last executing test programs: 1m44.688218886s ago: executing program 2 (id=4349): r0 = socket$unix(0x1, 0x1, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m44.534759302s ago: executing program 2 (id=4350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000010140)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 1m44.368892667s ago: executing program 2 (id=4351): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f00000000c0)=[{0x0, 0x60}, {&(0x7f0000000200)="477fbc7eb7ac67", 0x7}], 0x2}, 0x0) 1m44.132952925s ago: executing program 2 (id=4352): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$FIONREAD(r0, 0x80047456, 0xfffffffffffffffd) 1m43.92555793s ago: executing program 2 (id=4353): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000100000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) sync_file_range(0xffffffffffffffff, 0xfffffffffffff611, 0x8, 0x1) 1m43.488449322s ago: executing program 2 (id=4356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000002c0)) 1m40.525981117s ago: executing program 1 (id=4378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x40, r1, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) 1m40.22126642s ago: executing program 1 (id=4381): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0xd}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010000000000000000000a00fa"], 0x18}}, 0x0) 1m39.981376528s ago: executing program 1 (id=4384): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioperm(0xb88f, 0x2, 0x0) setgroups(0x0, 0x0) 1m39.813590424s ago: executing program 1 (id=4386): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@delneigh={0x30, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, r1, 0x10, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x30}}, 0x2000c084) 1m39.64104006s ago: executing program 1 (id=4388): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x16}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m39.472989273s ago: executing program 1 (id=4389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)={0x1, 0x1, [@local]}) 1m39.210939997s ago: executing program 3 (id=4391): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000000000000800090000001000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 1m36.241004757s ago: executing program 0 (id=4397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r0}, 0x38) 1m35.841548065s ago: executing program 0 (id=4398): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x164) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x2000, 0xffffffffffffff36, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000700)=""/114, 0x0, 0x0, 0xb3, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) 1m35.772688584s ago: executing program 0 (id=4399): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000340)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x3fff}, 0x80, 0x0}, 0x0) 1m35.702556004s ago: executing program 0 (id=4400): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014041, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x124942e, 0x0) 1m35.606986898s ago: executing program 0 (id=4401): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 1m35.505501508s ago: executing program 0 (id=4402): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01239a007fd843de05aa05"], 0x1c}}, 0x0) 1m31.018411766s ago: executing program 3 (id=4404): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) writev(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)="e4f742c91e7ff8a0b37fff7fbfd4aaa2976cf2e2d7886d057ec3b608fbcdf99a9025d0", 0x23}, {&(0x7f0000003080)="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", 0x7de}], 0x2) 1m30.845136033s ago: executing program 3 (id=4405): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r1, r1, 0x0, 0x0, 0x0, 0x4, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) 1m30.714152102s ago: executing program 3 (id=4406): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x950, &(0x7f0000000380)={0x0, 0x7e4e, 0x143a, 0xfffffffd, 0x364, 0x0, r0}, 0x0, 0x0) 1m30.610538793s ago: executing program 3 (id=4407): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x20, 0xf9, 0x7ffc1ff4}]}) preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x67) 1m30.473549394s ago: executing program 3 (id=4408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xaea2) 1m28.369449416s ago: executing program 32 (id=4356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000002c0)) 1m25.546561433s ago: executing program 4 (id=4420): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r0, 0x331, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) 1m25.313891493s ago: executing program 4 (id=4421): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x18) 1m25.138315418s ago: executing program 4 (id=4422): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000002740)=""/4097, 0x1001}, {&(0x7f00000002c0)=""/177, 0xb1}], 0x3}, 0x9}], 0x8000000000002e0, 0x40010000, 0x0) 1m25.005354044s ago: executing program 4 (id=4423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a00)=ANY=[@ANYBLOB="20030000", @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000940006803e00040067636d2861657329000000000000000000000000000000000000000000000000160000000479e1b28c8c291ce909b627ec3140bb3523d0c573f700004c000480"], 0x320}}, 0x0) 1m24.836625492s ago: executing program 4 (id=4424): r0 = semget$private(0x0, 0x3, 0x401) semop(r0, &(0x7f00000011c0)=[{0x0, 0x7fff, 0x1800}, {0x1, 0x8001, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001580)=[0x5]) 1m24.679893757s ago: executing program 4 (id=4425): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 1m24.025159255s ago: executing program 33 (id=4389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)={0x1, 0x1, [@local]}) 1m19.531225372s ago: executing program 34 (id=4402): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01239a007fd843de05aa05"], 0x1c}}, 0x0) 1m15.044935563s ago: executing program 35 (id=4408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xaea2) 1m9.527821188s ago: executing program 36 (id=4425): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 46.86168968s ago: executing program 6 (id=4499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x3c}}, 0x0) 46.145621789s ago: executing program 6 (id=4502): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket(0x80000000000000a, 0x2, 0x0) nanosleep(&(0x7f00000004c0), 0x0) 45.767707794s ago: executing program 6 (id=4504): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x421]}}]}]}, 0x5c}}, 0x0) 45.108379275s ago: executing program 6 (id=4508): io_setup(0x1, &(0x7f00000012c0)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x200000000004}]) 44.39990311s ago: executing program 6 (id=4511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x20, r1, 0x1, 0x0, 0xfffffffe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x40000) 43.716121093s ago: executing program 6 (id=4515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4048aec9, &(0x7f0000000080)={0x6, 0xffffffffffffffff, 0x1}) 41.955919211s ago: executing program 8 (id=4519): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) close(r0) 41.586639189s ago: executing program 8 (id=4520): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) 40.92528494s ago: executing program 8 (id=4523): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x11, 0x6, 0x6, {0x6, 0x10, "87912ea0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 38.134823239s ago: executing program 8 (id=4533): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000008c0)={0x1c, r0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x44) 37.796069635s ago: executing program 8 (id=4535): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 34.618721249s ago: executing program 5 (id=4551): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1a) 34.023366218s ago: executing program 5 (id=4554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 33.774681068s ago: executing program 7 (id=4555): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x9, {{0x2, 0x0, @multicast2}}}, 0x90) 33.694958011s ago: executing program 8 (id=4556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) 33.534360754s ago: executing program 5 (id=4558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 33.345973054s ago: executing program 7 (id=4559): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 33.145797393s ago: executing program 5 (id=4561): syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000140)=""/116, 0x74, 0x4) 32.645250074s ago: executing program 5 (id=4563): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xd}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 32.371905013s ago: executing program 5 (id=4564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4a) 30.073120523s ago: executing program 7 (id=4567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10040104}, 0x400c000) 29.836845356s ago: executing program 7 (id=4568): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 29.534788501s ago: executing program 7 (id=4569): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000380)={[{@grpquota}]}) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 29.262392491s ago: executing program 7 (id=4570): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) fstat(r1, &(0x7f0000007800)) 28.591248349s ago: executing program 37 (id=4515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4048aec9, &(0x7f0000000080)={0x6, 0xffffffffffffffff, 0x1}) 26.250410474s ago: executing program 9 (id=4580): r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 25.309588655s ago: executing program 9 (id=4581): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0xc, @multicast2, 0x0, 0x0, 'ovf\x00'}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 24.924377662s ago: executing program 9 (id=4582): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 18.490360421s ago: executing program 38 (id=4556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) 17.037565565s ago: executing program 39 (id=4564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4a) 15.964720488s ago: executing program 9 (id=4585): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2}, 0x4) close(r0) 15.595136028s ago: executing program 9 (id=4586): r0 = io_uring_setup(0xf0b, &(0x7f000000c480)={0x0, 0x4e43, 0x400, 0x1ffff, 0x373}) r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 15.29042379s ago: executing program 9 (id=4587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4020aeb2, &(0x7f0000000140)={0x100, 0x640, 0x0, 0x0}) 14.004545835s ago: executing program 40 (id=4570): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) fstat(r1, &(0x7f0000007800)) 0s ago: executing program 41 (id=4587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4020aeb2, &(0x7f0000000140)={0x100, 0x640, 0x0, 0x0}) kernel console output (not intermixed with test programs): (bridge_slave_0) entered disabled state [ 294.493464][T18160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.510301][T18160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.525072][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 294.571024][ T5874] petalynx 0003:18B1:0037.000C: item fetching failed at offset 5/7 [ 294.580217][T18160] vlan0: left promiscuous mode [ 294.586041][ T5874] petalynx 0003:18B1:0037.000C: parse failed [ 294.592134][ T5874] petalynx 0003:18B1:0037.000C: probe with driver petalynx failed with error -22 [ 294.647021][T18160] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.656462][T18160] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.666193][T18160] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.675208][T18160] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.698816][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.715791][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.729384][ T10] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 294.740247][T18160] bond1: left promiscuous mode [ 294.754894][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.763767][T18160] bond1: left allmulticast mode [ 294.783128][T16656] usb 5-1: USB disconnect, device number 21 [ 294.796168][ T10] usb 2-1: config 0 descriptor?? [ 295.239333][ T10] hid-led 0003:1D34:000A.000D: unknown main item tag 0x0 [ 295.443150][ T10] hid-led 0003:1D34:000A.000D: probe with driver hid-led failed with error -71 [ 295.506132][ T10] usb 2-1: USB disconnect, device number 15 [ 296.102193][T18228] netlink: 'syz.0.3847': attribute type 1 has an invalid length. [ 296.156603][T18228] NCSI netlink: No device for ifindex 0 [ 296.775849][T18181] syz.2.3832 (18181): drop_caches: 3 [ 296.945692][T18272] RDS: rds_bind could not find a transport for ::a:0:0, load rds_tcp or rds_rdma? [ 297.045341][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 297.123523][T18284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3866'. [ 297.140421][T18284] Zero length message leads to an empty skb [ 297.246332][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.267384][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.307703][ T10] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 297.318558][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.336005][ T10] usb 4-1: config 0 descriptor?? [ 297.775566][ T10] hid-rmi 0003:1532:011D.000E: unknown main item tag 0x1 [ 297.814093][ T10] hid-rmi 0003:1532:011D.000E: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.3-1/input0 [ 297.994154][T18334] netlink: 'syz.4.3880': attribute type 10 has an invalid length. [ 298.003059][ T10] usb 4-1: USB disconnect, device number 19 [ 298.004084][T18334] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.016876][T18334] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.054639][T18344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3880'. [ 298.088115][T18334] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.095405][T18334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.102975][T18334] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.110514][T18334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.147956][T18334] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 298.185217][T18344] bridge_slave_1: left allmulticast mode [ 298.197113][T18344] bridge_slave_1: left promiscuous mode [ 298.216894][T18344] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.249884][T18344] bridge_slave_0: left allmulticast mode [ 298.274051][T18344] bridge_slave_0: left promiscuous mode [ 298.294194][T18344] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.351443][T18352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3883'. [ 298.382566][T18344] bond0: (slave bridge0): Releasing backup interface [ 298.494403][T18352] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.650902][T18352] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.872990][T18378] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3890'. [ 298.901955][T18352] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.040084][T18391] trusted_key: encrypted_key: key trusted:syz not found [ 299.045307][T18389] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 299.233698][T18352] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.454339][T18417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3905'. [ 299.533682][T18352] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.613000][T18352] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.700175][T18352] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.772520][T18352] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.114933][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 300.285002][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 300.293516][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.306451][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.316680][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 300.329759][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 300.339090][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.350340][ T10] usb 3-1: config 0 descriptor?? [ 300.414976][T16646] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 300.564878][T16646] usb 4-1: Using ep0 maxpacket: 32 [ 300.584376][T16646] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 300.593854][T16646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.612277][T16646] usb 4-1: config 0 descriptor?? [ 300.679666][T18476] /dev/nullb0: Can't open blockdev [ 300.775104][ T10] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 300.813110][ T10] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 300.860981][ T10] microsoft 0003:045E:07DA.000F: unsupported Resolution Multiplier 0 [ 300.882450][ T10] microsoft 0003:045E:07DA.000F: unsupported Resolution Multiplier 0 [ 300.909899][ T10] microsoft 0003:045E:07DA.000F: No inputs registered, leaving [ 300.933464][ T10] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 300.962577][ T10] microsoft 0003:045E:07DA.000F: no inputs found [ 300.998684][ T10] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 301.037461][ T10] usb 3-1: USB disconnect, device number 23 [ 301.186716][T18507] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3925'. [ 301.238900][T16646] usb 4-1: string descriptor 0 read error: -71 [ 301.257454][T16646] uclogic 0003:256C:006E.0010: failed retrieving string descriptor #200: -71 [ 301.291089][T16646] uclogic 0003:256C:006E.0010: failed retrieving pen parameters: -71 [ 301.307683][T16646] uclogic 0003:256C:006E.0010: failed probing pen v2 parameters: -71 [ 301.333920][T16646] uclogic 0003:256C:006E.0010: failed probing parameters: -71 [ 301.343190][T16646] uclogic 0003:256C:006E.0010: probe with driver uclogic failed with error -71 [ 301.363583][T16646] usb 4-1: USB disconnect, device number 20 [ 302.304158][T18554] "syz.1.3938" (18554) uses obsolete ecb(arc4) skcipher [ 302.514975][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 302.705814][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 302.725781][ T10] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 302.725814][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.737242][ T10] usb 5-1: config 0 descriptor?? [ 302.740779][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 303.372850][ T10] gspca_nw80x: reg_w err -71 [ 303.384058][ T10] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 303.420751][ T10] usb 5-1: USB disconnect, device number 22 [ 303.600939][T18650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3971'. [ 303.752880][T18604] syz.1.3954 (18604): drop_caches: 3 [ 304.081131][T18673] netlink: 'syz.0.3980': attribute type 10 has an invalid length. [ 304.105060][T18673] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.112610][T18673] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.141786][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3980'. [ 304.249201][T18673] team0: Port device bridge0 removed [ 304.265673][T18673] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.272950][T18673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.280694][T18673] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.288017][T18673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.404634][T18673] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 304.597872][T18679] bridge_slave_1: left allmulticast mode [ 304.624912][T18679] bridge_slave_1: left promiscuous mode [ 304.645086][T18679] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.739629][T18679] bridge_slave_0: left allmulticast mode [ 304.771523][T18679] bridge_slave_0: left promiscuous mode [ 304.805085][T18679] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.930125][T18679] bond0: (slave bridge0): Releasing backup interface [ 304.949646][T18712] sctp: [Deprecated]: syz.3.3995 (pid 18712) Use of int in max_burst socket option. [ 304.949646][T18712] Use struct sctp_assoc_value instead [ 305.682362][T18746] xt_CT: No such helper "pptp" [ 306.632006][T18800] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 307.404850][ T5874] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 307.599917][ T5874] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.620178][ T5874] usb 3-1: config 0 interface 0 has no altsetting 0 [ 307.638300][ T5874] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 307.659154][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.687981][ T5874] usb 3-1: config 0 descriptor?? [ 308.139082][ T5874] magicmouse 0003:05AC:0269.0011: item fetching failed at offset 0/7 [ 308.161903][ T5874] magicmouse 0003:05AC:0269.0011: magicmouse hid parse failed [ 308.181710][ T5874] magicmouse 0003:05AC:0269.0011: probe with driver magicmouse failed with error -22 [ 308.188320][T18884] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4058'. [ 308.215028][T18884] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4058'. [ 308.232725][T18884] netlink: 'syz.1.4058': attribute type 6 has an invalid length. [ 308.285349][T18884] netlink: 'syz.1.4058': attribute type 5 has an invalid length. [ 308.303111][T18884] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4058'. [ 308.347039][ T5874] usb 3-1: USB disconnect, device number 24 [ 308.987892][T18939] nbd: couldn't find a device at index 135 [ 309.061573][T18947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4077'. [ 309.225349][ T10] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 309.397737][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.420596][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 309.438016][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 309.451112][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.468292][ T10] usb 4-1: config 0 descriptor?? [ 309.488722][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 309.522625][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 309.559559][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 309.593262][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 309.615072][ T5874] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 309.624958][ T10] usb 4-1: media controller created [ 309.632891][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.663347][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 309.683610][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 309.713506][T18937] dvb-usb: bulk message failed: -22 (2/0) [ 309.725355][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 309.760119][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 309.783483][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 309.788919][ T5874] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 309.795965][ T10] usb 4-1: USB disconnect, device number 21 [ 309.844998][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.873704][ T5874] usb 3-1: config 0 descriptor?? [ 309.978627][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 310.309868][ T5874] hackrf 3-1:0.0: Board ID: 00 [ 310.320759][ T5874] hackrf 3-1:0.0: Firmware version: [ 310.348456][ T5874] hackrf 3-1:0.0: Registered as swradio24 [ 310.365842][ T5874] videodev: could not get a free minor [ 310.383993][ T5874] hackrf 3-1:0.0: Failed to register as video device (-23) [ 310.442598][ T5874] hackrf 3-1:0.0: probe with driver hackrf failed with error -23 [ 310.565257][ T5874] usb 3-1: USB disconnect, device number 25 [ 310.572262][T19034] random: crng reseeded on system resumption [ 311.394296][T19081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4112'. [ 312.223979][T19125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4129'. [ 313.284082][T19169] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4148'. [ 313.538116][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.565357][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.583910][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.598222][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.627558][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.647999][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.661121][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.669576][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.683233][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.700638][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.713586][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.728993][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.740025][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.748673][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.756934][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.764526][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.791746][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.799957][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.813475][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.822423][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.831662][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.958474][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 313.999739][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.118127][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.165639][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.173188][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.194022][T19450] program syz.1.4158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.227935][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.246112][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.253869][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.261938][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.269827][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.280108][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.320516][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.342086][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.362623][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.375251][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.383010][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.391675][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.401015][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.426599][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.443510][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.457737][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.466018][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.488096][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.504584][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.519015][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.531711][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.539719][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.547757][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.556263][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.563703][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.571702][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.579520][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.587788][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.595574][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.604621][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.613849][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.628922][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.637446][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.648818][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.659032][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.671355][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.681070][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.693177][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.703594][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.716023][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.723584][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.734378][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.755367][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.765834][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.773385][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.783626][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.791796][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.803259][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.818073][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.831198][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.840496][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.849434][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.861192][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.869579][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.877511][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.885936][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.893389][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 314.917525][ T10] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.03 Device [syz1] on syz1 [ 315.074953][ T5874] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 315.187463][T16671] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 315.248297][ T5874] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.279127][ T5874] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.295264][ T5874] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 315.306517][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.317137][ T5874] usb 3-1: Product: syz [ 315.321372][ T5874] usb 3-1: Manufacturer: syz [ 315.344463][ T5874] usb 3-1: SerialNumber: syz [ 315.354888][T16671] usb 2-1: Using ep0 maxpacket: 16 [ 315.382362][T16671] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.401028][T16671] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 315.413082][T16671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.434646][T16671] usb 2-1: config 0 descriptor?? [ 315.824369][ T5874] usb 3-1: USB disconnect, device number 26 [ 315.862995][ T5873] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 315.897231][T16671] acrux 0003:1A34:F705.0013: item fetching failed at offset 2/5 [ 315.951287][T16671] acrux 0003:1A34:F705.0013: parse failed [ 315.970133][T16671] acrux 0003:1A34:F705.0013: probe with driver acrux failed with error -22 [ 316.037121][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.048512][ T5873] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 316.058426][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.082454][ T5873] usb 4-1: config 0 descriptor?? [ 316.102431][T16671] usb 2-1: USB disconnect, device number 16 [ 316.474020][ T30] audit: type=1326 audit(1746367387.829:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19578 comm="syz.2.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeed8e969 code=0x7ffc0000 [ 316.498537][ T30] audit: type=1326 audit(1746367387.829:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19578 comm="syz.2.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeed8e969 code=0x7ffc0000 [ 316.526668][ T30] audit: type=1326 audit(1746367387.859:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19578 comm="syz.2.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbeed8e969 code=0x7ffc0000 [ 316.551740][ T5873] lg-g15 0003:046D:C222.0014: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 316.556446][ T30] audit: type=1326 audit(1746367387.859:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19578 comm="syz.2.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeed8e969 code=0x7ffc0000 [ 316.592675][ T30] audit: type=1326 audit(1746367387.859:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19578 comm="syz.2.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeed8e969 code=0x7ffc0000 [ 316.673332][ T30] audit: type=1326 audit(1746367387.879:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19578 comm="syz.2.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7ffbeed8e969 code=0x7ffc0000 [ 316.749641][ T30] audit: type=1326 audit(1746367387.879:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19578 comm="syz.2.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeed8e969 code=0x7ffc0000 [ 316.779558][ T5873] usb 4-1: USB disconnect, device number 22 [ 316.823266][ T30] audit: type=1326 audit(1746367387.879:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19578 comm="syz.2.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeed8e969 code=0x7ffc0000 [ 316.944841][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 317.032689][T19612] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4195'. [ 317.355052][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.364040][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.472882][T19626] netlink: 'syz.4.4200': attribute type 1 has an invalid length. [ 317.496593][T19626] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4200'. [ 318.296976][T19645] tmpfs: Cannot retroactively limit inodes [ 318.479275][ T5873] libceph: connect (1)[::]:6789 error -101 [ 318.491483][ T5873] libceph: mon0 (1)[::]:6789 connect error [ 318.507816][ T5873] libceph: connect (1)[::]:6789 error -101 [ 318.514121][ T5873] libceph: mon0 (1)[::]:6789 connect error [ 318.575783][T19657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.816890][ T5873] libceph: connect (1)[::]:6789 error -101 [ 318.830455][T19664] netlink: 'syz.2.4212': attribute type 4 has an invalid length. [ 318.849007][ T5873] libceph: mon0 (1)[::]:6789 connect error [ 319.110026][T19649] ceph: No mds server is up or the cluster is laggy [ 319.375385][ T5873] libceph: connect (1)[::]:6789 error -101 [ 319.385520][ T5873] libceph: mon0 (1)[::]:6789 connect error [ 320.174864][ T5874] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 320.357089][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.403032][ T5874] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.478836][ T5874] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.543993][ T5874] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.576569][ T5874] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 320.600876][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.669540][ T5874] usb 2-1: config 0 descriptor?? [ 321.126238][ T5874] kye 0003:0458:5015.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 321.173719][ T5874] kye 0003:0458:5015.0015: unbalanced collection at end of report description [ 321.223972][ T5874] kye 0003:0458:5015.0015: parse failed [ 321.248483][ T5874] kye 0003:0458:5015.0015: probe with driver kye failed with error -22 [ 321.350650][T19722] usb usb1: usbfs: process 19722 (syz.4.4229) did not claim interface 0 before use [ 321.378540][ T5874] usb 2-1: USB disconnect, device number 17 [ 322.644592][T19756] syz.4.4236: attempt to access beyond end of device [ 322.644592][T19756] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 323.958200][T19789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4250'. [ 324.039319][T19792] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 324.111719][T19793] team_slave_0: entered promiscuous mode [ 324.117982][T19793] team_slave_1: entered promiscuous mode [ 324.171543][T19793] macsec1: entered promiscuous mode [ 324.211956][T19793] team0: entered promiscuous mode [ 324.550041][ T30] audit: type=1326 audit(1746367395.909:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19801 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efced38e969 code=0x7ffc0000 [ 324.698768][ T30] audit: type=1326 audit(1746367395.959:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19801 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7efced38e969 code=0x7ffc0000 [ 324.843442][ T30] audit: type=1326 audit(1746367395.959:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19801 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efced38e969 code=0x7ffc0000 [ 324.949923][T19811] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 324.991726][ T30] audit: type=1326 audit(1746367395.959:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19801 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efced38e969 code=0x7ffc0000 [ 325.119479][ T30] audit: type=1326 audit(1746367395.969:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19801 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7efced38e969 code=0x7ffc0000 [ 325.197376][ T30] audit: type=1326 audit(1746367395.969:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19801 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efced38e969 code=0x7ffc0000 [ 325.260122][ T30] audit: type=1326 audit(1746367395.969:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19801 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efced38e969 code=0x7ffc0000 [ 325.302417][ T30] audit: type=1326 audit(1746367395.999:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19804 comm="syz.4.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38bcf8e969 code=0x7ffc0000 [ 325.335546][ T30] audit: type=1326 audit(1746367395.999:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19804 comm="syz.4.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38bcf8e969 code=0x7ffc0000 [ 325.400012][ T30] audit: type=1326 audit(1746367396.009:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19804 comm="syz.4.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f38bcf8e969 code=0x7ffc0000 [ 325.445690][T19793] team0: left promiscuous mode [ 325.457088][T19793] team_slave_0: left promiscuous mode [ 325.462661][T19793] team_slave_1: left promiscuous mode [ 328.747197][T19901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4279'. [ 328.762834][T19901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4279'. [ 328.781047][T19901] netlink: 'syz.2.4279': attribute type 14 has an invalid length. [ 330.412363][ T5873] libceph: connect (1)[::]:6789 error -101 [ 330.421222][ T5873] libceph: mon0 (1)[::]:6789 connect error [ 330.690920][ T5873] libceph: connect (1)[::]:6789 error -101 [ 330.699544][ T5873] libceph: mon0 (1)[::]:6789 connect error [ 331.215131][ T5873] libceph: connect (1)[::]:6789 error -101 [ 331.226451][T19932] ceph: No mds server is up or the cluster is laggy [ 331.233666][ T5873] libceph: mon0 (1)[::]:6789 connect error [ 331.944900][ T2064] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 332.107396][ T2064] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 332.123835][ T2064] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 332.138625][ T2064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.157725][ T2064] usb 3-1: config 0 descriptor?? [ 332.585853][ T2064] elecom 0003:056E:010C.0016: reserved main item tag 0xd [ 332.593174][ T2064] elecom 0003:056E:010C.0016: unexpected long global item [ 332.613308][ T2064] elecom 0003:056E:010C.0016: probe with driver elecom failed with error -22 [ 332.821709][ T2064] usb 3-1: USB disconnect, device number 27 [ 335.724827][ T2064] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 335.777328][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4315'. [ 335.839384][T20009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4315'. [ 335.906883][T20009] netlink: 'syz.0.4315': attribute type 11 has an invalid length. [ 335.934996][ T2064] usb 3-1: Using ep0 maxpacket: 8 [ 335.950385][T20009] netlink: 'syz.0.4315': attribute type 13 has an invalid length. [ 335.989796][ T2064] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 336.028216][ T2064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.084917][ T2064] usb 3-1: Product: syz [ 336.089160][ T2064] usb 3-1: Manufacturer: syz [ 336.114973][ T5873] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 336.160689][ T2064] usb 3-1: SerialNumber: syz [ 336.213748][ T2064] usb 3-1: config 0 descriptor?? [ 336.267497][ T2064] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 336.328825][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 336.353285][ T2064] usb 3-1: setting power ON [ 336.379211][ T2064] dvb-usb: bulk message failed: -22 (2/0) [ 336.387647][ T5873] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 336.445246][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.479947][ T2064] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 336.512675][T20004] dvb-usb: bulk message failed: -22 (3/0) [ 336.538093][ T5873] usb 5-1: Product: syz [ 336.548174][ T5873] usb 5-1: Manufacturer: syz [ 336.563565][ T2064] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 336.573255][T20004] usb 3-1: gpio_write failed. [ 336.590424][ T5873] usb 5-1: SerialNumber: syz [ 336.604900][T20004] cxusb: i2c rd: len=8192 is too big! [ 336.604900][T20004] [ 336.633138][ T2064] usb 3-1: media controller created [ 336.655956][ T5873] usb 5-1: config 0 descriptor?? [ 336.718306][ T5873] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 336.783833][ T5873] usb 5-1: setting power ON [ 336.808204][ T5873] dvb-usb: bulk message failed: -22 (2/0) [ 336.825325][ T2064] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.849424][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 336.897853][T20014] dvb-usb: bulk message failed: -22 (5/0) [ 336.967025][ T2064] usb 3-1: selecting invalid altsetting 6 [ 336.984114][ T5873] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 337.022673][ T2064] usb 3-1: digital interface selection failed (-22) [ 337.046358][ T5873] usb 5-1: media controller created [ 337.062501][ T2064] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 337.123402][ T2064] usb 3-1: setting power OFF [ 337.144047][ T2064] dvb-usb: bulk message failed: -22 (2/0) [ 337.187766][ T2064] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 337.205285][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.257946][ T2064] (NULL device *): no alternate interface [ 337.362261][ T5873] usb 5-1: selecting invalid altsetting 6 [ 337.456610][ T5873] usb 5-1: digital interface selection failed (-22) [ 337.515281][ T5873] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 337.526758][ T2064] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 337.601674][ T5873] usb 5-1: setting power OFF [ 337.651186][ T5873] dvb-usb: bulk message failed: -22 (2/0) [ 337.676184][ T2064] usb 3-1: USB disconnect, device number 28 [ 337.707883][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 337.814843][ T5873] (NULL device *): no alternate interface [ 338.138767][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 338.260812][ T5873] usb 5-1: USB disconnect, device number 23 [ 338.299625][ T2064] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 338.475220][ T2064] usb 3-1: Using ep0 maxpacket: 8 [ 338.508254][ T2064] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 338.539349][ T2064] usb 3-1: config 179 has no interface number 0 [ 338.569892][ T2064] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 338.602804][ T2064] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 338.635399][ T2064] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 338.673140][ T2064] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 338.722240][ T2064] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 338.772999][ T2064] usb 3-1: config 179 interface 65 has no altsetting 0 [ 338.788345][ T2064] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 338.801375][ T2064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.824821][T20073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 338.914202][ T2064] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input27 [ 339.395005][ T2064] usb 3-1: USB disconnect, device number 29 [ 339.395067][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 339.497699][ T2064] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 340.055109][ C0] sched: DL replenish lagged too much [ 340.796283][T20153] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4343'. [ 349.963917][T20312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'. [ 354.644809][ T2064] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 354.810083][ T2064] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.825423][ T2064] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 354.839197][ T2064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.861280][ T2064] usb 5-1: config 0 descriptor?? [ 355.332534][ T2064] lg-g15 0003:046D:C222.0017: unbalanced collection at end of report description [ 355.363327][ T2064] lg-g15 0003:046D:C222.0017: probe with driver lg-g15 failed with error -22 [ 355.538729][ T2064] usb 5-1: USB disconnect, device number 24 [ 355.749085][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 355.749104][ T30] audit: type=1326 audit(1746367427.109:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20355 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efced38e969 code=0x7ffc0000 [ 355.838734][ T30] audit: type=1326 audit(1746367427.109:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20355 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efced38e969 code=0x7ffc0000 [ 355.893076][ T30] audit: type=1326 audit(1746367427.149:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20355 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7efced38e969 code=0x7ffc0000 [ 355.914657][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.992691][ T30] audit: type=1326 audit(1746367427.149:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20355 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efced38e969 code=0x7ffc0000 [ 356.014289][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.025023][ T30] audit: type=1326 audit(1746367427.149:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20355 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efced38e969 code=0x7ffc0000 [ 356.046773][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.775107][ T2064] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 358.793348][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.805034][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.813681][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.822021][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.832246][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.017646][ T2064] usb 5-1: Using ep0 maxpacket: 32 [ 359.031116][ T2064] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 359.057363][ T2064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.090192][ T2064] usb 5-1: config 0 descriptor?? [ 359.120126][ T2064] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 359.775461][ T2064] usb 5-1: USB disconnect, device number 25 [ 360.041459][T20392] chnl_net:caif_netlink_parms(): no params data found [ 360.429615][T20392] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.468151][T20392] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.492216][T20392] bridge_slave_0: entered allmulticast mode [ 360.517242][T20392] bridge_slave_0: entered promiscuous mode [ 360.549904][T20392] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.585408][T20392] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.593016][T20392] bridge_slave_1: entered allmulticast mode [ 360.663351][T20392] bridge_slave_1: entered promiscuous mode [ 360.925148][ T5831] Bluetooth: hci1: command tx timeout [ 360.939795][T20392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.991997][T20392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.425269][T20619] netlink: 632 bytes leftover after parsing attributes in process `syz.4.4423'. [ 362.134630][T20392] team0: Port device team_slave_0 added [ 362.252094][T20626] bond3: entered promiscuous mode [ 362.290245][T20626] bond3: entered allmulticast mode [ 362.300794][T20626] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.996438][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.005334][ T5825] Bluetooth: hci1: command tx timeout [ 363.016788][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.025757][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.038019][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.050407][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.153534][T20626] bond3 (unregistering): Released all slaves [ 363.250586][T20392] team0: Port device team_slave_1 added [ 363.432063][T20392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.440068][T20392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.472855][T20392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.509013][T20392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.535190][T20392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.574324][T20392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.868789][T20392] hsr_slave_0: entered promiscuous mode [ 363.889390][T20392] hsr_slave_1: entered promiscuous mode [ 363.909198][T20392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.934720][T20392] Cannot create hsr debugfs directory [ 364.993752][T20392] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 365.059070][T20392] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 365.085474][ T5830] Bluetooth: hci5: command tx timeout [ 365.091794][ T5830] Bluetooth: hci1: command tx timeout [ 365.114066][T20392] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 365.162625][T20392] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 365.211064][T20673] chnl_net:caif_netlink_parms(): no params data found [ 365.622497][T20673] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.631419][T20673] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.644233][T20673] bridge_slave_0: entered allmulticast mode [ 365.661197][T20673] bridge_slave_0: entered promiscuous mode [ 365.692430][T20673] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.710360][T20673] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.739198][T20673] bridge_slave_1: entered allmulticast mode [ 365.753037][T20673] bridge_slave_1: entered promiscuous mode [ 365.959884][T20673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.994278][T20673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.263739][T20673] team0: Port device team_slave_0 added [ 366.313775][T20673] team0: Port device team_slave_1 added [ 366.494302][T20392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.760573][T20673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.799866][T20673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.868012][T20673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.927915][T20673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.960706][T20673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.030710][T20673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.069748][T20392] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.165093][ T5830] Bluetooth: hci1: command tx timeout [ 367.170655][ T5830] Bluetooth: hci5: command tx timeout [ 367.312154][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.319405][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.486040][T13233] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.493318][T13233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.569102][T20673] hsr_slave_0: entered promiscuous mode [ 367.596293][T20673] hsr_slave_1: entered promiscuous mode [ 367.602722][T20673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.630003][T20673] Cannot create hsr debugfs directory [ 367.727781][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 367.746924][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 367.757010][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 367.767755][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 367.775982][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 368.178706][T20392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.121647][T20673] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 369.222835][T20673] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 369.245021][ T5830] Bluetooth: hci5: command tx timeout [ 369.291146][T20673] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 369.320974][T20392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.357869][T20673] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 369.805504][ T5831] Bluetooth: hci6: command tx timeout [ 370.119254][T20673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.152527][T21085] chnl_net:caif_netlink_parms(): no params data found [ 370.318258][T20673] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.479364][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.486870][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.506706][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.514080][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.653413][T20392] veth0_vlan: entered promiscuous mode [ 370.793413][T20392] veth1_vlan: entered promiscuous mode [ 370.968948][T21085] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.999531][T21085] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.025057][T21085] bridge_slave_0: entered allmulticast mode [ 371.032947][T21085] bridge_slave_0: entered promiscuous mode [ 371.076993][T21085] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.084188][T21085] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.123086][T21085] bridge_slave_1: entered allmulticast mode [ 371.156919][T21085] bridge_slave_1: entered promiscuous mode [ 371.330632][ T5831] Bluetooth: hci5: command tx timeout [ 371.600012][T21085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.646335][T21085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.886532][ T5831] Bluetooth: hci6: command tx timeout [ 371.926673][T20392] veth0_macvtap: entered promiscuous mode [ 372.009270][T21085] team0: Port device team_slave_0 added [ 372.049894][T21085] team0: Port device team_slave_1 added [ 372.088227][T20392] veth1_macvtap: entered promiscuous mode [ 372.377759][T20673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.465713][T21085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.483180][T21085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.571576][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 372.582324][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 372.591229][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 372.603721][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 372.615505][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 372.686924][T21085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.755801][T21085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.763866][T21085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.833069][T21085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.875465][T20392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.912743][T20392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.961367][T20392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.001357][T20392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.045066][T20392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.069260][T20392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.101000][T20392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.203561][T20392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.237902][T20392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.273333][T20392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.310784][T20392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.350822][T20392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.376367][T20392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.413753][T20392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.641117][T21085] hsr_slave_0: entered promiscuous mode [ 373.666998][T21085] hsr_slave_1: entered promiscuous mode [ 373.673549][T21085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.690247][T21085] Cannot create hsr debugfs directory [ 373.702155][T20392] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.720180][T20392] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.731674][T20392] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.747161][T20392] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.965310][ T5830] Bluetooth: hci6: command tx timeout [ 374.490359][T20673] veth0_vlan: entered promiscuous mode [ 374.687782][ T5830] Bluetooth: hci7: command tx timeout [ 374.788833][T20673] veth1_vlan: entered promiscuous mode [ 374.842787][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.885938][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.117221][T20673] veth0_macvtap: entered promiscuous mode [ 375.217923][T20673] veth1_macvtap: entered promiscuous mode [ 375.227265][T13204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.254193][T13204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.500337][T21085] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 375.546300][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.569677][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.593695][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.611285][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.622760][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.646571][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.663314][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.682334][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.707201][T20673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.755628][T21085] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 375.789381][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.834535][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.875284][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.923728][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.952884][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.991286][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.022022][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.064849][ T5830] Bluetooth: hci6: command tx timeout [ 376.110678][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.156506][T20673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.191290][T21085] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 376.487363][T20673] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.560098][T20673] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.602763][T20673] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.630266][T20673] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.728769][T21085] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 376.767808][ T5830] Bluetooth: hci7: command tx timeout [ 377.250808][T21400] chnl_net:caif_netlink_parms(): no params data found [ 377.815915][T13204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.824447][T13204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.489892][T13233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.604036][T13233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.737068][T21400] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.755367][T21400] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.762707][T21400] bridge_slave_0: entered allmulticast mode [ 378.784401][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.790985][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.851137][ T5830] Bluetooth: hci7: command tx timeout [ 378.877043][T21400] bridge_slave_0: entered promiscuous mode [ 379.088649][T21400] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.134609][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.148103][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.175852][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.184288][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.192762][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.229306][T21400] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.275332][T21400] bridge_slave_1: entered allmulticast mode [ 379.324590][T21400] bridge_slave_1: entered promiscuous mode [ 380.760325][T21400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.922691][T21400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.938488][ T5831] Bluetooth: hci7: command tx timeout [ 381.135430][ T5873] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 381.245066][ T5831] Bluetooth: hci0: command tx timeout [ 381.379298][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 381.416468][T21085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.456529][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.479268][T21400] team0: Port device team_slave_0 added [ 381.508282][ T5873] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 381.542945][T21400] team0: Port device team_slave_1 added [ 381.575237][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.668282][ T5873] usb 6-1: config 0 descriptor?? [ 381.773810][T22058] binder: 22051:22058 ioctl c0306201 200000000540 returned -14 [ 382.038442][T21400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.090946][T21400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.178834][ T5873] zydacron 0003:13EC:0006.0018: unknown main item tag 0x1 [ 382.225174][ T30] audit: type=1326 audit(1746367453.569:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22074 comm="syz.6.4441" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7138f8e969 code=0x0 [ 382.251137][ T5873] zydacron 0003:13EC:0006.0018: unknown main item tag 0x6 [ 382.280724][T21400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.315611][ T5873] zydacron 0003:13EC:0006.0018: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.5-1/input0 [ 382.441290][T21400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.467051][ T5873] usb 6-1: USB disconnect, device number 2 [ 382.495566][T21400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.653316][T21400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.753798][T21085] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.014118][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.021413][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.328872][T13077] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.336311][T13077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.350870][ T5831] Bluetooth: hci0: command tx timeout [ 383.488476][T21400] hsr_slave_0: entered promiscuous mode [ 383.550332][T21400] hsr_slave_1: entered promiscuous mode [ 383.582060][T21400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.645599][T21400] Cannot create hsr debugfs directory [ 385.414967][ T5831] Bluetooth: hci0: command tx timeout [ 385.461603][T21713] chnl_net:caif_netlink_parms(): no params data found [ 385.804420][T21085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.920881][T21713] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.987066][T21713] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.008368][T22396] x_tables: ip_tables: limit.0 match: invalid size 40 (kernel) != (user) 48 [ 387.041603][T21713] bridge_slave_0: entered allmulticast mode [ 387.098076][T21713] bridge_slave_0: entered promiscuous mode [ 387.157910][T21713] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.205246][T21713] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.262949][T21713] bridge_slave_1: entered allmulticast mode [ 387.309686][T21713] bridge_slave_1: entered promiscuous mode [ 387.491425][ T5831] Bluetooth: hci0: command tx timeout [ 387.773703][T21713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.848708][T21713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.917209][T21400] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 388.269585][T21400] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 388.519498][T21713] team0: Port device team_slave_0 added [ 388.533550][T21400] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 388.633947][T21713] team0: Port device team_slave_1 added [ 388.675039][ T5828] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 388.813389][T21400] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 388.895432][ T5828] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 388.945393][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.953467][ T5828] usb 6-1: Product: syz [ 389.020570][ T5828] usb 6-1: Manufacturer: syz [ 389.041313][ T5828] usb 6-1: SerialNumber: syz [ 389.084694][T21085] veth0_vlan: entered promiscuous mode [ 389.108441][ T5828] usb 6-1: config 0 descriptor?? [ 389.153615][T21713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.168233][ T5828] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 389.194972][T21713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.297492][T21713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.393109][T21713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.421597][T21713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.523476][T21713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.566769][ T5831] Bluetooth: hci0: command tx timeout [ 389.590528][ T5828] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input28 [ 389.877041][ T5828] usb 6-1: USB disconnect, device number 3 [ 390.239956][T21085] veth1_vlan: entered promiscuous mode [ 390.337877][T21713] hsr_slave_0: entered promiscuous mode [ 390.382227][T21713] hsr_slave_1: entered promiscuous mode [ 390.424228][T21713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.485070][T21713] Cannot create hsr debugfs directory [ 391.071713][T21085] veth0_macvtap: entered promiscuous mode [ 391.329437][T21085] veth1_macvtap: entered promiscuous mode [ 391.483913][T21085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.554950][T21085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.604801][T21085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.635024][T21085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.721737][T21085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.810502][T21085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.865135][T21085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.914978][T21085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.948215][T21085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.991430][T21085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.074100][T21085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.379148][T21085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.419695][T21085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.461407][T21085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.515039][T21085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.558441][T21085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.593194][T21085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.614149][T21085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.635242][T21085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.694609][T21085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.718639][T21085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.786187][T21085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.864430][T21085] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.914799][T21085] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.956075][T21085] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.980477][T21085] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.117978][T21400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.433888][T21400] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.566893][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.574231][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.754399][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.761705][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.804442][T21713] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 393.958276][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.967895][T21713] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 394.008046][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.088177][T21713] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 394.168677][T21713] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 394.370986][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.415590][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.011692][T21713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.171163][T21713] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.384565][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.391946][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.497101][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.504348][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.001307][T21400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.974433][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4487'. [ 397.057042][T22706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4487'. [ 397.508746][T21713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.224303][T21400] veth0_vlan: entered promiscuous mode [ 398.327982][T21400] veth1_vlan: entered promiscuous mode [ 398.338554][T22730] netlink: 368 bytes leftover after parsing attributes in process `syz.5.4492'. [ 398.403764][T22730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4492'. [ 398.662766][T21400] veth0_macvtap: entered promiscuous mode [ 398.786199][T21400] veth1_macvtap: entered promiscuous mode [ 398.913102][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.091785][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.183426][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.244272][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.390404][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.453143][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.510147][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.573424][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.649001][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.685093][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.734074][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.773490][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.831399][T21400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.095229][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.164948][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.267894][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.331050][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.398359][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.494550][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.563277][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.638764][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.708247][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.772199][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.811200][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.846965][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.915698][T21400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.091924][T21400] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.139904][T21400] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.196611][T21400] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.266913][T21400] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.672521][T21713] veth0_vlan: entered promiscuous mode [ 401.932902][T21713] veth1_vlan: entered promiscuous mode [ 402.221485][T13233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.283571][T13233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.625387][ T4485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.658456][T21713] veth0_macvtap: entered promiscuous mode [ 402.704857][ T4485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.761590][T22811] hub 9-0:1.0: USB hub found [ 402.791980][T21713] veth1_macvtap: entered promiscuous mode [ 402.849574][T22811] hub 9-0:1.0: 1 port detected [ 403.024188][T21713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.100471][T21713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.151570][T21713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.233048][T21713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.289303][T21713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.335073][T21713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.373383][T21713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.403357][T21713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.446241][T21713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.486840][T21713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.522180][T21713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.564103][T21713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.605958][T21713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.642128][T21713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.704198][T21713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.749158][T22822] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 403.831634][T21713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.935296][T21713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.993665][T21713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.068320][T22825] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4428'. [ 404.084890][T21713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.133428][T22825] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4428'. [ 404.147360][T21713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.216145][T21713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.279517][T21713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.364100][T21713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.451843][T21713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.514189][T21713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.567032][T21713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.593164][T21713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.639628][T21713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.702254][T21713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.773617][T21713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.910229][T21713] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.971941][T21713] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.064171][T21713] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.125515][T21713] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.175021][ T30] audit: type=1326 audit(1746367476.529:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22839 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 405.351521][ T30] audit: type=1326 audit(1746367476.529:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22839 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 405.587628][ T30] audit: type=1326 audit(1746367476.589:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22839 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 405.747954][T22850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4524'. [ 405.803314][ T30] audit: type=1326 audit(1746367476.589:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22839 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 405.827056][T22850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4524'. [ 405.939869][ T30] audit: type=1326 audit(1746367476.589:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22839 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 405.990934][T16646] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 406.065985][ T4485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.119439][ T4485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.154464][ T30] audit: type=1326 audit(1746367476.589:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22839 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 406.236815][T16646] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 406.356467][T16646] usb 9-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 406.396633][ T30] audit: type=1326 audit(1746367476.589:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22839 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 406.459819][T16646] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.501197][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.527053][T16646] usb 9-1: config 0 descriptor?? [ 406.583923][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.593492][ T30] audit: type=1326 audit(1746367476.589:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22839 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 406.625659][T22847] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 407.170665][T16646] bigben 0003:146B:0902.0019: unexpected rdesc, please submit for review [ 407.276124][T16646] bigben 0003:146B:0902.0019: hidraw0: USB HID v1.01 Device [HID 146b:0902] on usb-dummy_hcd.8-1/input0 [ 407.344591][T16646] bigben 0003:146B:0902.0019: not enough fields in HID_OUTPUT_REPORT 0 [ 407.409735][T16646] bigben 0003:146B:0902.0019: no output report found [ 407.503877][T16646] usb 9-1: USB disconnect, device number 2 [ 408.404834][T16646] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 408.584818][T16646] usb 10-1: Using ep0 maxpacket: 8 [ 408.618308][T16646] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.669268][T16646] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.724884][T16646] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.780908][T16646] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.860408][T16646] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 408.914843][T16646] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.212356][T16646] usb 10-1: usb_control_msg returned -71 [ 409.269975][T16646] usbtmc 10-1:16.0: can't read capabilities [ 409.347943][T16646] usb 10-1: USB disconnect, device number 2 [ 411.022644][ T30] audit: type=1326 audit(1746367482.379:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22966 comm="syz.5.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 411.159289][ T30] audit: type=1326 audit(1746367482.419:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22966 comm="syz.5.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 411.181437][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.445095][ T30] audit: type=1326 audit(1746367482.439:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22966 comm="syz.5.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 411.466683][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.710590][ T30] audit: type=1326 audit(1746367482.439:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22966 comm="syz.5.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 411.732096][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.946759][ T30] audit: type=1326 audit(1746367482.439:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22966 comm="syz.5.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 412.144467][ T30] audit: type=1326 audit(1746367482.449:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22966 comm="syz.5.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 412.166221][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.298294][ T30] audit: type=1326 audit(1746367482.449:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22966 comm="syz.5.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 412.474182][ T30] audit: type=1326 audit(1746367482.449:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22966 comm="syz.5.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ef78e969 code=0x7ffc0000 [ 413.794364][T23031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4563'. [ 413.814380][T23031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4563'. [ 413.835707][T23031] netlink: 'syz.5.4563': attribute type 12 has an invalid length. [ 415.915071][ T5828] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 416.089860][ T5828] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 416.109464][ T5828] usb 10-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 416.143058][ T5828] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.182081][ T5828] usb 10-1: config 0 descriptor?? [ 416.683209][ T5828] glorious 0003:258A:0036.001A: hidraw0: USB HID v0.01 Device [Glorious Model O] on usb-dummy_hcd.9-1/input0 [ 416.893338][ T5828] usb 10-1: USB disconnect, device number 3 [ 419.216325][ T5830] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 419.227572][ T5830] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 419.236297][ T5830] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 419.254474][ T5830] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 419.263129][ T5830] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 419.659078][ T4485] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.348242][ T5830] Bluetooth: hci8: command tx timeout [ 423.405155][ T5830] Bluetooth: hci8: command tx timeout [ 425.486747][ T5830] Bluetooth: hci8: command tx timeout [ 427.565239][ T5830] Bluetooth: hci8: command tx timeout [ 428.442390][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.452494][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.461440][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.489996][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.500644][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 430.085901][T23126] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4582'. [ 430.114407][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 430.124438][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 430.142278][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 430.160465][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 430.169086][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 430.606768][ T5830] Bluetooth: hci2: command tx timeout [ 431.478754][T23098] chnl_net:caif_netlink_parms(): no params data found [ 432.205279][ T5830] Bluetooth: hci3: command tx timeout [ 432.245464][T23098] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.252765][T23098] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.321586][T23098] bridge_slave_0: entered allmulticast mode [ 432.379212][T23098] bridge_slave_0: entered promiscuous mode [ 432.448225][T23098] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.475209][T23098] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.502136][T23098] bridge_slave_1: entered allmulticast mode [ 432.557298][T23098] bridge_slave_1: entered promiscuous mode [ 432.685036][ T5830] Bluetooth: hci2: command tx timeout [ 432.950475][T23098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.016023][T23098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.499092][T23098] team0: Port device team_slave_0 added [ 433.538585][T23098] team0: Port device team_slave_1 added [ 433.787916][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 433.800588][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 433.817226][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 433.828201][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 433.842218][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.103226][T23098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.136830][T23098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.179880][T23098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.285138][ T5831] Bluetooth: hci3: command tx timeout [ 434.376048][T23098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.383054][T23098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.502992][T23098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.765524][ T5831] Bluetooth: hci2: command tx timeout [ 434.771693][T23144] chnl_net:caif_netlink_parms(): no params data found [ 435.036779][T23098] hsr_slave_0: entered promiscuous mode [ 435.053045][T23098] hsr_slave_1: entered promiscuous mode [ 435.078479][T23098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.124213][T23098] Cannot create hsr debugfs directory [ 435.891336][ T5831] Bluetooth: hci4: command tx timeout [ 436.358616][T23144] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.374474][ T5831] Bluetooth: hci3: command tx timeout [ 436.405109][T23144] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.412777][T23144] bridge_slave_0: entered allmulticast mode [ 436.430460][T23144] bridge_slave_0: entered promiscuous mode [ 436.467720][T23144] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.494984][T23144] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.515394][T23144] bridge_slave_1: entered allmulticast mode [ 436.547950][T23144] bridge_slave_1: entered promiscuous mode [ 436.568227][T23131] chnl_net:caif_netlink_parms(): no params data found [ 436.845223][ T5831] Bluetooth: hci2: command tx timeout [ 437.018526][T23144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.128617][T23144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.743251][T23144] team0: Port device team_slave_0 added [ 437.766411][T23144] team0: Port device team_slave_1 added [ 437.965535][ T5831] Bluetooth: hci4: command tx timeout [ 438.448568][ T5831] Bluetooth: hci3: command tx timeout [ 438.470811][T23131] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.487870][T23131] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.502739][T23131] bridge_slave_0: entered allmulticast mode [ 438.529980][T23131] bridge_slave_0: entered promiscuous mode [ 438.555746][T23144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.562746][T23144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.613957][T23144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.731759][T23131] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.742726][T23131] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.766696][T23131] bridge_slave_1: entered allmulticast mode [ 438.788791][T23131] bridge_slave_1: entered promiscuous mode [ 438.812102][T23144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.832651][T23144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.887638][T23144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.183086][T23410] chnl_net:caif_netlink_parms(): no params data found [ 439.241074][T23131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.277739][T23131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.798642][T23144] hsr_slave_0: entered promiscuous mode [ 439.818148][T23144] hsr_slave_1: entered promiscuous mode [ 439.835219][T23144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.842917][T23144] Cannot create hsr debugfs directory [ 439.889847][T23131] team0: Port device team_slave_0 added [ 439.925365][T23131] team0: Port device team_slave_1 added [ 440.045146][ T5831] Bluetooth: hci4: command tx timeout [ 440.228407][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.235646][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.527462][T23131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.534462][T23131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.584117][T23131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.756771][T23131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.763875][T23131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.818071][T23131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.045236][T23410] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.052518][T23410] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.072156][T23410] bridge_slave_0: entered allmulticast mode [ 441.091743][T23410] bridge_slave_0: entered promiscuous mode [ 441.124417][T23410] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.150109][T23410] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.167465][T23410] bridge_slave_1: entered allmulticast mode [ 441.186247][T23410] bridge_slave_1: entered promiscuous mode [ 441.802889][T23410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.839323][T23410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.915111][T23131] hsr_slave_0: entered promiscuous mode [ 441.922262][T23131] hsr_slave_1: entered promiscuous mode [ 441.952241][T23131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.970508][T23131] Cannot create hsr debugfs directory [ 442.125697][ T5831] Bluetooth: hci4: command tx timeout [ 442.480786][T23410] team0: Port device team_slave_0 added [ 442.513616][T23410] team0: Port device team_slave_1 added [ 442.938030][T23410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.961847][T23410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.001524][T23410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.033680][T23410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.075149][T23410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.180406][T23410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.834183][T23410] hsr_slave_0: entered promiscuous mode [ 443.863863][T23410] hsr_slave_1: entered promiscuous mode [ 443.905097][T23410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.912723][T23410] Cannot create hsr debugfs directory [ 447.144351][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 447.160821][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 447.170688][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 447.182181][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 447.190380][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 448.457685][T24419] chnl_net:caif_netlink_parms(): no params data found [ 449.245439][ T5830] Bluetooth: hci6: command tx timeout [ 451.325319][ T5830] Bluetooth: hci6: command tx timeout [ 453.408513][ T5830] Bluetooth: hci6: command tx timeout [ 455.485181][ T5830] Bluetooth: hci6: command tx timeout [ 457.264043][T24419] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.293815][T24419] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.315601][T24419] bridge_slave_0: entered allmulticast mode [ 457.324522][T24419] bridge_slave_0: entered promiscuous mode [ 457.366363][T24419] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.373671][T24419] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.398658][T24419] bridge_slave_1: entered allmulticast mode [ 457.436320][T24419] bridge_slave_1: entered promiscuous mode [ 457.678320][T24419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.714245][T24419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.011846][T24419] team0: Port device team_slave_0 added [ 458.118008][T24419] team0: Port device team_slave_1 added [ 458.348552][T24419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.372847][T24419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.434084][T24419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.461404][T24419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.483280][T24419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.526603][T24419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.808278][T24419] hsr_slave_0: entered promiscuous mode [ 458.828064][T24419] hsr_slave_1: entered promiscuous mode [ 458.847753][T24419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.875050][T24419] Cannot create hsr debugfs directory [ 479.214297][ T5831] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 479.229365][ T5831] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 479.248461][ T5831] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 479.259568][ T5831] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 479.269416][ T5831] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 480.549899][T24740] chnl_net:caif_netlink_parms(): no params data found [ 481.084971][T24740] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.092178][T24740] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.115089][T24740] bridge_slave_0: entered allmulticast mode [ 481.123125][T24740] bridge_slave_0: entered promiscuous mode [ 481.164222][T24740] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.200321][T24740] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.230585][T24740] bridge_slave_1: entered allmulticast mode [ 481.255286][T24740] bridge_slave_1: entered promiscuous mode [ 481.325104][ T5830] Bluetooth: hci9: command tx timeout [ 481.482168][T24740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.519009][T24740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.756282][T24740] team0: Port device team_slave_0 added [ 481.795920][T24740] team0: Port device team_slave_1 added [ 482.022377][T24740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.043087][T24740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.102772][T24740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.136707][T24740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.143878][T24740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.213955][T24740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.568155][T24740] hsr_slave_0: entered promiscuous mode [ 482.583668][T24740] hsr_slave_1: entered promiscuous mode [ 482.603033][T24740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.615225][T24740] Cannot create hsr debugfs directory [ 483.255578][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 483.405280][ T5831] Bluetooth: hci9: command tx timeout [ 485.485101][ T5831] Bluetooth: hci9: command tx timeout [ 487.565522][ T5831] Bluetooth: hci9: command tx timeout [ 489.182365][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 489.201333][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 489.210942][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 489.220156][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 489.229402][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 490.920008][T25069] chnl_net:caif_netlink_parms(): no params data found [ 491.150447][ T5831] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 491.160487][ T5831] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 491.170875][ T5831] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 491.190093][ T5831] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 491.204282][ T5831] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 491.325331][ T5831] Bluetooth: hci5: command tx timeout [ 491.630715][T25069] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.669006][T25069] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.704273][T25069] bridge_slave_0: entered allmulticast mode [ 491.744935][T25069] bridge_slave_0: entered promiscuous mode [ 491.779165][T25069] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.805090][T25069] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.812561][T25069] bridge_slave_1: entered allmulticast mode [ 491.865589][T25069] bridge_slave_1: entered promiscuous mode [ 492.160161][T25069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.219628][T25069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.491767][T25069] team0: Port device team_slave_0 added [ 492.520655][T25069] team0: Port device team_slave_1 added [ 492.777584][T25069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.815847][T25069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.936023][T25069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.197639][T25069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.224802][T25069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.326222][ T5831] Bluetooth: hci10: command tx timeout [ 493.340416][T25069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.405327][ T5831] Bluetooth: hci5: command tx timeout [ 493.757440][T25069] hsr_slave_0: entered promiscuous mode [ 493.764390][T25069] hsr_slave_1: entered promiscuous mode [ 493.847545][T25069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.866254][T25069] Cannot create hsr debugfs directory [ 494.077521][ T5830] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 494.089840][ T5830] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 494.101445][ T5830] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 494.113332][ T5830] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 494.127239][ T5830] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 495.405803][ T5831] Bluetooth: hci10: command tx timeout [ 495.438650][T25187] chnl_net:caif_netlink_parms(): no params data found [ 495.494362][ T5831] Bluetooth: hci5: command tx timeout [ 496.136133][T25187] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.143412][T25187] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.183146][T25187] bridge_slave_0: entered allmulticast mode [ 496.192395][T25187] bridge_slave_0: entered promiscuous mode [ 496.215047][ T5831] Bluetooth: hci11: command tx timeout [ 496.236314][T25187] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.243738][T25187] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.270647][T25187] bridge_slave_1: entered allmulticast mode [ 496.297103][T25187] bridge_slave_1: entered promiscuous mode [ 496.629904][T25187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.759215][T25187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.193768][T25187] team0: Port device team_slave_0 added [ 497.255930][T25187] team0: Port device team_slave_1 added [ 497.269087][T25370] chnl_net:caif_netlink_parms(): no params data found [ 497.485098][ T5830] Bluetooth: hci10: command tx timeout [ 497.565546][ T5830] Bluetooth: hci5: command tx timeout [ 497.692090][T25187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.704793][T25187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.774875][T25187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.806869][T25187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.813878][T25187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.881081][T25187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.284952][ T5830] Bluetooth: hci11: command tx timeout [ 498.607090][ T5830] Bluetooth: hci7: command 0x0406 tx timeout [ 498.618423][T25370] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.632322][T25370] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.665614][T25370] bridge_slave_0: entered allmulticast mode [ 498.705707][T25370] bridge_slave_0: entered promiscuous mode [ 498.732146][T25187] hsr_slave_0: entered promiscuous mode [ 498.765441][T25187] hsr_slave_1: entered promiscuous mode [ 498.785045][T25187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.795230][T25187] Cannot create hsr debugfs directory [ 498.805384][T25370] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.812602][T25370] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.838971][T25370] bridge_slave_1: entered allmulticast mode [ 498.885526][T25370] bridge_slave_1: entered promiscuous mode [ 499.350079][T25370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.389607][T25370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.565034][ T5831] Bluetooth: hci10: command tx timeout [ 499.690407][T25370] team0: Port device team_slave_0 added [ 499.719454][T25370] team0: Port device team_slave_1 added [ 500.243875][T25370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.264774][T25370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.324553][T25370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.375782][ T5831] Bluetooth: hci11: command tx timeout [ 500.403937][T25370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.435268][T25370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.479968][T25370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.888965][T25370] hsr_slave_0: entered promiscuous mode [ 500.906362][T25370] hsr_slave_1: entered promiscuous mode [ 500.926160][T25370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.933863][T25370] Cannot create hsr debugfs directory [ 501.671266][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.677886][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.448017][ T5831] Bluetooth: hci11: command tx timeout [ 507.728415][ T5830] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 507.739319][ T5830] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 507.748241][ T5830] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 507.758039][ T5830] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 507.791700][ T5830] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 509.070747][T26030] chnl_net:caif_netlink_parms(): no params data found [ 509.611331][T26030] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.640456][T26030] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.670733][T26030] bridge_slave_0: entered allmulticast mode [ 509.687927][T26030] bridge_slave_0: entered promiscuous mode [ 509.722383][T26030] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.745706][T26030] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.773089][T26030] bridge_slave_1: entered allmulticast mode [ 509.798181][T26030] bridge_slave_1: entered promiscuous mode [ 509.885088][ T5830] Bluetooth: hci12: command tx timeout [ 510.040582][T26030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.119682][T26030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.373621][T26030] team0: Port device team_slave_0 added [ 510.403540][T26030] team0: Port device team_slave_1 added [ 510.635162][T26030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.665719][T26030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.726189][T26030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.776295][T26030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.783302][T26030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.832247][T26030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.973858][ T5830] Bluetooth: hci12: command tx timeout [ 514.045617][ T5830] Bluetooth: hci12: command tx timeout [ 516.126420][ T5830] Bluetooth: hci12: command tx timeout [ 520.895805][T26030] hsr_slave_0: entered promiscuous mode [ 520.909243][T26030] hsr_slave_1: entered promiscuous mode [ 520.935618][T26030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.943247][T26030] Cannot create hsr debugfs directory [ 539.599795][ T5831] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 539.610668][ T5831] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 539.623385][ T5831] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 539.635839][ T5831] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 539.668765][ T5831] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 541.028715][T26354] chnl_net:caif_netlink_parms(): no params data found [ 541.498340][T26354] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.517225][T26354] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.535633][T26354] bridge_slave_0: entered allmulticast mode [ 541.556544][T26354] bridge_slave_0: entered promiscuous mode [ 541.588221][T26354] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.606623][T26354] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.614069][T26354] bridge_slave_1: entered allmulticast mode [ 541.642454][T26354] bridge_slave_1: entered promiscuous mode [ 541.724870][ T5831] Bluetooth: hci13: command tx timeout [ 542.029324][T26354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.066128][T26354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.348284][T26354] team0: Port device team_slave_0 added [ 542.386313][T26354] team0: Port device team_slave_1 added [ 542.667562][T26354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.696620][T26354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.775235][T26354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.825962][T26354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.832977][T26354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.913373][T26354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.321213][T26354] hsr_slave_0: entered promiscuous mode [ 543.338577][T26354] hsr_slave_1: entered promiscuous mode [ 543.355933][T26354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.375764][T26354] Cannot create hsr debugfs directory [ 543.804913][T26586] Bluetooth: hci13: command tx timeout [ 544.701289][T26586] Bluetooth: hci8: command 0x0406 tx timeout [ 544.710301][T26586] Bluetooth: hci0: command 0x0406 tx timeout [ 545.885440][ T5831] Bluetooth: hci13: command tx timeout [ 547.965923][ T5831] Bluetooth: hci13: command tx timeout [ 549.766115][ T5830] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 549.777315][ T5830] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 549.786681][ T5830] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 549.809041][ T5830] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 549.825574][ T5830] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 551.594175][T26679] chnl_net:caif_netlink_parms(): no params data found [ 551.705944][ T5831] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 551.716404][ T5831] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 551.725803][ T5831] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 551.734130][ T5831] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 551.743012][ T5831] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 551.886187][ T5831] Bluetooth: hci14: command tx timeout [ 552.357298][T26679] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.367479][T26679] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.405016][T26679] bridge_slave_0: entered allmulticast mode [ 552.437017][T26679] bridge_slave_0: entered promiscuous mode [ 552.463313][T26679] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.504906][T26679] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.512421][T26679] bridge_slave_1: entered allmulticast mode [ 552.557403][T26679] bridge_slave_1: entered promiscuous mode [ 552.878083][T26679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.940229][T26679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.257719][T26679] team0: Port device team_slave_0 added [ 553.310205][T26679] team0: Port device team_slave_1 added [ 553.611839][T26679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.649252][T26679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.725374][T26679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.808454][T26674] Bluetooth: hci15: command tx timeout [ 553.958857][T26679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.966559][T26674] Bluetooth: hci14: command tx timeout [ 553.995302][T26679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.084710][T26679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.538947][T26679] hsr_slave_0: entered promiscuous mode [ 554.595925][T26679] hsr_slave_1: entered promiscuous mode [ 554.602695][T26679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.647541][ T5825] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 554.658427][ T5825] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 554.673261][ T5825] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 554.682879][ T5825] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 554.701958][ T5825] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 554.742740][T26679] Cannot create hsr debugfs directory [ 554.925258][T26674] Bluetooth: hci2: command 0x0406 tx timeout [ 554.936691][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 555.886014][ T5830] Bluetooth: hci15: command tx timeout [ 556.018982][T26788] chnl_net:caif_netlink_parms(): no params data found [ 556.045814][ T5830] Bluetooth: hci14: command tx timeout [ 556.744158][T26788] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.766205][ T5830] Bluetooth: hci16: command tx timeout [ 556.772944][T26788] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.783606][T26788] bridge_slave_0: entered allmulticast mode [ 556.807198][T26788] bridge_slave_0: entered promiscuous mode [ 556.840676][T26788] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.854842][T26788] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.877780][T26788] bridge_slave_1: entered allmulticast mode [ 556.898748][T26788] bridge_slave_1: entered promiscuous mode [ 557.211187][T26788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.256071][T26788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.559083][T26788] team0: Port device team_slave_0 added [ 557.603492][T26788] team0: Port device team_slave_1 added [ 557.926616][T26788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.933636][T26788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.981753][ T5830] Bluetooth: hci15: command tx timeout [ 558.022911][T26788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.079816][T26788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.114966][T26788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.164714][T26674] Bluetooth: hci14: command tx timeout [ 558.206437][T26788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.770162][T26788] hsr_slave_0: entered promiscuous mode [ 558.797028][T26788] hsr_slave_1: entered promiscuous mode [ 558.813806][T26788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.834942][T26788] Cannot create hsr debugfs directory [ 558.849477][T26674] Bluetooth: hci16: command tx timeout [ 559.159807][T26972] chnl_net:caif_netlink_parms(): no params data found [ 560.010286][T26972] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.035029][T26972] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.042476][T26972] bridge_slave_0: entered allmulticast mode [ 560.054735][T26674] Bluetooth: hci4: command 0x0406 tx timeout [ 560.060804][T26674] Bluetooth: hci15: command tx timeout [ 560.102829][T26972] bridge_slave_0: entered promiscuous mode [ 560.166726][T26972] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.174006][T26972] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.202962][T26972] bridge_slave_1: entered allmulticast mode [ 560.234139][T26972] bridge_slave_1: entered promiscuous mode [ 560.478079][T26972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.519864][T26972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.768971][T26972] team0: Port device team_slave_0 added [ 560.800416][T26972] team0: Port device team_slave_1 added [ 560.925517][ T5830] Bluetooth: hci16: command tx timeout [ 561.057565][T26972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.072456][T26972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.145390][T26972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.178916][T26972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.194776][T26972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.265019][T26972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.696234][T26972] hsr_slave_0: entered promiscuous mode [ 561.716964][T26972] hsr_slave_1: entered promiscuous mode [ 561.738849][T26972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.754853][T26972] Cannot create hsr debugfs directory [ 563.005320][ T5830] Bluetooth: hci16: command tx timeout [ 563.092750][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.109405][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.428033][ T5831] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 568.439377][ T5831] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 568.459878][ T5831] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 568.468605][ T5831] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 568.478170][ T5831] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 569.803724][T27640] chnl_net:caif_netlink_parms(): no params data found [ 570.290999][ T5830] Bluetooth: hci6: command 0x0406 tx timeout [ 570.525310][ T5830] Bluetooth: hci17: command tx timeout [ 571.263984][T27640] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.284962][T27640] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.293165][T27640] bridge_slave_0: entered allmulticast mode [ 571.321471][T27640] bridge_slave_0: entered promiscuous mode [ 571.349605][T27640] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.374930][T27640] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.382846][T27640] bridge_slave_1: entered allmulticast mode [ 571.409551][T27640] bridge_slave_1: entered promiscuous mode [ 571.642281][T27640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.691492][T27640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.942381][T27640] team0: Port device team_slave_0 added [ 571.969377][T27640] team0: Port device team_slave_1 added [ 572.605081][T26674] Bluetooth: hci17: command tx timeout [ 573.965391][ T31] INFO: task syz.1.4389:20291 blocked for more than 143 seconds. [ 573.973352][ T31] Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 574.053511][ T31] Blocked by coredump. [ 574.079964][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.116442][ T31] task:syz.1.4389 state:D stack:25512 pid:20291 tgid:20291 ppid:5818 task_flags:0x40044c flags:0x00004006 [ 574.214991][ T31] Call Trace: [ 574.218354][ T31] [ 574.221360][ T31] __schedule+0x168f/0x4c70 [ 574.305347][ T31] ? __schedule+0x16ad/0x4c70 [ 574.310129][ T31] ? __lock_acquire+0xaac/0xd20 [ 574.354868][ T31] ? schedule+0x165/0x360 [ 574.359311][ T31] ? __pfx___schedule+0x10/0x10 [ 574.374703][ T31] ? schedule+0x91/0x360 [ 574.379032][ T31] schedule+0x165/0x360 [ 574.383316][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.405095][ T31] __mutex_lock+0x724/0xe80 [ 574.409687][ T31] ? __mutex_lock+0x51b/0xe80 [ 574.414414][ T31] ? rcu_barrier+0x4c/0x570 [ 574.454803][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.459911][ T31] ? __mutex_unlock_slowpath+0x6ed/0x700 [ 574.485463][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 574.493081][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 574.505053][ T31] rcu_barrier+0x4c/0x570 [ 574.509455][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 574.525499][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 574.530685][ T31] netdev_run_todo+0x327/0xea0 [ 574.565486][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 574.571937][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 574.584952][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 574.590311][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.607251][ T31] ? netdev_state_change+0x1ca/0x220 [ 574.612610][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 574.634932][ T31] tun_chr_close+0x13c/0x1c0 [ 574.644373][ T31] __fput+0x449/0xa70 [ 574.668607][ T31] task_work_run+0x1d1/0x260 [ 574.673858][ T31] ? __pfx_task_work_run+0x10/0x10 [ 574.685160][T26674] Bluetooth: hci17: command tx timeout [ 574.690839][ T31] ? kmem_cache_free+0x192/0x3f0 [ 574.705657][ T31] do_exit+0x8d6/0x2550 [ 574.709898][ T31] ? do_raw_spin_lock+0x121/0x290 [ 574.725572][ T31] ? __pfx_do_exit+0x10/0x10 [ 574.730236][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 574.759638][ T31] do_group_exit+0x21c/0x2d0 [ 574.764313][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.785030][ T31] get_signal+0x125e/0x1310 [ 574.789734][ T31] arch_do_signal_or_restart+0x95/0x780 [ 574.805450][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 574.811702][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 574.834929][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 574.840549][ T31] do_syscall_64+0x103/0x210 [ 574.870503][ T31] ? clear_bhb_loop+0x45/0xa0 [ 574.878016][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.887404][ T31] RIP: 0033:0x7fa19a78e969 [ 574.891960][ T31] RSP: 002b:00007ffe7bc41128 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 574.931281][ T31] RAX: 0000000000000000 RBX: 0000000000054b19 RCX: 00007fa19a78e969 [ 574.948058][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 574.965332][ T31] RBP: 00007fa19a9b7ba0 R08: 0000000000000001 R09: 000000037bc4141f [ 574.973470][ T31] R10: 00007fa19a600000 R11: 0000000000000246 R12: 00007fa19a9b5fac [ 575.001656][ T31] R13: 00007fa19a9b5fa0 R14: ffffffffffffffff R15: 00007ffe7bc41240 [ 575.025444][ T31] [ 575.028589][ T31] INFO: task syz.3.4408:20357 blocked for more than 144 seconds. [ 575.050481][ T31] Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 [ 575.075017][ T31] Blocked by coredump. [ 575.079669][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.104376][ T31] task:syz.3.4408 state:D stack:25896 pid:20357 tgid:20357 ppid:5821 task_flags:0x40044c flags:0x00004006 [ 575.135160][ T31] Call Trace: [ 575.138510][ T31] [ 575.141478][ T31] __schedule+0x168f/0x4c70 [ 575.165625][ T31] ? __lock_acquire+0xaac/0xd20 [ 575.170568][ T31] ? schedule+0x165/0x360 [ 575.184750][ T31] ? __pfx___schedule+0x10/0x10 [ 575.197063][ T31] ? schedule+0x91/0x360 [ 575.201401][ T31] schedule+0x165/0x360 [ 575.226975][ T31] schedule_preempt_disabled+0x13/0x30 [ 575.232533][ T31] __mutex_lock+0x724/0xe80 [ 575.245611][ T31] ? __mutex_lock+0x51b/0xe80 [ 575.250368][ T31] ? rcu_barrier+0x4c/0x570 [ 575.285045][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 575.290155][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 575.306666][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 575.325287][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 575.330572][ T31] rcu_barrier+0x4c/0x570 [ 575.358326][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 575.363547][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 575.378034][ T31] netdev_run_todo+0x327/0xea0 [ 575.382904][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 575.405727][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 575.412763][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 575.435123][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.440423][ T31] ? netdev_state_change+0x1ca/0x220 [ 575.464666][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 575.469958][ T31] tun_chr_close+0x13c/0x1c0 [ 575.485764][ T31] __fput+0x449/0xa70 [ 575.489861][ T31] task_work_run+0x1d1/0x260 [ 575.504720][ T31] ? __pfx_task_work_run+0x10/0x10 [ 575.509924][ T31] ? kmem_cache_free+0x192/0x3f0 [ 575.538496][ T31] do_exit+0x8d6/0x2550 [ 575.542843][ T31] ? do_raw_spin_lock+0x121/0x290 [ 575.564325][ T31] ? __pfx_do_exit+0x10/0x10 [ 575.575563][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 575.581020][ T31] do_group_exit+0x21c/0x2d0 [ 575.603873][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.611467][ T31] get_signal+0x125e/0x1310 [ 575.624738][ T31] arch_do_signal_or_restart+0x95/0x780 [ 575.630386][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 575.655168][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 575.677078][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 575.682907][ T31] do_syscall_64+0x103/0x210 [ 575.704850][ T31] ? clear_bhb_loop+0x45/0xa0 [ 575.709613][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.724970][ T31] RIP: 0033:0x7efced38e969 [ 575.729459][ T31] RSP: 002b:00007ffee1c21fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 575.758276][ T31] RAX: 0000000000000000 RBX: 0000000000056e07 RCX: 00007efced38e969 [ 575.795152][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 575.803291][ T31] RBP: 00007efced5b7ba0 R08: 0000000000000001 R09: 00000003e1c222bf [ 575.824701][ T31] R10: 00007efced200000 R11: 0000000000000246 R12: 00007efced5b5fac [ 575.832925][ T31] R13: 00007efced5b5fa0 R14: ffffffffffffffff R15: 00007ffee1c220e0 [ 575.872620][ T31] [ 575.889645][ T31] INFO: task syz.4.4425:20626 blocked for more than 145 seconds. [ 575.989992][ T31] Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 [ 576.027053][ T31] Blocked by coredump. [ 576.031853][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.054801][ T31] task:syz.4.4425 state:D stack:22104 pid:20626 tgid:20625 ppid:5819 task_flags:0x40054c flags:0x00004002 [ 576.087138][ T31] Call Trace: [ 576.090533][ T31] [ 576.093495][ T31] __schedule+0x168f/0x4c70 [ 576.114912][ T31] ? __schedule+0x16ad/0x4c70 [ 576.130425][ T31] ? __lock_acquire+0xaac/0xd20 [ 576.145322][ T31] ? schedule+0x165/0x360 [ 576.149762][ T31] ? __pfx___schedule+0x10/0x10 [ 576.165394][ T31] ? schedule+0x91/0x360 [ 576.169806][ T31] schedule+0x165/0x360 [ 576.187676][ T31] schedule_preempt_disabled+0x13/0x30 [ 576.193220][ T31] __mutex_lock+0x724/0xe80 [ 576.213503][ T31] ? __mutex_lock+0x51b/0xe80 [ 576.230467][ T31] ? rcu_barrier+0x4c/0x570 [ 576.245077][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 576.250192][ T31] ? __mutex_unlock_slowpath+0x6ed/0x700 [ 576.264968][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 576.271049][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 576.296676][ T31] rcu_barrier+0x4c/0x570 [ 576.301093][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 576.321170][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 576.345065][ T31] netdev_run_todo+0x327/0xea0 [ 576.349924][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 576.365076][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 576.370796][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 576.384175][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.406972][ T31] ? netdev_state_change+0x1ca/0x220 [ 576.412393][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 576.428021][ T31] tun_chr_close+0x13c/0x1c0 [ 576.432959][ T31] __fput+0x449/0xa70 [ 576.454994][ T31] task_work_run+0x1d1/0x260 [ 576.459673][ T31] ? __pfx_task_work_run+0x10/0x10 [ 576.473443][ T31] ? kmem_cache_free+0x192/0x3f0 [ 576.485000][ T31] do_exit+0x8d6/0x2550 [ 576.489254][ T31] ? do_raw_spin_lock+0x121/0x290 [ 576.494492][ T31] ? __pfx_do_exit+0x10/0x10 [ 576.526622][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 576.532107][ T31] do_group_exit+0x21c/0x2d0 [ 576.552735][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.570842][ T31] get_signal+0x125e/0x1310 [ 576.586753][ T31] arch_do_signal_or_restart+0x95/0x780 [ 576.592488][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 576.605399][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 576.611408][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 576.635092][ T31] do_syscall_64+0x103/0x210 [ 576.650735][ T31] ? clear_bhb_loop+0x45/0xa0 [ 576.664822][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.670888][ T31] RIP: 0033:0x7f38bcf8e969 [ 576.689776][ T31] RSP: 002b:00007f38bdddd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.715102][ T31] RAX: 0000000000000044 RBX: 00007f38bd1b5fa0 RCX: 00007f38bcf8e969 [ 576.723789][ T31] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 576.742659][ T31] RBP: 00007f38bd010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 576.767415][T26674] Bluetooth: hci17: command tx timeout [ 576.773168][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.804795][ T31] R13: 0000000000000000 R14: 00007f38bd1b5fa0 R15: 00007fff16cc9788 [ 576.812956][ T31] [ 576.835086][ T31] [ 576.835086][ T31] Showing all locks held in the system: [ 576.842873][ T31] 1 lock held by khungtaskd/31: [ 576.866944][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 576.893255][ T31] 3 locks held by kworker/u8:5/151: [ 576.904938][ T31] #0: ffff88802fbc5148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 576.929375][ T31] #1: ffffc90002f17c60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 576.964893][ T31] #2: ffffffff8f2e2588 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 576.974538][ T31] 6 locks held by kworker/u8:9/4485: [ 577.015059][ T31] #0: ffff88801aef3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 577.044832][ T31] #1: ffffc9000dca7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 577.075111][ T31] #2: ffffffff8f2d5a50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 577.102198][ T31] #3: ffff8880606ea0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 577.124880][ T31] #4: ffff8880606eb250 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 577.152325][ T31] #5: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 577.178869][ T31] 2 locks held by getty/5574: [ 577.183620][ T31] #0: ffff8880309470a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 577.224991][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 577.245164][ T31] 2 locks held by kworker/0:7/5923: [ 577.251021][ T31] 2 locks held by kworker/0:8/5924: [ 577.275090][ T31] 2 locks held by kworker/u8:11/12999: [ 577.280626][ T31] 3 locks held by kworker/u8:13/13204: [ 577.294764][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 577.331180][ T31] #1: ffffc9001b1c7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 577.355176][ T31] #2: ffffffff8f2e2588 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 577.384389][ T31] 5 locks held by kworker/0:10/16656: [ 577.390412][ T31] 2 locks held by kworker/0:11/16657: [ 577.406882][ T31] 1 lock held by syz.1.4389/20291: [ 577.412071][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 577.452514][ T31] 1 lock held by syz.3.4408/20357: [ 577.460320][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 577.484978][ T31] 1 lock held by syz.4.4425/20626: [ 577.490287][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 577.525846][ T31] 1 lock held by syz-executor/21085: [ 577.531214][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 577.562008][ T31] 1 lock held by syz.6.4515/22814: [ 577.575599][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 577.595303][ T31] 1 lock held by syz.8.4556/23001: [ 577.600561][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 577.646735][ T31] 1 lock held by syz.5.4564/23035: [ 577.652145][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 577.684925][ T31] 7 locks held by syz-executor/23098: [ 577.690374][ T31] #0: ffff888034fa0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 577.715027][ T31] #1: ffff8880448f2488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 577.746039][ T31] #2: ffff888026d124b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 577.774332][ T31] #3: ffffffff8eb82568 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 577.805780][ T31] #4: ffff8880239280e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 577.836490][ T31] #5: ffff888023929250 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 577.853438][ T31] #6: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 577.885353][ T31] 4 locks held by syz-executor/23131: [ 577.890821][ T31] #0: ffff888034fa0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 577.925121][ T31] #1: ffff888079408488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 577.947218][ T31] #2: ffff888026d124b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 577.965581][ T31] #3: ffffffff8eb82568 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 577.994820][ T31] 4 locks held by syz-executor/23144: [ 578.000264][ T31] #0: ffff888034fa0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.034816][ T31] #1: ffff88804a108c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.065045][ T31] #2: ffff888026d124b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.088861][ T31] #3: ffffffff8eb82568 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.126342][ T31] 1 lock held by syz.9.4587/23236: [ 578.131528][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 578.167670][ T31] 4 locks held by syz-executor/23410: [ 578.173974][ T31] #0: ffff888034fa0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.197152][ T31] #1: ffff8880594ff088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.214660][ T31] #2: ffff888026d124b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.250373][ T31] #3: ffffffff8eb82568 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.276965][ T31] 4 locks held by syz-executor/24419: [ 578.294908][ T31] #0: ffff888034fa0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.303925][ T31] #1: ffff88805b8b8088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.338719][ T31] #2: ffff888026d124b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.364994][ T31] #3: ffffffff8eb82568 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.395218][ T31] 4 locks held by syz-executor/24740: [ 578.400755][ T31] #0: ffff888034fa0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.431019][ T31] #1: ffff8880732b3888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.453908][ T31] #2: ffff888026d124b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.483296][ T31] #3: ffffffff8eb82568 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.515144][ T31] 4 locks held by syz-executor/25069: [ 578.520598][ T31] #0: ffff888034fa0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.559310][ T31] #1: ffff888038ce2488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.574924][ T31] #2: ffff888026d124b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.607088][ T31] #3: ffffffff8eb82568 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.624743][ T31] 4 locks held by syz-executor/25187: [ 578.647417][ T31] #0: ffff888034fa0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.674998][ T31] #1: ffff88803e4f4088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.704911][ T31] #2: ffff888026d124b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.724689][ T31] #3: ffffffff8eb82568 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.757363][ T31] 4 locks held by syz-executor/25370: [ 578.762804][ T31] #0: ffff888034fa0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.790428][ T31] #1: ffff88805b1dec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.814970][ T31] #2: ffff888026d124b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.840197][ T31] #3: ffffffff8eb82568 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.867328][ T31] 4 locks held by syz-executor/26030: [ 578.872768][ T31] #0: ffff888034fa0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 578.915046][ T31] #1: ffff88808195e888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 578.942978][ T31] #2: ffff888026d124b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 578.964808][ T31] #3: ffffffff8eb82568 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 578.984093][ T31] 4 locks held by syz-executor/26354: [ 579.005276][ T31] #0: ffff888034fa0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 579.014287][ T31] #1: ffff8880356f0488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 579.044154][ T31] #2: ffff888026d124b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 579.075485][ T31] #3: ffffffff8eb82568 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 579.108182][ T31] 4 locks held by syz-executor/26679: [ 579.113727][ T31] #0: ffff888034fa0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 579.147289][ T31] #1: ffff88808887c088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 579.166913][ T31] #2: ffff888026d124b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 579.190063][ T31] #3: ffffffff8eb82568 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 579.225226][ T31] 4 locks held by syz-executor/26788: [ 579.235465][ T31] #0: ffff888034fa0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 579.264926][ T31] #1: ffff888092ec1088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 579.285191][ T31] #2: ffff888026d124b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 579.315304][ T31] #3: ffffffff8eb82568 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 579.336952][ T31] 4 locks held by syz-executor/26972: [ 579.342405][ T31] #0: ffff888034fa0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 579.374977][ T31] #1: ffff8880533c4488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 579.401691][ T31] #2: ffff888026d124b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 579.440195][ T31] #3: ffffffff8eb82568 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 579.464899][ T31] 1 lock held by syz-executor/27640: [ 579.474371][ T31] #0: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 579.520843][ T31] [ 579.523245][ T31] ============================================= [ 579.523245][ T31] [ 579.565104][ T31] NMI backtrace for cpu 1 [ 579.565131][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 579.565157][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 579.565169][ T31] Call Trace: [ 579.565177][ T31] [ 579.565187][ T31] dump_stack_lvl+0x189/0x250 [ 579.565218][ T31] ? __wake_up_klogd+0xd9/0x110 [ 579.565244][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.565270][ T31] ? __pfx__printk+0x10/0x10 [ 579.565314][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 579.565348][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 579.565375][ T31] ? _printk+0xcf/0x120 [ 579.565410][ T31] ? __pfx__printk+0x10/0x10 [ 579.565443][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 579.565476][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 579.565519][ T31] watchdog+0xfee/0x1030 [ 579.565544][ T31] ? watchdog+0x1de/0x1030 [ 579.565576][ T31] kthread+0x70e/0x8a0 [ 579.565601][ T31] ? __pfx_watchdog+0x10/0x10 [ 579.565623][ T31] ? __pfx_kthread+0x10/0x10 [ 579.565646][ T31] ? __pfx_kthread+0x10/0x10 [ 579.565666][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 579.565685][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.565706][ T31] ? __pfx_kthread+0x10/0x10 [ 579.565726][ T31] ret_from_fork+0x4b/0x80 [ 579.565744][ T31] ? __pfx_kthread+0x10/0x10 [ 579.565765][ T31] ret_from_fork_asm+0x1a/0x30 [ 579.565811][ T31] [ 579.565818][ T31] Sending NMI from CPU 1 to CPUs 0: [ 579.722448][ C0] NMI backtrace for cpu 0 [ 579.722466][ C0] CPU: 0 UID: 0 PID: 1207 Comm: kworker/0:2 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 579.722488][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 579.722502][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 579.722531][ C0] RIP: 0010:unwind_next_frame+0x5/0x2390 [ 579.722552][ C0] Code: e1 07 80 c1 03 38 c1 7c 92 48 89 df e8 24 f5 ad 00 eb 88 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 89 fe 48 bd 00 [ 579.722567][ C0] RSP: 0018:ffffc90000006918 EFLAGS: 00000202 [ 579.722580][ C0] RAX: 0000000000000001 RBX: ffffc900000069e0 RCX: 55b25c4db0448f00 [ 579.722593][ C0] RDX: dffffc0000000000 RSI: ffffffff89c09896 RDI: ffffc90000006928 [ 579.722606][ C0] RBP: ffffc900000069b0 R08: ffffc900000069f0 R09: 0000000000000010 [ 579.722618][ C0] R10: ffffc90000006978 R11: ffffffff81acab10 R12: ffff888026483c00 [ 579.722631][ C0] R13: 0000000000000000 R14: ffffffff81acab10 R15: ffffc90000006928 [ 579.722643][ C0] FS: 0000000000000000(0000) GS:ffff8881260ff000(0000) knlGS:0000000000000000 [ 579.722657][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.722669][ C0] CR2: 00007f5ffaf7d2d8 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 579.722683][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 579.722693][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 579.722704][ C0] Call Trace: [ 579.722710][ C0] [ 579.722718][ C0] arch_stack_walk+0x11c/0x150 [ 579.722748][ C0] ? NF_HOOK+0x206/0x3a0 [ 579.722777][ C0] stack_trace_save+0x9c/0xe0 [ 579.722793][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 579.722807][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 579.722840][ C0] kasan_save_track+0x3e/0x80 [ 579.722860][ C0] ? kasan_save_track+0x3e/0x80 [ 579.722880][ C0] ? kasan_save_free_info+0x46/0x50 [ 579.722897][ C0] ? __kasan_slab_free+0x62/0x70 [ 579.722917][ C0] ? kfree+0x193/0x440 [ 579.722938][ C0] ? nf_conntrack_free+0x2e8/0x380 [ 579.722955][ C0] ? nf_conntrack_in+0xa24/0x1600 [ 579.722972][ C0] ? nf_hook_slow+0xc2/0x220 [ 579.722996][ C0] ? nf_hook+0x217/0x380 [ 579.723012][ C0] ? __ip_local_out+0x4db/0x600 [ 579.723029][ C0] ? ip_local_out+0x26/0x70 [ 579.723045][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 579.723062][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 579.723080][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 579.723098][ C0] ? nft_do_chain+0x409/0x1920 [ 579.723116][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 579.723133][ C0] ? nf_hook_slow+0xc2/0x220 [ 579.723156][ C0] ? NF_HOOK+0x206/0x3a0 [ 579.723204][ C0] kasan_save_free_info+0x46/0x50 [ 579.723221][ C0] __kasan_slab_free+0x62/0x70 [ 579.723243][ C0] ? nf_conntrack_free+0x2e8/0x380 [ 579.723258][ C0] kfree+0x193/0x440 [ 579.723278][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 579.723306][ C0] nf_conntrack_free+0x2e8/0x380 [ 579.723325][ C0] nf_conntrack_in+0xa24/0x1600 [ 579.723356][ C0] ? __pfx_nf_conntrack_in+0x10/0x10 [ 579.723380][ C0] ? ipt_do_table+0x2a3/0x1610 [ 579.723409][ C0] ? nf_hook+0x9d/0x380 [ 579.723427][ C0] ? nf_hook+0x9d/0x380 [ 579.723444][ C0] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 579.723465][ C0] ? ipv4_conntrack_local+0x126/0x210 [ 579.723481][ C0] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 579.723500][ C0] nf_hook_slow+0xc2/0x220 [ 579.723528][ C0] nf_hook+0x217/0x380 [ 579.723547][ C0] ? nf_hook+0x9d/0x380 [ 579.723564][ C0] ? __pfx_nf_hook+0x10/0x10 [ 579.723583][ C0] ? __pfx_dst_output+0x10/0x10 [ 579.723604][ C0] ? ip_fast_csum+0x1ee/0x2b0 [ 579.723628][ C0] __ip_local_out+0x4db/0x600 [ 579.723644][ C0] ? __pfx_dst_output+0x10/0x10 [ 579.723664][ C0] ip_local_out+0x26/0x70 [ 579.723683][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 579.723708][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 579.723725][ C0] ? nft_log_init+0x918/0x9a0 [ 579.723755][ C0] ? synproxy_pernet+0x45/0x270 [ 579.723778][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 579.723801][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 579.723819][ C0] ? kasan_record_aux_stack+0xbc/0xd0 [ 579.723838][ C0] ? nf_ip_checksum+0x13c/0x510 [ 579.723859][ C0] nft_synproxy_do_eval+0x345/0x570 [ 579.723877][ C0] ? kthread+0x70e/0x8a0 [ 579.723894][ C0] ? ret_from_fork+0x4b/0x80 [ 579.723908][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 579.723934][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 579.723964][ C0] nft_do_chain+0x409/0x1920 [ 579.723991][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 579.724033][ C0] nft_do_chain_inet+0x25d/0x340 [ 579.724051][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 579.724070][ C0] ? ipt_do_table+0x2a3/0x1610 [ 579.724097][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 579.724124][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 579.724143][ C0] nf_hook_slow+0xc2/0x220 [ 579.724171][ C0] NF_HOOK+0x206/0x3a0 [ 579.724196][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 579.724222][ C0] ? NF_HOOK+0x9a/0x3a0 [ 579.724246][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 579.724269][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 579.724286][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 579.724313][ C0] ? skb_dst+0x4f/0xd0 [ 579.724328][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 579.724355][ C0] NF_HOOK+0x309/0x3a0 [ 579.724380][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 579.724395][ C0] ? NF_HOOK+0x9a/0x3a0 [ 579.724418][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 579.724441][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 579.724457][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 579.724477][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 579.724490][ C0] __netif_receive_skb+0x143/0x380 [ 579.724520][ C0] ? process_backlog+0x2d5/0x14f0 [ 579.724537][ C0] process_backlog+0x60e/0x14f0 [ 579.724568][ C0] ? __pfx_process_backlog+0x10/0x10 [ 579.724584][ C0] ? do_raw_spin_lock+0x121/0x290 [ 579.724604][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 579.724623][ C0] __napi_poll+0xc4/0x480 [ 579.724647][ C0] ? net_rx_action+0x447/0xdf0 [ 579.724666][ C0] net_rx_action+0x6ea/0xdf0 [ 579.724694][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 579.724743][ C0] handle_softirqs+0x283/0x870 [ 579.724773][ C0] ? do_softirq+0xec/0x180 [ 579.724803][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 579.724835][ C0] ? wg_packet_encrypt_worker+0x2dc/0x1720 [ 579.724862][ C0] do_softirq+0xec/0x180 [ 579.724886][ C0] [ 579.724892][ C0] [ 579.724900][ C0] ? __pfx_do_softirq+0x10/0x10 [ 579.724926][ C0] ? __lock_acquire+0xaac/0xd20 [ 579.724955][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 579.724980][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 579.725007][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 579.725039][ C0] ? wg_packet_encrypt_worker+0x2dc/0x1720 [ 579.725066][ C0] wg_packet_encrypt_worker+0x2dc/0x1720 [ 579.725104][ C0] ? __lock_acquire+0xaac/0xd20 [ 579.725131][ C0] ? __virt_addr_valid+0x18c/0x540 [ 579.725155][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 579.725184][ C0] ? __virt_addr_valid+0x18c/0x540 [ 579.725213][ C0] ? __queue_work+0x103/0xfe0 [ 579.725244][ C0] ? __queue_work+0xc80/0xfe0 [ 579.725275][ C0] ? __lock_acquire+0xaac/0xd20 [ 579.725300][ C0] ? do_raw_spin_lock+0x121/0x290 [ 579.725324][ C0] ? look_up_lock_class+0x74/0x170 [ 579.725344][ C0] ? register_lock_class+0x51/0x320 [ 579.725369][ C0] ? __lock_acquire+0xaac/0xd20 [ 579.725395][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 579.725424][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 579.725439][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 579.725462][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 579.725487][ C0] process_scheduled_works+0xadb/0x17a0 [ 579.725529][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 579.725563][ C0] worker_thread+0x8a0/0xda0 [ 579.725591][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 579.725613][ C0] ? __kthread_parkme+0x7b/0x200 [ 579.725634][ C0] kthread+0x70e/0x8a0 [ 579.725654][ C0] ? __pfx_worker_thread+0x10/0x10 [ 579.725678][ C0] ? __pfx_kthread+0x10/0x10 [ 579.725696][ C0] ? __pfx_kthread+0x10/0x10 [ 579.725713][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 579.725728][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.725751][ C0] ? __pfx_kthread+0x10/0x10 [ 579.725768][ C0] ret_from_fork+0x4b/0x80 [ 579.725782][ C0] ? __pfx_kthread+0x10/0x10 [ 579.725799][ C0] ret_from_fork_asm+0x1a/0x30 [ 579.725833][ C0] [ 580.985078][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 580.992015][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 581.003995][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 581.014254][ T31] Call Trace: [ 581.017652][ T31] [ 581.020607][ T31] dump_stack_lvl+0x99/0x250 [ 581.025242][ T31] ? __asan_memcpy+0x40/0x70 [ 581.029864][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.035098][ T31] ? __pfx__printk+0x10/0x10 [ 581.039739][ T31] panic+0x2db/0x790 [ 581.043680][ T31] ? __pfx_panic+0x10/0x10 [ 581.048131][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 581.053567][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 581.059003][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 581.065571][ T31] watchdog+0x102d/0x1030 [ 581.070037][ T31] ? watchdog+0x1de/0x1030 [ 581.074496][ T31] kthread+0x70e/0x8a0 [ 581.078637][ T31] ? __pfx_watchdog+0x10/0x10 [ 581.083545][ T31] ? __pfx_kthread+0x10/0x10 [ 581.088287][ T31] ? __pfx_kthread+0x10/0x10 [ 581.093097][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.098505][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.103751][ T31] ? __pfx_kthread+0x10/0x10 [ 581.108444][ T31] ret_from_fork+0x4b/0x80 [ 581.112987][ T31] ? __pfx_kthread+0x10/0x10 [ 581.117615][ T31] ret_from_fork_asm+0x1a/0x30 [ 581.122437][ T31] [ 581.125763][ T31] Kernel Offset: disabled [ 581.130108][ T31] Rebooting in 86400 seconds..