left promiscuous mode [ 765.705483][T28871] Bluetooth: MGMT ver 1.23 [ 766.387699][T28899] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10890'. [ 766.964305][ T31] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 767.056311][T28934] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10905'. [ 767.124771][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 767.127032][ T31] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 767.127055][ T31] usb 10-1: config 0 has no interface number 0 [ 767.127097][ T31] usb 10-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 767.127117][ T31] usb 10-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 767.127140][ T31] usb 10-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 2 [ 767.127162][ T31] usb 10-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 767.141685][ T31] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 767.141713][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.141732][ T31] usb 10-1: Product: syz [ 767.141744][ T31] usb 10-1: Manufacturer: syz [ 767.141757][ T31] usb 10-1: SerialNumber: syz [ 767.171722][ T31] usb 10-1: config 0 descriptor?? [ 767.172765][T28910] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 767.239428][ T31] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.119/input/input40 [ 767.255740][ T5343] usb 10-1: BOGUS urb xfer, pipe 1 != type 3 [ 767.291635][ C1] bcm5974 10-1:0.119: trackpad urb failed: -1 [ 767.673026][ T31] usb 10-1: USB disconnect, device number 4 [ 767.673111][ C0] bcm5974 10-1:0.119: trackpad urb failed: -19 [ 768.184016][ T987] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 768.346042][ T987] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 185, using maximum allowed: 30 [ 768.346086][ T987] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.346116][ T987] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.346136][ T987] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 185 [ 768.346177][ T987] usb 7-1: config 0 interface 0 has no altsetting 0 [ 768.346210][ T987] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 768.346230][ T987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.359383][ T987] usb 7-1: config 0 descriptor?? [ 768.465051][T28990] Invalid ELF header magic: != ELF [ 768.854875][ T987] hid_parser_main: 28 callbacks suppressed [ 768.854898][ T987] nintendo 0003:057E:200E.0007: unknown main item tag 0x1 [ 768.870203][T29005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10930'. [ 768.896889][ T987] nintendo 0003:057E:200E.0007: hidraw0: USB HID v80.04 Device [HID 057e:200e] on usb-dummy_hcd.6-1/input0 [ 768.954980][ T987] nintendo 0003:057E:200E.0007: Failed charging grip handshake [ 768.955039][ T987] nintendo 0003:057E:200E.0007: Failed to initialize controller; ret=-110 [ 769.052929][ T987] nintendo 0003:057E:200E.0007: probe - fail = -110 [ 769.053117][ T987] nintendo 0003:057E:200E.0007: probe with driver nintendo failed with error -110 [ 769.096743][ T987] usb 7-1: USB disconnect, device number 12 [ 769.260537][T29013] fido_id[29013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 769.486362][T29030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10939'. [ 769.697576][T29040] netlink: 'syz.5.10944': attribute type 7 has an invalid length. [ 769.697597][T29040] netlink: 'syz.5.10944': attribute type 8 has an invalid length. [ 769.697610][T29040] netlink: 209788 bytes leftover after parsing attributes in process `syz.5.10944'. [ 769.873989][ T987] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 769.900216][T29051] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10949'. [ 770.037967][ T987] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.037993][ T987] usb 10-1: config 0 has no interfaces? [ 770.038022][ T987] usb 10-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 770.038043][ T987] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.048838][ T987] usb 10-1: config 0 descriptor?? [ 770.271811][T29067] gretap0: left promiscuous mode [ 770.275281][ T987] usb 10-1: USB disconnect, device number 5 [ 770.287893][T29067] netlink: 136 bytes leftover after parsing attributes in process `syz.6.10957'. [ 770.287913][T29067] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 771.077089][T29116] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10976'. [ 771.077111][T29116] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10976'. [ 771.125181][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 771.285571][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 771.302689][ T9] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 771.305595][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 771.305629][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.305648][ T9] usb 6-1: Product: syz [ 771.305661][ T9] usb 6-1: Manufacturer: syz [ 771.305673][ T9] usb 6-1: SerialNumber: syz [ 771.370170][ T9] r8152-cfgselector 6-1: Unknown version 0x0000 [ 771.370195][ T9] r8152-cfgselector 6-1: config 0 descriptor?? [ 771.458309][ T987] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 771.605085][ T9] r8152-cfgselector 6-1: Needed 1 retries to read version [ 771.619895][ T987] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 771.619921][ T987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.629609][ T987] usb 7-1: config 0 descriptor?? [ 771.671047][ T987] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 771.855391][ T9] r8152-cfgselector 6-1: USB disconnect, device number 5 [ 772.101582][ T987] gspca_stv06xx: I2C: Read error writing address: -71 [ 772.111571][ T987] usb 7-1: USB disconnect, device number 13 [ 772.483107][T29172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11005'. [ 772.483130][T29172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11005'. [ 773.058418][T29202] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11020'. [ 773.058456][T29202] tipc: Started in network mode [ 773.058470][T29202] tipc: Node identity 1, cluster identity 129 [ 773.058480][T29202] tipc: Node number set to 1 [ 773.059124][T29202] tipc: Cannot configure node identity twice [ 773.414256][ T10] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 773.578670][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 773.578703][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 773.578728][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 773.578768][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 773.578790][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.647608][ T10] usb 6-1: config 0 descriptor?? [ 773.655460][T29211] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 774.019406][T29245] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 774.024329][ T987] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 774.128022][ T10] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 774.128059][ T10] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 774.128086][ T10] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 774.128112][ T10] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 774.128137][ T10] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 774.128162][ T10] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 774.128187][ T10] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 774.128212][ T10] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 774.128237][ T10] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 774.210873][ T987] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 774.210921][ T987] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 774.210944][ T987] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 774.210965][ T987] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 774.211005][ T987] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 774.211026][ T987] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.240107][T21531] IPVS: starting estimator thread 0... [ 774.245282][T29250] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 774.276503][ T987] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 774.277613][ T987] usb 10-1: invalid MIDI out EP 0 [ 774.316297][ T10] logitech-hidpp-device 0003:046D:C081.0008: hidraw0: USB HID v0.08 Device [HID 046d:c081] on usb-dummy_hcd.5-1/input0 [ 774.335186][T29252] IPVS: using max 9 ests per chain, 21600 per kthread [ 774.372164][ T10] usb 6-1: USB disconnect, device number 6 [ 774.588627][T29253] fido_id[29253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 774.625953][T29260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 774.767616][ T987] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 774.792208][ T987] usb 10-1: USB disconnect, device number 6 [ 775.724743][T21531] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 775.767405][ T987] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 775.896471][T21531] usb 10-1: Using ep0 maxpacket: 16 [ 775.910850][T29232] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 775.919305][T21531] usb 10-1: config 127 has an invalid interface number: 124 but max is 0 [ 775.919329][T21531] usb 10-1: config 127 has no interface number 0 [ 775.919359][T21531] usb 10-1: config 127 interface 124 has no altsetting 0 [ 775.928059][T21531] usb 10-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 775.928084][T21531] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.928192][T21531] usb 10-1: Product: syz [ 775.928206][T21531] usb 10-1: Manufacturer: syz [ 775.928219][T21531] usb 10-1: SerialNumber: syz [ 775.955141][ T987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.955169][ T987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.955204][ T987] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 775.955224][ T987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.995234][ T987] usb 6-1: config 0 descriptor?? [ 776.329191][T29336] __nla_validate_parse: 1 callbacks suppressed [ 776.329209][T29336] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11084'. [ 776.467965][ T987] stadia 0003:18D1:9400.0009: item fetching failed at offset 1/5 [ 776.468694][ T987] stadia 0003:18D1:9400.0009: parse failed [ 776.468756][ T987] stadia 0003:18D1:9400.0009: probe with driver stadia failed with error -22 [ 776.669955][ T987] usb 6-1: USB disconnect, device number 7 [ 777.082010][T21531] usb 10-1: reset high-speed USB device number 7 using dummy_hcd [ 777.093757][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 777.265094][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 777.285899][ T10] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 777.285924][ T10] usb 7-1: config 0 has no interface number 0 [ 777.285968][ T10] usb 7-1: config 0 interface 184 has no altsetting 0 [ 777.294989][T21531] usb 10-1: unable to get BOS descriptor or descriptor too short [ 777.295147][T21531] usb 10-1: device firmware changed [ 777.315525][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 777.315552][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.315570][ T10] usb 7-1: Product: syz [ 777.315584][ T10] usb 7-1: Manufacturer: syz [ 777.315596][ T10] usb 7-1: SerialNumber: syz [ 777.357063][ T10] usb 7-1: config 0 descriptor?? [ 777.417755][T21531] usb 10-1: USB disconnect, device number 7 [ 777.938884][T21531] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 778.023718][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 778.023745][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 778.023763][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 778.024039][ T10] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 778.077254][ T10] usb 7-1: USB disconnect, device number 14 [ 778.099266][T21531] usb 6-1: Using ep0 maxpacket: 32 [ 778.100979][T21531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.101007][T21531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.101031][T21531] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 778.101043][T21531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.104039][T21531] usb 6-1: config 0 descriptor?? [ 778.129365][T21531] hub 6-1:0.0: USB hub found [ 778.349637][T21531] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 778.574524][T21531] usbhid 6-1:0.0: can't add hid device: -71 [ 778.574635][T21531] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 778.604565][T21531] usb 6-1: USB disconnect, device number 8 [ 780.645078][T22847] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 780.647869][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 780.817618][T22847] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.817650][T22847] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.817671][T22847] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 780.817718][T22847] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 780.817739][T22847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.829822][T22847] usb 10-1: config 0 descriptor?? [ 780.839661][ T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 780.839686][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.935110][ T10] usb 6-1: config 0 descriptor?? [ 780.947077][ T10] cp210x 6-1:0.0: cp210x converter detected [ 781.110198][T29529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11172'. [ 781.395364][T22847] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 781.520603][T21963] usb 10-1: USB disconnect, device number 8 [ 781.617728][ T10] cp210x 6-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 781.617782][ T10] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 781.655508][ T10] usb 6-1: cp210x converter now attached to ttyUSB0 [ 781.673148][ T10] usb 6-1: USB disconnect, device number 9 [ 781.694461][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 781.695624][ T10] cp210x 6-1:0.0: device disconnected [ 781.781933][T29540] fido_id[29540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 781.974863][T29558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11182'. [ 781.974935][T29558] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11182'. [ 782.557521][T29585] sp0: Synchronizing with TNC [ 782.579305][T29584] [U] è [ 782.682354][T29594] gfs2: path_lookup on c::: returned error -2 [ 782.741912][T22847] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 782.889286][T29604] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11199'. [ 782.902083][T22847] usb 10-1: Using ep0 maxpacket: 8 [ 782.905959][T22847] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.905987][T22847] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.906008][T22847] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 782.906032][T22847] usb 10-1: config 0 interface 0 has no altsetting 0 [ 782.906063][T22847] usb 10-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 782.906084][T22847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.922962][T22847] usb 10-1: config 0 descriptor?? [ 783.400043][T22847] hid_parser_main: 28 callbacks suppressed [ 783.400066][T22847] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 783.400095][T22847] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 783.400121][T22847] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 783.400146][T22847] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 783.400171][T22847] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 783.400196][T22847] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 783.400221][T22847] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 783.400246][T22847] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 783.400272][T22847] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 783.400297][T22847] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 783.420120][T22847] magicmouse 0003:05AC:0265.000B: hidraw0: USB HID vbf.fc Device [HID 05ac:0265] on usb-dummy_hcd.9-1/input0 [ 783.640049][T22847] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 783.642134][ T6489] usb 10-1: USB disconnect, device number 9 [ 783.809356][T22847] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 783.809385][T22847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.828694][T22847] usb 6-1: config 0 descriptor?? [ 783.851172][T22847] cp210x 6-1:0.0: cp210x converter detected [ 784.492059][T22847] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 784.492086][T22847] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 784.501004][T22847] usb 6-1: cp210x converter now attached to ttyUSB0 [ 784.511565][T22847] usb 6-1: USB disconnect, device number 10 [ 784.526586][T22847] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 784.552426][T22847] cp210x 6-1:0.0: device disconnected [ 784.919407][T29680] sg_write: data in/out 447452/210 bytes for SCSI command 0x0-- guessing data in; [ 784.919407][T29680] program syz.9.11224 not setting count and/or reply_len properly [ 785.718478][T29718] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11244'. [ 786.945474][ T825] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 787.045636][T29790] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11279'. [ 787.124409][ T825] usb 10-1: unable to get BOS descriptor or descriptor too short [ 787.125144][ T825] usb 10-1: not running at top speed; connect to a high speed hub [ 787.145474][ T825] usb 10-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 787.145501][ T825] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.145520][ T825] usb 10-1: Product: syz [ 787.145533][ T825] usb 10-1: Manufacturer: syz [ 787.145546][ T825] usb 10-1: SerialNumber: syz [ 787.884786][ T825] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 787.893617][ T825] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 787.971714][ T825] usb 10-1: USB disconnect, device number 10 [ 788.140146][T23891] udevd[23891]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 788.412858][T29846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11306'. [ 788.700629][T29863] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11314'. [ 788.702984][T29863] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11314'. [ 789.967769][ T825] hid_parser_main: 28 callbacks suppressed [ 789.967790][ T825] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 789.967819][ T825] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 790.067638][ T825] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 790.127636][T29927] fido_id[29927]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 791.234101][T29986] netlink: 108 bytes leftover after parsing attributes in process `syz.6.11375'. [ 791.234126][T29986] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11375'. [ 791.737880][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 792.203132][T30036] netlink: 'syz.9.11399': attribute type 11 has an invalid length. [ 792.418884][T30049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11405'. [ 792.572496][T30055] bridge_slave_0: invalid flags given to default FDB implementation [ 792.691237][T30063] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11412'. [ 793.593951][T30102] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11431'. [ 793.868273][T30114] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11437'. [ 794.506227][T30145] can0: slcan on ttyS3. [ 794.719716][T30145] can0 (unregistered): slcan off ttyS3. [ 794.892744][ T7985] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 795.096011][ T7985] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.096035][ T7985] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 795.101755][ T7985] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 795.101783][ T7985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.101801][ T7985] usb 7-1: Product: syz [ 795.101815][ T7985] usb 7-1: Manufacturer: syz [ 795.101828][ T7985] usb 7-1: SerialNumber: syz [ 795.108215][ T7985] usb 7-1: config 0 descriptor?? [ 795.365799][T22847] usb 7-1: USB disconnect, device number 15 [ 796.910118][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 796.910136][ T36] audit: type=1800 audit(1773719106.515:592): pid=30235 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.6.11495" name="/" dev="tmpfs" ino=1051 res=0 errno=0 [ 797.060815][T30259] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11507'. [ 797.189148][T30265] macvtap1: entered promiscuous mode [ 797.189174][T30265] vlan1: entered promiscuous mode [ 797.189541][T30265] macvtap1: entered allmulticast mode [ 797.189556][T30265] vlan1: entered allmulticast mode [ 797.189567][T30265] veth0_vlan: entered allmulticast mode [ 797.604967][T30280] tipc: Enabled bearer , priority 10 [ 797.982084][T30294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11523'. [ 798.425624][T30310] netlink: 'syz.7.11530': attribute type 4 has an invalid length. [ 798.425645][T30310] netlink: 17 bytes leftover after parsing attributes in process `syz.7.11530'. [ 799.084009][T30340] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11545'. [ 799.145289][T30346] ucma_write: process 1367 (syz.6.11548) changed security contexts after opening file descriptor, this is not allowed. [ 799.565224][T30364] netlink: 'syz.9.11556': attribute type 1 has an invalid length. [ 799.565252][T30364] netlink: 5220 bytes leftover after parsing attributes in process `syz.9.11556'. [ 799.565353][T30364] nbd: illegal input index 1638444 [ 799.950578][T30385] netlink: 182 bytes leftover after parsing attributes in process `syz.9.11567'. [ 800.381105][T30408] netlink: 104 bytes leftover after parsing attributes in process `syz.6.11576'. [ 800.561863][ T825] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 800.722806][ T825] usb 6-1: Using ep0 maxpacket: 8 [ 800.740728][ T825] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 800.740756][ T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.740775][ T825] usb 6-1: Product: syz [ 800.740789][ T825] usb 6-1: Manufacturer: syz [ 800.740802][ T825] usb 6-1: SerialNumber: syz [ 800.792911][ T825] usb 6-1: config 0 descriptor?? [ 800.806601][ T825] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 801.444952][ T825] gspca_sonixj: reg_w1 err -71 [ 801.445113][ T825] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 801.447997][ T825] usb 6-1: USB disconnect, device number 11 [ 803.297338][T30537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.077525][T30577] comedi comedi0: Minor 2 could not be opened [ 804.351546][T30587] bond0: (slave bond_slave_1): Device is not bonding slave [ 804.351568][T30587] bond0: option active_slave: invalid value (bond_slave_1) [ 804.380278][T22847] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 804.405249][T30587] bond0 (unregistering): Released all slaves [ 804.552090][T22847] usb 10-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 804.552143][T22847] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 804.552168][T22847] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.552187][T22847] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 804.552211][T22847] usb 10-1: config 0 interface 0 has no altsetting 0 [ 804.552242][T22847] usb 10-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 804.552263][T22847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.585381][T22847] usb 10-1: config 0 descriptor?? [ 805.045086][T22847] hid-alps 0003:044E:120C.000D: unbalanced delimiter at end of report description [ 805.046377][T22847] hid-alps 0003:044E:120C.000D: parse failed [ 805.046470][T22847] hid-alps 0003:044E:120C.000D: probe with driver hid-alps failed with error -22 [ 805.290489][ T825] usb 10-1: USB disconnect, device number 11 [ 805.964661][T30665] netlink: 'syz.7.11695': attribute type 3 has an invalid length. [ 805.964682][T30665] netlink: 666 bytes leftover after parsing attributes in process `syz.7.11695'. [ 805.971267][ T825] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 806.135473][ T825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.135503][ T825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.135524][ T825] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 806.135563][ T825] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 806.135585][ T825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.197465][ T825] usb 7-1: config 0 descriptor?? [ 806.388600][ T36] audit: type=1800 audit(1773719344.367:593): pid=30680 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.11705" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 806.624804][T30693] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11710'. [ 806.647052][ T825] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 806.647094][ T825] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 806.647122][ T825] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x4 [ 806.647147][ T825] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x1 [ 806.647172][ T825] plantronics 0003:047F:FFFF.000E: unbalanced delimiter at end of report description [ 806.647883][ T825] plantronics 0003:047F:FFFF.000E: parse failed [ 806.647978][ T825] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22 [ 806.853847][ T55] usb 7-1: USB disconnect, device number 16 [ 807.170281][T30716] tipc: Enabled bearer , priority 10 [ 807.418891][T30732] bond1: option ad_user_port_key: invalid value (40960) [ 807.418920][T30732] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 807.442517][T30732] bond1 (unregistering): Released all slaves [ 807.582372][ T55] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 807.742470][ T55] usb 10-1: Using ep0 maxpacket: 8 [ 807.744848][ T55] usb 10-1: unable to get BOS descriptor or descriptor too short [ 807.746032][ T55] usb 10-1: config 10 has an invalid interface number: 148 but max is 0 [ 807.746054][ T55] usb 10-1: config 10 has no interface number 0 [ 807.746098][ T55] usb 10-1: config 10 interface 148 altsetting 24 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 807.746123][ T55] usb 10-1: config 10 interface 148 has no altsetting 0 [ 807.748447][ T55] usb 10-1: New USB device found, idVendor=1199, idProduct=6808, bcdDevice=5c.bb [ 807.748471][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.748489][ T55] usb 10-1: Product: syz [ 807.748503][ T55] usb 10-1: Manufacturer: syz [ 807.748515][ T55] usb 10-1: SerialNumber: syz [ 808.062410][ T55] sierra 10-1:10.148: Sierra USB modem converter detected [ 808.091491][ T55] usb 10-1: Sierra USB modem converter now attached to ttyUSB0 [ 808.123019][ T55] usb 10-1: USB disconnect, device number 12 [ 808.145523][ T55] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 808.146289][ T55] sierra 10-1:10.148: device disconnected [ 808.969623][T21963] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 809.129664][ T6476] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 809.140358][T21963] usb 10-1: Using ep0 maxpacket: 32 [ 809.143663][T21963] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.149832][T21963] usb 10-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 809.149856][T21963] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.149874][T21963] usb 10-1: Product: syz [ 809.149887][T21963] usb 10-1: Manufacturer: syz [ 809.149901][T21963] usb 10-1: SerialNumber: syz [ 809.155436][T21963] usb 10-1: config 0 descriptor?? [ 809.163160][T21963] usb 10-1: bad CDC descriptors [ 809.166976][T21963] usb 10-1: unsupported MDLM descriptors [ 809.300359][ T6476] usb 6-1: Using ep0 maxpacket: 32 [ 809.302661][ T6476] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 809.302686][ T6476] usb 6-1: config 0 has no interface number 0 [ 809.302728][ T6476] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 809.302748][ T6476] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 809.302771][ T6476] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 809.302795][ T6476] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 809.302816][ T6476] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 809.302848][ T6476] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 809.302868][ T6476] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 809.302890][ T6476] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 809.302908][ T6476] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 809.302930][ T6476] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 809.305551][ T6476] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 809.305575][ T6476] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.305594][ T6476] usb 6-1: Product: syz [ 809.305609][ T6476] usb 6-1: Manufacturer: syz [ 809.305622][ T6476] usb 6-1: SerialNumber: syz [ 809.310701][ T6476] usb 6-1: config 0 descriptor?? [ 809.343306][T21963] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 809.489234][T30795] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 809.495707][ T6476] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 809.495724][ T6476] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 809.528111][T21963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.528143][T21963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.528163][T21963] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 809.528201][T21963] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 809.528221][T21963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.534203][T21963] usb 7-1: config 0 descriptor?? [ 809.584276][ T55] usb 10-1: USB disconnect, device number 13 [ 809.622980][ T6476] scsi host1: microtekX6 [ 809.644129][ T3558] microtek usb (rev 0.4.3): error -90 submitting URB [ 809.703925][ T32] microtek usb (rev 0.4.3): error -90 submitting URB [ 809.736941][ T6476] usb 6-1: USB disconnect, device number 12 [ 809.748508][ T32] microtek usb (rev 0.4.3): error -19 submitting URB [ 809.791215][ T32] microtek usb (rev 0.4.3): error -19 submitting URB [ 809.862889][T30831] netlink: 44 bytes leftover after parsing attributes in process `syz.7.11778'. [ 810.052321][T21963] plantronics 0003:047F:FFFF.000F: unbalanced delimiter at end of report description [ 810.053075][T21963] plantronics 0003:047F:FFFF.000F: parse failed [ 810.053171][T21963] plantronics 0003:047F:FFFF.000F: probe with driver plantronics failed with error -22 [ 810.294338][T21963] usb 7-1: USB disconnect, device number 17 [ 810.674909][T30856] netlink: 'syz.7.11790': attribute type 1 has an invalid length. [ 810.674931][T30856] netlink: 96 bytes leftover after parsing attributes in process `syz.7.11790'. [ 810.674947][T30856] netlink: 1 bytes leftover after parsing attributes in process `syz.7.11790'. [ 811.968070][T30902] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11813'. [ 813.383909][T30971] netlink: 64 bytes leftover after parsing attributes in process `syz.7.11844'. [ 813.383929][T30971] tipc: Invalid UDP bearer configuration [ 813.383971][T30971] tipc: Enabling of bearer rejected, failed to enable media [ 813.568511][ T825] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 813.743022][ T825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.743053][ T825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.743089][ T825] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 813.743110][ T825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.758938][ T825] usb 7-1: config 0 descriptor?? [ 814.226573][ T825] sony 0003:054C:024B.0010: unknown main item tag 0x0 [ 814.226608][ T825] sony 0003:054C:024B.0010: unknown main item tag 0x0 [ 814.226634][ T825] sony 0003:054C:024B.0010: unknown main item tag 0x0 [ 814.226658][ T825] sony 0003:054C:024B.0010: unknown main item tag 0x0 [ 814.226682][ T825] sony 0003:054C:024B.0010: unknown main item tag 0x0 [ 814.226707][ T825] sony 0003:054C:024B.0010: unknown main item tag 0x0 [ 814.226731][ T825] sony 0003:054C:024B.0010: unknown main item tag 0x0 [ 814.226755][ T825] sony 0003:054C:024B.0010: unknown main item tag 0x0 [ 814.226779][ T825] sony 0003:054C:024B.0010: unknown main item tag 0x0 [ 814.226802][ T825] sony 0003:054C:024B.0010: unknown main item tag 0x0 [ 814.274317][ T825] sony 0003:054C:024B.0010: unexpected long global item [ 814.275033][ T825] sony 0003:054C:024B.0010: parse failed [ 814.275124][ T825] sony 0003:054C:024B.0010: probe with driver sony failed with error -22 [ 814.449752][ T6476] usb 7-1: USB disconnect, device number 18 [ 814.620088][T31027] misc userio: Invalid payload size [ 814.620322][T31027] misc userio: No port type given on /dev/userio [ 814.912349][ T3558] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.917472][ T3558] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.917513][ T3558] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.917545][ T3558] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.997876][T31044] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11880'. [ 815.636162][T31075] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11894'. [ 816.037291][T21963] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 816.193608][T21963] usb 7-1: Using ep0 maxpacket: 8 [ 816.200261][T21963] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 816.205952][T21963] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 816.205977][T21963] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.205998][T21963] usb 7-1: Product: syz [ 816.206012][T21963] usb 7-1: Manufacturer: syz [ 816.206025][T21963] usb 7-1: SerialNumber: syz [ 816.221801][T21963] usb 7-1: config 0 descriptor?? [ 816.284098][T21963] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 816.284200][T21963] usb 7-1: setting power ON [ 816.284244][T21963] dvb-usb: bulk message failed: -22 (2/0) [ 816.384721][T21963] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 816.391634][T21963] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 816.391690][T21963] usb 7-1: media controller created [ 816.465408][T21963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 816.490941][T31084] dvb-usb: bulk message failed: -22 (3/0) [ 816.490966][T31084] dvb-usb: bulk message failed: -22 (4/0) [ 816.490980][T31084] cxusb: i2c read failed [ 816.569123][T21963] usb 7-1: selecting invalid altsetting 6 [ 816.569146][T21963] usb 7-1: digital interface selection failed (-22) [ 816.569235][T21963] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 816.583270][T21963] usb 7-1: setting power OFF [ 816.583400][T21963] dvb-usb: bulk message failed: -22 (2/0) [ 816.583418][T21963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 816.583430][T21963] (NULL device *): no alternate interface [ 816.771874][T21963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 816.790689][T21963] usb 7-1: USB disconnect, device number 19 [ 817.442216][ T7985] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 817.523289][T31162] tipc: Enabling of bearer rejected, media not registered [ 817.612853][ T7985] usb 10-1: Using ep0 maxpacket: 16 [ 817.616637][ T7985] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 817.616663][ T7985] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 817.616686][ T7985] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 42869, setting to 1024 [ 817.616700][ T7985] usb 10-1: config 0 interface 0 has no altsetting 0 [ 817.618872][ T7985] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 817.618896][ T7985] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.618914][ T7985] usb 10-1: Product: syz [ 817.618922][ T7985] usb 10-1: Manufacturer: syz [ 817.618928][ T7985] usb 10-1: SerialNumber: syz [ 817.625743][ T7985] usb 10-1: config 0 descriptor?? [ 817.666754][T31145] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 817.928769][T31145] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 817.957486][ T7985] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input42 [ 818.881528][ C1] synaptics_usb 10-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 818.881557][ T6476] usb 10-1: USB disconnect, device number 14 [ 820.510584][ T36] audit: type=1326 audit(1773719357.627:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31284 comm="syz.9.11999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9e13c799 code=0x7ffc0000 [ 820.512339][ T36] audit: type=1326 audit(1773719357.637:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31284 comm="syz.9.11999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9e13c799 code=0x7ffc0000 [ 820.527744][ T36] audit: type=1326 audit(1773719357.656:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31284 comm="syz.9.11999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7efe9e13c799 code=0x7ffc0000 [ 820.527788][ T36] audit: type=1326 audit(1773719357.656:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31284 comm="syz.9.11999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9e13c799 code=0x7ffc0000 [ 820.549987][ T36] audit: type=1326 audit(1773719357.674:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31284 comm="syz.9.11999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7efe9e13c799 code=0x7ffc0000 [ 820.550032][ T36] audit: type=1326 audit(1773719357.674:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31284 comm="syz.9.11999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7efe9e13c799 code=0x7ffc0000 [ 820.558198][ T36] audit: type=1326 audit(1773719357.674:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31284 comm="syz.9.11999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9e13c799 code=0x7ffc0000 [ 821.230441][ T7985] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 821.283554][T31326] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 821.401160][ T7985] usb 10-1: Using ep0 maxpacket: 16 [ 821.404084][ T7985] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 821.404110][ T7985] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.433348][ T7985] usb 10-1: config 0 descriptor?? [ 821.461608][ T7985] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 821.662051][ T7985] usb 10-1: Detected FT232A [ 821.682697][ T7985] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 821.715792][ T7985] usb 10-1: USB disconnect, device number 15 [ 821.757717][ T7985] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 821.765936][ T7985] ftdi_sio 10-1:0.0: device disconnected [ 821.869509][T31345] netlink: zone id is out of range [ 821.869546][T31345] netlink: zone id is out of range [ 821.869570][T31345] netlink: zone id is out of range [ 821.869604][T31345] netlink: zone id is out of range [ 821.869700][T31345] netlink: zone id is out of range [ 822.149098][ T36] audit: type=1326 audit(1773719359.174:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31348 comm="syz.5.12024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 822.157861][ T36] audit: type=1326 audit(1773719359.174:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31348 comm="syz.5.12024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 822.157906][ T36] audit: type=1326 audit(1773719359.174:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31348 comm="syz.5.12024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57fcc799 code=0x7ffc0000 [ 825.104808][T31421] mkiss: ax0: crc mode is auto. [ 827.721609][T31469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.668537][ T6476] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 828.828763][ T6476] usb 6-1: Using ep0 maxpacket: 32 [ 828.833362][ T6476] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 828.833389][ T6476] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.833408][ T6476] usb 6-1: Product: syz [ 828.833420][ T6476] usb 6-1: Manufacturer: syz [ 828.833432][ T6476] usb 6-1: SerialNumber: syz [ 828.877162][ T6476] usb 6-1: config 0 descriptor?? [ 828.888160][ T6476] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 829.084720][ T55] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 829.247050][ T55] usb 7-1: Using ep0 maxpacket: 16 [ 829.333410][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.333445][ T55] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 829.334213][ T55] usb 7-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 829.334237][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.480876][ T55] usb 7-1: config 0 descriptor?? [ 829.672585][ T6476] gspca_ov534_9: reg_w failed -71 [ 829.953651][ T55] hid_parser_main: 1161 callbacks suppressed [ 829.953673][ T55] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 829.953702][ T55] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 829.953728][ T55] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 829.953753][ T55] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 829.953778][ T55] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 829.953802][ T55] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 829.953827][ T55] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 829.953852][ T55] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 829.953877][ T55] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 829.953902][ T55] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 830.028296][ T6476] gspca_ov534_9: Unknown sensor 0000 [ 830.028383][ T6476] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 830.098933][ T6476] usb 6-1: USB disconnect, device number 13 [ 830.123304][ T55] pantherlord 0003:0810:0002.0011: hidraw0: USB HID v0.08 Device [HID 0810:0002] on usb-dummy_hcd.6-1/input0 [ 830.123402][ T55] pantherlord 0003:0810:0002.0011: no output reports found [ 830.202056][ T7985] usb 7-1: USB disconnect, device number 20 [ 830.269862][T31516] fido_id[31516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 833.503007][ T55] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 833.665916][ T55] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.665943][ T55] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 833.665993][ T55] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 833.666014][ T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.731963][ T55] usb 10-1: config 0 descriptor?? [ 833.765471][ T55] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 833.765519][ T55] dvb-usb: bulk message failed: -22 (3/0) [ 833.816506][ T55] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 833.832267][ T55] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 833.832322][ T55] usb 10-1: media controller created [ 833.847571][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 833.892549][ T55] dvb-usb: bulk message failed: -22 (6/0) [ 833.892634][ T55] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 833.896863][ T55] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input43 [ 833.980002][T31584] dvb-usb: bulk message failed: -22 (2/0) [ 834.033452][ T55] dvb-usb: schedule remote query interval to 150 msecs. [ 834.033473][ T55] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 834.073108][ T55] usb 10-1: USB disconnect, device number 16 [ 834.311746][T31600] netlink: 'syz.7.12141': attribute type 1 has an invalid length. [ 835.396636][ T55] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 837.917102][T31688] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12181'. [ 838.351695][T31696] tipc: Enabling not permitted [ 838.351729][T31696] tipc: Enabling of bearer rejected, failed to enable media [ 838.550561][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 838.550580][ T36] audit: type=1326 audit(1773719374.532:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31705 comm="syz.6.12188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 838.550622][ T36] audit: type=1326 audit(1773719374.532:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31705 comm="syz.6.12188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 838.669803][ T36] audit: type=1326 audit(1773719374.588:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31705 comm="syz.6.12188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 838.669853][ T36] audit: type=1326 audit(1773719374.606:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31705 comm="syz.6.12188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 838.669892][ T36] audit: type=1326 audit(1773719374.616:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31705 comm="syz.6.12188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 838.669932][ T36] audit: type=1326 audit(1773719374.625:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31705 comm="syz.6.12188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 838.669972][ T36] audit: type=1326 audit(1773719374.635:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31705 comm="syz.6.12188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 838.670010][ T36] audit: type=1326 audit(1773719374.653:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31705 comm="syz.6.12188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11297ac799 code=0x7ffc0000 [ 839.317202][T31723] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12198'. [ 843.421756][T31811] netlink: 32 bytes leftover after parsing attributes in process `syz.7.12242'. [ 844.008286][T31825] ALSA: mixer_oss: invalid OSS volume '½Ë' [ 845.467501][T31855] vlan2: entered promiscuous mode [ 845.467522][T31855] bridge0: entered promiscuous mode [ 846.875955][ T36] audit: type=1326 audit(1773719382.336:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31867 comm="syz.9.12270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9e13c799 code=0x7fc00000 [ 848.835502][ T6496] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 848.840872][ T6496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 848.859957][ T6496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 848.863726][ T6496] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 848.875475][ T6496] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 849.744510][T31934] chnl_net:caif_netlink_parms(): no params data found [ 849.907128][ T6476] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 849.932973][T31934] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.948754][T31934] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.948945][T31934] bridge_slave_0: entered allmulticast mode [ 849.965371][T31934] bridge_slave_0: entered promiscuous mode [ 849.977721][T31934] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.978709][T31934] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.979196][T31934] bridge_slave_1: entered allmulticast mode [ 850.013940][T31934] bridge_slave_1: entered promiscuous mode [ 850.067879][ T6476] usb 10-1: Using ep0 maxpacket: 8 [ 850.069951][ T6476] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 850.146106][ T6476] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 850.146135][ T6476] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.146154][ T6476] usb 10-1: Product: syz [ 850.146167][ T6476] usb 10-1: Manufacturer: syz [ 850.146180][ T6476] usb 10-1: SerialNumber: syz [ 850.212634][ T6476] usb 10-1: config 0 descriptor?? [ 850.232889][ T6476] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 850.232939][ T6476] usb 10-1: setting power ON [ 850.232958][ T6476] dvb-usb: bulk message failed: -22 (2/0) [ 850.281297][ T6476] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 850.288910][ T6476] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 850.288963][ T6476] usb 10-1: media controller created [ 850.363461][T31934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.394086][T31934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.412870][ T6476] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 850.471023][T31952] dvb-usb: bulk message failed: -22 (3/0) [ 850.471043][T31952] cxusb: i2c wr: len=80 is too big! [ 850.471043][T31952] [ 850.613517][ T6476] usb 10-1: selecting invalid altsetting 6 [ 850.613538][ T6476] usb 10-1: digital interface selection failed (-22) [ 850.613554][ T6476] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 850.620954][ T6476] usb 10-1: setting power OFF [ 850.620974][ T6476] dvb-usb: bulk message failed: -22 (2/0) [ 850.620991][ T6476] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 850.621003][ T6476] (NULL device *): no alternate interface [ 850.862163][ T6476] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 850.890369][ T6476] usb 10-1: USB disconnect, device number 17 [ 851.091906][ T6492] Bluetooth: hci1: command tx timeout [ 851.266341][T31971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.607587][T31978] usb usb9: usbfs: process 31978 (syz.7.12318) did not claim interface 0 before use [ 852.316232][T31934] team0: Port device team_slave_0 added [ 852.328078][T31934] team0: Port device team_slave_1 added [ 852.401331][T31934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.401348][T31934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.401372][T31934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.403449][T31934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.403463][T31934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.403486][T31934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.591784][T31934] hsr_slave_0: entered promiscuous mode [ 852.603209][T31934] hsr_slave_1: entered promiscuous mode [ 852.604133][T31934] debugfs: 'hsr0' already exists in 'hsr' [ 852.604156][T31934] Cannot create hsr debugfs directory [ 853.365334][ T6492] Bluetooth: hci1: command tx timeout [ 855.534502][ T6492] Bluetooth: hci1: command tx timeout [ 857.333937][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 857.420838][T32063] kexec: Could not allocate control_code_buffer [ 857.752418][ T6492] Bluetooth: hci1: command tx timeout [ 857.960370][T32103] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12374'. [ 858.414138][T22847] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 858.660500][T22847] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.660525][T22847] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.662051][T22847] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 858.662075][T22847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 858.662095][T22847] usb 10-1: SerialNumber: syz [ 858.963270][T22847] usb 10-1: 0:2 : does not exist [ 859.087135][T22847] usb 10-1: USB disconnect, device number 18 [ 859.304086][T23891] udevd[23891]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 860.448450][T32152] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12394'. [ 861.511448][T32171] netlink: 76 bytes leftover after parsing attributes in process `syz.7.12402'. [ 861.511480][T32171] netlink: 76 bytes leftover after parsing attributes in process `syz.7.12402'. [ 861.776549][T32175] netlink: 'syz.9.12403': attribute type 10 has an invalid length. [ 861.786114][T32175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.842184][T32175] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 861.885592][T32175] netlink: 'syz.9.12403': attribute type 10 has an invalid length. [ 861.885613][T32175] netlink: 40 bytes leftover after parsing attributes in process `syz.9.12403'. [ 861.886184][T32175] batadv0: entered promiscuous mode [ 861.886205][T32175] batadv0: entered allmulticast mode [ 862.189841][T32175] bond0: (slave batadv0): Releasing backup interface [ 862.387905][T32175] bridge0: port 3(batadv0) entered blocking state [ 862.391873][T32175] bridge0: port 3(batadv0) entered disabled state [ 862.598810][ T3511] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 862.598828][ T3511] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 864.081871][T32219] pim6reg: entered allmulticast mode [ 864.136456][T32224] pim6reg: left allmulticast mode [ 864.873711][ T6496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 864.905787][ T6496] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 864.907382][ T6496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 864.909050][ T6496] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 864.911579][ T6496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 867.145884][ T6496] Bluetooth: hci3: command tx timeout [ 868.527169][T32237] chnl_net:caif_netlink_parms(): no params data found [ 868.715512][T32237] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.715702][T32237] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.715875][T32237] bridge_slave_0: entered allmulticast mode [ 868.718290][T32237] bridge_slave_0: entered promiscuous mode [ 868.723211][T32237] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.723404][T32237] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.723571][T32237] bridge_slave_1: entered allmulticast mode [ 868.774814][T32237] bridge_slave_1: entered promiscuous mode [ 868.822259][T32237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.825899][T32237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.891718][T32237] team0: Port device team_slave_0 added [ 868.895071][T32237] team0: Port device team_slave_1 added [ 868.956035][T32237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.956051][T32237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.956075][T32237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.958216][T32237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.958229][T32237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.958252][T32237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.149565][T32237] hsr_slave_0: entered promiscuous mode [ 869.150759][T32237] hsr_slave_1: entered promiscuous mode [ 869.151724][T32237] debugfs: 'hsr0' already exists in 'hsr' [ 869.151747][T32237] Cannot create hsr debugfs directory [ 869.367135][ T6496] Bluetooth: hci3: command tx timeout [ 871.586706][ T6496] Bluetooth: hci3: command tx timeout [ 873.806871][ T6496] Bluetooth: hci3: command tx timeout [ 880.333783][ T6492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 880.358217][ T6492] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 880.359659][ T6492] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 880.396648][ T6492] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 880.411168][ T6492] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 881.020446][ T6492] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 881.048947][ T6492] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 881.053313][ T6492] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 881.073611][ T6492] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 881.074392][ T6492] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 881.678469][T32665] chnl_net:caif_netlink_parms(): no params data found [ 881.837834][T32679] chnl_net:caif_netlink_parms(): no params data found [ 882.197781][T32665] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.197901][T32665] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.198096][T32665] bridge_slave_0: entered allmulticast mode [ 882.229812][T32665] bridge_slave_0: entered promiscuous mode [ 882.254609][T32665] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.255034][T32665] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.255199][T32665] bridge_slave_1: entered allmulticast mode [ 882.259092][T32665] bridge_slave_1: entered promiscuous mode [ 882.482915][T32665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.496703][T32679] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.496831][T32679] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.497032][T32679] bridge_slave_0: entered allmulticast mode [ 882.540295][T32679] bridge_slave_0: entered promiscuous mode [ 882.571623][T32665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.603732][ T6492] Bluetooth: hci4: command tx timeout [ 883.286887][ T6492] Bluetooth: hci5: command tx timeout [ 883.994035][T32679] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.994200][T32679] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.994770][T32679] bridge_slave_1: entered allmulticast mode [ 883.997395][T32679] bridge_slave_1: entered promiscuous mode [ 884.246689][T32665] team0: Port device team_slave_0 added [ 884.261647][T32679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.268002][T32665] team0: Port device team_slave_1 added [ 884.288440][T32679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.457537][T32665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.457554][T32665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.457578][T32665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.508323][T32665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.508339][T32665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.508364][T32665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.576256][T32679] team0: Port device team_slave_0 added [ 884.586293][T32679] team0: Port device team_slave_1 added [ 884.691135][T32679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.691151][T32679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.691176][T32679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.693395][T32679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.693408][T32679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.693432][T32679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.805978][T32665] hsr_slave_0: entered promiscuous mode [ 884.807261][T32665] hsr_slave_1: entered promiscuous mode [ 884.808123][T32665] debugfs: 'hsr0' already exists in 'hsr' [ 884.808146][T32665] Cannot create hsr debugfs directory [ 884.824549][ T6492] Bluetooth: hci4: command tx timeout [ 884.939945][T32679] hsr_slave_0: entered promiscuous mode [ 884.947420][T32679] hsr_slave_1: entered promiscuous mode [ 884.948328][T32679] debugfs: 'hsr0' already exists in 'hsr' [ 884.948350][T32679] Cannot create hsr debugfs directory [ 885.507530][ T6492] Bluetooth: hci5: command tx timeout [ 887.044672][ T6492] Bluetooth: hci4: command tx timeout [ 887.728404][ T6492] Bluetooth: hci5: command tx timeout [ 889.265309][ T6492] Bluetooth: hci4: command tx timeout [ 889.948538][ T6492] Bluetooth: hci5: command tx timeout [ 908.739434][ T1006] Bluetooth: hci2: command 0x0406 tx timeout [ 912.876443][ T1006] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 912.899749][ T1006] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 912.901208][ T1006] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 912.926276][ T1006] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 912.927122][ T1006] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 913.592037][ T1218] chnl_net:caif_netlink_parms(): no params data found [ 913.793550][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.810199][ T1218] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.821059][ T1218] bridge_slave_0: entered allmulticast mode [ 913.830111][ T1218] bridge_slave_0: entered promiscuous mode [ 913.840508][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.850020][ T1218] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.850249][ T1218] bridge_slave_1: entered allmulticast mode [ 913.872180][ T1218] bridge_slave_1: entered promiscuous mode [ 913.961354][ T1218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.968754][ T1218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.093874][ T1218] team0: Port device team_slave_0 added [ 914.108686][ T1218] team0: Port device team_slave_1 added [ 914.233521][ T1218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.233538][ T1218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.233562][ T1218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.236797][ T1218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.236812][ T1218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.236836][ T1218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.571307][ T1218] hsr_slave_0: entered promiscuous mode [ 914.572717][ T1218] hsr_slave_1: entered promiscuous mode [ 914.591873][ T1218] debugfs: 'hsr0' already exists in 'hsr' [ 914.591899][ T1218] Cannot create hsr debugfs directory [ 915.145882][ T1006] Bluetooth: hci6: command tx timeout [ 917.366638][ T1006] Bluetooth: hci6: command tx timeout [ 919.587143][ T1006] Bluetooth: hci6: command tx timeout [ 921.811077][ T1006] Bluetooth: hci6: command tx timeout [ 922.927816][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 928.293573][ T6492] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 928.304620][ T6492] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 928.306105][ T6492] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 928.307479][ T6492] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 928.308188][ T6492] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 929.117673][ T1660] chnl_net:caif_netlink_parms(): no params data found [ 929.478875][ T1660] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.483497][ T1660] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.484395][ T1660] bridge_slave_0: entered allmulticast mode [ 929.511119][ T1660] bridge_slave_0: entered promiscuous mode [ 929.526509][ T1660] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.526675][ T1660] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.526920][ T1660] bridge_slave_1: entered allmulticast mode [ 929.578236][ T1660] bridge_slave_1: entered promiscuous mode [ 929.642710][ T1660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.657408][ T1660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.717870][ T1660] team0: Port device team_slave_0 added [ 929.792686][ T1660] team0: Port device team_slave_1 added [ 929.837355][ T1660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.837372][ T1660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.837395][ T1660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.890970][ T1660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.890987][ T1660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.891012][ T1660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.005665][ T1660] hsr_slave_0: entered promiscuous mode [ 930.007057][ T1660] hsr_slave_1: entered promiscuous mode [ 930.007976][ T1660] debugfs: 'hsr0' already exists in 'hsr' [ 930.008015][ T1660] Cannot create hsr debugfs directory [ 930.521389][ T6492] Bluetooth: hci8: command tx timeout [ 932.753072][ T6492] Bluetooth: hci8: command tx timeout [ 934.963521][ T6492] Bluetooth: hci8: command tx timeout [ 937.195364][ T6492] Bluetooth: hci8: command tx timeout [ 944.436433][ T1006] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 944.441397][ T1006] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 944.444615][ T1006] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 944.445975][ T1006] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 944.449002][ T1006] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 944.885491][ T2134] chnl_net:caif_netlink_parms(): no params data found [ 945.158013][ T1006] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 945.185710][ T1006] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 945.189770][ T1006] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 945.191226][ T1006] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 945.191971][ T1006] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 945.368987][ T2134] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.369183][ T2134] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.369715][ T2134] bridge_slave_0: entered allmulticast mode [ 945.421519][ T2134] bridge_slave_0: entered promiscuous mode [ 945.440621][ T2134] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.442295][ T2134] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.442833][ T2134] bridge_slave_1: entered allmulticast mode [ 945.449144][ T2134] bridge_slave_1: entered promiscuous mode [ 945.573995][ T2134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.597441][ T2134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.690576][ T2134] team0: Port device team_slave_0 added [ 945.694216][ T2134] team0: Port device team_slave_1 added [ 945.772341][ T2134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.772358][ T2134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.772382][ T2134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.774606][ T2134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.774618][ T2134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.774640][ T2134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.939107][ T2134] hsr_slave_0: entered promiscuous mode [ 945.940641][ T2134] hsr_slave_1: entered promiscuous mode [ 945.953672][ T2134] debugfs: 'hsr0' already exists in 'hsr' [ 945.953705][ T2134] Cannot create hsr debugfs directory [ 946.668222][ T6492] Bluetooth: hci9: command tx timeout [ 947.156010][ T2143] chnl_net:caif_netlink_parms(): no params data found [ 947.319696][ T2143] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.319892][ T2143] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.320095][ T2143] bridge_slave_0: entered allmulticast mode [ 947.322753][ T2143] bridge_slave_0: entered promiscuous mode [ 947.365597][ T2143] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.365789][ T2143] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.366073][ T2143] bridge_slave_1: entered allmulticast mode [ 947.368765][ T2143] bridge_slave_1: entered promiscuous mode [ 947.436547][ T6492] Bluetooth: hci10: command tx timeout [ 947.467931][ T2143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.483318][ T2143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.574979][ T2143] team0: Port device team_slave_0 added [ 947.594150][ T2143] team0: Port device team_slave_1 added [ 947.643207][ T2143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.643225][ T2143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.643249][ T2143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.645597][ T2143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.645611][ T2143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.645635][ T2143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.833071][ T2143] hsr_slave_0: entered promiscuous mode [ 947.834484][ T2143] hsr_slave_1: entered promiscuous mode [ 947.835484][ T2143] debugfs: 'hsr0' already exists in 'hsr' [ 947.835515][ T2143] Cannot create hsr debugfs directory [ 948.889551][ T6492] Bluetooth: hci9: command tx timeout [ 949.657796][ T1006] Bluetooth: hci10: command tx timeout [ 951.110764][ T1006] Bluetooth: hci9: command tx timeout [ 951.879120][ T1006] Bluetooth: hci10: command tx timeout [ 953.331999][ T1006] Bluetooth: hci9: command tx timeout [ 954.100500][ T1006] Bluetooth: hci10: command tx timeout [ 980.846587][ T6492] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 980.871294][ T6492] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 980.872739][ T6492] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 980.874514][ T6492] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 980.897345][ T6492] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 981.382893][ T2155] chnl_net:caif_netlink_parms(): no params data found [ 981.566036][ T2155] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.566235][ T2155] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.566765][ T2155] bridge_slave_0: entered allmulticast mode [ 981.596047][ T2155] bridge_slave_0: entered promiscuous mode [ 981.601213][ T2155] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.615793][ T2155] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.616031][ T2155] bridge_slave_1: entered allmulticast mode [ 981.618684][ T2155] bridge_slave_1: entered promiscuous mode [ 981.712077][ T2155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.716877][ T2155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.822610][ T2155] team0: Port device team_slave_0 added [ 981.837060][ T2155] team0: Port device team_slave_1 added [ 981.896652][ T2155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.896666][ T2155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 981.896690][ T2155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.898992][ T2155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.899005][ T2155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 981.899030][ T2155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.058869][ T2155] hsr_slave_0: entered promiscuous mode [ 982.060333][ T2155] hsr_slave_1: entered promiscuous mode [ 982.081467][ T2155] debugfs: 'hsr0' already exists in 'hsr' [ 982.081494][ T2155] Cannot create hsr debugfs directory [ 983.150321][ T6492] Bluetooth: hci11: command tx timeout [ 985.289754][ T6492] Bluetooth: hci1: command 0x0406 tx timeout [ 985.371830][ T6492] Bluetooth: hci11: command tx timeout [ 987.593629][ T1006] Bluetooth: hci11: command tx timeout [ 988.539401][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 989.815104][ T1006] Bluetooth: hci11: command tx timeout [ 992.586984][ T6492] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 992.616070][ T6492] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 992.619622][ T6492] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 992.620797][ T6492] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 992.662286][ T6492] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 993.127817][ T2170] chnl_net:caif_netlink_parms(): no params data found [ 993.301519][ T2170] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.301714][ T2170] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.301917][ T2170] bridge_slave_0: entered allmulticast mode [ 993.304501][ T2170] bridge_slave_0: entered promiscuous mode [ 993.337903][ T2170] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.338094][ T2170] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.338324][ T2170] bridge_slave_1: entered allmulticast mode [ 993.379420][ T2170] bridge_slave_1: entered promiscuous mode [ 993.444816][ T2170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.458964][ T2170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.510325][ T2170] team0: Port device team_slave_0 added [ 993.520896][ T2170] team0: Port device team_slave_1 added [ 993.603213][ T2170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.603229][ T2170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.603254][ T2170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.655182][ T2170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.655197][ T2170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.655222][ T2170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.800476][ T2170] hsr_slave_0: entered promiscuous mode [ 993.801992][ T2170] hsr_slave_1: entered promiscuous mode [ 993.803090][ T2170] debugfs: 'hsr0' already exists in 'hsr' [ 993.803116][ T2170] Cannot create hsr debugfs directory [ 994.856719][ T1006] Bluetooth: hci12: command tx timeout [ 996.235208][ T1006] Bluetooth: hci3: command 0x0406 tx timeout [ 997.078278][ T2173] Bluetooth: hci12: command tx timeout [ 999.300190][ T2173] Bluetooth: hci12: command tx timeout [ 1001.522416][ T1006] Bluetooth: hci12: command tx timeout [ 1009.071143][ T1006] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1009.099408][ T1006] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1009.103678][ T1006] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1009.116847][ T1006] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1009.117502][ T1006] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1009.539420][ T1006] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1009.548214][ T1006] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1009.606246][ T1006] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1009.616688][ T1006] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1009.617482][ T1006] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1010.493257][ T2189] chnl_net:caif_netlink_parms(): no params data found [ 1010.858697][ T2193] chnl_net:caif_netlink_parms(): no params data found [ 1011.063749][ T2189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.064190][ T2189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.064781][ T2189] bridge_slave_0: entered allmulticast mode [ 1011.067992][ T2189] bridge_slave_0: entered promiscuous mode [ 1011.158197][ T2189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.158315][ T2189] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.158529][ T2189] bridge_slave_1: entered allmulticast mode [ 1011.161216][ T2189] bridge_slave_1: entered promiscuous mode [ 1011.264056][ T6492] Bluetooth: hci13: command tx timeout [ 1011.309567][ T2189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.347512][ T2189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.861785][ T6492] Bluetooth: hci14: command tx timeout [ 1011.984488][ T2193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.984630][ T2193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.984870][ T2193] bridge_slave_0: entered allmulticast mode [ 1012.014072][ T2193] bridge_slave_0: entered promiscuous mode [ 1012.019821][ T2189] team0: Port device team_slave_0 added [ 1012.020378][ T2193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.020571][ T2193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.020789][ T2193] bridge_slave_1: entered allmulticast mode [ 1012.056372][ T2193] bridge_slave_1: entered promiscuous mode [ 1012.061539][ T2189] team0: Port device team_slave_1 added [ 1012.188615][ T2193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.190970][ T2189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.190984][ T2189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.191008][ T2189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.261519][ T2193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.262482][ T2189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.262494][ T2189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.262518][ T2189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.520342][ T2189] hsr_slave_0: entered promiscuous mode [ 1012.521849][ T2189] hsr_slave_1: entered promiscuous mode [ 1012.522894][ T2189] debugfs: 'hsr0' already exists in 'hsr' [ 1012.522918][ T2189] Cannot create hsr debugfs directory [ 1012.550937][ T2193] team0: Port device team_slave_0 added [ 1012.555060][ T2193] team0: Port device team_slave_1 added [ 1012.636154][ T6492] Bluetooth: hci4: command 0x0406 tx timeout [ 1012.636190][ T6492] Bluetooth: hci5: command 0x0406 tx timeout [ 1012.885044][ T2193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.885062][ T2193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.885086][ T2193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.952658][ T2193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.952674][ T2193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.952699][ T2193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.300833][ T2193] hsr_slave_0: entered promiscuous mode [ 1013.311768][ T2193] hsr_slave_1: entered promiscuous mode [ 1013.312840][ T2193] debugfs: 'hsr0' already exists in 'hsr' [ 1013.312863][ T2193] Cannot create hsr debugfs directory [ 1013.492325][ T2173] Bluetooth: hci13: command tx timeout [ 1014.083742][ T2173] Bluetooth: hci14: command tx timeout [ 1015.707250][ T2173] Bluetooth: hci13: command tx timeout [ 1016.315955][ T2173] Bluetooth: hci14: command tx timeout [ 1017.929284][ T2173] Bluetooth: hci13: command tx timeout [ 1018.527807][ T2173] Bluetooth: hci14: command tx timeout [ 1032.287579][ T37] INFO: task syz-executor:32237 blocked for more than 143 seconds. [ 1032.287615][ T37] Not tainted syzkaller #0 [ 1032.287626][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1032.287635][ T37] task:syz-executor state:D stack:22272 pid:32237 tgid:32237 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1032.287691][ T37] Call Trace: [ 1032.287702][ T37] [ 1032.287716][ T37] __schedule+0x1553/0x5240 [ 1032.287916][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1032.287977][ T37] ? rt_mutex_adjust_prio_chain+0x21fd/0x23f0 [ 1032.287999][ T37] ? __pfx___schedule+0x10/0x10 [ 1032.288036][ T37] rt_mutex_schedule+0x76/0xf0 [ 1032.288062][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1032.288095][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1032.288116][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1032.288139][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1032.288159][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1032.288197][ T37] ? del_device_store+0xd7/0x370 [ 1032.288360][ T37] ? del_device_store+0xd7/0x370 [ 1032.288381][ T37] mutex_lock_nested+0x168/0x1d0 [ 1032.288407][ T37] del_device_store+0xd7/0x370 [ 1032.288428][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 1032.288503][ T37] ? __pfx_del_device_store+0x10/0x10 [ 1032.288526][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 1032.288545][ T37] ? sysfs_kf_write+0x166/0x260 [ 1032.288567][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1032.288585][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 1032.288643][ T37] vfs_write+0x629/0xba0 [ 1032.288747][ T37] ? __pfx_vfs_write+0x10/0x10 [ 1032.288775][ T37] ? kmem_cache_free+0x185/0x6b0 [ 1032.288861][ T37] ? do_sys_openat2+0x14c/0x200 [ 1032.288898][ T37] ksys_write+0x156/0x270 [ 1032.288925][ T37] ? __pfx_ksys_write+0x10/0x10 [ 1032.288960][ T37] do_syscall_64+0x14d/0xf80 [ 1032.289028][ T37] ? trace_irq_disable+0x3b/0x150 [ 1032.289048][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.289087][ T37] ? clear_bhb_loop+0x40/0x90 [ 1032.289110][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.289129][ T37] RIP: 0033:0x7fef9be3cfce [ 1032.289151][ T37] RSP: 002b:00007ffdb7827188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1032.289170][ T37] RAX: ffffffffffffffda RBX: 000055556128a500 RCX: 00007fef9be3cfce [ 1032.289184][ T37] RDX: 0000000000000001 RSI: 00007ffdb7827210 RDI: 0000000000000005 [ 1032.289196][ T37] RBP: 00007fef9bf1351c R08: 0000000000000000 R09: 0000000000000000 [ 1032.289208][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.289219][ T37] R13: 00007ffdb7827210 R14: 00007fef9cc24620 R15: 0000000000000003 [ 1032.289250][ T37] [ 1032.289295][ T37] [ 1032.289295][ T37] Showing all locks held in the system: [ 1032.289304][ T37] 5 locks held by rcuc/0/20: [ 1032.289317][ T37] 1 lock held by khungtaskd/37: [ 1032.289327][ T37] #0: ffffffff8ddcb880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1032.289413][ T37] 2 locks held by getty/5749: [ 1032.289423][ T37] #0: ffff8880390270a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1032.289528][ T37] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1032.289608][ T37] 4 locks held by kworker/u8:0/19410: [ 1032.289619][ T37] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1032.289666][ T37] #1: ffffc9000f93fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1032.289711][ T37] #2: ffffffff8f14b940 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1032.289821][ T37] #3: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1032.289890][ T37] 1 lock held by syz.6.12286/31903: [ 1032.289901][ T37] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1032.289944][ T37] 7 locks held by syz-executor/31934: [ 1032.289955][ T37] #0: ffff8880393a6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1032.290012][ T37] #1: ffff88802bec1c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1032.290059][ T37] #2: ffff8880288404b8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1032.290110][ T37] #3: ffffffff8e9c79b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1032.290156][ T37] #4: ffff88802b4b80d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1032.290240][ T37] #5: ffff888040ed2300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1032.290330][ T37] #6: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1032.290379][ T37] 1 lock held by syz.7.12419/32224: [ 1032.290390][ T37] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1032.290433][ T37] 1 lock held by syz.9.12423/32232: [ 1032.290443][ T37] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1032.290486][ T37] 4 locks held by syz-executor/32237: [ 1032.290497][ T37] #0: ffff8880393a6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1032.290546][ T37] #1: ffff888051698478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1032.290593][ T37] #2: ffff8880288404b8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1032.290641][ T37] #3: ffffffff8e9c79b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1032.290688][ T37] 4 locks held by syz-executor/32665: [ 1032.290699][ T37] #0: ffff8880393a6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1032.290748][ T37] #1: ffff888040584c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1032.290793][ T37] #2: ffff8880288404b8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1032.290843][ T37] #3: ffffffff8e9c79b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1032.290890][ T37] 4 locks held by syz-executor/32679: [ 1032.290900][ T37] #0: ffff8880393a6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1032.290949][ T37] #1: ffff888062ef3478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1032.291002][ T37] #2: ffff8880288404b8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1032.291052][ T37] #3: ffffffff8e9c79b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1032.291099][ T37] 4 locks held by syz-executor/1218: [ 1032.291109][ T37] #0: ffff8880393a6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1032.291158][ T37] #1: ffff888063032878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1032.291204][ T37] #2: ffff8880288404b8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1032.291254][ T37] #3: ffffffff8e9c79b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1032.291300][ T37] 4 locks held by syz-executor/1660: [ 1032.291310][ T37] #0: ffff8880393a6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1032.291359][ T37] #1: ffff88803b0fac78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1032.291404][ T37] #2: ffff8880288404b8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1032.291453][ T37] #3: ffffffff8e9c79b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1032.291499][ T37] 4 locks held by syz-executor/2134: [ 1032.291509][ T37] #0: ffff8880393a6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1032.291558][ T37] #1: ffff888069bd7078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1032.291604][ T37] #2: ffff8880288404b8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1032.291653][ T37] #3: ffffffff8e9c79b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1032.291698][ T37] 4 locks held by syz-executor/2143: [ 1032.291709][ T37] #0: ffff8880393a6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1032.291757][ T37] #1: ffff8880a5e23078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1032.291802][ T37] #2: ffff8880288404b8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1032.291852][ T37] #3: ffffffff8e9c79b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1032.291898][ T37] 4 locks held by syz-executor/2155: [ 1032.291908][ T37] #0: ffff8880393a6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1032.291957][ T37] #1: ffff88806843a878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1032.292009][ T37] #2: ffff8880288404b8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1032.292055][ T37] #3: ffffffff8e9c79b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1032.292101][ T37] 4 locks held by syz-executor/2170: [ 1032.292112][ T37] #0: ffff8880393a6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1032.292162][ T37] #1: ffff888035f32478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1032.292208][ T37] #2: ffff8880288404b8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1032.292258][ T37] #3: ffffffff8e9c79b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1032.292304][ T37] 4 locks held by syz-executor/2189: [ 1032.292315][ T37] #0: ffff8880393a6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1032.292364][ T37] #1: ffff8880804d9878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1032.292410][ T37] #2: ffff8880288404b8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1032.292461][ T37] #3: ffffffff8e9c79b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1032.292506][ T37] 4 locks held by syz-executor/2193: [ 1032.292516][ T37] #0: ffff8880393a6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1032.292566][ T37] #1: ffff88803a5ad078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1032.292612][ T37] #2: ffff8880288404b8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1032.292662][ T37] #3: ffffffff8e9c79b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1032.292708][ T37] [ 1032.292714][ T37] ============================================= [ 1032.292714][ T37] [ 1032.292730][ T37] NMI backtrace for cpu 1 [ 1032.292747][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1032.292768][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1032.292778][ T37] Call Trace: [ 1032.292786][ T37] [ 1032.292794][ T37] dump_stack_lvl+0xe8/0x150 [ 1032.292834][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1032.292887][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1032.292924][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1032.292946][ T37] sys_info+0x135/0x170 [ 1032.292999][ T37] watchdog+0xfd9/0x1030 [ 1032.293026][ T37] ? watchdog+0x21a/0x1030 [ 1032.293053][ T37] kthread+0x388/0x470 [ 1032.293073][ T37] ? __pfx_watchdog+0x10/0x10 [ 1032.293091][ T37] ? __pfx_kthread+0x10/0x10 [ 1032.293112][ T37] ret_from_fork+0x51e/0xb90 [ 1032.293145][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1032.293167][ T37] ? __switch_to+0xc7d/0x1450 [ 1032.293202][ T37] ? __pfx_kthread+0x10/0x10 [ 1032.293222][ T37] ret_from_fork_asm+0x1a/0x30 [ 1032.293255][ T37] [ 1032.293263][ T37] Sending NMI from CPU 1 to CPUs 0: [ 1032.293292][ C0] NMI backtrace for cpu 0 [ 1032.293306][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1032.293324][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1032.293334][ C0] RIP: 0010:rcu_is_watching+0x5e/0xb0 [ 1032.293353][ C0] Code: 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ac 0b 81 00 48 c7 c3 18 4f 4f 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 <8b> 03 65 ff 0d 79 b9 a4 10 74 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f [ 1032.293367][ C0] RSP: 0018:ffffc90000196390 EFLAGS: 00000246 [ 1032.293381][ C0] RAX: 0000000000000000 RBX: ffff8880b8833f18 RCX: 0000000080000001 [ 1032.293393][ C0] RDX: ffffc90000196501 RSI: ffffffff8ba65f60 RDI: ffffffff8ba65f20 [ 1032.293404][ C0] RBP: dffffc0000000000 R08: ffffc90000197bd0 R09: 0000000000000000 [ 1032.293415][ C0] R10: ffffc90000196538 R11: fffff52000032ca9 R12: ffffc90000197be0 [ 1032.293427][ C0] R13: ffffffff81765db5 R14: ffffffff8d801790 R15: dffffc0000000000 [ 1032.293439][ C0] FS: 0000000000000000(0000) GS:ffff88812633f000(0000) knlGS:0000000000000000 [ 1032.293452][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1032.293464][ C0] CR2: 0000560d0e8e1660 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 1032.293484][ C0] Call Trace: [ 1032.293490][ C0] [ 1032.293497][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1032.293512][ C0] lock_release+0x4b/0x3d0 [ 1032.293527][ C0] ? deref_stack_reg+0x19f/0x230 [ 1032.293554][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1032.293568][ C0] unwind_next_frame+0x1aaa/0x23c0 [ 1032.293585][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1032.293600][ C0] ? __local_bh_enable_ip+0x170/0x2b0 [ 1032.293627][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1032.293649][ C0] arch_stack_walk+0x11b/0x150 [ 1032.293667][ C0] ? rcu_cpu_kthread+0x9e8/0x1470 [ 1032.293684][ C0] stack_trace_save+0xa9/0x100 [ 1032.293702][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1032.293723][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1032.293739][ C0] kasan_save_track+0x3e/0x80 [ 1032.293794][ C0] ? kasan_save_track+0x3e/0x80 [ 1032.293811][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1032.293830][ C0] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 1032.293850][ C0] ? ref_tracker_alloc+0x15e/0x4a0 [ 1032.293929][ C0] ? dst_init+0xd9/0x480 [ 1032.293996][ C0] ? dst_alloc+0x12a/0x170 [ 1032.294015][ C0] ? ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1032.294034][ C0] ? ip_route_output_key_hash+0x18d/0x2a0 [ 1032.294050][ C0] ? ip_route_output_flow+0x2a/0x150 [ 1032.294065][ C0] ? ip_route_me_harder+0x742/0xf90 [ 1032.294115][ C0] ? synproxy_send_tcp+0x34c/0x670 [ 1032.294170][ C0] ? synproxy_send_client_synack+0x8c1/0xe30 [ 1032.294189][ C0] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 1032.294235][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 1032.294254][ C0] ? nft_do_chain+0x45e/0x1990 [ 1032.294296][ C0] ? nft_do_chain_inet+0x29d/0x380 [ 1032.294360][ C0] ? nf_hook_slow+0xc5/0x220 [ 1032.294405][ C0] ? NF_HOOK+0x21f/0x3c0 [ 1032.294423][ C0] ? NF_HOOK+0x336/0x3c0 [ 1032.294441][ C0] ? process_backlog+0x569/0xc60 [ 1032.294457][ C0] ? __napi_poll+0xaf/0x580 [ 1032.294477][ C0] ? net_rx_action+0x696/0xe00 [ 1032.294493][ C0] ? handle_softirqs+0x1de/0x6f0 [ 1032.294511][ C0] ? __local_bh_enable_ip+0x170/0x2b0 [ 1032.294546][ C0] __kasan_kmalloc+0x93/0xb0 [ 1032.294567][ C0] __kmalloc_cache_noprof+0x3a6/0x690 [ 1032.294588][ C0] ? ref_tracker_alloc+0x15e/0x4a0 [ 1032.294606][ C0] ref_tracker_alloc+0x15e/0x4a0 [ 1032.294624][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1032.294647][ C0] ? rcu_is_watching+0x15/0xb0 [ 1032.294663][ C0] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1032.294686][ C0] dst_init+0xd9/0x480 [ 1032.294707][ C0] dst_alloc+0x12a/0x170 [ 1032.294729][ C0] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1032.294751][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1032.294769][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 1032.294788][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1032.294813][ C0] ip_route_output_flow+0x2a/0x150 [ 1032.294828][ C0] ? ip_route_me_harder+0x730/0xf90 [ 1032.294847][ C0] ip_route_me_harder+0x742/0xf90 [ 1032.294870][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1032.294895][ C0] ? __cookie_v4_init_sequence+0x25d/0x500 [ 1032.294945][ C0] synproxy_send_tcp+0x34c/0x670 [ 1032.294967][ C0] synproxy_send_client_synack+0x8c1/0xe30 [ 1032.294993][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1032.295012][ C0] ? nft_osf_reduce+0x538/0x560 [ 1032.295030][ C0] ? synproxy_pernet+0x45/0x270 [ 1032.295053][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 1032.295076][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1032.295098][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1032.295120][ C0] nft_synproxy_do_eval+0x305/0x580 [ 1032.295143][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1032.295167][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1032.295186][ C0] nft_do_chain+0x45e/0x1990 [ 1032.295207][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1032.295226][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1032.295257][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1032.295273][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1032.295290][ C0] nft_do_chain_inet+0x29d/0x380 [ 1032.295310][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1032.295333][ C0] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1032.295354][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1032.295374][ C0] nf_hook_slow+0xc5/0x220 [ 1032.295394][ C0] NF_HOOK+0x21f/0x3c0 [ 1032.295414][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1032.295435][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1032.295453][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1032.295477][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1032.295499][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1032.295522][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1032.295544][ C0] NF_HOOK+0x336/0x3c0 [ 1032.295563][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1032.295583][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1032.295602][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1032.295621][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1032.295642][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1032.295665][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1032.295683][ C0] ? process_backlog+0x271/0xc60 [ 1032.295700][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1032.295719][ C0] process_backlog+0x569/0xc60 [ 1032.295737][ C0] ? stack_trace_save+0xa9/0x100 [ 1032.295762][ C0] __napi_poll+0xaf/0x580 [ 1032.295777][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1032.295795][ C0] net_rx_action+0x696/0xe00 [ 1032.295819][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1032.295835][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1032.295858][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1032.295883][ C0] handle_softirqs+0x1de/0x6f0 [ 1032.295908][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 1032.295928][ C0] ? rcu_cpu_kthread+0x205/0x1470 [ 1032.295941][ C0] rcu_cpu_kthread+0x9e8/0x1470 [ 1032.295960][ C0] ? rcu_cpu_kthread+0x205/0x1470 [ 1032.295980][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 1032.295996][ C0] ? schedule+0x90/0x360 [ 1032.296017][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1032.296040][ C0] smpboot_thread_fn+0x541/0xa50 [ 1032.296061][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1032.296086][ C0] kthread+0x388/0x470 [ 1032.296102][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1032.296122][ C0] ? __pfx_kthread+0x10/0x10 [ 1032.296138][ C0] ret_from_fork+0x51e/0xb90 [ 1032.296159][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1032.296177][ C0] ? __switch_to+0xc7d/0x1450 [ 1032.296196][ C0] ? __pfx_kthread+0x10/0x10 [ 1032.296212][ C0] ret_from_fork_asm+0x1a/0x30 [ 1032.296234][ C0] [ 1032.296299][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1032.296314][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1032.296334][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1032.296344][ T37] Call Trace: [ 1032.296352][ T37] [ 1032.296360][ T37] vpanic+0x56c/0xa60 [ 1032.296384][ T37] ? irqentry_exit+0x59e/0x620 [ 1032.296408][ T37] ? __pfx_vpanic+0x10/0x10 [ 1032.296441][ T37] panic+0xc5/0xd0 [ 1032.296463][ T37] ? __pfx_panic+0x10/0x10 [ 1032.296486][ T37] ? printk_trigger_flush+0x117/0x180 [ 1032.296520][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1032.296544][ T37] watchdog+0x1023/0x1030 [ 1032.296570][ T37] ? watchdog+0x21a/0x1030 [ 1032.296600][ T37] kthread+0x388/0x470 [ 1032.296619][ T37] ? __pfx_watchdog+0x10/0x10 [ 1032.296637][ T37] ? __pfx_kthread+0x10/0x10 [ 1032.296656][ T37] ret_from_fork+0x51e/0xb90 [ 1032.296680][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1032.296700][ T37] ? __switch_to+0xc7d/0x1450 [ 1032.296723][ T37] ? __pfx_kthread+0x10/0x10 [ 1032.296741][ T37] ret_from_fork_asm+0x1a/0x30 [ 1032.296773][ T37] [ 1032.297017][ T37] Kernel Offset: disabled