last executing test programs: 1m40.781015696s ago: executing program 0 (id=2040): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe23, 0xc6, @ipv4={'\x00', '\xff\xff', @empty}, 0x7eff}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x6, @empty, 0xb}, 0x1c) 1m40.488005337s ago: executing program 0 (id=2043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800100004090000080011"], 0x44}}, 0x44000) 1m40.125190436s ago: executing program 0 (id=2046): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 1m39.863324549s ago: executing program 0 (id=2048): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r0, r0}, &(0x7f0000000040)=""/209, 0xd1, &(0x7f0000000140)={&(0x7f0000000000)={'poly1305\x00'}}) 1m39.586846305s ago: executing program 0 (id=2050): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() tkill(r0, 0x12) 1m39.267473519s ago: executing program 0 (id=2052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x400}) 1m38.634795865s ago: executing program 3 (id=2057): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000002640)=""/4115, 0x1013}, {&(0x7f0000001240)=""/107, 0x6b}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000340)=""/181, 0xb5}], 0x7}, 0x0) 1m38.564901463s ago: executing program 3 (id=2058): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x2}) 1m38.429203738s ago: executing program 3 (id=2060): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x20}, {r0, 0x288}], 0x2, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) 1m37.447301372s ago: executing program 3 (id=2067): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x3b}, {@in6=@private2={0xfc, 0x2, '\x00', 0x41}, 0x2, 0x32}, @in6=@remote, {0x7, 0x0, 0xfffffffffffeffff, 0x0, 0x4, 0x6, 0x9}, {0xfffffffffffff461, 0x0, 0x0, 0x10000}, {0x3, 0x2}, 0x70bd2a, 0x0, 0x2, 0x0, 0x0, 0x30}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[], 0x34c}, 0x1, 0xf0}, 0x0) 1m37.194476871s ago: executing program 3 (id=2068): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 1m36.922137921s ago: executing program 3 (id=2069): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="8dffa88801010000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00R'], 0x44}}, 0x8000) 1m34.304021299s ago: executing program 1 (id=2084): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x8000, 0x0, 0x2}, {0x4, 0x100000000, 0x3ffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xe086}, {0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0xa, @in=@empty, 0x0, 0x5, 0x2, 0x0, 0x2000000}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x5}, 0x1c) 1m34.235661167s ago: executing program 1 (id=2085): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x1f4, 0x0, 0x11, 0x148, 0x0, 0x10, 0x1fc, 0x2a8, 0x2a8, 0x1fc, 0x2a8, 0xac, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'bridge0\x00', 'macvlan0\x00'}, 0x10, 0x70, 0x90, 0x1c}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x250) ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f0000000100)) 1m34.136100118s ago: executing program 1 (id=2086): syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="b6", 0x1}], 0x1) 1m30.912786427s ago: executing program 1 (id=2089): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close(0x3) 1m30.878304605s ago: executing program 1 (id=2090): io_setup(0x800, &(0x7f0000000440)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x4f}]) 1m30.535769699s ago: executing program 1 (id=2091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x0, 0x1}) 1m26.156208407s ago: executing program 4 (id=2100): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) 1m25.984928232s ago: executing program 4 (id=2101): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, r1, 0x37, 0x0, r1, @void, @value=r1}, 0x20) 1m25.650320644s ago: executing program 4 (id=2102): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001a00230401000000fbdbdf250a8000020000ff"], 0x2c}}, 0x0) 1m25.486468785s ago: executing program 4 (id=2104): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)={0x38, r0, 0x10ada85e65c25359, 0xfffffffd, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x38}}, 0x0) 1m25.32319889s ago: executing program 4 (id=2106): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0x7, 0x99, {0x6d, 0x11}}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x28}}, 0x0) 1m25.158042425s ago: executing program 4 (id=2107): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x20000b) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x0, 0x0}) 1m24.143659274s ago: executing program 32 (id=2052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x400}) 1m21.913709573s ago: executing program 2 (id=2110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1m21.758404536s ago: executing program 33 (id=2069): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="8dffa88801010000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00R'], 0x44}}, 0x8000) 1m21.712201031s ago: executing program 2 (id=2112): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1m21.166338347s ago: executing program 2 (id=2113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, r1, 0xb03, 0x3, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x4}]}]}, 0x20}}, 0x0) 1m20.855740399s ago: executing program 2 (id=2114): set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 1m20.154385142s ago: executing program 2 (id=2115): request_key(&(0x7f0000000500)='rxrpc\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f00000000c0)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\nT\xdd\xd1{\xff\xcb\xdb\xb1\xfc\xf4\xbc\xc3\x83\xdd31\xc2s\xcb\xbd\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\xa9\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\x06\x02\t\x17o\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17Zf9\xcc\xdcR\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@', 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002a80)={0x2020}, 0x2020) 1m19.919614845s ago: executing program 2 (id=2116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) 1m15.060942962s ago: executing program 34 (id=2091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x0, 0x1}) 1m14.711190153s ago: executing program 5 (id=2109): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000500)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) 1m14.342480234s ago: executing program 5 (id=2118): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000680)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "66b400", 0x0, 0x87, 0xff, @private1, @remote}}}}, 0x0) 1m13.998066475s ago: executing program 5 (id=2119): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0xfffc, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x10000}, {0x3}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) 1m13.652354225s ago: executing program 5 (id=2120): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0xa) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) 1m13.268438976s ago: executing program 5 (id=2121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) 1m9.830163818s ago: executing program 35 (id=2107): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x20000b) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x0, 0x0}) 1m4.656891205s ago: executing program 36 (id=2116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) 58.082013688s ago: executing program 37 (id=2121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) 41.770439785s ago: executing program 9 (id=2135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000980)={0x4, 0x0, @pic={0x52, 0x9, 0x2, 0x6, 0xbf, 0x4, 0xb, 0x6, 0x3, 0x1, 0x3, 0x23, 0xf, 0x0, 0x4e, 0x8}}) 33.841739721s ago: executing program 7 (id=2202): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 33.202207852s ago: executing program 7 (id=2204): r0 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e1e, 0xb, @remote, 0x80}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x40800, &(0x7f00000002c0)={0xa, 0x0, 0x6, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 32.895500066s ago: executing program 7 (id=2205): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="400cff0300000000000043"], 0x0, 0x0, 0x0, 0x0}, 0x0) 32.415721466s ago: executing program 8 (id=2207): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xc) 31.310941912s ago: executing program 8 (id=2211): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 30.966381568s ago: executing program 8 (id=2213): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$dsp(r0, &(0x7f0000000300)="c9", 0x1) ppoll(&(0x7f00000000c0)=[{r0, 0x400}], 0x1, &(0x7f0000000100), 0x0, 0x0) 30.569490728s ago: executing program 8 (id=2216): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) write$binfmt_misc(r0, 0x0, 0x0) 30.25014718s ago: executing program 8 (id=2218): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x7, 0x0, &(0x7f0000000200)) 29.457090685s ago: executing program 7 (id=2220): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa041, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 29.146029655s ago: executing program 7 (id=2222): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0x200, 0x0, 0x0, 0x4000002}) 28.811028225s ago: executing program 7 (id=2224): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000001540)=0x1) 28.198957129s ago: executing program 8 (id=2225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x48000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0xda, 0xc, 0x1000, 0xfffffffffffffffa, 0x80000007ffffffd}) 26.538439012s ago: executing program 38 (id=2135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000980)={0x4, 0x0, @pic={0x52, 0x9, 0x2, 0x6, 0xbf, 0x4, 0xb, 0x6, 0x3, 0x1, 0x3, 0x23, 0xf, 0x0, 0x4e, 0x8}}) 20.729144324s ago: executing program 6 (id=2231): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r1}}, 0x18) 20.553484797s ago: executing program 6 (id=2232): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 17.158314287s ago: executing program 6 (id=2233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000006700000008003d01"], 0x1c}}, 0x0) 16.901011557s ago: executing program 6 (id=2234): r0 = syz_io_uring_setup(0x71e2, &(0x7f0000000280)={0x0, 0x0, 0x10180, 0x5, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000080)) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x2000000, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 15.730683393s ago: executing program 6 (id=2235): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 15.225840728s ago: executing program 6 (id=2236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x95, @ioapic={0x5000, 0x0, 0x81, 0x6, 0x0, [{0x7, 0x22}, {0x2, 0x4, 0x6, '\x00', 0x8}, {0x6, 0x4, 0xfb, '\x00', 0xb}, {0x9, 0x5, 0xf7, '\x00', 0x6}, {0xda, 0x2, 0xee, '\x00', 0x7}, {0x0, 0x4, 0xa, '\x00', 0x6}, {0x8, 0x8, 0x6, '\x00', 0xfc}, {0x2b, 0x7, 0x80, '\x00', 0x80}, {0x9, 0x2e, 0xc, '\x00', 0x8}, {0x2, 0x3, 0x4, '\x00', 0x9}, {0x5, 0x8, 0x4, '\x00', 0x7}, {0x1, 0x1, 0x8b, '\x00', 0x2}, {0x1, 0x1, 0x0, '\x00', 0x22}, {0x6, 0x0, 0x9, '\x00', 0xf9}, {0x4, 0x1, 0x6, '\x00', 0x8}, {0x9, 0x2, 0x5, '\x00', 0x3}, {0x9, 0x89, 0x9, '\x00', 0x1b}, {0x9, 0xe, 0x6, '\x00', 0x4}, {0x2, 0xf9, 0xe, '\x00', 0x9}, {0x5, 0x7, 0x6, '\x00', 0xf6}, {0x6, 0x7, 0x1, '\x00', 0x8}, {0xfa, 0x8, 0x1, '\x00', 0x5}, {0x6, 0x20, 0x2, '\x00', 0x5}, {0x80, 0x4, 0x5, '\x00', 0x8f}]}}) 13.504929317s ago: executing program 39 (id=2224): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000001540)=0x1) 12.960161329s ago: executing program 40 (id=2225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x48000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0xda, 0xc, 0x1000, 0xfffffffffffffffa, 0x80000007ffffffd}) 0s ago: executing program 41 (id=2236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x95, @ioapic={0x5000, 0x0, 0x81, 0x6, 0x0, [{0x7, 0x22}, {0x2, 0x4, 0x6, '\x00', 0x8}, {0x6, 0x4, 0xfb, '\x00', 0xb}, {0x9, 0x5, 0xf7, '\x00', 0x6}, {0xda, 0x2, 0xee, '\x00', 0x7}, {0x0, 0x4, 0xa, '\x00', 0x6}, {0x8, 0x8, 0x6, '\x00', 0xfc}, {0x2b, 0x7, 0x80, '\x00', 0x80}, {0x9, 0x2e, 0xc, '\x00', 0x8}, {0x2, 0x3, 0x4, '\x00', 0x9}, {0x5, 0x8, 0x4, '\x00', 0x7}, {0x1, 0x1, 0x8b, '\x00', 0x2}, {0x1, 0x1, 0x0, '\x00', 0x22}, {0x6, 0x0, 0x9, '\x00', 0xf9}, {0x4, 0x1, 0x6, '\x00', 0x8}, {0x9, 0x2, 0x5, '\x00', 0x3}, {0x9, 0x89, 0x9, '\x00', 0x1b}, {0x9, 0xe, 0x6, '\x00', 0x4}, {0x2, 0xf9, 0xe, '\x00', 0x9}, {0x5, 0x7, 0x6, '\x00', 0xf6}, {0x6, 0x7, 0x1, '\x00', 0x8}, {0xfa, 0x8, 0x1, '\x00', 0x5}, {0x6, 0x20, 0x2, '\x00', 0x5}, {0x80, 0x4, 0x5, '\x00', 0x8f}]}}) kernel console output (not intermixed with test programs): b 2-1: config 0 interface 0 has no altsetting 0 [ 213.618010][ T5883] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.618068][ T5883] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.618097][ T5883] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.632341][ T5883] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 213.632375][ T5883] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 213.632398][ T5883] usb 2-1: Product: syz [ 213.632413][ T5883] usb 2-1: Manufacturer: syz [ 213.632429][ T5883] usb 2-1: SerialNumber: syz [ 213.635648][ T5883] usb 2-1: config 0 descriptor?? [ 213.782572][ T5883] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 213.821897][ T30] audit: type=1326 audit(1745613846.577:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.4.1716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 213.858683][ T30] audit: type=1326 audit(1745613846.577:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.4.1716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 213.921642][ T30] audit: type=1326 audit(1745613846.587:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.4.1716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 213.944239][ T30] audit: type=1326 audit(1745613846.587:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.4.1716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 213.968387][ T30] audit: type=1326 audit(1745613846.587:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.4.1716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 213.991185][ T30] audit: type=1326 audit(1745613846.647:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.4.1716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=92 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 214.013966][ T30] audit: type=1326 audit(1745613846.647:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.4.1716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 214.168235][ T9] usb 2-1: USB disconnect, device number 21 [ 214.182263][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 215.282909][ T9615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1748'. [ 215.574433][ T9632] tipc: Enabled bearer , priority 10 [ 215.581697][ T917] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 215.611832][ T9633] netlink: 62967 bytes leftover after parsing attributes in process `syz.0.1756'. [ 215.767627][ T917] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.800987][ T917] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.816860][ T9645] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 215.821714][ T917] usb 3-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.849636][ T917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.869150][ T917] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 215.886285][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.907560][ T917] usb 3-1: config 0 descriptor?? [ 215.941696][ T5883] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 216.067075][ T9652] tipc: Enabling of bearer <³nh:t> rejected, media not registered [ 216.103927][ T5883] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.131544][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.151587][ T5883] usb 5-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 216.188388][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.215184][ T5883] usb 5-1: config 0 descriptor?? [ 216.353766][ T917] cypress 0003:04B4:0001.003D: unknown main item tag 0x0 [ 216.369871][ T917] cypress 0003:04B4:0001.003D: unknown main item tag 0x0 [ 216.383966][ T917] cypress 0003:04B4:0001.003D: unknown main item tag 0x0 [ 216.402460][ T9667] netlink: 632 bytes leftover after parsing attributes in process `syz.3.1773'. [ 216.414276][ T917] cypress 0003:04B4:0001.003D: unknown main item tag 0x0 [ 216.421388][ T917] cypress 0003:04B4:0001.003D: unknown main item tag 0x0 [ 216.442996][ T917] cypress 0003:04B4:0001.003D: unknown main item tag 0x0 [ 216.482185][ T917] cypress 0003:04B4:0001.003D: unknown main item tag 0x0 [ 216.500471][ T917] cypress 0003:04B4:0001.003D: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.2-1/input0 [ 216.615131][ T917] usb 3-1: USB disconnect, device number 26 [ 216.692120][ T5883] holtek_mouse 0003:04D9:A04A.003E: hidraw0: USB HID v0.00 Device [HID 04d9:a04a] on usb-dummy_hcd.4-1/input0 [ 216.850364][ T5883] usb 5-1: USB disconnect, device number 24 [ 216.951618][ T5882] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 217.113950][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.125170][ T5882] usb 2-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 217.134608][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.148198][ T5882] usb 2-1: config 0 descriptor?? [ 217.161605][ T917] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 217.205578][ T9689] netlink: 'syz.2.1784': attribute type 1 has an invalid length. [ 217.231741][ T5880] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 217.331612][ T917] usb 4-1: Using ep0 maxpacket: 32 [ 217.338512][ T917] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 217.348640][ T917] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 217.361553][ T917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 217.370584][ T917] usb 4-1: config 1 has no interface number 0 [ 217.379152][ T917] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.390723][ T917] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 217.404064][ T917] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 217.413915][ T917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.424234][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 217.441381][ T5880] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 217.459148][ T917] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 217.466361][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.497847][ T5880] usb 1-1: config 0 descriptor?? [ 217.571754][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 217.587164][ T5882] hid-alps 0003:044E:121E.003F: item fetching failed at offset 5/7 [ 217.598096][ T5882] hid-alps 0003:044E:121E.003F: parse failed [ 217.605424][ T5882] hid-alps 0003:044E:121E.003F: probe with driver hid-alps failed with error -22 [ 217.687614][ T917] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 217.736465][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.748523][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 217.761615][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.777480][ T9] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 217.787629][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.798824][ T9] usb 3-1: Product: syz [ 217.803875][ T9] usb 3-1: Manufacturer: syz [ 217.808595][ T9] usb 3-1: SerialNumber: syz [ 217.809101][ T917] usb 2-1: USB disconnect, device number 22 [ 217.816335][ T9] usb 3-1: config 0 descriptor?? [ 217.831507][ T9693] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 217.920664][ T5880] hid (null): report_id 3552984689 is invalid [ 217.934496][ T5880] aquacomputer_d5next 0003:0C70:F011.0040: report_id 3552984689 is invalid [ 217.944080][ T5880] aquacomputer_d5next 0003:0C70:F011.0040: item 0 4 1 8 parsing failed [ 217.953922][ T5880] aquacomputer_d5next 0003:0C70:F011.0040: probe with driver aquacomputer_d5next failed with error -22 [ 218.056076][ T9] powermate: unknown product id 0240 [ 218.063232][ T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 218.076009][ T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 218.126266][ T9] usb 4-1: USB disconnect, device number 30 [ 218.169744][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 218.189337][ T5883] usb 1-1: USB disconnect, device number 24 [ 218.523695][ C0] powermate: config urb returned -71 [ 218.529272][ C0] powermate: config urb returned -71 [ 218.535478][ C0] powermate: config urb returned -71 [ 218.538865][ T917] usb 3-1: USB disconnect, device number 27 [ 218.540840][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 219.537829][ T30] audit: type=1326 audit(1745613852.297:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 219.614945][ T30] audit: type=1326 audit(1745613852.297:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 219.637804][ T30] audit: type=1326 audit(1745613852.297:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 219.669572][ T30] audit: type=1326 audit(1745613852.297:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 219.708858][ T30] audit: type=1326 audit(1745613852.297:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 219.730794][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.759453][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1823'. [ 219.772368][ T30] audit: type=1326 audit(1745613852.297:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=379 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 219.777902][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 219.795181][ T30] audit: type=1326 audit(1745613852.297:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 219.813915][ T9769] netlink: 'syz.2.1823': attribute type 14 has an invalid length. [ 219.837983][ T9769] netlink: 'syz.2.1823': attribute type 12 has an invalid length. [ 219.841811][ T30] audit: type=1326 audit(1745613852.297:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 219.891646][ T917] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 219.937919][ T9775] netlink: 'syz.1.1825': attribute type 15 has an invalid length. [ 220.064053][ T917] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 220.081522][ T917] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 220.104124][ T917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 220.118972][ T917] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.131295][ T917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 220.145570][ T917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 220.160009][ T917] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 220.169629][ T917] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 220.185931][ T917] usb 5-1: Product: syz [ 220.190280][ T917] usb 5-1: Manufacturer: syz [ 220.222017][ T9764] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 220.233625][ T917] cdc_wdm 5-1:1.0: skipping garbage [ 220.238897][ T917] cdc_wdm 5-1:1.0: skipping garbage [ 220.262408][ T917] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 220.271566][ T917] cdc_wdm 5-1:1.0: Unknown control protocol [ 220.397647][ T9792] netlink: 'syz.1.1833': attribute type 29 has an invalid length. [ 220.495395][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 220.502268][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 220.508639][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 220.515274][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 220.525322][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 220.532019][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 220.539078][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 220.545725][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 220.552130][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 220.558767][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 220.565109][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 220.571753][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 220.578060][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 220.584714][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 220.591509][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 220.598157][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 220.606884][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 220.613541][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 220.620886][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 220.627531][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 220.643741][ T30] audit: type=1326 audit(1745613853.357:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.3.1822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7fc00000 [ 220.676781][ T5883] usb 5-1: USB disconnect, device number 25 [ 220.731883][ T30] audit: type=1326 audit(1745613853.357:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.3.1822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf711e539 code=0x7fc00000 [ 221.698479][ T9857] netlink: 'syz.0.1863': attribute type 3 has an invalid length. [ 221.716227][ T9857] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1863'. [ 221.745610][ T5880] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 221.871578][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 221.923960][ T5880] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 221.941861][ T5880] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.971584][ T5880] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.982415][ T5880] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 221.993789][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.012206][ T5880] usb 2-1: config 0 descriptor?? [ 222.042007][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 222.049420][ T24] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 222.067235][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.087234][ T24] usb 4-1: config 0 descriptor?? [ 222.372908][ T5883] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 222.544066][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 222.554278][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.572703][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.586051][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 222.600333][ T5883] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 222.614527][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.628692][ T5883] usb 1-1: config 0 descriptor?? [ 222.649126][ T5880] usb 2-1: string descriptor 0 read error: -71 [ 222.658000][ T5880] uclogic 0003:5543:3031.0041: failed retrieving string descriptor #200: -71 [ 222.678390][ T5880] uclogic 0003:5543:3031.0041: failed retrieving pen parameters: -71 [ 222.687740][ T5880] uclogic 0003:5543:3031.0041: failed probing pen v2 parameters: -71 [ 222.705442][ T5880] uclogic 0003:5543:3031.0041: failed probing parameters: -71 [ 222.713317][ T5880] uclogic 0003:5543:3031.0041: probe with driver uclogic failed with error -71 [ 222.725925][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 222.747771][ T5880] usb 2-1: USB disconnect, device number 23 [ 222.766690][ T24] asix 4-1:0.0: probe with driver asix failed with error -71 [ 222.813608][ T24] usb 4-1: USB disconnect, device number 31 [ 223.056742][ T5883] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 223.076354][ T5883] microsoft 0003:045E:07DA.0042: ignoring exceeding usage max [ 223.105826][ T5883] microsoft 0003:045E:07DA.0042: No inputs registered, leaving [ 223.132084][ T5883] microsoft 0003:045E:07DA.0042: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 223.149985][ T5883] microsoft 0003:045E:07DA.0042: no inputs found [ 223.157546][ T5883] microsoft 0003:045E:07DA.0042: could not initialize ff, continuing anyway [ 223.162420][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1888'. [ 223.337824][ T5883] usb 1-1: USB disconnect, device number 25 [ 224.291742][ T5883] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 224.457260][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.497953][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.580477][ T5883] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 224.619934][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.682788][ T5883] usb 4-1: config 0 descriptor?? [ 225.149518][ T5883] cypress 0003:04B4:DE61.0043: item fetching failed at offset 5/7 [ 225.166619][ T5883] cypress 0003:04B4:DE61.0043: parse failed [ 225.184728][ T5883] cypress 0003:04B4:DE61.0043: probe with driver cypress failed with error -22 [ 225.441644][ T5883] usb 4-1: USB disconnect, device number 32 [ 226.604860][ T5884] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 226.795598][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 226.823774][ T9998] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1926'. [ 226.844487][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.893660][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.962441][ T5884] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 227.027655][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.112898][ T5884] usb 2-1: config 0 descriptor?? [ 227.634113][ T5884] logitech 0003:046D:C20E.0044: rdesc size test failed for formula gp [ 227.692440][ T5884] logitech 0003:046D:C20E.0044: unbalanced delimiter at end of report description [ 227.778879][ T5884] logitech 0003:046D:C20E.0044: parse failed [ 227.815829][ T5884] logitech 0003:046D:C20E.0044: probe with driver logitech failed with error -22 [ 227.919715][T10009] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1933'. [ 227.940728][ T5884] usb 2-1: USB disconnect, device number 24 [ 228.026626][T10009] netlink: 'syz.2.1933': attribute type 6 has an invalid length. [ 228.105704][T10009] netlink: 'syz.2.1933': attribute type 5 has an invalid length. [ 228.155365][T10009] netlink: 'syz.2.1933': attribute type 4 has an invalid length. [ 229.096787][ T5880] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 229.866643][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1944'. [ 230.431653][ T5884] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 230.508058][T10045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.520382][T10045] team0: Port device bond1 added [ 230.591526][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 230.599272][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.626669][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.659347][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.695001][ T5884] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.718881][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.763432][ T5884] usb 2-1: config 0 descriptor?? [ 231.229261][ T5884] microsoft 0003:045E:07DA.0045: unbalanced delimiter at end of report description [ 231.291346][ T5884] microsoft 0003:045E:07DA.0045: parse failed [ 231.335621][ T5884] microsoft 0003:045E:07DA.0045: probe with driver microsoft failed with error -22 [ 231.363159][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1953'. [ 231.538636][ T5884] usb 2-1: USB disconnect, device number 25 [ 232.311591][ T5884] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 232.509904][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.581898][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.631871][ T5884] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 232.697400][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.762728][ T5884] usb 5-1: config 0 descriptor?? [ 233.147812][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 233.249152][ T5884] petalynx 0003:18B1:0037.0046: unknown main item tag 0x0 [ 233.290836][ T5884] petalynx 0003:18B1:0037.0046: item fetching failed at offset 3/5 [ 233.346486][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 233.355691][ T5884] petalynx 0003:18B1:0037.0046: parse failed [ 233.401775][ T5884] petalynx 0003:18B1:0037.0046: probe with driver petalynx failed with error -22 [ 233.504877][ T5884] usb 5-1: USB disconnect, device number 26 [ 233.541748][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 233.584744][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 233.675581][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 233.757598][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.857263][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 233.907770][ T9] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 233.960001][ T9] usb 1-1: Product: syz [ 233.980722][ T9] usb 1-1: Manufacturer: syz [ 234.002202][ T9] usb 1-1: SerialNumber: syz [ 234.064107][ T9] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input24 [ 234.533608][ T9] usb 1-1: USB disconnect, device number 26 [ 234.707067][ T9] appletouch 1-1:1.0: input: appletouch disconnected [ 235.050317][ C1] sched: DL replenish lagged too much [ 235.172073][ T5884] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 235.251354][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 235.251374][ T30] audit: type=1326 audit(1745613868.007:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.3.1982" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 235.400977][ T5884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.441700][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.464607][ T30] audit: type=1326 audit(1745613868.047:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.3.1982" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 235.550929][ T5884] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 235.579819][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.600849][ T30] audit: type=1326 audit(1745613868.067:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.3.1982" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 235.647784][ T5884] usb 5-1: SerialNumber: syz [ 235.750354][ T30] audit: type=1326 audit(1745613868.067:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.3.1982" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 235.889743][ T30] audit: type=1326 audit(1745613868.077:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.3.1982" exe="/root/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 235.940296][ T5884] usb 5-1: 0:2 : does not exist [ 236.066458][ T30] audit: type=1326 audit(1745613868.077:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.3.1982" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 236.115059][ T5884] usb 5-1: USB disconnect, device number 27 [ 236.273887][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'. [ 236.332576][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1987'. [ 236.427142][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.331656][ T5884] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 237.488524][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1997'. [ 237.532406][ T5884] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.586033][ T5884] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.638549][ T5884] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 237.706872][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 237.742763][ T5884] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 237.791116][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.860956][ T5884] usb 4-1: config 0 descriptor?? [ 237.884249][T10142] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 238.061751][ T5883] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 238.241751][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 238.291037][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.361764][ T5883] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 238.409811][ T5884] lenovo 0003:17EF:60B5.0047: ignoring exceeding usage max [ 238.441941][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.500156][ T5883] usb 2-1: config 0 descriptor?? [ 238.523220][ T5884] lenovo 0003:17EF:60B5.0047: hidraw0: USB HID v0.00 Device [HID 17ef:60b5] on usb-dummy_hcd.3-1/input0 [ 238.677600][ T5884] usb 4-1: USB disconnect, device number 33 [ 239.069049][ T5883] apple 0003:05AC:024B.0048: item fetching failed at offset 2/69 [ 239.110040][ T5883] apple 0003:05AC:024B.0048: parse failed [ 239.141758][ T5883] apple 0003:05AC:024B.0048: probe with driver apple failed with error -22 [ 239.348121][ T5883] usb 2-1: USB disconnect, device number 26 [ 240.423177][T10193] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2018'. [ 240.969787][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2025'. [ 241.680100][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2033'. [ 242.795050][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2042'. [ 242.839741][T10244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2042'. [ 244.828602][T10280] vlan2: entered promiscuous mode [ 244.841702][T10280] dummy0: entered promiscuous mode [ 245.769599][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 245.782531][ T5884] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 245.912473][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 245.952492][ T5884] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 245.972355][ T5884] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.005705][ T5884] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.041540][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.068779][ T5884] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.086930][ T5884] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.126249][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.144855][T10303] dummy0: entered promiscuous mode [ 246.157639][ T5884] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.175926][ T5884] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.206238][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.236695][ T5884] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.254596][ T5884] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.284569][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.306544][ T5884] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.331335][ T5884] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.365626][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.385213][ T5884] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.401602][T10305] team_slave_0: entered promiscuous mode [ 246.407627][T10305] team_slave_1: entered promiscuous mode [ 246.418719][ T5884] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.440164][T10305] macsec2: entered promiscuous mode [ 246.445839][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.460460][T10305] team0: entered promiscuous mode [ 246.470385][ T5884] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.484656][T10305] bond1: entered promiscuous mode [ 246.494416][ T5884] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.511047][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.525154][T10305] team0: left promiscuous mode [ 246.536660][ T5884] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.549169][T10305] bond1: left promiscuous mode [ 246.557862][T10305] team_slave_0: left promiscuous mode [ 246.563427][T10305] team_slave_1: left promiscuous mode [ 246.576424][ T5884] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.595533][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.610716][ T5884] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 246.626761][ T5884] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 246.639503][ T5884] usb 2-1: Product: syz [ 246.648223][ T5884] usb 2-1: Manufacturer: syz [ 246.654495][ T5884] usb 2-1: SerialNumber: syz [ 246.668636][ T5884] usb 2-1: config 0 descriptor?? [ 246.698673][ T5884] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 246.986007][ T5884] usb 2-1: USB disconnect, device number 27 [ 247.010212][ T5884] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 247.448707][T10311] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2071'. [ 247.476482][T10311] tipc: Invalid UDP bearer configuration [ 247.476548][T10311] tipc: Enabling of bearer rejected, failed to enable media [ 247.635740][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2072'. [ 247.673850][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2072'. [ 249.331658][ T5883] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 249.501281][ T5883] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 249.513669][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 249.526598][ T5883] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.544537][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.557363][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 249.579558][ T5883] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 249.588443][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 249.614357][ T5883] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.630892][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.647506][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 249.666008][ T5883] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 249.674805][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 249.706657][ T5883] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.724351][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.745484][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 249.767241][ T5883] usb 2-1: string descriptor 0 read error: -22 [ 249.775486][ T5883] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 249.790183][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.825923][ T5883] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 250.193445][ T5880] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 252.159525][ T9] usb 2-1: USB disconnect, device number 28 [ 253.201692][ T9] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 253.368835][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 253.384354][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 253.404540][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 253.426145][ T9] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 253.436465][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.449447][ T9] usb 5-1: Product: syz [ 253.454981][ T9] usb 5-1: Manufacturer: syz [ 253.459811][ T9] usb 5-1: SerialNumber: syz [ 253.480777][ T9] usb 5-1: config 0 descriptor?? [ 253.493103][T10361] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 253.511318][T10361] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 253.520680][ T9] usb 5-1: ucan: probing device on interface #0 [ 253.977677][ T9] usb 5-1: ucan: device reported invalid device info [ 253.987671][ T9] usb 5-1: ucan: probe failed; try to update the device firmware [ 254.217860][ T9] usb 5-1: USB disconnect, device number 28 [ 255.816825][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.823450][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.968722][T10388] netlink: 'syz.4.2106': attribute type 153 has an invalid length. [ 257.987067][T10389] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2105'. [ 258.011841][T10386] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2105'. [ 259.857431][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 259.869006][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 259.883783][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 259.895366][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 259.907485][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.306590][T10399] chnl_net:caif_netlink_parms(): no params data found [ 260.606711][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.617025][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.632354][T10399] bridge_slave_0: entered allmulticast mode [ 260.647929][T10399] bridge_slave_0: entered promiscuous mode [ 260.665356][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.675423][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.685936][T10399] bridge_slave_1: entered allmulticast mode [ 260.698807][T10399] bridge_slave_1: entered promiscuous mode [ 260.836274][T10399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.860013][T10399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.025424][T10399] team0: Port device team_slave_0 added [ 261.045038][T10399] team0: Port device team_slave_1 added [ 261.257444][T10399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.286280][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.357774][T10399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.486896][ T5880] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 261.616617][T10399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.654641][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.776126][T10399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.972148][ T5829] Bluetooth: hci5: command tx timeout [ 262.122080][T10399] hsr_slave_0: entered promiscuous mode [ 262.140939][T10399] hsr_slave_1: entered promiscuous mode [ 262.173046][T10399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.180670][T10399] Cannot create hsr debugfs directory [ 262.221857][T10413] netlink: 'syz.2.2113': attribute type 2 has an invalid length. [ 262.513243][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 262.523482][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 262.532567][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 262.544410][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 262.566093][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 263.329240][T10399] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.450223][T10399] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.524603][T10399] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.592768][T10399] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.689589][T10417] chnl_net:caif_netlink_parms(): no params data found [ 264.051949][ T5835] Bluetooth: hci5: command tx timeout [ 264.230970][T10417] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.246906][T10417] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.258939][T10417] bridge_slave_0: entered allmulticast mode [ 264.268948][T10417] bridge_slave_0: entered promiscuous mode [ 264.298370][T10417] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.310920][T10417] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.319729][T10417] bridge_slave_1: entered allmulticast mode [ 264.338545][T10417] bridge_slave_1: entered promiscuous mode [ 264.568388][T10417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.598855][T10417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.611814][ T5835] Bluetooth: hci6: command tx timeout [ 264.826611][T10417] team0: Port device team_slave_0 added [ 264.859986][T10417] team0: Port device team_slave_1 added [ 265.036240][T10417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.048565][T10417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.088381][T10417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.132419][T10399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.141356][T10417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.155202][T10417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.193952][T10417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.278746][T10399] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.389012][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.396285][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.415474][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.422727][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.569677][T10417] hsr_slave_0: entered promiscuous mode [ 265.586031][T10417] hsr_slave_1: entered promiscuous mode [ 265.595933][T10417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.608209][T10417] Cannot create hsr debugfs directory [ 266.130926][T10399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.138274][ T5835] Bluetooth: hci5: command tx timeout [ 266.378941][T10399] veth0_vlan: entered promiscuous mode [ 266.479717][T10399] veth1_vlan: entered promiscuous mode [ 266.537065][T10417] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 266.587885][T10417] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 266.652607][T10417] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 266.691954][ T5835] Bluetooth: hci6: command tx timeout [ 266.704257][T10417] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 266.763456][T10399] veth0_macvtap: entered promiscuous mode [ 266.787466][T10399] veth1_macvtap: entered promiscuous mode [ 266.859174][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.878224][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.902338][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.920445][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.930806][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.950939][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.961374][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.978325][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.997943][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.022458][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.040260][T10399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.076751][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.097494][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.127167][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.140564][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.156461][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.168540][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.187370][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.199080][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.220453][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.242127][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.264415][T10399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.309349][T10399] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.329401][T10399] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.340227][T10399] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.358483][T10399] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.719582][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.755033][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.790156][T10417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.861316][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.885351][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.908584][T10417] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.975713][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.982988][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.053688][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.060901][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.221030][ T5835] Bluetooth: hci5: command tx timeout [ 268.622018][T10417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.771625][ T5835] Bluetooth: hci6: command tx timeout [ 268.869468][T10417] veth0_vlan: entered promiscuous mode [ 268.948517][T10417] veth1_vlan: entered promiscuous mode [ 269.234209][T10417] veth0_macvtap: entered promiscuous mode [ 269.330034][T10417] veth1_macvtap: entered promiscuous mode [ 269.450298][T10417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.511738][T10417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.550214][T10417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.638259][T10417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.674277][T10417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.737900][T10417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.775308][ T5829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 269.790963][ T5829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 269.799480][ T5829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 269.808202][ T5829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 269.817030][ T5829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 269.836650][T10417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.906629][T10417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.961584][T10417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.012030][T10417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.058107][T10417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.095851][T10417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.148817][T10417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.253215][T10417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.303516][T10417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.319957][T10417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.339270][T10417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.350400][T10417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.367068][T10417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.388903][T10417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.414088][T10417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.445164][T10417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.501622][T10417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.551551][T10417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.580653][T10417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.606013][T10417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.852048][ T5829] Bluetooth: hci6: command tx timeout [ 270.890010][T10417] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.943841][T10417] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.988222][T10417] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.061278][T10417] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.892175][ T5829] Bluetooth: hci7: command tx timeout [ 271.917871][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.987518][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.783708][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.804598][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.919389][T10441] chnl_net:caif_netlink_parms(): no params data found [ 273.553424][T10441] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.560690][T10441] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.630038][T10441] bridge_slave_0: entered allmulticast mode [ 273.693592][T10441] bridge_slave_0: entered promiscuous mode [ 273.722812][T10441] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.730015][T10441] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.801817][T10441] bridge_slave_1: entered allmulticast mode [ 273.809802][T10441] bridge_slave_1: entered promiscuous mode [ 273.974518][ T5829] Bluetooth: hci7: command tx timeout [ 274.147505][T10441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.209375][T10441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.602708][T10441] team0: Port device team_slave_0 added [ 274.645746][T10441] team0: Port device team_slave_1 added [ 274.686778][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.723433][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.732243][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.740472][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.749010][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.054915][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2125'. [ 275.106774][T10441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.151576][T10441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.250537][T10441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.298830][T10441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.326803][T10441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.437828][T10441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.485554][ T30] audit: type=1326 audit(1745613908.247:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.6.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 275.634481][ T30] audit: type=1326 audit(1745613908.247:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.6.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 275.718695][ T30] audit: type=1326 audit(1745613908.277:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.6.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 275.795711][ T30] audit: type=1326 audit(1745613908.277:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.6.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 275.830886][ T30] audit: type=1326 audit(1745613908.277:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.6.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 275.895219][ T30] audit: type=1326 audit(1745613908.277:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.6.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 275.925321][T10441] hsr_slave_0: entered promiscuous mode [ 275.951757][T10441] hsr_slave_1: entered promiscuous mode [ 275.958200][T10441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.007245][ T30] audit: type=1326 audit(1745613908.277:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.6.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 276.041866][T10441] Cannot create hsr debugfs directory [ 276.071837][ T5835] Bluetooth: hci7: command tx timeout [ 276.148732][ T30] audit: type=1326 audit(1745613908.277:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.6.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 276.773416][ T5835] Bluetooth: hci3: command tx timeout [ 277.201709][T10462] chnl_net:caif_netlink_parms(): no params data found [ 277.379080][T10441] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 277.587017][T10441] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 277.675462][T10441] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 277.789156][T10441] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 278.132210][ T5835] Bluetooth: hci7: command tx timeout [ 278.155247][T10462] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.201228][T10462] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.250561][T10462] bridge_slave_0: entered allmulticast mode [ 278.291289][T10462] bridge_slave_0: entered promiscuous mode [ 278.322860][T10462] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.330055][T10462] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.382439][T10462] bridge_slave_1: entered allmulticast mode [ 278.405152][T10462] bridge_slave_1: entered promiscuous mode [ 278.680056][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2136'. [ 278.758432][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2136'. [ 278.856318][ T5835] Bluetooth: hci3: command tx timeout [ 278.975142][T10462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.074150][T10462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.553466][T10462] team0: Port device team_slave_0 added [ 279.630759][T10462] team0: Port device team_slave_1 added [ 279.954455][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.974749][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.983449][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.994581][T10462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.002305][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.012266][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.086102][T10462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.160517][T10462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.243514][T10462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.250551][T10462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.353856][T10462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.708515][T10462] hsr_slave_0: entered promiscuous mode [ 280.717360][T10462] hsr_slave_1: entered promiscuous mode [ 280.736501][T10462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.749823][T10462] Cannot create hsr debugfs directory [ 280.803825][T10441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.933194][ T5829] Bluetooth: hci3: command tx timeout [ 280.995321][T10441] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.196278][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.203546][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.299990][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.307596][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.061960][ T5829] Bluetooth: hci4: command tx timeout [ 282.088155][T10441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.145656][T10506] chnl_net:caif_netlink_parms(): no params data found [ 282.189131][T10462] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 282.261952][T10462] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 282.343649][T10462] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 282.492692][T10462] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 282.814558][T10506] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.829523][T10506] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.837715][T10506] bridge_slave_0: entered allmulticast mode [ 282.857139][T10506] bridge_slave_0: entered promiscuous mode [ 282.919937][T10441] veth0_vlan: entered promiscuous mode [ 282.933258][T10506] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.950615][T10506] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.959032][T10506] bridge_slave_1: entered allmulticast mode [ 282.978772][T10506] bridge_slave_1: entered promiscuous mode [ 283.012875][ T5829] Bluetooth: hci3: command tx timeout [ 283.228714][T10441] veth1_vlan: entered promiscuous mode [ 283.265541][T10506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.337745][T10506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.565813][T10506] team0: Port device team_slave_0 added [ 283.763443][T10506] team0: Port device team_slave_1 added [ 283.910034][T10441] veth0_macvtap: entered promiscuous mode [ 284.010867][T10506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.029025][T10506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.070600][T10506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.133546][ T5829] Bluetooth: hci4: command tx timeout [ 284.152911][T10441] veth1_macvtap: entered promiscuous mode [ 284.204799][T10506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.239712][T10506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.369392][T10506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.467122][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.487345][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.507134][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.533897][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.557761][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.579714][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.598999][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.610671][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.639615][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.650655][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.672632][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.696000][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.709293][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.733602][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.758189][T10441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.020731][T10506] hsr_slave_0: entered promiscuous mode [ 285.034663][T10506] hsr_slave_1: entered promiscuous mode [ 285.048631][T10506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.076097][T10506] Cannot create hsr debugfs directory [ 285.117121][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.153970][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.177949][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.203666][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.227974][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.269610][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.297800][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.351124][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.389212][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.430704][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.471868][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.511534][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.546113][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.591920][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.623932][T10441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.687947][T10441] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.717270][T10441] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.751053][T10441] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.781170][T10441] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.819986][T10462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.190033][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 286.204278][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 286.213478][ T5835] Bluetooth: hci4: command tx timeout [ 286.231992][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 286.244012][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 286.252728][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 286.513805][T10462] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.635668][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.642938][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.780482][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.787735][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.149502][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.199857][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.577402][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.633198][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.764731][ T30] audit: type=1326 audit(1745613920.527:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10526 comm="syz.6.2145" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf710e539 code=0x0 [ 288.164894][T10506] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 288.244375][T10506] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 288.292409][ T5829] Bluetooth: hci4: command tx timeout [ 288.298911][ T5839] Bluetooth: hci8: command tx timeout [ 288.322617][T10506] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 288.478346][T10506] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 288.606510][T10524] chnl_net:caif_netlink_parms(): no params data found [ 288.761922][T10462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.613769][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.621177][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.668924][T10524] bridge_slave_0: entered allmulticast mode [ 289.725214][T10524] bridge_slave_0: entered promiscuous mode [ 289.839183][T10524] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.883430][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.924521][T10524] bridge_slave_1: entered allmulticast mode [ 289.983135][T10524] bridge_slave_1: entered promiscuous mode [ 290.333986][T10524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.388816][ T5839] Bluetooth: hci8: command tx timeout [ 290.464536][T10524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.932816][T10524] team0: Port device team_slave_0 added [ 291.063130][T10462] veth0_vlan: entered promiscuous mode [ 291.132020][T10524] team0: Port device team_slave_1 added [ 291.509226][T10462] veth1_vlan: entered promiscuous mode [ 291.571885][T10524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.578890][T10524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.768921][T10524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.841806][T10524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.888316][T10524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.058921][T10524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.127522][T10506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.452705][ T5829] Bluetooth: hci8: command tx timeout [ 292.485587][T10506] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.697918][T10524] hsr_slave_0: entered promiscuous mode [ 292.763419][T10524] hsr_slave_1: entered promiscuous mode [ 292.794241][T10524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.830367][T10524] Cannot create hsr debugfs directory [ 292.910177][T10531] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.917429][T10531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.033822][T10531] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.041019][T10531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.264128][T10462] veth0_macvtap: entered promiscuous mode [ 293.614019][T10462] veth1_macvtap: entered promiscuous mode [ 294.191947][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.231535][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.284958][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.338686][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.381507][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.410543][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.458523][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.501561][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.533255][ T5829] Bluetooth: hci8: command tx timeout [ 294.561763][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.612207][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.643005][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.681843][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.721725][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.767473][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.807902][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.858545][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.901043][T10462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.019425][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.060548][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.117382][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.173926][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.208332][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.253341][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.295575][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.327197][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.392610][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.455074][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.488064][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.535050][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.571144][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.619701][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.663550][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.701885][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.738181][T10462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.851148][T10462] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.880705][T10462] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.919092][T10462] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.949837][T10462] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.223816][T10524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.508712][T10506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.582779][T10584] tipc: Invalid UDP bearer configuration [ 296.582844][T10584] tipc: Enabling of bearer rejected, failed to enable media [ 297.023989][T10506] veth0_vlan: entered promiscuous mode [ 297.106888][ T2907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.164634][ T2907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.419125][T10506] veth1_vlan: entered promiscuous mode [ 297.518582][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.581240][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.749266][T10506] veth0_macvtap: entered promiscuous mode [ 297.853258][T10506] veth1_macvtap: entered promiscuous mode [ 298.018686][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.111598][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.165013][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.226987][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.279304][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.332411][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.391719][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.416506][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.439320][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.465406][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.491280][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.512750][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.534078][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.560080][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.584879][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.604863][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.630938][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.659927][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.821814][T10506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.935355][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.028387][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.092107][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.151682][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.226862][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.297577][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.328528][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.374477][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.399863][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.421598][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.442901][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.477667][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.500021][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.520892][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.531235][ T5883] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 299.553552][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.593311][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.629748][T10506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.680782][T10506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.691977][ T5883] usb 9-1: Using ep0 maxpacket: 16 [ 299.723824][ T5883] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.754059][T10506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.782018][ T5883] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.858528][T10506] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.870240][ T5883] usb 9-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 299.911823][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.928386][T10506] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.015699][ T5883] usb 9-1: config 0 descriptor?? [ 300.024814][T10506] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.069382][T10506] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.559536][ T5883] waltop 0003:172F:0037.0049: item fetching failed at offset 4/6 [ 300.609694][ T5883] waltop 0003:172F:0037.0049: probe with driver waltop failed with error -22 [ 300.680024][T10508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.749354][ T5883] usb 9-1: USB disconnect, device number 2 [ 300.762489][T10508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.976601][T10531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.997958][T10531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.171269][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2191'. [ 305.193624][T10657] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2191'. [ 305.224748][T10657] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2191'. [ 307.631604][ T5883] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 307.935010][ T5883] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 307.999402][ T5883] usb 9-1: config 0 has no interface number 0 [ 308.058665][ T5883] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 308.146728][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.340696][ T5883] usb 9-1: config 0 descriptor?? [ 308.396489][ T5883] usb 9-1: selecting invalid altsetting 1 [ 308.505437][ T5883] dvb_ttusb_budget: ttusb_init_controller: error [ 308.613348][ T5883] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 309.117950][ T5883] DVB: Unable to find symbol cx22700_attach() [ 309.541773][ T5883] DVB: Unable to find symbol tda10046_attach() [ 309.555608][T10682] netlink: 'syz.6.2201': attribute type 23 has an invalid length. [ 309.600155][ T5883] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 309.723498][ T5883] usb 9-1: USB disconnect, device number 3 [ 309.822899][T10390] tipc: Resetting bearer [ 310.106990][T10390] tipc: Disabling bearer [ 311.175194][T10698] veth0_to_bond: entered allmulticast mode [ 311.885455][T10703] vivid-003: disconnect [ 311.901625][T10702] vivid-003: reconnect [ 317.260026][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.266774][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.464014][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.473862][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.499681][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.514252][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.522443][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.335216][T10739] chnl_net:caif_netlink_parms(): no params data found [ 318.807423][T10739] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.821065][T10739] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.841778][T10739] bridge_slave_0: entered allmulticast mode [ 318.858117][T10739] bridge_slave_0: entered promiscuous mode [ 318.877602][T10739] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.901341][T10739] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.920337][T10739] bridge_slave_1: entered allmulticast mode [ 318.950517][T10739] bridge_slave_1: entered promiscuous mode [ 319.127436][T10739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.168044][T10739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.465876][T10739] team0: Port device team_slave_0 added [ 319.488068][T10739] team0: Port device team_slave_1 added [ 319.573405][ T5839] Bluetooth: hci0: command tx timeout [ 319.727996][T10739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.750399][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.789934][T10739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.834175][T10739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.841180][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.896084][T10739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.183144][T10739] hsr_slave_0: entered promiscuous mode [ 320.190105][T10739] hsr_slave_1: entered promiscuous mode [ 320.208373][T10739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.231969][T10739] Cannot create hsr debugfs directory [ 321.651792][ T5839] Bluetooth: hci0: command tx timeout [ 323.732116][ T5839] Bluetooth: hci0: command tx timeout [ 325.831161][ T5839] Bluetooth: hci0: command tx timeout [ 327.605056][T10765] netlink: 'syz.6.2235': attribute type 10 has an invalid length. [ 327.650073][T10765] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2235'. [ 327.687539][T10765] batman_adv: batadv0: Adding interface: virt_wifi0 [ 327.711772][T10765] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.805936][T10765] batman_adv: batadv0: Interface activated: virt_wifi0 [ 330.667998][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.678812][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.688439][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.711766][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.719689][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 331.453388][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.466445][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.476255][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.486243][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.496475][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.897318][T10771] chnl_net:caif_netlink_parms(): no params data found [ 332.592555][T10771] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.599849][T10771] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.672088][T10771] bridge_slave_0: entered allmulticast mode [ 332.701662][T10771] bridge_slave_0: entered promiscuous mode [ 332.734086][T10771] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.741271][T10771] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.771697][ T5839] Bluetooth: hci1: command tx timeout [ 332.801837][T10771] bridge_slave_1: entered allmulticast mode [ 332.832418][T10771] bridge_slave_1: entered promiscuous mode [ 333.133032][T10775] chnl_net:caif_netlink_parms(): no params data found [ 333.180827][T10771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.236234][T10771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.572993][ T5839] Bluetooth: hci2: command tx timeout [ 333.704830][T10771] team0: Port device team_slave_0 added [ 333.790174][T10771] team0: Port device team_slave_1 added [ 334.332289][T10775] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.339643][T10775] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.359540][T10775] bridge_slave_0: entered allmulticast mode [ 334.391221][T10775] bridge_slave_0: entered promiscuous mode [ 334.418149][T10771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.432698][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.479808][T10771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.515267][T10775] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.551854][T10775] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.559221][T10775] bridge_slave_1: entered allmulticast mode [ 334.580062][T10775] bridge_slave_1: entered promiscuous mode [ 334.613210][T10771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.620244][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.673182][T10771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.851703][ T5839] Bluetooth: hci1: command tx timeout [ 334.925025][T10775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.950506][T10775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.449090][T10771] hsr_slave_0: entered promiscuous mode [ 335.470815][T10771] hsr_slave_1: entered promiscuous mode [ 335.482891][T10771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.490524][T10771] Cannot create hsr debugfs directory [ 335.538133][T10775] team0: Port device team_slave_0 added [ 335.652046][ T5839] Bluetooth: hci2: command tx timeout [ 335.663788][T10775] team0: Port device team_slave_1 added [ 336.045768][T10775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.061506][T10775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.105740][T10775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.172807][T10775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.179830][T10775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.250860][T10775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.711347][T10775] hsr_slave_0: entered promiscuous mode [ 336.730089][T10775] hsr_slave_1: entered promiscuous mode [ 336.739172][T10775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.771077][T10775] Cannot create hsr debugfs directory [ 336.931799][ T5839] Bluetooth: hci1: command tx timeout [ 337.736346][ T5839] Bluetooth: hci2: command tx timeout [ 339.012987][ T5839] Bluetooth: hci1: command tx timeout [ 339.812145][ T5829] Bluetooth: hci2: command tx timeout [ 344.092654][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.113381][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.130145][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.147093][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.155361][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.831238][T10791] chnl_net:caif_netlink_parms(): no params data found [ 345.254896][T10791] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.275029][T10791] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.291261][T10791] bridge_slave_0: entered allmulticast mode [ 345.314356][T10791] bridge_slave_0: entered promiscuous mode [ 345.337796][T10791] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.371713][T10791] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.379112][T10791] bridge_slave_1: entered allmulticast mode [ 345.400704][T10791] bridge_slave_1: entered promiscuous mode [ 345.632913][T10791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.693931][T10791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.069063][T10791] team0: Port device team_slave_0 added [ 346.105854][T10791] team0: Port device team_slave_1 added [ 346.212270][ T5839] Bluetooth: hci5: command tx timeout [ 346.348319][T10791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.381736][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.481587][T10791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.535043][T10791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.555364][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.671748][T10791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.748439][ T5829] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 346.758483][ T5829] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 346.767393][ T5829] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 346.791848][ T5829] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 346.800364][ T5829] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 347.128485][T10791] hsr_slave_0: entered promiscuous mode [ 347.143890][T10791] hsr_slave_1: entered promiscuous mode [ 347.150472][T10791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.177566][T10791] Cannot create hsr debugfs directory [ 348.234344][T10800] chnl_net:caif_netlink_parms(): no params data found [ 348.293591][ T5829] Bluetooth: hci5: command tx timeout [ 348.697658][T10800] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.717204][T10800] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.751928][T10800] bridge_slave_0: entered allmulticast mode [ 348.777793][T10800] bridge_slave_0: entered promiscuous mode [ 348.794933][T10800] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.812740][T10800] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.820181][T10800] bridge_slave_1: entered allmulticast mode [ 348.852092][ T5829] Bluetooth: hci9: command tx timeout [ 348.873718][T10800] bridge_slave_1: entered promiscuous mode [ 349.144131][T10800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.173929][T10800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.436807][T10800] team0: Port device team_slave_0 added [ 349.478256][T10800] team0: Port device team_slave_1 added [ 349.726402][T10800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.754437][T10800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.798416][T10800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.832247][T10800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.839252][T10800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.915984][T10800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.273511][T10800] hsr_slave_0: entered promiscuous mode [ 350.292320][T10800] hsr_slave_1: entered promiscuous mode [ 350.301294][T10800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.326548][T10800] Cannot create hsr debugfs directory [ 350.373362][ T5829] Bluetooth: hci5: command tx timeout [ 350.931579][ T5829] Bluetooth: hci9: command tx timeout [ 352.452877][ T5829] Bluetooth: hci5: command tx timeout [ 353.012130][ T5829] Bluetooth: hci9: command tx timeout [ 355.091687][ T5829] Bluetooth: hci9: command tx timeout [ 368.043605][T10524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.101845][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.123962][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.136208][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.151799][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.163094][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.721014][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.741955][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.927318][T10818] chnl_net:caif_netlink_parms(): no params data found [ 379.368216][T10818] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.394022][T10818] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.412764][T10818] bridge_slave_0: entered allmulticast mode [ 379.431941][T10818] bridge_slave_0: entered promiscuous mode [ 379.452236][T10818] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.461713][T10818] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.469081][T10818] bridge_slave_1: entered allmulticast mode [ 379.502324][T10818] bridge_slave_1: entered promiscuous mode [ 379.694176][T10818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.730777][T10818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.025378][T10818] team0: Port device team_slave_0 added [ 380.065670][T10818] team0: Port device team_slave_1 added [ 380.211971][ T5839] Bluetooth: hci4: command tx timeout [ 380.274705][T10818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.291947][T10818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.346663][T10818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.398801][T10818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.419581][T10818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.492679][T10818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.753418][T10818] hsr_slave_0: entered promiscuous mode [ 380.782527][T10818] hsr_slave_1: entered promiscuous mode [ 380.789048][T10818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.822803][T10818] Cannot create hsr debugfs directory [ 382.291919][ T5839] Bluetooth: hci4: command tx timeout [ 384.371830][ T5829] Bluetooth: hci4: command tx timeout [ 385.892194][ T5829] Bluetooth: hci6: command 0x0406 tx timeout [ 386.451807][ T5839] Bluetooth: hci4: command tx timeout [ 391.197629][ T5829] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 391.209056][ T5829] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 391.218525][ T5829] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 391.234392][ T5829] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 391.244282][ T5829] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 392.033205][ T5839] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 392.057460][ T5839] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 392.066785][ T5839] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 392.077286][ T5839] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 392.086827][ T5839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 392.298906][T10832] chnl_net:caif_netlink_parms(): no params data found [ 392.929642][T10832] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.956217][T10832] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.984574][T10832] bridge_slave_0: entered allmulticast mode [ 393.003020][T10832] bridge_slave_0: entered promiscuous mode [ 393.084747][T10832] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.101603][T10832] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.108989][T10832] bridge_slave_1: entered allmulticast mode [ 393.134752][T10832] bridge_slave_1: entered promiscuous mode [ 393.332114][ T5839] Bluetooth: hci10: command tx timeout [ 393.456391][T10832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.547193][T10832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.828980][T10837] chnl_net:caif_netlink_parms(): no params data found [ 393.872990][T10832] team0: Port device team_slave_0 added [ 393.904334][T10832] team0: Port device team_slave_1 added [ 394.131626][ T5839] Bluetooth: hci11: command tx timeout [ 394.637253][T10832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.661696][T10832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.772157][T10832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.833548][T10832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.840580][T10832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.951846][T10832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.412159][ T5839] Bluetooth: hci10: command tx timeout [ 395.424603][T10837] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.442634][T10837] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.450076][T10837] bridge_slave_0: entered allmulticast mode [ 395.484856][T10837] bridge_slave_0: entered promiscuous mode [ 395.593480][T10832] hsr_slave_0: entered promiscuous mode [ 395.612292][T10832] hsr_slave_1: entered promiscuous mode [ 395.631853][T10832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.639481][T10832] Cannot create hsr debugfs directory [ 395.680555][T10837] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.695094][T10837] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.713975][T10837] bridge_slave_1: entered allmulticast mode [ 395.742720][T10837] bridge_slave_1: entered promiscuous mode [ 396.133698][ T5839] Bluetooth: hci7: command 0x0406 tx timeout [ 396.182171][T10837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.212056][ T5839] Bluetooth: hci11: command tx timeout [ 396.270526][T10837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.583841][T10837] team0: Port device team_slave_0 added [ 396.638775][T10837] team0: Port device team_slave_1 added [ 397.186634][T10837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.204948][T10837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.272773][T10837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.302014][T10837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.309112][T10837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.389506][T10837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.492921][ T5829] Bluetooth: hci10: command tx timeout [ 397.667230][T10837] hsr_slave_0: entered promiscuous mode [ 397.704290][T10837] hsr_slave_1: entered promiscuous mode [ 397.719716][T10837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.741531][T10837] Cannot create hsr debugfs directory [ 398.293429][ T5829] Bluetooth: hci11: command tx timeout [ 399.572030][ T5829] Bluetooth: hci10: command tx timeout [ 400.371959][ T5829] Bluetooth: hci11: command tx timeout [ 401.263398][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 404.684662][ T5829] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 404.695849][ T5829] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 404.705943][ T5829] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 404.720525][ T5829] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 404.729982][ T5829] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 405.450196][T10854] chnl_net:caif_netlink_parms(): no params data found [ 405.944413][T10854] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.974853][T10854] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.991897][T10854] bridge_slave_0: entered allmulticast mode [ 406.011984][T10854] bridge_slave_0: entered promiscuous mode [ 406.037832][T10854] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.062252][T10854] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.080133][T10854] bridge_slave_1: entered allmulticast mode [ 406.104892][T10854] bridge_slave_1: entered promiscuous mode [ 406.335149][T10854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.407496][T10854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.776102][T10854] team0: Port device team_slave_0 added [ 406.855909][ T5829] Bluetooth: hci12: command tx timeout [ 406.869736][T10854] team0: Port device team_slave_1 added [ 407.122347][T10854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.129537][T10854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.241897][T10854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.295178][T10854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.329549][T10854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.382182][ T5839] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 407.407574][ T5839] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 407.419916][ T5839] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 407.429703][ T5839] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 407.438102][ T5839] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 407.513903][T10854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.936848][T10854] hsr_slave_0: entered promiscuous mode [ 407.963439][T10854] hsr_slave_1: entered promiscuous mode [ 407.982044][T10854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.989672][T10854] Cannot create hsr debugfs directory [ 408.931759][ T5839] Bluetooth: hci12: command tx timeout [ 409.050734][T10866] chnl_net:caif_netlink_parms(): no params data found [ 409.491997][ T5829] Bluetooth: hci13: command tx timeout [ 409.542023][T10866] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.568606][T10866] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.592278][T10866] bridge_slave_0: entered allmulticast mode [ 409.618021][T10866] bridge_slave_0: entered promiscuous mode [ 409.643370][T10866] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.650634][T10866] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.681914][T10866] bridge_slave_1: entered allmulticast mode [ 409.690010][T10866] bridge_slave_1: entered promiscuous mode [ 409.966728][T10866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.005230][T10866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.264144][T10866] team0: Port device team_slave_0 added [ 410.315124][T10866] team0: Port device team_slave_1 added [ 410.532946][T10866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.539963][T10866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.607464][T10866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.655320][T10866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.702567][T10866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.761731][T10866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.012052][ T5829] Bluetooth: hci12: command tx timeout [ 411.140057][T10866] hsr_slave_0: entered promiscuous mode [ 411.163910][T10866] hsr_slave_1: entered promiscuous mode [ 411.170479][T10866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.211899][T10866] Cannot create hsr debugfs directory [ 411.492523][ T5829] Bluetooth: hci8: command 0x0406 tx timeout [ 411.578419][ T5829] Bluetooth: hci13: command tx timeout [ 413.092454][ T5839] Bluetooth: hci12: command tx timeout [ 413.651818][ T5839] Bluetooth: hci13: command tx timeout [ 415.732423][ T5839] Bluetooth: hci13: command tx timeout [ 439.891259][ T5829] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 439.903180][ T5829] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 439.913097][ T5829] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 439.923051][ T5829] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 439.934624][ T5829] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 440.159874][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.173607][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.700533][T10878] chnl_net:caif_netlink_parms(): no params data found [ 441.198866][T10878] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.222228][T10878] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.229673][T10878] bridge_slave_0: entered allmulticast mode [ 441.255925][T10878] bridge_slave_0: entered promiscuous mode [ 441.275191][T10878] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.312837][T10878] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.320527][T10878] bridge_slave_1: entered allmulticast mode [ 441.351739][T10878] bridge_slave_1: entered promiscuous mode [ 441.585066][T10878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.624252][T10878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.947067][T10878] team0: Port device team_slave_0 added [ 441.974085][ T5829] Bluetooth: hci14: command tx timeout [ 441.993065][T10878] team0: Port device team_slave_1 added [ 442.213702][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 442.234687][T10878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.252524][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.327176][T10878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.372146][T10878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.379149][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.447826][T10878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.723921][T10878] hsr_slave_0: entered promiscuous mode [ 442.762852][T10878] hsr_slave_1: entered promiscuous mode [ 442.781956][T10878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.789580][T10878] Cannot create hsr debugfs directory [ 444.051923][ T5839] Bluetooth: hci14: command tx timeout [ 446.131859][ T5839] Bluetooth: hci14: command tx timeout [ 448.211770][ T5839] Bluetooth: hci14: command tx timeout [ 452.010359][ T5829] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 452.020027][ T5829] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 452.028575][ T5829] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 452.053155][ T5829] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 452.062878][ T5829] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 452.657760][ T5839] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 452.697690][ T5839] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 452.708574][ T5839] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 452.717327][ T5839] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 452.726439][ T5839] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 453.226140][T10892] chnl_net:caif_netlink_parms(): no params data found [ 453.944050][T10892] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.953734][T10892] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.972618][T10892] bridge_slave_0: entered allmulticast mode [ 453.999435][T10892] bridge_slave_0: entered promiscuous mode [ 454.030440][T10892] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.051901][T10892] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.062594][T10892] bridge_slave_1: entered allmulticast mode [ 454.091891][T10892] bridge_slave_1: entered promiscuous mode [ 454.132010][ T5839] Bluetooth: hci15: command tx timeout [ 454.415133][T10892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.446965][T10896] chnl_net:caif_netlink_parms(): no params data found [ 454.483911][T10892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.775694][ T5839] Bluetooth: hci16: command tx timeout [ 454.864344][T10892] team0: Port device team_slave_0 added [ 454.905282][T10892] team0: Port device team_slave_1 added [ 455.129206][T10892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.151649][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.201752][T10892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.371956][T10892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.378968][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.453744][T10892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.794582][T10896] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.821940][T10896] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.829681][T10896] bridge_slave_0: entered allmulticast mode [ 455.903202][T10896] bridge_slave_0: entered promiscuous mode [ 455.944771][T10896] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.973256][T10896] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.044157][T10896] bridge_slave_1: entered allmulticast mode [ 456.093961][T10896] bridge_slave_1: entered promiscuous mode [ 456.211796][ T5826] Bluetooth: hci15: command tx timeout [ 456.680270][T10892] hsr_slave_0: entered promiscuous mode [ 456.726571][T10892] hsr_slave_1: entered promiscuous mode [ 456.743707][T10892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.776381][T10892] Cannot create hsr debugfs directory [ 456.798313][T10896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.836387][T10896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.853393][ T5826] Bluetooth: hci16: command tx timeout [ 457.392724][T10896] team0: Port device team_slave_0 added [ 457.437847][T10896] team0: Port device team_slave_1 added [ 457.579366][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 457.585638][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 457.801902][T10896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.808913][T10896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.863765][T10896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.998462][T10896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.011560][T10896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.072369][T10896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.297772][ T5839] Bluetooth: hci15: command tx timeout [ 458.565845][T10896] hsr_slave_0: entered promiscuous mode [ 458.583182][T10896] hsr_slave_1: entered promiscuous mode [ 458.607751][T10896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.633912][T10896] Cannot create hsr debugfs directory [ 458.932438][ T5839] Bluetooth: hci16: command tx timeout [ 460.372315][ T5839] Bluetooth: hci15: command tx timeout [ 461.012177][ T5839] Bluetooth: hci16: command tx timeout [ 465.352340][ T5829] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 465.371751][ T5829] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 465.380178][ T5829] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 465.391744][ T5829] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 465.400667][ T5829] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 466.137582][T10912] chnl_net:caif_netlink_parms(): no params data found [ 466.674429][T10912] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.711932][T10912] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.719403][T10912] bridge_slave_0: entered allmulticast mode [ 466.775981][T10912] bridge_slave_0: entered promiscuous mode [ 466.824212][T10912] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.853176][T10912] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.860591][T10912] bridge_slave_1: entered allmulticast mode [ 466.912457][T10912] bridge_slave_1: entered promiscuous mode [ 467.254200][T10912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.295099][T10912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.444692][ T5839] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 467.470296][ T5839] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 467.479103][ T5839] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 467.489027][ T5839] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 467.496812][ T5835] Bluetooth: hci17: command tx timeout [ 467.513769][ T5839] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 467.683980][T10912] team0: Port device team_slave_0 added [ 467.709922][T10912] team0: Port device team_slave_1 added [ 467.813489][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 468.029916][T10912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.052624][T10912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.127597][T10912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.178068][T10912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.201790][T10912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.271669][T10912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.699760][T10912] hsr_slave_0: entered promiscuous mode [ 468.723363][T10912] hsr_slave_1: entered promiscuous mode [ 468.730007][T10912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.761783][T10912] Cannot create hsr debugfs directory [ 469.571818][ T5829] Bluetooth: hci18: command tx timeout [ 469.578067][ T5829] Bluetooth: hci17: command tx timeout [ 469.656062][T10922] chnl_net:caif_netlink_parms(): no params data found [ 470.164155][T10922] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.184965][T10922] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.202525][T10922] bridge_slave_0: entered allmulticast mode [ 470.232077][T10922] bridge_slave_0: entered promiscuous mode [ 470.254187][T10922] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.278843][T10922] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.295504][T10922] bridge_slave_1: entered allmulticast mode [ 470.315621][T10922] bridge_slave_1: entered promiscuous mode [ 470.547985][T10922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.609388][T10922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.831925][T10922] team0: Port device team_slave_0 added [ 470.875929][T10922] team0: Port device team_slave_1 added [ 471.103280][T10922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.110296][T10922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.182827][T10922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.226211][T10922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.244978][T10922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.321869][T10922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.494618][ T31] INFO: task syz.4.2107:10390 blocked for more than 143 seconds. [ 471.518958][ T31] Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 471.545679][ T31] Blocked by coredump. [ 471.550355][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.609755][ T31] task:syz.4.2107 state:D stack:25688 pid:10390 tgid:10390 ppid:5844 task_flags:0x40044c flags:0x20004006 [ 471.661741][ T5826] Bluetooth: hci17: command tx timeout [ 471.667312][ T5826] Bluetooth: hci18: command tx timeout [ 471.721863][ T31] Call Trace: [ 471.725227][ T31] [ 471.728194][ T31] __schedule+0x16e2/0x4cd0 [ 471.831696][ T31] ? __lock_acquire+0xaac/0xd20 [ 471.836643][ T31] ? schedule+0x165/0x360 [ 471.841061][ T31] ? __pfx___schedule+0x10/0x10 [ 471.874288][ T31] ? schedule+0x91/0x360 [ 471.878622][ T31] schedule+0x165/0x360 [ 471.892226][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.897769][ T31] __mutex_lock+0x724/0xe80 [ 471.921687][ T31] ? __mutex_lock+0x51b/0xe80 [ 471.926451][ T31] ? rcu_barrier+0x4c/0x570 [ 471.931078][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.972152][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 471.977881][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 471.992180][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 471.997371][ T31] rcu_barrier+0x4c/0x570 [ 472.019228][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 472.031941][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 472.037136][ T31] netdev_run_todo+0x327/0xea0 [ 472.066109][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 472.075422][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 472.080780][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 472.101576][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.106873][ T31] ? netdev_state_change+0x1ca/0x220 [ 472.132985][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 472.138182][ T31] tun_chr_close+0x13c/0x1c0 [ 472.156970][ T31] __fput+0x449/0xa70 [ 472.161055][ T31] task_work_run+0x1d1/0x260 [ 472.181548][ T31] ? __pfx_task_work_run+0x10/0x10 [ 472.186752][ T31] ? kmem_cache_free+0x192/0x3f0 [ 472.204219][ T31] do_exit+0x8d6/0x2550 [ 472.208467][ T31] ? do_raw_spin_lock+0x121/0x290 [ 472.241585][ T31] ? __pfx_do_exit+0x10/0x10 [ 472.246272][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 472.265891][ T31] do_group_exit+0x21c/0x2d0 [ 472.270565][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.287482][ T31] get_signal+0x125e/0x1310 [ 472.301810][ T31] arch_do_signal_or_restart+0x95/0x780 [ 472.326003][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 472.341504][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 472.347752][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 472.361917][ T31] __do_fast_syscall_32+0xc1/0x110 [ 472.367100][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.396116][ T31] do_fast_syscall_32+0x34/0x80 [ 472.401055][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 472.432742][ T31] RIP: 0023:0xf712e539 [ 472.436936][ T31] RSP: 002b:00000000f75efadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 472.461627][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 472.469733][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.506481][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.521806][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 472.551599][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.559682][ T31] [ 472.581754][ T31] INFO: task syz.2.2116:10423 blocked for more than 144 seconds. [ 472.589637][ T31] Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 [ 472.619646][ T31] Blocked by coredump. [ 472.643487][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.661459][ T31] task:syz.2.2116 state:D stack:23672 pid:10423 tgid:10423 ppid:5842 task_flags:0x40044c flags:0x20004006 [ 472.692287][ T31] Call Trace: [ 472.695644][ T31] [ 472.698614][ T31] __schedule+0x16e2/0x4cd0 [ 472.713175][ T31] ? __lock_acquire+0xaac/0xd20 [ 472.718130][ T31] ? schedule+0x165/0x360 [ 472.753619][ T31] ? __pfx___schedule+0x10/0x10 [ 472.758584][ T31] ? schedule+0x91/0x360 [ 472.773115][ T31] schedule+0x165/0x360 [ 472.777374][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.792072][ T31] __mutex_lock+0x724/0xe80 [ 472.796654][ T31] ? __mutex_lock+0x51b/0xe80 [ 472.824291][ T31] ? rcu_barrier+0x4c/0x570 [ 472.828895][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.863623][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 472.869359][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 472.892028][ T31] rcu_barrier+0x4c/0x570 [ 472.896452][ T31] netdev_run_todo+0x327/0xea0 [ 472.901259][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 472.907811][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 472.924303][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 472.929674][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.940705][ T5839] Bluetooth: hci9: command 0x0406 tx timeout [ 472.981726][ T31] ? netdev_state_change+0x1ca/0x220 [ 472.987095][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 473.001511][ T31] tun_chr_close+0x13c/0x1c0 [ 473.006197][ T31] __fput+0x449/0xa70 [ 473.010235][ T31] task_work_run+0x1d1/0x260 [ 473.034231][ T31] ? __pfx_task_work_run+0x10/0x10 [ 473.054578][ T31] ? kmem_cache_free+0x192/0x3f0 [ 473.059619][ T31] do_exit+0x8d6/0x2550 [ 473.083811][ T31] ? do_raw_spin_lock+0x121/0x290 [ 473.088931][ T31] ? __pfx_do_exit+0x10/0x10 [ 473.105297][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 473.110768][ T31] do_group_exit+0x21c/0x2d0 [ 473.131767][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.137965][ T31] get_signal+0x125e/0x1310 [ 473.164152][ T31] arch_do_signal_or_restart+0x95/0x780 [ 473.169785][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 473.195587][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 473.213768][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 473.231642][ T31] __do_fast_syscall_32+0xc1/0x110 [ 473.236956][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.261456][ T31] do_fast_syscall_32+0x34/0x80 [ 473.266390][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 473.291765][ T31] RIP: 0023:0xf707e539 [ 473.295917][ T31] RSP: 002b:00000000f753fadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 473.321639][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 473.329697][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 473.364159][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 473.387088][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 473.415121][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 473.431760][ T31] [ 473.475601][ T31] INFO: task syz.5.2121:10442 blocked for more than 145 seconds. [ 473.511487][ T31] Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 [ 473.519197][ T31] Blocked by coredump. [ 473.571652][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.580404][ T31] task:syz.5.2121 state:D stack:25816 pid:10442 tgid:10442 ppid:10399 task_flags:0x40044c flags:0x20004006 [ 473.621919][ T31] Call Trace: [ 473.625367][ T31] [ 473.628338][ T31] __schedule+0x16e2/0x4cd0 [ 473.649599][ T31] ? __lock_acquire+0xaac/0xd20 [ 473.671710][ T31] ? schedule+0x165/0x360 [ 473.676136][ T31] ? __pfx___schedule+0x10/0x10 [ 473.681051][ T31] ? schedule+0x91/0x360 [ 473.703635][ T31] schedule+0x165/0x360 [ 473.707894][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.732026][ T5839] Bluetooth: hci18: command tx timeout [ 473.737605][ T5839] Bluetooth: hci17: command tx timeout [ 473.749662][ T31] __mutex_lock+0x724/0xe80 [ 473.771707][ T31] ? __mutex_lock+0x51b/0xe80 [ 473.776477][ T31] ? rcu_barrier+0x4c/0x570 [ 473.781018][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 473.801608][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 473.807339][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 473.832114][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 473.837310][ T31] rcu_barrier+0x4c/0x570 [ 473.871613][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 473.876822][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 473.893713][ T31] netdev_run_todo+0x327/0xea0 [ 473.898558][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 473.923727][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 473.929107][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 473.941526][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.946832][ T31] ? netdev_state_change+0x1ca/0x220 [ 473.981597][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 473.986806][ T31] tun_chr_close+0x13c/0x1c0 [ 474.001952][ T31] __fput+0x449/0xa70 [ 474.006028][ T31] task_work_run+0x1d1/0x260 [ 474.010661][ T31] ? __pfx_task_work_run+0x10/0x10 [ 474.033964][ T31] ? kmem_cache_free+0x192/0x3f0 [ 474.039105][ T31] do_exit+0x8d6/0x2550 [ 474.067582][ T31] ? do_raw_spin_lock+0x121/0x290 [ 474.085379][ T31] ? __pfx_do_exit+0x10/0x10 [ 474.090056][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 474.111908][ T31] do_group_exit+0x21c/0x2d0 [ 474.116600][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.132196][ T31] get_signal+0x125e/0x1310 [ 474.136814][ T31] arch_do_signal_or_restart+0x95/0x780 [ 474.157412][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 474.186433][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 474.211686][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 474.217407][ T31] __do_fast_syscall_32+0xc1/0x110 [ 474.231537][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.236934][ T31] do_fast_syscall_32+0x34/0x80 [ 474.254241][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.260660][ T31] RIP: 0023:0xf7f53539 [ 474.282002][ T31] RSP: 002b:00000000f753fadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 474.290507][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 474.321791][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.329928][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.361240][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 474.396187][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.421491][ T31] [ 474.428578][ T31] INFO: task syz.7.2224:10732 blocked for more than 146 seconds. [ 474.496187][ T31] Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 [ 474.541492][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.550254][ T31] task:syz.7.2224 state:D stack:27192 pid:10732 tgid:10732 ppid:10441 task_flags:0x400040 flags:0x20004006 [ 474.622679][ T31] Call Trace: [ 474.626039][ T31] [ 474.629001][ T31] __schedule+0x16e2/0x4cd0 [ 474.661955][ T31] ? do_raw_spin_lock+0x121/0x290 [ 474.667074][ T31] ? __lock_acquire+0xaac/0xd20 [ 474.705257][ T31] ? schedule+0x165/0x360 [ 474.709713][ T31] ? __pfx___schedule+0x10/0x10 [ 474.746996][ T31] ? schedule+0x91/0x360 [ 474.754348][ T31] schedule+0x165/0x360 [ 474.758591][ T31] schedule_preempt_disabled+0x13/0x30 [ 474.801657][ T31] __mutex_lock+0x724/0xe80 [ 474.806251][ T31] ? __mutex_lock+0x51b/0xe80 [ 474.810970][ T31] ? rcu_barrier+0x4c/0x570 [ 474.843198][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 474.848304][ T31] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 474.901575][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 474.907648][ T31] ? rcu_is_watching+0x15/0xb0 [ 474.951864][ T31] rcu_barrier+0x4c/0x570 [ 474.956291][ T31] netdev_run_todo+0x327/0xea0 [ 474.961123][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 475.001621][ T31] ? unregister_netdevice_queue+0x33c/0x380 [ 475.007617][ T31] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 475.041887][ T31] ppp_release+0xf2/0x1f0 [ 475.046308][ T31] ? __pfx_ppp_release+0x10/0x10 [ 475.075188][ T31] __fput+0x449/0xa70 [ 475.111634][ T31] task_work_run+0x1d1/0x260 [ 475.116320][ T31] ? __pfx_task_work_run+0x10/0x10 [ 475.146025][ T31] resume_user_mode_work+0x5e/0x80 [ 475.151238][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 475.184837][ T31] __do_fast_syscall_32+0xc1/0x110 [ 475.211455][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.216768][ T31] do_fast_syscall_32+0x34/0x80 [ 475.255928][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.274336][ T31] RIP: 0023:0xf70ee539 [ 475.278493][ T31] RSP: 002b:00000000f75afadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 475.321664][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 475.329722][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 475.398582][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.431651][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 475.439708][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.482074][ T31] [ 475.487151][ T31] INFO: task syz.8.2225:10734 blocked for more than 147 seconds. [ 475.513283][ T31] Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 [ 475.520981][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.561568][ T31] task:syz.8.2225 state:D stack:27192 pid:10734 tgid:10734 ppid:10462 task_flags:0x400040 flags:0x20004004 [ 475.591730][ T31] Call Trace: [ 475.595087][ T31] [ 475.611552][ T31] __schedule+0x16e2/0x4cd0 [ 475.616162][ T31] ? __lock_acquire+0xaac/0xd20 [ 475.621066][ T31] ? __lock_acquire+0xaac/0xd20 [ 475.654446][ T31] ? schedule+0x165/0x360 [ 475.658878][ T31] ? __pfx___schedule+0x10/0x10 [ 475.681756][ T31] ? schedule+0x91/0x360 [ 475.686096][ T31] schedule+0x165/0x360 [ 475.690297][ T31] schedule_preempt_disabled+0x13/0x30 [ 475.721652][ T31] __mutex_lock+0x724/0xe80 [ 475.726259][ T31] ? __mutex_lock+0x51b/0xe80 [ 475.730977][ T31] ? rcu_barrier+0x4c/0x570 [ 475.751878][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 475.756991][ T31] ? do_raw_write_lock+0x11d/0x260 [ 475.781647][ T31] ? __pfx_tdp_mmu_next_root+0x10/0x10 [ 475.787216][ T31] rcu_barrier+0x4c/0x570 [ 475.809678][ T31] ? kvm_mmu_uninit_tdp_mmu+0x32/0xc0 [ 475.816969][ T5829] Bluetooth: hci18: command tx timeout [ 475.831558][ T31] kvm_mmu_uninit_vm+0x23/0x60 [ 475.836412][ T31] kvm_arch_destroy_vm+0x23a/0x280 [ 475.851554][ T31] kvm_put_kvm+0xf8e/0x1650 [ 475.856337][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 475.878746][ T31] ? __pfx_kvm_vm_release+0x10/0x10 [ 475.901610][ T31] kvm_vm_release+0x43/0x50 [ 475.916158][ T31] __fput+0x449/0xa70 [ 475.920411][ T31] task_work_run+0x1d1/0x260 [ 475.941592][ T31] ? __pfx_task_work_run+0x10/0x10 [ 475.946820][ T31] resume_user_mode_work+0x5e/0x80 [ 475.961906][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 475.967524][ T31] __do_fast_syscall_32+0xc1/0x110 [ 476.001520][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.023023][ T31] do_fast_syscall_32+0x34/0x80 [ 476.027962][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 476.051943][ T31] RIP: 0023:0xf7f72539 [ 476.056084][ T31] RSP: 002b:00000000f755fadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 476.082362][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 476.090416][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 476.119330][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.146570][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 476.161680][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.169740][ T31] [ 476.194580][ T31] INFO: task syz-executor:10739 blocked for more than 148 seconds. [ 476.221883][ T31] Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 [ 476.229756][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 476.252920][ T31] task:syz-executor state:D stack:21528 pid:10739 tgid:10739 ppid:1 task_flags:0x400140 flags:0x20000004 [ 476.281676][ T31] Call Trace: [ 476.285024][ T31] [ 476.288072][ T31] __schedule+0x16e2/0x4cd0 [ 476.326607][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 476.332782][ T31] ? __lock_acquire+0xaac/0xd20 [ 476.337705][ T31] ? schedule+0x165/0x360 [ 476.353034][ T31] ? __pfx___schedule+0x10/0x10 [ 476.357987][ T31] ? schedule+0x91/0x360 [ 476.375525][ T31] schedule+0x165/0x360 [ 476.379857][ T31] schedule_preempt_disabled+0x13/0x30 [ 476.401663][ T31] __mutex_lock+0x724/0xe80 [ 476.406253][ T31] ? __mutex_lock+0x51b/0xe80 [ 476.410972][ T31] ? del_device_store+0xd1/0x360 [ 476.452327][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 476.457462][ T31] del_device_store+0xd1/0x360 [ 476.472990][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 476.477921][ T31] ? __pfx_del_device_store+0x10/0x10 [ 476.491906][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 476.498019][ T31] ? sysfs_kf_write+0x166/0x260 [ 476.511955][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 476.517226][ T31] kernfs_fop_write_iter+0x375/0x4f0 [ 476.551733][ T31] vfs_write+0x548/0xa90 [ 476.556068][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 476.574946][ T31] ? __pfx_vfs_write+0x10/0x10 [ 476.579815][ T31] ? do_sys_openat2+0x154/0x1c0 [ 476.602113][ T31] ksys_write+0x145/0x250 [ 476.606534][ T31] ? __pfx_ksys_write+0x10/0x10 [ 476.626901][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 476.643542][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.648846][ T31] __do_fast_syscall_32+0xb4/0x110 [ 476.671588][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.676889][ T31] do_fast_syscall_32+0x34/0x80 [ 476.694462][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 476.700875][ T31] RIP: 0023:0xf7f67539 [ 476.721724][ T31] RSP: 002b:00000000f754f490 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 476.741555][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f754f4d0 [ 476.749616][ T31] RDX: 0000000000000001 RSI: 00000000f73f2ff4 RDI: 0000000000000000 [ 476.781720][ T31] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 476.789774][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 476.821746][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.841548][ T31] [ 476.852736][ T31] [ 476.852736][ T31] Showing all locks held in the system: [ 476.860513][ T31] 4 locks held by kworker/0:1/10: [ 476.922957][ T31] #0: ffff888023be5d48 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 476.951663][ T31] #1: ffffc900000f7c60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 477.051708][ T31] #2: ffff888027229308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 477.081669][ T31] #3: ffff88807d79b4c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 477.107294][ T31] 3 locks held by kworker/u8:1/13: [ 477.122819][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 477.161645][ T31] #1: ffffc90000127c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 477.191707][ T31] #2: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 477.218281][ T31] 1 lock held by khungtaskd/31: [ 477.232886][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 477.271701][ T31] 2 locks held by kworker/1:1/47: [ 477.276838][ T31] 2 locks held by kworker/u8:7/3019: [ 477.301743][ T31] 2 locks held by getty/5582: [ 477.306507][ T31] #0: ffff8880302460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 477.331788][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 477.366856][ T31] 3 locks held by kworker/0:3/5820: [ 477.381494][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 477.412475][ T31] #1: ffffc90003fcfc60 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 477.448433][ T31] #2: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 477.474049][ T31] 3 locks held by kworker/1:4/5880: [ 477.479324][ T31] 2 locks held by kworker/1:5/5881: [ 477.501654][ T31] 2 locks held by kworker/1:6/5882: [ 477.506928][ T31] 3 locks held by kworker/1:8/10169: [ 477.521511][ T31] 1 lock held by syz.1.2091/10354: [ 477.532085][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 477.573326][ T31] 1 lock held by syz.4.2107/10390: [ 477.578601][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 477.611756][ T31] 2 locks held by kworker/1:9/10396: [ 477.617118][ T31] 2 locks held by kworker/1:10/10406: [ 477.631613][ T31] 1 lock held by syz.2.2116/10423: [ 477.636793][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 477.682873][ T31] 1 lock held by syz.5.2121/10442: [ 477.688052][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 477.721750][ T31] 2 locks held by kworker/1:12/10446: [ 477.728133][ T31] 2 locks held by kworker/1:13/10495: [ 477.754602][ T31] 7 locks held by syz-executor/10524: [ 477.760047][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 477.794398][ T31] #1: ffff8880738d7c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 477.822580][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 477.841442][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 477.872546][ T31] #4: ffff88805b2010e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 477.905508][ T31] #5: ffff88805b202250 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 477.933768][ T31] #6: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 477.959419][ T31] 1 lock held by syz.9.2135/10614: [ 477.971934][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 477.997081][ T31] 2 locks held by kworker/1:17/10617: [ 478.012598][ T31] 2 locks held by kworker/1:18/10664: [ 478.018038][ T31] 1 lock held by syz.7.2224/10732: [ 478.037032][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 478.071753][ T31] 1 lock held by syz.8.2225/10734: [ 478.076938][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 478.107066][ T31] 4 locks held by syz-executor/10739: [ 478.124018][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 478.152634][ T31] #1: ffff88804bd3fc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 478.181422][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 478.205179][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 478.233057][ T31] 1 lock held by syz.6.2236/10766: [ 478.238255][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 478.281653][ T31] 4 locks held by syz-executor/10771: [ 478.287106][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 478.312753][ T31] #1: ffff888045055488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 478.342677][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 478.360541][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 478.392827][ T31] 4 locks held by syz-executor/10775: [ 478.398271][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 478.429855][ T31] #1: ffff888027b56088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 478.461876][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 478.491618][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 478.511997][ T31] 4 locks held by syz-executor/10791: [ 478.517445][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 478.557027][ T31] #1: ffff888033ac8c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 478.593001][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 478.611929][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 478.631927][ T31] 4 locks held by syz-executor/10800: [ 478.637364][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 478.676286][ T31] #1: ffff888026805c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 478.711730][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 478.731946][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 478.753913][ T31] 4 locks held by syz-executor/10818: [ 478.759400][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 478.802694][ T31] #1: ffff88805912cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 478.821477][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 478.851228][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 478.871550][ T31] 4 locks held by syz-executor/10832: [ 478.902632][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 478.925989][ T31] #1: ffff88803403f488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 478.951662][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 478.972533][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 479.013176][ T31] 4 locks held by syz-executor/10837: [ 479.018646][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 479.051615][ T31] #1: ffff888043634888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 479.071528][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 479.103830][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 479.133552][ T31] 5 locks held by kworker/1:20/10849: [ 479.138996][ T31] 4 locks held by syz-executor/10854: [ 479.161754][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 479.174690][ T31] #1: ffff88806cc9ec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 479.202012][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 479.232608][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 479.261663][ T31] 3 locks held by kworker/1:21/10855: [ 479.268233][ T31] 2 locks held by kworker/1:22/10863: [ 479.281936][ T31] 4 locks held by syz-executor/10866: [ 479.305217][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 479.334571][ T31] #1: ffff888071298088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 479.355478][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 479.381606][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 479.412633][ T31] 4 locks held by syz-executor/10878: [ 479.418076][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 479.452864][ T31] #1: ffff888095d5cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 479.481647][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 479.511828][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 479.531880][ T31] 4 locks held by syz-executor/10892: [ 479.537319][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 479.575557][ T31] #1: ffff88806bf17488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 479.611717][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 479.632644][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 479.653734][ T31] 4 locks held by syz-executor/10896: [ 479.659179][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 479.700313][ T31] #1: ffff88808e0b5c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 479.721784][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 479.742507][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 479.774319][ T31] 4 locks held by syz-executor/10912: [ 479.779851][ T31] #0: ffff8880349b2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 479.821662][ T31] #1: ffff88803bac0488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 479.841899][ T31] #2: ffff888144b262d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 479.861452][ T31] #3: ffffffff8eb93f28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 479.889492][ T31] 2 locks held by syz-executor/10922: [ 479.931591][ T31] #0: ffffffff8f2f2e08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 479.940674][ T31] #1: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 479.984141][ T31] [ 479.986526][ T31] ============================================= [ 479.986526][ T31] [ 480.022827][ T31] NMI backtrace for cpu 0 [ 480.022862][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 480.022903][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 480.022924][ T31] Call Trace: [ 480.022939][ T31] [ 480.022954][ T31] dump_stack_lvl+0x189/0x250 [ 480.023004][ T31] ? __wake_up_klogd+0xd9/0x110 [ 480.023050][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.023093][ T31] ? __pfx__printk+0x10/0x10 [ 480.023126][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 480.023157][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 480.023181][ T31] ? _printk+0xcf/0x120 [ 480.023205][ T31] ? __pfx__printk+0x10/0x10 [ 480.023227][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 480.023250][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 480.023280][ T31] watchdog+0xfee/0x1030 [ 480.023307][ T31] ? watchdog+0x1de/0x1030 [ 480.023340][ T31] kthread+0x70e/0x8a0 [ 480.023366][ T31] ? __pfx_watchdog+0x10/0x10 [ 480.023390][ T31] ? __pfx_kthread+0x10/0x10 [ 480.023414][ T31] ? __pfx_kthread+0x10/0x10 [ 480.023436][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 480.023465][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.023495][ T31] ? __pfx_kthread+0x10/0x10 [ 480.023517][ T31] ret_from_fork+0x4b/0x80 [ 480.023536][ T31] ? __pfx_kthread+0x10/0x10 [ 480.023558][ T31] ret_from_fork_asm+0x1a/0x30 [ 480.023593][ T31] [ 480.023600][ T31] Sending NMI from CPU 0 to CPUs 1: [ 480.178051][ C1] NMI backtrace for cpu 1 [ 480.178071][ C1] CPU: 1 UID: 0 PID: 10849 Comm: kworker/1:20 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 480.178093][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 480.178104][ C1] Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker [ 480.178133][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 480.178161][ C1] Code: e8 ab 7b ae 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 10 bc 96 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 bc cc 7a 00 48 c7 c3 58 3b 76 92 49 03 1e 48 89 [ 480.178176][ C1] RSP: 0018:ffffc90000a07658 EFLAGS: 00000246 [ 480.178190][ C1] RAX: 1ffffffff1b2d783 RBX: 0000000000000001 RCX: 04f7b8fefc7cf500 [ 480.178203][ C1] RDX: 0000000000000000 RSI: ffffffff8bc1c800 RDI: ffffffff8bc1c7c0 [ 480.178214][ C1] RBP: ffffffff817199f5 R08: 0000000000000000 R09: 0000000000000000 [ 480.178225][ C1] R10: ffffc90000a07838 R11: ffffffff81aca920 R12: 0000000000000002 [ 480.178236][ C1] R13: ffffffff8df3b860 R14: ffffffff8d96bc18 R15: dffffc0000000000 [ 480.178250][ C1] FS: 0000000000000000(0000) GS:ffff8881261cf000(0000) knlGS:0000000000000000 [ 480.178264][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.178275][ C1] CR2: 00007ffeaf6c8dfc CR3: 000000003425e000 CR4: 00000000003526f0 [ 480.178290][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 480.178300][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 480.178320][ C1] Call Trace: [ 480.178326][ C1] [ 480.178335][ C1] lock_acquire+0x5f/0x360 [ 480.178362][ C1] ? unwind_next_frame+0xa5/0x2390 [ 480.178382][ C1] ? kasan_save_track+0x3e/0x80 [ 480.178400][ C1] ? unwind_next_frame+0xa5/0x2390 [ 480.178418][ C1] unwind_next_frame+0xc2/0x2390 [ 480.178436][ C1] ? unwind_next_frame+0xa5/0x2390 [ 480.178457][ C1] ? unwind_next_frame+0xa5/0x2390 [ 480.178477][ C1] ? stack_trace_save+0x9c/0xe0 [ 480.178497][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 480.178514][ C1] arch_stack_walk+0x11c/0x150 [ 480.178538][ C1] ? kasan_save_track+0x3e/0x80 [ 480.178558][ C1] stack_trace_save+0x9c/0xe0 [ 480.178575][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 480.178598][ C1] kasan_save_track+0x3e/0x80 [ 480.178614][ C1] ? kasan_save_track+0x3e/0x80 [ 480.178657][ C1] __kasan_slab_alloc+0x6c/0x80 [ 480.178677][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 480.178697][ C1] ? __nf_conntrack_alloc+0x99/0x380 [ 480.178715][ C1] __nf_conntrack_alloc+0x99/0x380 [ 480.178733][ C1] init_conntrack+0x155/0xef0 [ 480.178754][ C1] ? __pfx_init_conntrack+0x10/0x10 [ 480.178772][ C1] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 480.178797][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 480.178823][ C1] ? __siphash_unaligned+0x232/0x3b0 [ 480.178844][ C1] nf_conntrack_in+0xbf2/0x1600 [ 480.178871][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 480.178892][ C1] ? ipt_do_table+0x2a3/0x1610 [ 480.178917][ C1] ? nf_hook+0x9d/0x380 [ 480.178932][ C1] ? nf_hook+0x9d/0x380 [ 480.178946][ C1] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 480.178964][ C1] ? ipv4_conntrack_local+0x126/0x210 [ 480.178987][ C1] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 480.179011][ C1] nf_hook_slow+0xc2/0x220 [ 480.179036][ C1] nf_hook+0x217/0x380 [ 480.179052][ C1] ? nf_hook+0x9d/0x380 [ 480.179067][ C1] ? __pfx_nf_hook+0x10/0x10 [ 480.179083][ C1] ? __pfx_dst_output+0x10/0x10 [ 480.179101][ C1] ? ip_fast_csum+0x1ee/0x2b0 [ 480.179122][ C1] __ip_local_out+0x4db/0x600 [ 480.179136][ C1] ? __pfx_dst_output+0x10/0x10 [ 480.179153][ C1] ip_local_out+0x26/0x70 [ 480.179169][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 480.179200][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 480.179224][ C1] ? nft_xfrm_state_get_key+0x128/0x570 [ 480.179240][ C1] ? synproxy_pernet+0x45/0x270 [ 480.179259][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 480.179278][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 480.179294][ C1] ? kasan_record_aux_stack+0xbc/0xd0 [ 480.179325][ C1] ? nf_ip_checksum+0x13c/0x510 [ 480.179343][ C1] nft_synproxy_do_eval+0x345/0x570 [ 480.179358][ C1] ? kthread+0x70e/0x8a0 [ 480.179375][ C1] ? ret_from_fork+0x4b/0x80 [ 480.179391][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 480.179409][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 480.179433][ C1] nft_do_chain+0x409/0x1920 [ 480.179457][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 480.179492][ C1] nft_do_chain_inet+0x25d/0x340 [ 480.179508][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 480.179523][ C1] ? ipt_do_table+0x2a3/0x1610 [ 480.179547][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 480.179570][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 480.179586][ C1] nf_hook_slow+0xc2/0x220 [ 480.179611][ C1] NF_HOOK+0x206/0x3a0 [ 480.179633][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 480.179655][ C1] ? NF_HOOK+0x9a/0x3a0 [ 480.179676][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 480.179696][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 480.179720][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 480.179743][ C1] ? skb_dst+0x4f/0xd0 [ 480.179764][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 480.179788][ C1] NF_HOOK+0x309/0x3a0 [ 480.179809][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 480.179831][ C1] ? NF_HOOK+0x9a/0x3a0 [ 480.179852][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 480.179872][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 480.179894][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 480.179920][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 480.179940][ C1] __netif_receive_skb+0x143/0x380 [ 480.179965][ C1] ? process_backlog+0x2d5/0x14f0 [ 480.179990][ C1] process_backlog+0x60e/0x14f0 [ 480.180021][ C1] ? __pfx_process_backlog+0x10/0x10 [ 480.180050][ C1] __napi_poll+0xc4/0x480 [ 480.180070][ C1] ? net_rx_action+0x447/0xdf0 [ 480.180095][ C1] net_rx_action+0x6ea/0xdf0 [ 480.180126][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 480.180152][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 480.180181][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 480.180214][ C1] handle_softirqs+0x283/0x870 [ 480.180241][ C1] ? do_softirq+0xec/0x180 [ 480.180267][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 480.180295][ C1] ? wg_packet_encrypt_worker+0x2dc/0x1720 [ 480.180323][ C1] do_softirq+0xec/0x180 [ 480.180346][ C1] [ 480.180352][ C1] [ 480.180358][ C1] ? __pfx_do_softirq+0x10/0x10 [ 480.180381][ C1] ? __lock_acquire+0xaac/0xd20 [ 480.180407][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 480.180430][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 480.180455][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 480.180483][ C1] ? wg_packet_encrypt_worker+0x2dc/0x1720 [ 480.180506][ C1] wg_packet_encrypt_worker+0x2dc/0x1720 [ 480.180527][ C1] ? ip6_finish_output+0x234/0x7d0 [ 480.180556][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 480.180577][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 480.180593][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 480.180618][ C1] ? __lock_acquire+0xaac/0xd20 [ 480.180643][ C1] ? do_raw_spin_lock+0x121/0x290 [ 480.180666][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 480.180689][ C1] ? __lock_acquire+0xaac/0xd20 [ 480.180714][ C1] ? do_raw_spin_lock+0x121/0x290 [ 480.180736][ C1] ? look_up_lock_class+0x74/0x170 [ 480.180762][ C1] ? register_lock_class+0x51/0x320 [ 480.180787][ C1] ? __lock_acquire+0xaac/0xd20 [ 480.180813][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 480.180841][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 480.180864][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 480.180889][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 480.180915][ C1] process_scheduled_works+0xadb/0x17a0 [ 480.180954][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 480.180988][ C1] worker_thread+0x8a0/0xda0 [ 480.181016][ C1] kthread+0x70e/0x8a0 [ 480.181036][ C1] ? __pfx_worker_thread+0x10/0x10 [ 480.181051][ C1] ? __pfx_kthread+0x10/0x10 [ 480.181070][ C1] ? __pfx_kthread+0x10/0x10 [ 480.181088][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 480.181111][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.181137][ C1] ? __pfx_kthread+0x10/0x10 [ 480.181155][ C1] ret_from_fork+0x4b/0x80 [ 480.181170][ C1] ? __pfx_kthread+0x10/0x10 [ 480.181188][ C1] ret_from_fork_asm+0x1a/0x30 [ 480.181211][ C1] [ 481.180570][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 481.187487][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 481.199330][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 481.209515][ T31] Call Trace: [ 481.212821][ T31] [ 481.215955][ T31] dump_stack_lvl+0x99/0x250 [ 481.220591][ T31] ? __asan_memcpy+0x40/0x70 [ 481.225210][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.230456][ T31] ? __pfx__printk+0x10/0x10 [ 481.235088][ T31] panic+0x2db/0x790 [ 481.239030][ T31] ? __pfx_panic+0x10/0x10 [ 481.243486][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 481.248920][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 481.254328][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 481.260528][ T31] watchdog+0x102d/0x1030 [ 481.264894][ T31] ? watchdog+0x1de/0x1030 [ 481.269362][ T31] kthread+0x70e/0x8a0 [ 481.273466][ T31] ? __pfx_watchdog+0x10/0x10 [ 481.278172][ T31] ? __pfx_kthread+0x10/0x10 [ 481.282795][ T31] ? __pfx_kthread+0x10/0x10 [ 481.287412][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 481.292649][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.297885][ T31] ? __pfx_kthread+0x10/0x10 [ 481.302957][ T31] ret_from_fork+0x4b/0x80 [ 481.307409][ T31] ? __pfx_kthread+0x10/0x10 [ 481.312036][ T31] ret_from_fork_asm+0x1a/0x30 [ 481.316847][ T31] [ 481.320208][ T31] Kernel Offset: disabled [ 481.324549][ T31] Rebooting in 86400 seconds..