last executing test programs: 3m45.629317428s ago: executing program 4 (id=907): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x36c2c576, @empty, 0x8a}, 0x1c) close(0x3) 3m42.499405643s ago: executing program 4 (id=912): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(rfc3686(cts(cbc(aes))),aes,crct10dif-arm64-ce)\x00'}, 0x36) 3m37.813825649s ago: executing program 4 (id=916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000), 0x86, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000000540)=""/96}, 0x20) 3m36.758713555s ago: executing program 3 (id=919): r0 = eventfd2(0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) write$eventfd(r0, &(0x7f0000000280)=0x9, 0x8) 3m36.155481251s ago: executing program 4 (id=921): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x300, 0x70bd2c, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x6, 0xe}, {0x4, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4080) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf00020106500008ffffffe7020d0000052406000108247c2a6ad07be4aefb0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042404"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 3m35.540748413s ago: executing program 3 (id=925): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce6207"], 0xfe1b) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x600) 3m30.037501833s ago: executing program 3 (id=930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x240080d4) 3m29.906845369s ago: executing program 4 (id=931): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 3m27.727630787s ago: executing program 3 (id=934): r0 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x8, 0x4) connect$caif(r0, &(0x7f0000000780), 0x18) 3m25.61185529s ago: executing program 4 (id=935): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000002780)=""/4094, 0xffe}], 0x1, 0x3, 0x1000009) 3m24.642128366s ago: executing program 3 (id=938): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3m21.386327816s ago: executing program 3 (id=945): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x300, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000700)=0x2) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000a40)={0x21}) 3m10.44131025s ago: executing program 32 (id=935): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000002780)=""/4094, 0xffe}], 0x1, 0x3, 0x1000009) 3m4.604351881s ago: executing program 33 (id=945): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x300, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000700)=0x2) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000a40)={0x21}) 2m30.636649364s ago: executing program 0 (id=996): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000040000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 2m28.522691803s ago: executing program 0 (id=998): unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) 2m25.367966393s ago: executing program 0 (id=1001): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 2m23.78423921s ago: executing program 0 (id=1004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf25010000800500040002000000050002000a0000001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2m21.131793544s ago: executing program 0 (id=1006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500030002000000080001400000001708000240000000130900010073797a300000deff0900020073797a32"], 0x80}}, 0x0) 2m15.745491064s ago: executing program 0 (id=1013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000340)={0x1, 0xffffffffffffffff, 0x1}) 2m15.555494683s ago: executing program 2 (id=1014): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000043f000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x10, 0x2, 0x0, 0x18}) 2m11.132762131s ago: executing program 2 (id=1016): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000001b40)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x5400, 0x0) 2m7.169197304s ago: executing program 2 (id=1018): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 2m5.880692071s ago: executing program 2 (id=1020): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup(r0) getsockopt$inet_buf(r1, 0x118, 0x1, 0x0, 0x0) 2m1.913868659s ago: executing program 2 (id=1022): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813, 0xfffffffd, 0x2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x14048010) 1m58.760707917s ago: executing program 34 (id=1013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000340)={0x1, 0xffffffffffffffff, 0x1}) 1m58.629082002s ago: executing program 2 (id=1024): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0xa239d5d7ec3c2f74}) 1m43.002707238s ago: executing program 35 (id=1024): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0xa239d5d7ec3c2f74}) 32.020569126s ago: executing program 1 (id=1053): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x2, 0x3b63}, {0x6, 0x0, 0xfe}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 25.644998625s ago: executing program 1 (id=1054): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) 21.137272742s ago: executing program 1 (id=1055): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa0}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.986275738s ago: executing program 1 (id=1056): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000) 15.539596994s ago: executing program 1 (id=1057): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r1, r0, 0x7}, 0x10) 15.344547292s ago: executing program 1 (id=1058): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7}) 0s ago: executing program 36 (id=1058): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 82.613422][ T5789] cgroup: Unknown subsys name 'net' [ 82.904276][ T5789] cgroup: Unknown subsys name 'cpuset' [ 83.000263][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.635102][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.876432][ T991] cfg80211: failed to load regulatory.db [ 87.315370][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.322663][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.323447][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.324855][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.326502][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.371513][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.395643][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.396549][ T5120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.399250][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.399970][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.411904][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.419832][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.424006][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.449706][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.463432][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.481750][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.484178][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.486281][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.510744][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.511573][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.543789][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.547053][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.549570][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.571829][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.575959][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.155504][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 88.535621][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 88.729687][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 88.876467][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.877816][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.878196][ T5804] bridge_slave_0: entered allmulticast mode [ 88.880769][ T5804] bridge_slave_0: entered promiscuous mode [ 88.910889][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 88.915674][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 88.924473][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.924619][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.924871][ T5804] bridge_slave_1: entered allmulticast mode [ 88.927656][ T5804] bridge_slave_1: entered promiscuous mode [ 89.421454][ T5810] Bluetooth: hci1: command tx timeout [ 89.483594][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.501365][ T5120] Bluetooth: hci0: command tx timeout [ 89.501643][ T5810] Bluetooth: hci2: command tx timeout [ 89.580224][ T5810] Bluetooth: hci4: command tx timeout [ 89.583679][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.583910][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.584020][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.584130][ T5803] bridge_slave_0: entered allmulticast mode [ 89.585606][ T5803] bridge_slave_0: entered promiscuous mode [ 89.659645][ T5810] Bluetooth: hci3: command tx timeout [ 89.750499][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.750593][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.750733][ T5803] bridge_slave_1: entered allmulticast mode [ 89.752456][ T5803] bridge_slave_1: entered promiscuous mode [ 89.990578][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.990686][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.990836][ T5812] bridge_slave_0: entered allmulticast mode [ 89.992632][ T5812] bridge_slave_0: entered promiscuous mode [ 90.132197][ T5804] team0: Port device team_slave_0 added [ 90.211315][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.211420][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.211570][ T5812] bridge_slave_1: entered allmulticast mode [ 90.213080][ T5812] bridge_slave_1: entered promiscuous mode [ 90.352264][ T5804] team0: Port device team_slave_1 added [ 90.473661][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.570522][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.570618][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.570738][ T5811] bridge_slave_0: entered allmulticast mode [ 90.572493][ T5811] bridge_slave_0: entered promiscuous mode [ 90.574872][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.575006][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.575176][ T5813] bridge_slave_0: entered allmulticast mode [ 90.577019][ T5813] bridge_slave_0: entered promiscuous mode [ 90.672482][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.730783][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.730942][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.731101][ T5811] bridge_slave_1: entered allmulticast mode [ 90.733373][ T5811] bridge_slave_1: entered promiscuous mode [ 90.735531][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.735671][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.735779][ T5813] bridge_slave_1: entered allmulticast mode [ 90.737262][ T5813] bridge_slave_1: entered promiscuous mode [ 90.893259][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.031368][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.031395][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.031409][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.112807][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.231232][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.231248][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.231272][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.233507][ T5803] team0: Port device team_slave_0 added [ 91.313824][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.316918][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.331686][ T5803] team0: Port device team_slave_1 added [ 91.392740][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.394805][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.451888][ T5812] team0: Port device team_slave_0 added [ 91.499624][ T5810] Bluetooth: hci1: command tx timeout [ 91.589862][ T5120] Bluetooth: hci0: command tx timeout [ 91.590009][ T5810] Bluetooth: hci2: command tx timeout [ 91.659632][ T5810] Bluetooth: hci4: command tx timeout [ 91.739604][ T5810] Bluetooth: hci3: command tx timeout [ 91.872788][ T5812] team0: Port device team_slave_1 added [ 92.063218][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.063233][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.063252][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.141865][ T5811] team0: Port device team_slave_0 added [ 92.143817][ T5813] team0: Port device team_slave_0 added [ 92.211405][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.211422][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.211445][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.303100][ T5811] team0: Port device team_slave_1 added [ 92.304934][ T5813] team0: Port device team_slave_1 added [ 92.322048][ T5804] hsr_slave_0: entered promiscuous mode [ 92.323183][ T5804] hsr_slave_1: entered promiscuous mode [ 92.333840][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.333856][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.333878][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.523687][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.523704][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.523731][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.709461][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.709478][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.709502][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.921197][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.921208][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.921222][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.012753][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.012764][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.012778][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.022527][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.022541][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.022565][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.202202][ T5803] hsr_slave_0: entered promiscuous mode [ 93.203106][ T5803] hsr_slave_1: entered promiscuous mode [ 93.203808][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 93.203890][ T5803] Cannot create hsr debugfs directory [ 93.386649][ T5812] hsr_slave_0: entered promiscuous mode [ 93.387475][ T5812] hsr_slave_1: entered promiscuous mode [ 93.388503][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 93.388524][ T5812] Cannot create hsr debugfs directory [ 93.589537][ T5810] Bluetooth: hci1: command tx timeout [ 93.670409][ T5120] Bluetooth: hci0: command tx timeout [ 93.670544][ T5810] Bluetooth: hci2: command tx timeout [ 93.739629][ T5810] Bluetooth: hci4: command tx timeout [ 93.793889][ T5811] hsr_slave_0: entered promiscuous mode [ 93.794660][ T5811] hsr_slave_1: entered promiscuous mode [ 93.795217][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 93.795238][ T5811] Cannot create hsr debugfs directory [ 93.829693][ T5810] Bluetooth: hci3: command tx timeout [ 93.935140][ T5813] hsr_slave_0: entered promiscuous mode [ 93.935981][ T5813] hsr_slave_1: entered promiscuous mode [ 93.936574][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 93.936595][ T5813] Cannot create hsr debugfs directory [ 95.201700][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.236165][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.274318][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.324714][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.436031][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.475561][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.514582][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.566465][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.661211][ T5810] Bluetooth: hci1: command tx timeout [ 95.685717][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.728324][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.742347][ T5120] Bluetooth: hci0: command tx timeout [ 95.742394][ T5810] Bluetooth: hci2: command tx timeout [ 95.778356][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.815184][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.820940][ T5810] Bluetooth: hci4: command tx timeout [ 95.899921][ T5810] Bluetooth: hci3: command tx timeout [ 95.942423][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.975694][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.015356][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.058026][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.148323][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.181602][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.218907][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.257912][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.304692][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.370987][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.408134][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.408713][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.453129][ T1223] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.453276][ T1223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.461317][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.549028][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.583365][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.586463][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.586586][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.628935][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.629059][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.692573][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.714609][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.743006][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.743220][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.822456][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.822662][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.886642][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.896144][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.937347][ T1223] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.937558][ T1223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.970963][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.971122][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.035600][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.094701][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.095552][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.137833][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.138045][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.154656][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.354252][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.470096][ T5804] veth0_vlan: entered promiscuous mode [ 97.521268][ T5804] veth1_vlan: entered promiscuous mode [ 97.656740][ T5803] veth0_vlan: entered promiscuous mode [ 97.686002][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.711509][ T5803] veth1_vlan: entered promiscuous mode [ 97.769228][ T5804] veth0_macvtap: entered promiscuous mode [ 97.793219][ T5804] veth1_macvtap: entered promiscuous mode [ 97.823347][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.860311][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.860980][ T5803] veth0_macvtap: entered promiscuous mode [ 97.864089][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.910984][ T5803] veth1_macvtap: entered promiscuous mode [ 97.927544][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.928899][ T5812] veth0_vlan: entered promiscuous mode [ 97.986139][ T3633] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.995868][ T3633] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.004724][ T1166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.022429][ T5812] veth1_vlan: entered promiscuous mode [ 98.027740][ T1166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.048810][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.127357][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.247580][ T88] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.277126][ T88] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.278458][ T5811] veth0_vlan: entered promiscuous mode [ 98.281722][ T88] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.288625][ T88] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.393617][ T5811] veth1_vlan: entered promiscuous mode [ 98.451532][ T5812] veth0_macvtap: entered promiscuous mode [ 98.469015][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.469039][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.547178][ T5812] veth1_macvtap: entered promiscuous mode [ 98.624750][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.624769][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.671814][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.678639][ T5813] veth0_vlan: entered promiscuous mode [ 98.693858][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.693877][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.724349][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.747361][ T5811] veth0_macvtap: entered promiscuous mode [ 98.778496][ T5813] veth1_vlan: entered promiscuous mode [ 98.784913][ T5811] veth1_macvtap: entered promiscuous mode [ 98.801106][ T1166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.803963][ T1166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.819149][ T1166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.835146][ T1166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.835876][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.835891][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.965814][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.048531][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.094698][ T88] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.128402][ T5813] veth0_macvtap: entered promiscuous mode [ 99.139954][ T88] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.180733][ T88] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.223053][ T1166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.240431][ T5813] veth1_macvtap: entered promiscuous mode [ 99.257055][ T3633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.257072][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.569898][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.602963][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.602983][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.678179][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.813274][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.813295][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.813645][ T3633] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.818183][ T3633] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.891055][ T3633] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.924854][ T3633] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.026924][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.026944][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.479686][ T3633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.479706][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.759568][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.759588][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.034005][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 101.034040][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 102.225948][ T5996] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 102.225976][ T5996] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 102.226397][ T5996] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 102.835629][ T6010] dummy0: entered promiscuous mode [ 102.835913][ T6010] macvtap1: entered promiscuous mode [ 103.190335][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.380544][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 103.395290][ T9] usb 2-1: config index 0 descriptor too short (expected 65532, got 18) [ 103.395317][ T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 103.395336][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 103.408840][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 103.408869][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.408889][ T9] usb 2-1: Product: syz [ 103.408903][ T9] usb 2-1: Manufacturer: syz [ 103.408917][ T9] usb 2-1: SerialNumber: syz [ 103.494412][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 103.494440][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 103.526557][ T6031] warning: `syz.4.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.594839][ T6033] bridge0: port 3(syz_tun) entered blocking state [ 103.594959][ T6033] bridge0: port 3(syz_tun) entered disabled state [ 103.595296][ T6033] syz_tun: entered allmulticast mode [ 103.642074][ T6033] syz_tun: entered promiscuous mode [ 103.666209][ T6033] bridge0: port 3(syz_tun) entered blocking state [ 103.666681][ T6033] bridge0: port 3(syz_tun) entered forwarding state [ 104.003916][ T6042] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 104.041767][ T991] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 104.203753][ T6049] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 104.796005][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 105.465170][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 106.066560][ T6104] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 106.067000][ T6104] block device autoloading is deprecated and will be removed. [ 106.237148][ T6121] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 106.237277][ T6121] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 106.237824][ T6121] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 106.237897][ T6121] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 106.238175][ T6121] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 106.238250][ T6121] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 106.238766][ T6121] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 106.238840][ T6121] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 106.239097][ T6121] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 106.339894][ T5969] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.495476][ T6126] ucma_write: process 39 (syz.4.96) changed security contexts after opening file descriptor, this is not allowed. [ 106.512565][ T5969] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.512590][ T5969] usb 3-1: config 0 has no interface number 0 [ 106.519287][ T5969] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 106.519323][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.519342][ T5969] usb 3-1: Product: syz [ 106.519354][ T5969] usb 3-1: Manufacturer: syz [ 106.519631][ T5969] usb 3-1: SerialNumber: syz [ 106.612769][ T5969] usb 3-1: config 0 descriptor?? [ 106.677003][ T6131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.99'. [ 106.688554][ T6131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.99'. [ 106.869797][ T5969] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 106.911156][ T5969] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 106.911731][ T5969] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 106.911823][ T5969] usb 3-1: media controller created [ 107.087229][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.565057][ T5816] usb 3-1: USB disconnect, device number 2 [ 107.709904][ T6158] netlink: 60 bytes leftover after parsing attributes in process `syz.3.109'. [ 107.713727][ T6158] netlink: 32 bytes leftover after parsing attributes in process `syz.3.109'. [ 108.049516][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.214183][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.214213][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 108.214233][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.214340][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 108.214366][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 108.223097][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.223243][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.223265][ T9] usb 1-1: Product: syz [ 108.223280][ T9] usb 1-1: Manufacturer: syz [ 108.319172][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 108.319193][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 108.386960][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 108.386995][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 108.715872][ T9] usb 1-1: USB disconnect, device number 2 [ 109.206248][ T6193] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.320521][ T6184] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 109.362351][ T6195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.699852][ T6203] mkiss: ax0: crc mode is auto. [ 111.460869][ T6269] netlink: 92 bytes leftover after parsing attributes in process `syz.3.159'. [ 111.461048][ T6269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.159'. [ 111.549552][ T5969] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.701638][ T5969] usb 3-1: Using ep0 maxpacket: 32 [ 111.705285][ T5969] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 111.705313][ T5969] usb 3-1: config 4 has no interface number 0 [ 111.705361][ T5969] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.705387][ T5969] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.705426][ T5969] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 111.705449][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.764660][ T5969] hub 3-1:4.128: USB hub found [ 111.888557][ T6275] vlan2: entered promiscuous mode [ 111.888997][ T6275] hsr0: entered promiscuous mode [ 111.893647][ T6275] vlan2: entered allmulticast mode [ 111.893666][ T6275] hsr0: entered allmulticast mode [ 111.893680][ T6275] hsr_slave_0: entered allmulticast mode [ 111.893698][ T6275] hsr_slave_1: entered allmulticast mode [ 111.976589][ T5969] hub 3-1:4.128: 2 ports detected [ 111.976663][ T5969] hub 3-1:4.128: Using single TT (err -22) [ 112.187945][ T5969] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 112.187974][ T5969] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 112.298920][ T5969] usb 3-1: USB disconnect, device number 3 [ 112.993334][ T6273] syz.0.161 (6273): drop_caches: 2 [ 113.752182][ T6301] tipc: Started in network mode [ 113.752340][ T6301] tipc: Node identity ac141441, cluster identity 4711 [ 113.786478][ T6301] tipc: Enabled bearer , priority 10 [ 114.010068][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'. [ 114.341558][ T5890] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.509759][ T6326] binder: 6325:6326 ioctl c0306201 200000000280 returned -14 [ 114.519583][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 114.525493][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.525540][ T5890] usb 1-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 114.525563][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.539186][ T5890] usb 1-1: config 0 descriptor?? [ 114.782403][ T31] tipc: Node number set to 2886997057 [ 115.068951][ T5890] cypress 0003:04B4:DE64.0001: report_id 0 is invalid [ 115.068975][ T5890] cypress 0003:04B4:DE64.0001: item 0 0 1 8 parsing failed [ 115.094570][ T5890] cypress 0003:04B4:DE64.0001: parse failed [ 115.094647][ T5890] cypress 0003:04B4:DE64.0001: probe with driver cypress failed with error -22 [ 115.272864][ T31] usb 1-1: USB disconnect, device number 3 [ 115.855984][ T6358] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.087793][ T6367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.206'. [ 116.269857][ T5969] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.421605][ T5969] usb 3-1: Using ep0 maxpacket: 32 [ 116.428440][ T5969] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.428473][ T5969] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.457881][ T5969] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 116.457913][ T5969] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 116.457935][ T5969] usb 3-1: Product: syz [ 116.457949][ T5969] usb 3-1: Manufacturer: syz [ 116.518580][ T5969] hub 3-1:4.0: USB hub found [ 116.622548][ T6388] ======================================================= [ 116.622548][ T6388] WARNING: The mand mount option has been deprecated and [ 116.622548][ T6388] and is ignored by this kernel. Remove the mand [ 116.622548][ T6388] option from the mount to silence this warning. [ 116.622548][ T6388] ======================================================= [ 116.753919][ T5969] hub 3-1:4.0: 7 ports detected [ 116.755139][ T5969] hub 3-1:4.0: insufficient power available to use all downstream ports [ 116.942945][ T5969] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 116.942972][ T5969] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 117.000423][ T5969] usb 3-1: USB disconnect, device number 4 [ 117.794615][ T6430] tmpfs: Cannot enable quota on remount [ 118.349546][ T5992] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.507759][ T5992] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 118.507789][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.507808][ T5992] usb 3-1: Product: syz [ 118.507822][ T5992] usb 3-1: Manufacturer: syz [ 118.507835][ T5992] usb 3-1: SerialNumber: syz [ 118.550037][ T5816] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.554532][ T5992] r8152-cfgselector 3-1: Unknown version 0x0000 [ 118.554557][ T5992] r8152-cfgselector 3-1: config 0 descriptor?? [ 118.698114][ T6462] netlink: 64 bytes leftover after parsing attributes in process `syz.1.249'. [ 118.725301][ T37] audit: type=1326 audit(1762870698.535:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6463 comm="syz.0.250" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4ae04f6c9 code=0x0 [ 118.729888][ T5816] usb 5-1: Using ep0 maxpacket: 32 [ 118.736940][ T5816] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 118.736967][ T5816] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 118.736987][ T5816] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 118.737008][ T5816] usb 5-1: config 1 has no interface number 0 [ 118.737055][ T5816] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.737080][ T5816] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 118.737122][ T5816] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 118.737144][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.782535][ T5816] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 118.842055][ T5992] r8152-cfgselector 3-1: Needed 1 retries to read version [ 119.061939][ T991] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 119.355109][ T5816] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 119.592577][ T5992] usb 5-1: USB disconnect, device number 2 [ 119.625080][ T5992] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 120.199083][ T6505] netlink: 774 bytes leftover after parsing attributes in process `syz.4.267'. [ 120.259565][ T5969] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.373043][ T37] audit: type=1326 audit(1762870700.175:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 120.373093][ T37] audit: type=1326 audit(1762870700.175:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 120.373133][ T37] audit: type=1326 audit(1762870700.175:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 120.374509][ T37] audit: type=1326 audit(1762870700.185:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 120.374556][ T37] audit: type=1326 audit(1762870700.185:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 120.374594][ T37] audit: type=1326 audit(1762870700.185:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 120.399630][ T37] audit: type=1326 audit(1762870700.185:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 120.538786][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.538819][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.538859][ T5969] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 120.538883][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.593918][ T5969] usb 1-1: config 0 descriptor?? [ 121.044028][ T5969] apple 0003:05AC:0244.0003: unknown main item tag 0x0 [ 121.044066][ T5969] apple 0003:05AC:0244.0003: unknown main item tag 0x0 [ 121.044101][ T5969] apple 0003:05AC:0244.0003: unknown main item tag 0x0 [ 121.044126][ T5969] apple 0003:05AC:0244.0003: unknown main item tag 0x0 [ 121.044150][ T5969] apple 0003:05AC:0244.0003: unknown main item tag 0x0 [ 121.044173][ T5969] apple 0003:05AC:0244.0003: unknown main item tag 0x0 [ 121.044198][ T5969] apple 0003:05AC:0244.0003: unknown main item tag 0x0 [ 121.116837][ T991] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.116869][ T991] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.116891][ T991] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.149941][ T5969] apple 0003:05AC:0244.0003: hidraw0: USB HID v0.00 Device [HID 05ac:0244] on usb-dummy_hcd.0-1/input0 [ 121.245679][ T991] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 121.259926][ T5969] usb 1-1: USB disconnect, device number 4 [ 121.468504][ T6534] fido_id[6534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 121.554055][ T6539] fido_id[6539]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.719586][ T5891] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.872210][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 121.878721][ T6555] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 121.879197][ T6555] Zero length message leads to an empty skb [ 121.912569][ T5891] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 121.912599][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.912618][ T5891] usb 4-1: Product: syz [ 121.912633][ T5891] usb 4-1: Manufacturer: syz [ 121.912646][ T5891] usb 4-1: SerialNumber: syz [ 121.975402][ T5891] usb 4-1: config 0 descriptor?? [ 122.000652][ T5891] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 122.611099][ T5891] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 122.647839][ T5891] usb 4-1: USB disconnect, device number 2 [ 122.746306][ T6586] capability: warning: `syz.0.304' uses 32-bit capabilities (legacy support in use) [ 122.953245][ T37] audit: type=1326 audit(1762870702.765:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6589 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 122.980963][ T37] audit: type=1326 audit(1762870702.795:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6589 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 123.472088][ T6615] fuse: Bad value for 'user_id' [ 123.472108][ T6615] fuse: Bad value for 'user_id' [ 123.476603][ T6618] random: crng reseeded on system resumption [ 123.492887][ T6619] netlink: 341 bytes leftover after parsing attributes in process `syz.3.319'. [ 123.937741][ T6634] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.469527][ T5992] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.621876][ T5992] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.621904][ T5992] usb 5-1: config 0 has no interface number 0 [ 125.638129][ T5992] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 125.638159][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.638177][ T5992] usb 5-1: Product: syz [ 125.638190][ T5992] usb 5-1: Manufacturer: syz [ 125.638202][ T5992] usb 5-1: SerialNumber: syz [ 125.701266][ T5992] usb 5-1: config 0 descriptor?? [ 125.922434][ T5992] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 125.947153][ T5992] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 125.947678][ T5992] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 125.947731][ T5992] usb 5-1: media controller created [ 126.011835][ T5992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.053623][ T6704] netlink: 192 bytes leftover after parsing attributes in process `syz.3.359'. [ 126.407880][ T5816] usb 5-1: USB disconnect, device number 3 [ 126.839568][ T5992] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.901580][ T9] hid_parser_main: 80 callbacks suppressed [ 126.901602][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.929942][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.002745][ T5992] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.002781][ T5992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.002816][ T5992] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 127.002846][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.051292][ T5992] usb 1-1: config 0 descriptor?? [ 127.405122][ T6738] fido_id[6738]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 127.487748][ T5992] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 127.487783][ T5992] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 127.487817][ T5992] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 127.487843][ T5992] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 127.487868][ T5992] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 127.544964][ T5992] magicmouse 0003:05AC:0269.0005: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 127.702249][ T5992] usb 1-1: USB disconnect, device number 5 [ 127.722525][ T6755] fido_id[6755]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 128.415048][ T6782] use of bytesused == 0 is deprecated and will be removed in the future, [ 128.415064][ T6782] use the actual size instead. [ 128.841473][ T6804] netlink: 'syz.3.406': attribute type 6 has an invalid length. [ 129.594133][ T6834] netlink: 76 bytes leftover after parsing attributes in process `syz.2.421'. [ 129.882405][ T6848] capability: warning: `syz.1.427' uses deprecated v2 capabilities in a way that may be insecure [ 130.303113][ T6867] netlink: 'syz.2.435': attribute type 4 has an invalid length. [ 130.303134][ T6867] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.435'. [ 130.509732][ T6871] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 130.509758][ T6871] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 130.509967][ T6871] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 130.715627][ T6882] tipc: Started in network mode [ 130.715657][ T6882] tipc: Node identity 7f000001, cluster identity 4711 [ 130.737630][ T6882] tipc: Enabled bearer , priority 10 [ 130.974224][ T6892] net_ratelimit: 67 callbacks suppressed [ 130.974246][ T6892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.999697][ T5969] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.170773][ T5969] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 131.170803][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.226446][ T5969] usb 3-1: config 0 descriptor?? [ 131.244231][ T5969] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 131.647477][ T5969] gspca_cpia1: usb_control_msg 03, error -32 [ 131.647881][ T5969] gspca_cpia1: usb_control_msg 03, error -71 [ 131.648321][ T5969] gspca_cpia1: usb_control_msg 01, error -71 [ 131.648334][ T5969] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 131.691829][ T5969] usb 3-1: USB disconnect, device number 6 [ 131.839507][ T5992] tipc: Node number set to 2130706433 [ 131.853528][ T6916] syz.4.454 (6916) used greatest stack depth: 17880 bytes left [ 132.005104][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.459'. [ 132.071822][ T6927] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 132.102680][ T6927] bond1 (unregistering): Released all slaves [ 132.139582][ T5816] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 132.324105][ T5816] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.324141][ T5816] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.324165][ T5816] usb 4-1: config 0 interface 0 has no altsetting 0 [ 132.324199][ T5816] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 132.324222][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.341550][ T5816] usb 4-1: config 0 descriptor?? [ 132.813904][ T5816] megaworld 0003:07B5:0312.0006: unbalanced collection at end of report description [ 132.814744][ T5816] megaworld 0003:07B5:0312.0006: parse failed [ 132.814817][ T5816] megaworld 0003:07B5:0312.0006: probe with driver megaworld failed with error -22 [ 132.950143][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.950214][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.024193][ T5891] usb 4-1: USB disconnect, device number 3 [ 133.760300][ T5891] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.934689][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.934721][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.934744][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 133.934783][ T5891] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 133.934806][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.003255][ T5891] usb 3-1: config 0 descriptor?? [ 134.620335][ T5891] pantherlord 0003:0810:0002.0007: unknown main item tag 0x3 [ 134.652815][ T5891] pantherlord 0003:0810:0002.0007: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.2-1/input0 [ 134.652851][ T5891] pantherlord 0003:0810:0002.0007: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 134.835402][ T5891] usb 3-1: USB disconnect, device number 7 [ 135.108999][ T6997] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 135.109061][ T6997] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 136.278800][ T7002] fido_id[7002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 136.349138][ T7020] netlink: 'syz.3.502': attribute type 1 has an invalid length. [ 136.614696][ T5810] Bluetooth: hci4: link tx timeout [ 136.615158][ T5810] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.868911][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 137.052210][ T7033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.507'. [ 137.569813][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 137.569831][ T37] audit: type=1326 audit(1762870717.375:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7053 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ebadf6c9 code=0x7ffc0000 [ 137.570253][ T37] audit: type=1326 audit(1762870717.385:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7053 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ebadf6c9 code=0x7ffc0000 [ 137.575646][ T37] audit: type=1326 audit(1762870717.385:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7053 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f89ebadf6c9 code=0x7ffc0000 [ 137.577505][ T37] audit: type=1326 audit(1762870717.385:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7053 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ebadf6c9 code=0x7ffc0000 [ 137.577834][ T37] audit: type=1326 audit(1762870717.385:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7053 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f89ebadf6c9 code=0x7ffc0000 [ 137.578136][ T37] audit: type=1326 audit(1762870717.385:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7053 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ebadf6c9 code=0x7ffc0000 [ 138.550037][ T7096] netlink: 'syz.0.540': attribute type 6 has an invalid length. [ 138.550057][ T7096] netlink: 112 bytes leftover after parsing attributes in process `syz.0.540'. [ 138.679703][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 138.699789][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 138.843870][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 138.843922][ T9] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 138.843946][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.864222][ T9] usb 4-1: config 0 descriptor?? [ 138.865372][ T7092] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 139.305577][ T9] viewsonic 0003:0543:E621.0008: unknown main item tag 0x0 [ 139.305614][ T9] viewsonic 0003:0543:E621.0008: item fetching failed at offset 3/5 [ 139.306519][ T9] viewsonic 0003:0543:E621.0008: probe with driver viewsonic failed with error -22 [ 139.505161][ T5891] usb 4-1: USB disconnect, device number 4 [ 140.566314][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.563'. [ 140.579567][ T5969] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.689582][ T5891] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.750964][ T5969] usb 5-1: Using ep0 maxpacket: 16 [ 140.769939][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.769970][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.769993][ T5969] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.770036][ T5969] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.770060][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.794847][ T5969] usb 5-1: config 0 descriptor?? [ 140.850085][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 140.855363][ T5891] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 140.855393][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.855413][ T5891] usb 3-1: Product: syz [ 140.855427][ T5891] usb 3-1: Manufacturer: syz [ 140.855441][ T5891] usb 3-1: SerialNumber: syz [ 140.905346][ T5891] usb 3-1: config 0 descriptor?? [ 140.934451][ T5891] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 141.133974][ T37] audit: type=1326 audit(1762870720.945:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7158 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 141.136094][ T37] audit: type=1326 audit(1762870720.945:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7158 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 141.148212][ T37] audit: type=1326 audit(1762870720.955:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7158 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 141.150630][ T37] audit: type=1326 audit(1762870720.965:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7158 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 141.362833][ T5891] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 141.457584][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.575'. [ 141.457614][ T7168] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 141.562744][ T5816] usb 3-1: USB disconnect, device number 8 [ 141.577017][ T5969] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0009/input/input6 [ 141.593345][ T5816] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 141.594399][ T5816] visor 3-1:0.0: device disconnected [ 141.734228][ T5969] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 141.749703][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 141.760078][ T5969] usb 5-1: USB disconnect, device number 4 [ 141.821539][ T5891] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.866188][ T7175] fido_id[7175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 141.969527][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 141.971796][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.971841][ T5891] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 141.971860][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.041340][ T5891] usb 4-1: config 0 descriptor?? [ 142.081263][ T5891] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 142.269239][ T5816] usb 4-1: USB disconnect, device number 5 [ 142.415279][ T7191] netlink: 32 bytes leftover after parsing attributes in process `syz.0.584'. [ 142.471702][ T5891] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 142.586259][ T7195] pim6reg: entered allmulticast mode [ 142.619533][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 142.622063][ T5891] usb 5-1: config 0 has an invalid interface number: 46 but max is 0 [ 142.622090][ T5891] usb 5-1: config 0 has no interface number 0 [ 142.622123][ T5891] usb 5-1: config 0 interface 46 has no altsetting 0 [ 142.626969][ T5891] usb 5-1: New USB device found, idVendor=093a, idProduct=262a, bcdDevice=96.5d [ 142.626999][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.627020][ T5891] usb 5-1: Product: syz [ 142.627035][ T5891] usb 5-1: Manufacturer: syz [ 142.627050][ T5891] usb 5-1: SerialNumber: syz [ 142.693489][ T5891] usb 5-1: config 0 descriptor?? [ 142.734924][ T5891] gspca_main: gspca_pac7302-2.14.0 probing 093a:262a [ 143.749889][ T5891] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 143.750081][ T5891] gspca_pac7302 5-1:0.46: probe with driver gspca_pac7302 failed with error -71 [ 143.753439][ T5891] usb 5-1: USB disconnect, device number 5 [ 143.950151][ T7215] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 144.695641][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 144.695660][ T37] audit: type=1326 audit(1762870724.495:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7229 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 144.695705][ T37] audit: type=1326 audit(1762870724.495:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7229 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 144.696250][ T37] audit: type=1326 audit(1762870724.505:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7229 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 144.696292][ T37] audit: type=1326 audit(1762870724.505:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7229 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 144.696332][ T37] audit: type=1326 audit(1762870724.505:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7229 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 144.696913][ T37] audit: type=1326 audit(1762870724.505:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7229 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 144.697170][ T37] audit: type=1326 audit(1762870724.505:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7229 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 144.871029][ T37] audit: type=1326 audit(1762870724.505:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7229 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674b17f6c9 code=0x7ffc0000 [ 145.389629][ T5969] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 145.549529][ T5969] usb 3-1: Using ep0 maxpacket: 8 [ 145.556964][ T5969] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 145.556995][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.557015][ T5969] usb 3-1: Product: syz [ 145.557030][ T5969] usb 3-1: Manufacturer: syz [ 145.557051][ T5969] usb 3-1: SerialNumber: syz [ 145.702947][ T5969] usb 3-1: config 0 descriptor?? [ 145.767104][ T5969] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 145.767171][ T5969] usb 3-1: setting power ON [ 145.767768][ T5969] dvb-usb: bulk message failed: -22 (2/0) [ 145.852451][ T5969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.855651][ T5969] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 145.855714][ T5969] usb 3-1: media controller created [ 145.942405][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.945398][ T7236] dvb-usb: bulk message failed: -22 (3/0) [ 145.945423][ T7236] dvb-usb: bulk message failed: -22 (3/0) [ 145.949639][ T7252] Illegal XDP return value 4294967274 on prog (id 53) dev N/A, expect packet loss! [ 146.143062][ T5969] usb 3-1: selecting invalid altsetting 6 [ 146.143087][ T5969] usb 3-1: digital interface selection failed (-22) [ 146.143116][ T5969] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 146.175498][ T5969] usb 3-1: setting power OFF [ 146.175769][ T5969] dvb-usb: bulk message failed: -22 (2/0) [ 146.175787][ T5969] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 146.175799][ T5969] (NULL device *): no alternate interface [ 146.294721][ T5969] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 146.325577][ T5969] usb 3-1: USB disconnect, device number 9 [ 147.069648][ T5992] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.244470][ T5992] usb 1-1: Using ep0 maxpacket: 8 [ 147.256197][ T5992] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.256231][ T5992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 147.256265][ T5992] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 147.256288][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.318828][ T5992] usb 1-1: config 0 descriptor?? [ 147.794728][ T5992] razer 0003:1532:010D.000A: item fetching failed at offset 3/4 [ 147.795592][ T5992] razer 0003:1532:010D.000A: probe with driver razer failed with error -22 [ 148.012973][ T5992] usb 1-1: USB disconnect, device number 6 [ 148.344659][ T5992] IPVS: starting estimator thread 0... [ 148.432779][ T7294] IPVS: using max 7 ests per chain, 16800 per kthread [ 148.466890][ T7296] process 'syz.3.634' launched './file2' with NULL argv: empty string added [ 149.698705][ T7320] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 150.022482][ T7328] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 150.239617][ T37] audit: type=1400 audit(1762870730.015:39): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7332 comm="syz.0.653" src=1 dest=20000 netif=wpan0 [ 150.899614][ T5992] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 151.059597][ T5992] usb 5-1: Using ep0 maxpacket: 32 [ 151.061974][ T5992] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 151.062000][ T5992] usb 5-1: config 0 has no interface number 0 [ 151.160133][ T5992] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 151.160162][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.160182][ T5992] usb 5-1: Product: syz [ 151.160197][ T5992] usb 5-1: Manufacturer: syz [ 151.160211][ T5992] usb 5-1: SerialNumber: syz [ 151.168111][ T5992] usb 5-1: config 0 descriptor?? [ 151.220496][ T5992] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 151.433192][ T5992] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 151.501746][ T5992] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 151.868050][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 151.898274][ T5807] usb 5-1: USB disconnect, device number 6 [ 151.970620][ T5807] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 152.009801][ T5807] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 152.015564][ T5807] quatech2 5-1:0.51: device disconnected [ 152.399525][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.559795][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 152.562227][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.562274][ T9] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 152.562297][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.626808][ T9] usb 4-1: config 0 descriptor?? [ 153.105536][ T9] hkems 0003:2006:0118.000B: hidraw0: USB HID v10.00 Device [HID 2006:0118] on usb-dummy_hcd.3-1/input0 [ 153.105572][ T9] hkems 0003:2006:0118.000B: no inputs found [ 153.105585][ T9] hkems 0003:2006:0118.000B: force feedback init failed [ 153.401312][ T9] usb 4-1: USB disconnect, device number 6 [ 153.841134][ T991] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 153.981478][ T7390] netlink: 'syz.4.679': attribute type 10 has an invalid length. [ 154.124476][ T7388] fido_id[7388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 154.139467][ T991] usb 1-1: Using ep0 maxpacket: 32 [ 154.149908][ T991] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 154.149935][ T991] usb 1-1: config 0 has no interface number 0 [ 154.340278][ T991] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 154.340319][ T991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.340338][ T991] usb 1-1: Product: syz [ 154.340351][ T991] usb 1-1: Manufacturer: syz [ 154.340365][ T991] usb 1-1: SerialNumber: syz [ 154.411480][ T991] usb 1-1: config 0 descriptor?? [ 154.417850][ T991] smsc95xx v2.0.0 [ 154.471201][ T5807] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 154.652051][ T5807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.652095][ T5807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 154.657066][ T5807] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 154.657094][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.657114][ T5807] usb 2-1: Product: syz [ 154.657128][ T5807] usb 2-1: Manufacturer: syz [ 154.657143][ T5807] usb 2-1: SerialNumber: syz [ 154.770585][ T5807] usb 2-1: config 0 descriptor?? [ 154.795408][ T5807] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 154.857799][ T7403] random: crng reseeded on system resumption [ 154.904770][ T7401] 9pnet_fd: Insufficient options for proto=fd [ 155.029700][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.035535][ T5807] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 155.035637][ T5807] usb 2-1: media controller created [ 155.163713][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.405452][ T991] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 155.405489][ T991] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 155.406172][ T991] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 155.406869][ T991] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 155.434319][ T991] usb 1-1: USB disconnect, device number 7 [ 155.496816][ T5807] DVB: Unable to find symbol tda10046_attach() [ 155.496831][ T5807] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 155.496844][ T5807] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 155.546467][ T7410] ./file0: Can't open blockdev [ 155.629299][ T37] audit: type=1400 audit(1762870735.435:40): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7411 comm="syz.3.687" src=1 dest=20000 netif=wpan0 [ 155.701118][ T5807] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 155.719558][ T5807] usb 2-1: USB disconnect, device number 3 [ 155.911392][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'. [ 155.916053][ T7416] IPVS: Error connecting to the multicast addr [ 155.989505][ T5816] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.065590][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'. [ 156.124277][ T7421] xt_l2tp: missing protocol rule (udp|l2tpip) [ 156.189489][ T5816] usb 3-1: Using ep0 maxpacket: 32 [ 156.192119][ T5816] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 156.192163][ T5816] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 156.192201][ T5816] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 156.192226][ T5816] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 156.192253][ T5816] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.194516][ T5816] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 156.194541][ T5816] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 156.194560][ T5816] usb 3-1: Product: syz [ 156.194573][ T5816] usb 3-1: Manufacturer: syz [ 156.194585][ T5816] usb 3-1: SerialNumber: syz [ 156.331724][ T5816] usb 3-1: config 0 descriptor?? [ 156.336281][ T5816] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 156.339318][ T5816] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 156.709897][ T5891] usb 3-1: USB disconnect, device number 10 [ 156.720875][ T5891] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 156.929474][ T5807] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 157.093559][ T5807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.093589][ T5807] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.101443][ T5807] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.101469][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.101489][ T5807] usb 2-1: SerialNumber: syz [ 157.442306][ T5807] usb 2-1: 0:2 : does not exist [ 157.976279][ T5807] usb 2-1: USB disconnect, device number 4 [ 158.291237][ T6127] udevd[6127]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.739546][ T5807] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 159.928401][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.928434][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.928457][ T5807] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.928500][ T5807] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.928523][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.082143][ T7479] netlink: 32 bytes leftover after parsing attributes in process `syz.2.717'. [ 160.106177][ T5807] usb 2-1: config 0 descriptor?? [ 160.770473][ T5807] plantronics 0003:047F:FFFF.000C: unbalanced collection at end of report description [ 160.771307][ T5807] plantronics 0003:047F:FFFF.000C: parse failed [ 160.772307][ T5807] plantronics 0003:047F:FFFF.000C: probe with driver plantronics failed with error -22 [ 160.969539][ T5807] usb 2-1: USB disconnect, device number 5 [ 161.355189][ T7491] vivid-000: disconnect [ 161.368545][ T7488] vivid-000: reconnect [ 161.510682][ T5807] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 161.556955][ T7499] syz_tun: refused to change device tx_queue_len [ 161.556982][ T7499] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 161.704653][ T5807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.704696][ T5807] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.729973][ T5807] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 161.730003][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.730024][ T5807] usb 4-1: Product: syz [ 161.730038][ T5807] usb 4-1: Manufacturer: syz [ 161.730052][ T5807] usb 4-1: SerialNumber: syz [ 161.775113][ T5807] usb 4-1: config 0 descriptor?? [ 161.866020][ T5807] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 161.896886][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.897950][ T5807] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 161.898007][ T5807] usb 4-1: media controller created [ 161.949310][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.083768][ T7503] futex_wake_op: syz.4.727 tries to shift op by -1; fix this program [ 162.112373][ T5807] DVB: Unable to find symbol tda10046_attach() [ 162.112388][ T5807] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 162.112401][ T5807] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 162.391620][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 162.522236][ T5807] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 162.623741][ T5807] usb 4-1: USB disconnect, device number 7 [ 167.287013][ T5807] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 167.459700][ T5807] usb 2-1: Using ep0 maxpacket: 32 [ 167.463692][ T5807] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 167.463719][ T5807] usb 2-1: config 0 has no interface number 0 [ 167.495222][ T5807] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 167.495253][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.495272][ T5807] usb 2-1: Product: syz [ 167.495287][ T5807] usb 2-1: Manufacturer: syz [ 167.495302][ T5807] usb 2-1: SerialNumber: syz [ 167.562051][ T5807] usb 2-1: config 0 descriptor?? [ 167.601127][ T5807] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 167.954176][ T5807] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 168.100018][ T5807] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 168.284805][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 168.299575][ T5807] usb 2-1: USB disconnect, device number 6 [ 168.322190][ T5807] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 168.328113][ T5807] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 168.354888][ T5807] quatech2 2-1:0.51: device disconnected [ 169.639588][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 169.809542][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 169.817854][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 169.817883][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.817903][ T9] usb 3-1: Product: syz [ 169.817917][ T9] usb 3-1: Manufacturer: syz [ 169.817931][ T9] usb 3-1: SerialNumber: syz [ 169.904413][ T9] usb 3-1: config 0 descriptor?? [ 170.361493][ T9] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 170.412266][ T9] usb 3-1: USB disconnect, device number 11 [ 171.524560][ T7675] bond2: entered promiscuous mode [ 171.562216][ T7675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.597191][ T7675] bond0: (slave bond2): Enslaving as an active interface with an up link [ 172.416675][ T7699] netlink: 256 bytes leftover after parsing attributes in process `syz.0.814'. [ 172.416700][ T7699] netlink: 56 bytes leftover after parsing attributes in process `syz.0.814'. [ 172.539452][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 172.653606][ T7703] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 173.929123][ T7729] No buffer was provided with the request [ 173.969463][ T5816] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.170605][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.170656][ T5816] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 174.170678][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.277967][ T5816] usb 3-1: config 0 descriptor?? [ 174.725426][ T5816] steelseries 0003:1038:12B6.000D: item fetching failed at offset 5/7 [ 174.726400][ T5816] steelseries 0003:1038:12B6.000D: probe with driver steelseries failed with error -22 [ 175.203022][ T5816] usb 3-1: USB disconnect, device number 12 [ 175.559773][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 175.721462][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 175.728059][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 175.728089][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.789655][ T9] usb 5-1: config 0 descriptor?? [ 175.829185][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 176.300469][ T9] gspca_sonixj: reg_r err -71 [ 176.300582][ T9] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 176.358400][ T9] usb 5-1: USB disconnect, device number 7 [ 177.070239][ T7785] openvswitch: netlink: Missing valid actions attribute. [ 177.070272][ T7785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.259627][ T5120] Bluetooth: hci4: command 0x0406 tx timeout [ 178.090098][ T7801] syz.1.866 (7801) used greatest stack depth: 17784 bytes left [ 178.277365][ T7793] kthread_run failed with err -4 [ 179.349688][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 179.683170][ T37] audit: type=1326 audit(1762870759.495:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7808 comm="syz.4.870" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89ebadf6c9 code=0x0 [ 179.792484][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 179.792655][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.801549][ T9] usb 3-1: config 0 descriptor?? [ 179.961372][ T5807] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 180.385527][ T9] kye 0003:0458:0138.000E: unbalanced delimiter at end of report description [ 180.386378][ T9] kye 0003:0458:0138.000E: parse failed [ 180.386448][ T9] kye 0003:0458:0138.000E: probe with driver kye failed with error -22 [ 180.980638][ T5807] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 180.980668][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 180.980688][ T5807] usb 1-1: Product: syz [ 180.980703][ T5807] usb 1-1: Manufacturer: syz [ 180.980717][ T5807] usb 1-1: SerialNumber: syz [ 181.443959][ T991] usb 3-1: USB disconnect, device number 13 [ 181.548904][ T5807] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 181.912293][ T5807] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 181.912340][ T5807] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 182.442094][ T5807] usb 1-1: USB disconnect, device number 8 [ 184.657221][ T991] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 187.538557][ T991] usb 3-1: device descriptor read/all, error -71 [ 188.744269][ T7847] team_slave_0: entered promiscuous mode [ 188.744331][ T7847] team_slave_1: entered promiscuous mode [ 188.746891][ T7847] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.359467][ T991] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 191.039501][ T991] usb 3-1: Using ep0 maxpacket: 16 [ 191.043886][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.043920][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.043942][ T991] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.043986][ T991] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.044008][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.129603][ T991] usb 3-1: config 0 descriptor?? [ 193.781060][ T991] usbhid 3-1:0.0: can't add hid device: -71 [ 193.781188][ T991] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 193.838333][ T991] usb 3-1: USB disconnect, device number 16 [ 194.720110][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.720183][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.930886][ T7873] [U] [ 195.705332][ T7878] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 198.558827][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 208.206640][ T7904] syz.0.908 (7904) used greatest stack depth: 17232 bytes left [ 210.413815][ T7947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.590431][ T5969] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 211.039530][ T991] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 211.432080][ T5969] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 211.432108][ T5969] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 211.432126][ T5969] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 211.432146][ T5969] usb 5-1: config 220 has no interface number 2 [ 211.432221][ T5969] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 211.432248][ T5969] usb 5-1: config 220 interface 0 has no altsetting 0 [ 211.432266][ T5969] usb 5-1: config 220 interface 76 has no altsetting 0 [ 211.432283][ T5969] usb 5-1: config 220 interface 1 has no altsetting 0 [ 211.435773][ T5969] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 211.435802][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.435822][ T5969] usb 5-1: Product: syz [ 211.435836][ T5969] usb 5-1: Manufacturer: syz [ 211.435850][ T5969] usb 5-1: SerialNumber: syz [ 212.194574][ T5808] Bluetooth: hci2: command 0x0406 tx timeout [ 212.446077][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 212.446114][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 214.476972][ T991] usb 1-1: unable to read config index 0 descriptor/all [ 214.477024][ T991] usb 1-1: can't read configurations, error -71 [ 215.081199][ T5969] usb 5-1: selecting invalid altsetting 0 [ 215.152746][ T5969] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 215.152786][ T5969] uvcvideo 5-1:220.0: No valid video chain found. [ 215.609112][ T5969] usb 5-1: selecting invalid altsetting 0 [ 215.609150][ T5969] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 215.749411][ T5969] usb 5-1: USB disconnect, device number 9 [ 228.785751][ T5891] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 232.697558][ T5891] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 232.697598][ T5891] usb 1-1: can't read configurations, error -71 [ 232.709739][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 237.379860][ T8021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.959'. [ 237.381029][ T8021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.959'. [ 238.346922][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 241.170672][ T5891] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 241.329454][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 241.333919][ T5891] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 241.333947][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.333966][ T5891] usb 3-1: config 0 has no interface number 0 [ 241.334017][ T5891] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 241.334044][ T5891] usb 3-1: config 0 interface 8 has no altsetting 0 [ 241.337047][ T5891] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 241.337077][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.337097][ T5891] usb 3-1: Product: syz [ 241.337112][ T5891] usb 3-1: Manufacturer: syz [ 241.337127][ T5891] usb 3-1: SerialNumber: syz [ 241.621270][ T5891] usb 3-1: config 0 descriptor?? [ 242.697534][ T5891] ath6kl: Failed to submit usb control message: -71 [ 242.697587][ T5891] ath6kl: unable to send the bmi data to the device: -71 [ 242.697601][ T5891] ath6kl: Unable to send get target info: -71 [ 242.719994][ T5891] ath6kl: Failed to init ath6kl core: -71 [ 242.721636][ T5891] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 243.449227][ T5891] usb 3-1: USB disconnect, device number 17 [ 245.515926][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.526096][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.527442][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.528953][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.498329][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.339799][ T5810] Bluetooth: hci5: command tx timeout [ 251.419571][ T5810] Bluetooth: hci5: command tx timeout [ 252.691853][ T5814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.849071][ T5814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.852826][ T5814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.853905][ T5814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.854610][ T5814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.499712][ T5810] Bluetooth: hci5: command tx timeout [ 255.164388][ T5810] Bluetooth: hci6: command tx timeout [ 255.629708][ T5810] Bluetooth: hci5: command tx timeout [ 255.824818][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.824889][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.204146][ T5810] Bluetooth: hci6: command tx timeout [ 259.358756][ T5810] Bluetooth: hci6: command tx timeout [ 261.419769][ T5814] Bluetooth: hci6: command tx timeout [ 263.249471][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 272.499936][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 276.833899][ T8066] chnl_net:caif_netlink_parms(): no params data found [ 285.124081][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 285.124121][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 287.264691][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.294838][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.323589][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.355594][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.386186][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.428267][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.459056][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.800932][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.528590][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.557791][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.589105][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.617479][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.662207][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.692849][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.720401][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.777781][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.808596][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.837701][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.911598][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.939115][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.968344][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.137862][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.195776][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.226288][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.256711][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.286654][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.344180][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.373873][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.405020][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.436644][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.468437][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.501726][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.535427][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.568291][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.602525][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.643189][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.675270][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.708208][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.765756][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.796258][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.832564][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.861331][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.912632][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.945952][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.977211][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.010177][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.043500][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.132311][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.165772][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.240880][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.280864][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.312066][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.346027][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.378129][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.409287][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.442986][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.480180][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.511552][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.580428][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.612662][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.646090][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.677577][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.931909][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.951451][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.983732][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.021693][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.055181][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.086442][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.121215][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.212473][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.245317][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.278102][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.309717][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.341045][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.374578][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.406192][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.437866][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.471793][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.503652][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.540791][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.581526][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.611789][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.643806][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.677954][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.709669][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.742172][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.775853][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.807848][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.839368][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.872746][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.903175][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.934649][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.967818][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.030717][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.552476][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.564282][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.566890][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.568268][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.615076][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.300659][ T5810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.305191][ T5810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.306341][ T5810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.307471][ T5810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.308215][ T5810] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 311.659792][ T5814] Bluetooth: hci5: command tx timeout [ 313.501266][ T5814] Bluetooth: hci7: command tx timeout [ 313.749453][ T5814] Bluetooth: hci5: command tx timeout [ 315.643387][ T5814] Bluetooth: hci7: command tx timeout [ 315.819390][ T5814] Bluetooth: hci5: command tx timeout [ 317.265356][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.265469][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.285522][ T5810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.510005][ T5810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.513655][ T5810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.515778][ T5810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.516566][ T5810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 317.659641][ T5814] Bluetooth: hci7: command tx timeout [ 318.049557][ T5814] Bluetooth: hci5: command tx timeout [ 319.579531][ T5810] Bluetooth: hci6: command tx timeout [ 320.266231][ T5810] Bluetooth: hci7: command tx timeout [ 321.859542][ T5810] Bluetooth: hci6: command tx timeout [ 323.796743][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 323.899505][ T5810] Bluetooth: hci6: command tx timeout [ 325.979622][ T5810] Bluetooth: hci6: command tx timeout [ 334.075271][ T8243] kthread_run failed with err -4 [ 339.623024][ T5810] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 339.626084][ T5810] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 339.627266][ T5810] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 339.631639][ T5810] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 339.632518][ T5810] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 341.739704][ T5814] Bluetooth: hci8: command tx timeout [ 343.822150][ T5814] Bluetooth: hci8: command tx timeout [ 345.925909][ T5814] Bluetooth: hci8: command tx timeout [ 348.087108][ T5814] Bluetooth: hci8: command tx timeout [ 348.290285][ T8270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1040'. [ 349.513975][ T8212] chnl_net:caif_netlink_parms(): no params data found [ 352.052642][ T8272] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1041'. [ 353.013946][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'. [ 353.013991][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'. [ 353.014109][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'. [ 354.959814][ T8217] chnl_net:caif_netlink_parms(): no params data found [ 364.991295][ T8231] chnl_net:caif_netlink_parms(): no params data found [ 367.006712][ T5810] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 367.011798][ T5810] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 367.013558][ T5810] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 367.014695][ T5810] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 367.015445][ T5810] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 369.143429][ T5814] Bluetooth: hci9: command tx timeout [ 371.179455][ T5814] Bluetooth: hci9: command tx timeout [ 372.711509][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.749849][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.751839][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.754296][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.755711][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 373.266462][ T5814] Bluetooth: hci9: command tx timeout [ 374.899475][ T5814] Bluetooth: hci5: command tx timeout [ 375.412942][ T5814] Bluetooth: hci9: command tx timeout [ 376.949398][ T5814] Bluetooth: hci5: command tx timeout [ 378.710073][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.710148][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.019982][ T5814] Bluetooth: hci5: command tx timeout [ 379.055848][ T5810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 379.678028][ T5810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 379.962695][ T5810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 379.963855][ T5810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 379.964633][ T5810] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 381.139404][ T5814] Bluetooth: hci5: command tx timeout [ 381.478784][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.508827][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.537906][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.572035][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.604319][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.059416][ T5814] Bluetooth: hci7: command tx timeout [ 382.167614][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.559965][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.329427][ T5814] Bluetooth: hci7: command tx timeout [ 385.340549][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.403054][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.380230][ T5814] Bluetooth: hci7: command tx timeout [ 388.519767][ T5814] Bluetooth: hci7: command tx timeout [ 391.694990][ T5810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 391.860571][ T5810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 391.862997][ T5810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 391.919661][ T5810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 391.949671][ T5810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 392.492809][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.004188][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.844203][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.121561][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.139583][ T5810] Bluetooth: hci6: command tx timeout [ 394.506118][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.545087][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.606308][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.745319][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.845111][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.871148][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.905537][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.139175][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.255372][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.355672][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.455992][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.556176][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.625126][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.774516][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.144785][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.170930][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.220496][ T5810] Bluetooth: hci6: command tx timeout [ 396.242784][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.345275][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.394986][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.474075][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.554381][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.604804][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.655295][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.893901][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.954367][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.074086][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.124997][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.154293][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.196694][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.254163][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.394172][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.362663][ T5810] Bluetooth: hci6: command tx timeout [ 400.379438][ T5810] Bluetooth: hci6: command tx timeout [ 423.156513][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.165273][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.167065][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.168320][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.169025][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.267109][ T5810] Bluetooth: hci2: command tx timeout [ 427.369507][ T5810] Bluetooth: hci2: command tx timeout [ 430.099495][ T5810] Bluetooth: hci2: command tx timeout [ 432.149507][ T5810] Bluetooth: hci2: command tx timeout [ 434.886450][ T5814] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 434.919788][ T5814] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 434.929708][ T5814] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 434.936675][ T61] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 434.949902][ T61] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 435.708430][ T61] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 436.017871][ T61] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 436.020179][ T61] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 436.025495][ T61] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 436.026932][ T61] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 436.540649][ T8320] chnl_net:caif_netlink_parms(): no params data found [ 436.911068][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 436.952237][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 436.983176][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 436.999594][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 437.027652][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 437.989412][ T61] Bluetooth: hci8: command tx timeout [ 438.139609][ T61] Bluetooth: hci10: command tx timeout [ 439.141591][ T61] Bluetooth: hci5: command tx timeout [ 440.152219][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.152294][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.210510][ T61] Bluetooth: hci8: command tx timeout [ 440.219966][ T61] Bluetooth: hci10: command tx timeout [ 441.179413][ T61] Bluetooth: hci5: command tx timeout [ 442.260239][ T61] Bluetooth: hci8: command tx timeout [ 442.479553][ T61] Bluetooth: hci10: command tx timeout [ 443.259758][ T61] Bluetooth: hci5: command tx timeout [ 444.299783][ T61] Bluetooth: hci8: command tx timeout [ 444.599314][ T61] Bluetooth: hci10: command tx timeout [ 445.339661][ T61] Bluetooth: hci5: command tx timeout [ 451.019752][ T38] INFO: task syz.0.1013:8175 blocked for more than 143 seconds. [ 451.019787][ T38] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 451.019797][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.019806][ T38] task:syz.0.1013 state:D stack:25160 pid:8175 tgid:8175 ppid:5803 task_flags:0x400040 flags:0x00080003 [ 451.019878][ T38] Call Trace: [ 451.019888][ T38] [ 451.019903][ T38] __schedule+0x16f3/0x4c20 [ 451.019968][ T38] ? __pfx___schedule+0x10/0x10 [ 451.020011][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.020040][ T38] rt_mutex_schedule+0x77/0xf0 [ 451.020060][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 451.020081][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 451.020120][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 451.020145][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 451.020167][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 451.020186][ T38] ? __lock_acquire+0xab9/0xd20 [ 451.020222][ T38] ? rcu_barrier+0x4c/0x570 [ 451.020248][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 451.020274][ T38] ? rcu_barrier+0x4c/0x570 [ 451.020291][ T38] mutex_lock_nested+0x16a/0x1d0 [ 451.020310][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 451.020336][ T38] rcu_barrier+0x4c/0x570 [ 451.020357][ T38] ? rt_write_unlock+0x191/0x230 [ 451.020386][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 451.020412][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 451.020440][ T38] kvm_put_kvm+0x6ca/0xa80 [ 451.020474][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 451.020498][ T38] kvm_vm_release+0x46/0x50 [ 451.020520][ T38] __fput+0x45b/0xa80 [ 451.020552][ T38] task_work_run+0x1d4/0x260 [ 451.020575][ T38] ? __pfx_task_work_run+0x10/0x10 [ 451.020599][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 451.020627][ T38] exit_to_user_mode_loop+0xe9/0x130 [ 451.020652][ T38] do_syscall_64+0x2bd/0xfa0 [ 451.020676][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.020699][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.020718][ T38] ? clear_bhb_loop+0x60/0xb0 [ 451.020757][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.020776][ T38] RIP: 0033:0x7fc4ae04f6c9 [ 451.020800][ T38] RSP: 002b:00007ffc61629398 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 451.020819][ T38] RAX: 0000000000000000 RBX: 00007fc4ae2a7da0 RCX: 00007fc4ae04f6c9 [ 451.020833][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 451.020844][ T38] RBP: 00007fc4ae2a7da0 R08: 00000000000067e4 R09: 000000036162968f [ 451.020857][ T38] R10: 00000000005f9588 R11: 0000000000000246 R12: 0000000000047723 [ 451.020870][ T38] R13: 00007ffc61629490 R14: ffffffffffffffff R15: 00007ffc616294b0 [ 451.020904][ T38] [ 451.020933][ T38] [ 451.020933][ T38] Showing all locks held in the system: [ 451.020945][ T38] 3 locks held by kworker/u8:0/12: [ 451.020957][ T38] 3 locks held by rcuc/0/20: [ 451.020969][ T38] 5 locks held by ktimers/1/29: [ 451.020980][ T38] 1 lock held by khungtaskd/38: [ 451.020990][ T38] #0: ffffffff8d5aa840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 451.021042][ T38] 2 locks held by kworker/u8:4/88: [ 451.021058][ T38] 2 locks held by kworker/u8:6/1113: [ 451.021069][ T38] 3 locks held by kworker/u8:7/1128: [ 451.021079][ T38] 2 locks held by kworker/u8:9/1223: [ 451.021100][ T38] 2 locks held by getty/5562: [ 451.021110][ T38] #0: ffff88823bf3c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 451.021157][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 451.021213][ T38] 3 locks held by kworker/1:6/5891: [ 451.021224][ T38] 3 locks held by kworker/0:6/5992: [ 451.021236][ T38] 1 lock held by syz.4.935/7970: [ 451.021246][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.021308][ T38] 1 lock held by syz.3.945/7985: [ 451.021318][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.021362][ T38] 1 lock held by syz-executor/8045: [ 451.021372][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.021415][ T38] 1 lock held by syz-executor/8066: [ 451.021426][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.021470][ T38] 1 lock held by syz.0.1013/8175: [ 451.021479][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.021522][ T38] 1 lock held by syz.2.1024/8208: [ 451.021532][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.021575][ T38] 1 lock held by syz-executor/8212: [ 451.021585][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.021628][ T38] 1 lock held by syz-executor/8217: [ 451.021639][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.021682][ T38] 1 lock held by syz-executor/8231: [ 451.021692][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.021742][ T38] 1 lock held by syz-executor/8250: [ 451.021753][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.021797][ T38] 2 locks held by syz-executor/8292: [ 451.021807][ T38] #0: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 451.021851][ T38] #1: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.021894][ T38] 1 lock held by syz-executor/8301: [ 451.021904][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.021947][ T38] 1 lock held by syz-executor/8309: [ 451.021957][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.022000][ T38] 1 lock held by syz.1.1058/8339: [ 451.022011][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 451.022054][ T38] 2 locks held by syz-executor/8344: [ 451.022064][ T38] #0: ffffffff8ed7ef28 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 451.022113][ T38] #1: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 451.022155][ T38] 2 locks held by syz-executor/8356: [ 451.022166][ T38] 2 locks held by syz-executor/8357: [ 451.022177][ T38] 2 locks held by syz-executor/8363: [ 451.022187][ T38] #0: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 451.022228][ T38] #1: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 451.022276][ T38] [ 451.022281][ T38] ============================================= [ 451.022281][ T38] [ 451.022290][ T38] NMI backtrace for cpu 0 [ 451.022315][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 451.022335][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.022346][ T38] Call Trace: [ 451.022353][ T38] [ 451.022361][ T38] dump_stack_lvl+0x189/0x250 [ 451.022391][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.022417][ T38] ? __pfx__printk+0x10/0x10 [ 451.022451][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 451.022475][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 451.022497][ T38] ? __pfx__printk+0x10/0x10 [ 451.022523][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 451.022546][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 451.022570][ T38] watchdog+0xf60/0xfa0 [ 451.022599][ T38] ? watchdog+0x1e2/0xfa0 [ 451.022628][ T38] kthread+0x711/0x8a0 [ 451.022656][ T38] ? __pfx_watchdog+0x10/0x10 [ 451.022679][ T38] ? __pfx_kthread+0x10/0x10 [ 451.022701][ T38] ? rt_spin_unlock+0x150/0x200 [ 451.022730][ T38] ? rt_spin_unlock+0x161/0x200 [ 451.022748][ T38] ? __pfx_kthread+0x10/0x10 [ 451.022774][ T38] ret_from_fork+0x4bc/0x870 [ 451.022798][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 451.022827][ T38] ? __switch_to_asm+0x39/0x70 [ 451.022843][ T38] ? __switch_to_asm+0x33/0x70 [ 451.022859][ T38] ? __pfx_kthread+0x10/0x10 [ 451.022885][ T38] ret_from_fork_asm+0x1a/0x30 [ 451.022920][ T38] [ 451.022927][ T38] Sending NMI from CPU 0 to CPUs 1: [ 451.022952][ C1] NMI backtrace for cpu 1 [ 451.022971][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 451.022989][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.022998][ C1] RIP: 0010:stack_trace_consume_entry+0x12/0x280 [ 451.023019][ C1] Code: 94 15 09 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 <48> ba 00 00 00 00 00 fc ff df 4c 8d 47 10 4c 89 c5 48 c1 ed 03 0f [ 451.023032][ C1] RSP: 0018:ffffc90000a3ea78 EFLAGS: 00000296 [ 451.023046][ C1] RAX: ffffffff890972c6 RBX: ffffc90000a3eb80 RCX: b324fb5755d4fc00 [ 451.023059][ C1] RDX: 0000000000000001 RSI: ffffffff890972c6 RDI: ffffc90000a3eb80 [ 451.023070][ C1] RBP: ffffc90000a3eb50 R08: ffffc90000a3ef50 R09: 0000000000000000 [ 451.023081][ C1] R10: ffffc90000a3eb18 R11: ffffffff81aacce0 R12: ffff88801baf1e00 [ 451.023093][ C1] R13: ffffffff889dbe8d R14: ffffffff81aacce0 R15: ffffc90000a3eac8 [ 451.023105][ C1] FS: 0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 451.023118][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 451.023130][ C1] CR2: 00007faaa9e279e0 CR3: 000000006342a000 CR4: 00000000003526f0 [ 451.023144][ C1] Call Trace: [ 451.023150][ C1] [ 451.023155][ C1] ? nft_synproxy_eval_v6+0x376/0x560 [ 451.023177][ C1] ? skb_release_data+0x62d/0x7c0 [ 451.023194][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 451.023211][ C1] arch_stack_walk+0x110/0x150 [ 451.023233][ C1] ? nft_synproxy_eval_v6+0x376/0x560 [ 451.023255][ C1] stack_trace_save+0x9c/0xe0 [ 451.023271][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 451.023291][ C1] ? __lock_acquire+0xab9/0xd20 [ 451.023310][ C1] kasan_save_track+0x3e/0x80 [ 451.023328][ C1] ? kasan_save_track+0x3e/0x80 [ 451.023345][ C1] ? __kasan_save_free_info+0x46/0x50 [ 451.023360][ C1] ? __kasan_slab_free+0x5c/0x80 [ 451.023378][ C1] ? kmem_cache_free+0x19a/0x910 [ 451.023396][ C1] ? skb_release_data+0x62d/0x7c0 [ 451.023412][ C1] ? consume_skb+0x9e/0xf0 [ 451.023452][ C1] __kasan_save_free_info+0x46/0x50 [ 451.023467][ C1] __kasan_slab_free+0x5c/0x80 [ 451.023492][ C1] kmem_cache_free+0x19a/0x910 [ 451.023511][ C1] ? skb_release_data+0x62d/0x7c0 [ 451.023530][ C1] skb_release_data+0x62d/0x7c0 [ 451.023552][ C1] consume_skb+0x9e/0xf0 [ 451.023568][ C1] nft_synproxy_eval_v6+0x376/0x560 [ 451.023591][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 451.023612][ C1] ? nf_ip_checksum+0x13c/0x510 [ 451.023635][ C1] nft_synproxy_do_eval+0x3d7/0x570 [ 451.023654][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.023675][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 451.023695][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 451.023720][ C1] nft_do_chain+0x40c/0x1920 [ 451.023748][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 451.023765][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 451.023797][ C1] ? unwind_next_frame+0xa5/0x2390 [ 451.023816][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 451.023839][ C1] nft_do_chain_inet+0x25d/0x340 [ 451.023859][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 451.023878][ C1] ? __lock_acquire+0xab9/0xd20 [ 451.023901][ C1] ? NF_HOOK+0x9a/0x3a0 [ 451.023919][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 451.023939][ C1] nf_hook_slow+0xc5/0x220 [ 451.023958][ C1] NF_HOOK+0x206/0x3a0 [ 451.023976][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 451.023993][ C1] ? NF_HOOK+0x9a/0x3a0 [ 451.024009][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 451.024027][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 451.024050][ C1] ip6_input+0x16a/0x270 [ 451.024067][ C1] ? ip6_input+0x23/0x270 [ 451.024085][ C1] NF_HOOK+0x30c/0x3a0 [ 451.024101][ C1] ? skb_orphan+0xaf/0xd0 [ 451.024118][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 451.024134][ C1] ? NF_HOOK+0x9a/0x3a0 [ 451.024150][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 451.024168][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 451.024191][ C1] __netif_receive_skb+0xd3/0x380 [ 451.024215][ C1] ? process_backlog+0x27b/0x900 [ 451.024229][ C1] process_backlog+0x31e/0x900 [ 451.024250][ C1] __napi_poll+0xb6/0x540 [ 451.024272][ C1] net_rx_action+0x5f7/0xda0 [ 451.024285][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.024305][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 451.024330][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 451.024361][ C1] handle_softirqs+0x22f/0x710 [ 451.024384][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 451.024407][ C1] run_ktimerd+0xcf/0x190 [ 451.024425][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 451.024443][ C1] ? schedule+0x91/0x360 [ 451.024465][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 451.024487][ C1] smpboot_thread_fn+0x542/0xa60 [ 451.024506][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 451.024529][ C1] kthread+0x711/0x8a0 [ 451.024550][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 451.024568][ C1] ? __pfx_kthread+0x10/0x10 [ 451.024586][ C1] ? rt_spin_unlock+0x150/0x200 [ 451.024605][ C1] ? rt_spin_unlock+0x161/0x200 [ 451.024621][ C1] ? __pfx_kthread+0x10/0x10 [ 451.024641][ C1] ret_from_fork+0x4bc/0x870 [ 451.024660][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 451.024681][ C1] ? __switch_to_asm+0x39/0x70 [ 451.024695][ C1] ? __switch_to_asm+0x33/0x70 [ 451.024710][ C1] ? __pfx_kthread+0x10/0x10 [ 451.024730][ C1] ret_from_fork_asm+0x1a/0x30 [ 451.024754][ C1] [ 455.602155][ T8371] syz-executor: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 455.602345][ T8371] CPU: 0 UID: 0 PID: 8371 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 455.602367][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 455.602378][ T8371] Call Trace: [ 455.602385][ T8371] [ 455.602394][ T8371] dump_stack_lvl+0x189/0x250 [ 455.602427][ T8371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.602453][ T8371] ? __pfx__printk+0x10/0x10 [ 455.602475][ T8371] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 455.602496][ T8371] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 455.602519][ T8371] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 455.602543][ T8371] warn_alloc+0x22e/0x3b0 [ 455.602578][ T8371] ? __pfx_warn_alloc+0x10/0x10 [ 455.602612][ T8371] ? __get_vm_area_node+0x2bc/0x350 [ 455.602636][ T8371] ? kcov_ioctl+0x58/0x650 [ 455.602663][ T8371] __vmalloc_node_range_noprof+0x690/0x12d0 [ 455.602710][ T8371] ? smack_file_ioctl+0x2ac/0x340 [ 455.602740][ T8371] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 455.602773][ T8371] vmalloc_user_noprof+0xad/0xf0 [ 455.602796][ T8371] ? kcov_ioctl+0x58/0x650 [ 455.602820][ T8371] kcov_ioctl+0x58/0x650 [ 455.602843][ T8371] ? bpf_lsm_file_ioctl+0x9/0x20 [ 455.602860][ T8371] ? __pfx_kcov_ioctl+0x10/0x10 [ 455.602883][ T8371] __se_sys_ioctl+0xff/0x170 [ 455.602906][ T8371] do_syscall_64+0xfa/0xfa0 [ 455.602929][ T8371] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.602953][ T8371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.602970][ T8371] ? clear_bhb_loop+0x60/0xb0 [ 455.602992][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.603009][ T8371] RIP: 0033:0x7f8acb60f2cb [ 455.603026][ T8371] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 455.603041][ T8371] RSP: 002b:00007ffc70a939a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.603060][ T8371] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f8acb60f2cb [ 455.603073][ T8371] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7 [ 455.603086][ T8371] RBP: 00007f8acb865f40 R08: 00000000000000da R09: 0000000000000000 [ 455.603098][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.603109][ T8371] R13: 0000000000000003 R14: 00007ffc70a93ce8 R15: 0000000000000000 [ 455.603144][ T8371] [ 455.603156][ T8371] Mem-Info: [ 455.603165][ T8371] active_anon:258 inactive_anon:5634 isolated_anon:0 [ 455.603165][ T8371] active_file:6141 inactive_file:37130 isolated_file:0 [ 455.603165][ T8371] unevictable:768 dirty:224 writeback:0 [ 455.603165][ T8371] slab_reclaimable:11539 slab_unreclaimable:178051 [ 455.603165][ T8371] mapped:51683 shmem:1355 pagetables:3119 [ 455.603165][ T8371] sec_pagetables:0 bounce:0 [ 455.603165][ T8371] kernel_misc_reclaimable:0 [ 455.603165][ T8371] free:1193912 free_pcp:1116 free_cma:0 [ 455.603220][ T8371] Node 0 active_anon:1032kB inactive_anon:22536kB active_file:24364kB inactive_file:148520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:206732kB dirty:892kB writeback:0kB shmem:3884kB kernel_stack:13456kB pagetables:12332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 455.603269][ T8371] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 455.603310][ T8371] Node 0 DMA free:15288kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 455.603375][ T8371] lowmem_reserve[]: 0 2515 2517 2517 2517 [ 455.603407][ T8371] Node 0 DMA32 free:849084kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1032kB inactive_anon:22536kB active_file:24364kB inactive_file:148520kB unevictable:1536kB writepending:892kB zspages:0kB present:3129332kB managed:2576092kB mlocked:0kB bounce:0kB free_pcp:4436kB local_pcp:0kB free_cma:0kB [ 455.603466][ T8371] lowmem_reserve[]: 0 0 1 1 1 [ 455.603496][ T8371] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.603549][ T8371] lowmem_reserve[]: 0 0 0 0 0 [ 455.603579][ T8371] Node 1 Normal free:3911276kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.603635][ T8371] lowmem_reserve[]: 0 0 0 0 0 [ 455.603665][ T8371] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15288kB [ 455.603802][ T8371] Node 0 DMA32: 676*4kB (UM) 96*8kB (UME) 293*16kB (UM) 178*32kB (UME) 71*64kB (UME) 48*128kB (UME) 25*256kB (UME) 10*512kB (UME) 10*1024kB (M) 8*2048kB (UME) 192*4096kB (M) = 849120kB [ 455.603948][ T8371] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 455.604040][ T8371] Node 1 Normal: 203*4kB (UME) 52*8kB (UME) 32*16kB (UME) 193*32kB (UME) 92*64kB (UME) 31*128kB (UME) 13*256kB (UME) 6*512kB (UM) 4*1024kB (UM) 4*2048kB (UME) 946*4096kB (M) = 3911276kB [ 455.604186][ T8371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.604202][ T8371] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 455.604217][ T8371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.604232][ T8371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 455.604247][ T8371] 44625 total pagecache pages [ 455.604265][ T8371] 0 pages in swap cache [ 455.604271][ T8371] Free swap = 124996kB [ 455.604278][ T8371] Total swap = 124996kB [ 455.604285][ T8371] 2097051 pages RAM [ 455.604291][ T8371] 0 pages HighMem/MovableOnly [ 455.604298][ T8371] 421002 pages reserved [ 455.604304][ T8371] 0 pages cma reserved