last executing test programs: 2m44.932819677s ago: executing program 4 (id=657): r0 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xc63b, 0x2, 0x0, 0x3}) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 2m43.923667843s ago: executing program 4 (id=669): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 2m43.645047165s ago: executing program 4 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="e8030000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673000000000000000000000000000c003088048000080200004000a004e2400000004200100000000000000000000000000c00100000024000100975c9d81c983c8209ee781254b899f8ed925ae3c62f53c57cdbf691c2c02008014000400"], 0x3e8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2m43.431353063s ago: executing program 4 (id=676): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc17) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151000, 0x0) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x283202a, 0x0) 2m43.264055726s ago: executing program 4 (id=678): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r0, &(0x7f00000019c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000004f00)={0x14}, 0x14) 2m42.935020403s ago: executing program 4 (id=683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r1, 0x303, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m42.484288586s ago: executing program 32 (id=683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r1, 0x303, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m23.596061438s ago: executing program 5 (id=766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0) 2m23.22919894s ago: executing program 5 (id=767): chdir(&(0x7f0000000540)='./cgroup\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r0, &(0x7f00000079c0)={0x2020}, 0x2020) 2m22.801196351s ago: executing program 5 (id=770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="01000000070000006122000002"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r0}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000080)}, 0x20) 2m22.42379021s ago: executing program 5 (id=773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) 2m21.960923773s ago: executing program 5 (id=776): syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1b01040000000905830300b3"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 2m19.444553392s ago: executing program 5 (id=781): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000140)={0x3, 0x0, @ioapic={0x4, 0x80000004, 0x1, 0x4, 0x0, [{}, {0x0, 0x4, 0x2}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x81, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x6}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {}, {}, {0x4}, {0x10, 0x0, 0x0, '\x00', 0x2}, {0x1}, {0x0, 0xfe}, {}, {0x0, 0x0, 0x0, '\x00', 0x80}, {0x0, 0x5a}, {}, {0xff}]}}) 2m17.853940159s ago: executing program 3 (id=787): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x52, r0, 0x4002000) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 2m17.227334016s ago: executing program 3 (id=792): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f0000005f80)=[{{&(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x10) 2m16.783268304s ago: executing program 3 (id=794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14010000000101040000000000000000020000001c001880080001400000000208000240000000000800034000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x44010) 2m16.272826162s ago: executing program 3 (id=797): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 2m16.199243459s ago: executing program 0 (id=799): r0 = memfd_secret(0x80000) fcntl$setlease(r0, 0x400, 0x1) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 2m15.86308487s ago: executing program 3 (id=800): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x34, 0xffffffff}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 2m15.753567412s ago: executing program 0 (id=802): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) close(r0) 2m15.415435058s ago: executing program 3 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r0, &(0x7f0000000380)={@void, @val={0x0, 0x1, 0x5, 0x7ff, 0x5, 0x7fff}, @mpls={[], @ipv6=@tipc_packet={0x6, 0x6, "798edb", 0x28, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x25}, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0xffff, 0x0, 0x0, 0x8, 0x7, 0x4, 0x4e20, 0x4e24, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x5a) 2m15.334196295s ago: executing program 0 (id=805): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040), 0x0, 0x0) 2m14.856205142s ago: executing program 0 (id=807): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) 2m14.559232296s ago: executing program 0 (id=809): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 2m14.348001358s ago: executing program 0 (id=810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, 0x0) 2m12.216150581s ago: executing program 1 (id=816): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200977b"], 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 2m12.044810216s ago: executing program 1 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x0) 2m10.684833231s ago: executing program 1 (id=818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x48, r1, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x48}}, 0x804) 2m10.314210148s ago: executing program 1 (id=820): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x50cc}, {0x20, 0x0, 0x0, 0x80000000}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="cc85f9e3", 0x85cc}], 0x1}}], 0x1, 0x0) 2m9.992876526s ago: executing program 1 (id=822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}}, 0x0) 2m9.710387434s ago: executing program 1 (id=824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x8}) 2m8.365149117s ago: executing program 2 (id=828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000040)={'rose0\x00', 0x10}) close(0x3) 2m8.176462411s ago: executing program 2 (id=829): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa081, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x71, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000050000000600b1a7"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m6.317277378s ago: executing program 2 (id=830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x2c020400) fcntl$lock(r0, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) 2m6.207941362s ago: executing program 2 (id=831): timer_create(0x0, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) 2m4.132201655s ago: executing program 33 (id=781): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000140)={0x3, 0x0, @ioapic={0x4, 0x80000004, 0x1, 0x4, 0x0, [{}, {0x0, 0x4, 0x2}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x81, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x6}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {}, {}, {0x4}, {0x10, 0x0, 0x0, '\x00', 0x2}, {0x1}, {0x0, 0xfe}, {}, {0x0, 0x0, 0x0, '\x00', 0x80}, {0x0, 0x5a}, {}, {0xff}]}}) 2m3.048823597s ago: executing program 2 (id=833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) 2m2.90182992s ago: executing program 2 (id=834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8010aebc, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) 2m0.164467638s ago: executing program 34 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r0, &(0x7f0000000380)={@void, @val={0x0, 0x1, 0x5, 0x7ff, 0x5, 0x7fff}, @mpls={[], @ipv6=@tipc_packet={0x6, 0x6, "798edb", 0x28, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x25}, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0xffff, 0x0, 0x0, 0x8, 0x7, 0x4, 0x4e20, 0x4e24, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x5a) 1m59.118999625s ago: executing program 35 (id=810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, 0x0) 1m54.103543642s ago: executing program 36 (id=824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x8}) 1m47.729305537s ago: executing program 37 (id=834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8010aebc, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) 1m7.806266689s ago: executing program 7 (id=881): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/power/wakeup_count', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)='\r', 0x1}]) 1m7.106904948s ago: executing program 7 (id=883): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x7, {"a2e3ad21ed0d52f91b5d330987f70e06d038e7ff7fc6e5539b0d47078b089b3907376d090890e0878f0e1ac6e7049b334a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e470dea05918b41243513f000800000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3e3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14d9fdb8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a19000000000000006f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d44400009a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc01008cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c16c02ed4b5d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6b14effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b51028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6815d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3c115c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc248850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafcc009fc074bb6b68a1f0c4649820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948998cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2fd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5dc4ff8f0104000000000000df72279fdb0d2b9e936e5a983c12fded79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d3700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa6e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3fec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x1000}}, 0x1006) 1m5.558232903s ago: executing program 7 (id=891): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000001a00210f29bd7000fadbdf251c000000ff0000050000000008000400", @ANYRESOCT], 0x24}}, 0x0) 1m4.961285972s ago: executing program 7 (id=895): syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="e6", 0x1}], 0x1) 1m0.147047621s ago: executing program 7 (id=909): unshare(0x2a020400) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) 59.753437384s ago: executing program 7 (id=911): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) 57.380503923s ago: executing program 9 (id=928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00061800007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000580), 0x7, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) 56.407431991s ago: executing program 9 (id=931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x303, 0x70bd27, 0x25dfdbfb, {0x2a}}, 0x21}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 55.959998653s ago: executing program 9 (id=933): io_setup(0x3, &(0x7f0000000180)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(r0, 0x2, &(0x7f0000001700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x400, r1, &(0x7f0000000080), 0x0, 0x4, 0x0, 0x2}]) 55.231426616s ago: executing program 9 (id=936): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{}], 0x1, 0x1, 0x8, 0x2, 0x0, 0x2}) 54.757666331s ago: executing program 9 (id=940): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 54.408424511s ago: executing program 9 (id=943): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x0, 0x6}) 44.637983515s ago: executing program 38 (id=911): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) 39.072707855s ago: executing program 39 (id=943): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x0, 0x6}) 30.213788299s ago: executing program 8 (id=1006): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000340)) 29.987910912s ago: executing program 8 (id=1007): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) 29.766098167s ago: executing program 8 (id=1008): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @remote}, 0x3, 0x0, 0x2}}, 0x2e) 29.508858301s ago: executing program 8 (id=1009): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0xb, "09001d00"}, @main=@item_012={0x2, 0x0, 0xb, "deeb"}, @local=@item_012={0x2, 0x2, 0x2, "8fe0"}, @global=@item_4={0x3, 0x1, 0x0, "0800be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x1, "09037a31"}, @local=@item_4={0x3, 0x2, 0x5, "c7b83395"}]}}, 0x0}, 0x0) 27.273406151s ago: executing program 8 (id=1013): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 25.738029727s ago: executing program 8 (id=1014): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000000000000044d564b"]) 17.803711015s ago: executing program 6 (id=1017): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="ea9e79", 0x3}], 0x1}, 0x2000851) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0x4) 17.554752725s ago: executing program 6 (id=1018): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e24, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 17.359656145s ago: executing program 6 (id=1019): ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000e00)={{}, "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"}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) 17.121785443s ago: executing program 6 (id=1020): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0xc042) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000540)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108708948224ad54afac11de67c9a6ab21a1c28e00a4686e25240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x52a5, 0x0, 0x4, 0x40009, 0x0, "dc24628e199c3a111b35c01fad7c395923a49671ddcfdd14116adc0be3ac67d945f33e643a4ec3b1e48681f86a44101bce2754b6241b55a00654e99283382773", "0437b697e43fd596974ceb9c98212474992e1207a0a7c6ef6555c6f17ffed125b442599e13d81d4958102fef964b11a1c61e03f330bceb5d61d8dcb813854883", "2087cc820584cb9c22c2b61d65caafbf413c5d30a8476928c6b5cf0a4b20485e", [0x4c5, 0xe5a1]}) 16.700105217s ago: executing program 6 (id=1021): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy_home_node(&(0x7f0000a26000/0x2000)=nil, 0x2000, 0x1, 0x0) 15.10011554s ago: executing program 6 (id=1022): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x53, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x60a}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}, 0x1, 0xba01}, 0x0) 10.529807684s ago: executing program 40 (id=1014): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000000000000044d564b"]) 0s ago: executing program 41 (id=1022): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x53, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x60a}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}, 0x1, 0xba01}, 0x0) kernel console output (not intermixed with test programs): etlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 133.107014][ T7089] netlink: 'syz.4.533': attribute type 11 has an invalid length. [ 133.149764][ T7089] netlink: 'syz.4.533': attribute type 14 has an invalid length. [ 133.237318][ T7097] mmap: syz.1.538 (7097) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.288602][ T7099] netlink: 192 bytes leftover after parsing attributes in process `syz.2.539'. [ 133.352302][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 133.862636][ T7124] netlink: 'syz.1.549': attribute type 2 has an invalid length. [ 134.160561][ T7139] loop7: detected capacity change from 0 to 8 [ 134.175272][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.184851][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.202055][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.211321][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.219425][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.228734][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.243112][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.252401][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.271986][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.281290][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.290128][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.299389][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.307642][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.316915][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.325196][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.334499][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.342464][ T7139] ldm_validate_partition_table(): Disk read failed. [ 134.355179][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.364481][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.373259][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.379865][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 134.382681][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.419742][ T7139] Dev loop7: unable to read RDB block 0 [ 134.432797][ T7139] loop7: unable to read partition table [ 134.438893][ T7139] loop7: partition table beyond EOD, truncated [ 134.448144][ T7139] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 134.448144][ T7139] ) failed (rc=-5) [ 134.549816][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 134.559326][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 134.582448][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.614408][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.647314][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.682747][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.743344][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 134.759854][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.793464][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.840675][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.872774][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.915997][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 134.952906][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.985939][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.020678][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.034384][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.127845][ T10] usb 4-1: string descriptor 0 read error: -22 [ 135.134733][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 135.157043][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.196322][ T10] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 135.209673][ T5902] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.391499][ T5902] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 135.404225][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.465753][ T5902] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 135.475477][ T5902] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 135.496328][ T5902] usb 3-1: Manufacturer: syz [ 135.520816][ T5902] usb 3-1: config 0 descriptor?? [ 135.620771][ T5902] rc_core: IR keymap rc-hauppauge not found [ 135.628417][ T5902] Registered IR keymap rc-empty [ 135.646848][ T5902] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 135.692019][ T5902] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 135.735266][ T7187] Invalid logical block size (115) [ 135.839738][ T5930] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 135.942949][ T7191] vivid-000: ================= START STATUS ================= [ 135.969464][ T7191] vivid-000: Radio HW Seek Mode: Bounded [ 135.978552][ T7191] vivid-000: Radio Programmable HW Seek: false [ 135.986313][ T7186] rc rc0: two consecutive events of type space [ 135.986873][ T7191] vivid-000: RDS Rx I/O Mode: Block I/O [ 136.002210][ T7191] vivid-000: Generate RBDS Instead of RDS: false [ 136.010774][ T7191] vivid-000: RDS Reception: true [ 136.041193][ T7191] vivid-000: RDS Program Type: [ 136.041366][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 136.058202][ T7191] 0 inactive [ 136.063642][ T7191] vivid-000: RDS PS Name: inactive [ 136.069631][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 136.079062][ T7191] vivid-000: RDS Radio Text: inactive [ 136.082094][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 136.088477][ T7191] vivid-000: RDS Traffic Announcement: [ 136.102339][ T5930] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 136.106636][ T7191] false [ 136.108337][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.120192][ T7191] inactive [ 136.129429][ T5930] usb 2-1: Product: syz [ 136.136005][ T5930] usb 2-1: Manufacturer: syz [ 136.142878][ T5930] usb 2-1: SerialNumber: syz [ 136.151956][ T5930] usb 2-1: config 0 descriptor?? [ 136.160742][ T7182] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 136.168482][ T7182] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 136.171998][ T7191] vivid-000: RDS Traffic Program: false inactive [ 136.179453][ T5930] usb 2-1: ucan: probing device on interface #0 [ 136.190768][ T3083] usb 3-1: USB disconnect, device number 7 [ 136.238502][ T7191] vivid-000: RDS Music: false inactive [ 136.274665][ T7191] vivid-000: ================== END STATUS ================== [ 136.457900][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 136.580942][ T7208] netlink: 64 bytes leftover after parsing attributes in process `syz.4.590'. [ 136.820234][ T5930] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 136.853239][ T5930] usb 2-1: USB disconnect, device number 10 [ 137.357918][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 137.376012][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 137.521254][ T3083] usb 4-1: USB disconnect, device number 10 [ 138.150222][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.156896][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.389678][ T5902] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.562998][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 138.583175][ T5902] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 138.628763][ T5902] usb 5-1: config 1 interface 0 has no altsetting 0 [ 138.653209][ T5902] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 138.670794][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.689405][ T5902] usb 5-1: Product: syz [ 138.695265][ T5902] usb 5-1: Manufacturer: syz [ 138.711827][ T7290] dlm: plock device version mismatch: kernel (1.2.0), user (1.4294967295.0) [ 138.717201][ T5902] usb 5-1: SerialNumber: syz [ 139.003540][ T7295] netlink: 44 bytes leftover after parsing attributes in process `syz.3.630'. [ 139.012698][ T5902] usbhid 5-1:1.0: can't add hid device: -71 [ 139.012818][ T5902] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 139.016028][ T5902] usb 5-1: USB disconnect, device number 9 [ 139.566436][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'. [ 139.785434][ T7321] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 139.796382][ T7321] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 140.020164][ T3083] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 140.190713][ T3083] usb 4-1: Using ep0 maxpacket: 16 [ 140.211986][ T3083] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 140.227727][ T3083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.255321][ T3083] usb 4-1: Product: syz [ 140.268902][ T3083] usb 4-1: Manufacturer: syz [ 140.288313][ T3083] usb 4-1: SerialNumber: syz [ 140.308511][ T3083] usb 4-1: config 0 descriptor?? [ 140.329284][ T3083] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 140.758204][ T3083] usb 4-1: clie_3_5_startup: get interface number failed: -32 [ 140.767323][ T3083] visor 4-1:0.0: probe with driver visor failed with error -32 [ 140.819359][ T3083] usb 4-1: USB disconnect, device number 11 [ 140.945521][ T7360] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 141.109988][ T5902] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 141.281881][ T5902] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.323237][ T5902] usb 2-1: config 0 has no interface number 0 [ 141.329429][ T5902] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 141.367100][ T5902] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 141.409726][ T5902] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.429380][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.466362][ T5902] usb 2-1: config 0 descriptor?? [ 141.487270][ T7364] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.494805][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 141.519231][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 141.533815][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 141.546268][ T5902] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 141.559407][ T7379] netlink: 'syz.4.669': attribute type 18 has an invalid length. [ 141.656428][ T7383] netlink: 61 bytes leftover after parsing attributes in process `syz.3.671'. [ 141.669658][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 141.714164][ T10] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 141.723631][ T10] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 141.767718][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 141.797878][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 141.803883][ T10] usb 1-1: config 1 has no interface number 0 [ 141.811021][ T5899] usb 2-1: USB disconnect, device number 11 [ 141.859473][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.905096][ T10] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 141.928275][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 141.949673][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.977986][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 142.183289][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 142.548948][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.617995][ T5902] usb 1-1: USB disconnect, device number 10 [ 142.633310][ T5902] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 142.663376][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.729993][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 142.764090][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.780946][ T5842] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 142.821725][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.899770][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 142.916168][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.937726][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.959231][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 142.969014][ T5842] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 142.988536][ T5842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.029896][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.046039][ T5842] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 143.063380][ T5842] usb 2-1: config 1 has no interface number 1 [ 143.070903][ T10] usb 4-1: config 0 descriptor?? [ 143.095960][ T36] bridge_slave_1: left allmulticast mode [ 143.096328][ T5842] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 143.113486][ T36] bridge_slave_1: left promiscuous mode [ 143.125314][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.153382][ T5842] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.163574][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.173493][ T36] bridge_slave_0: left allmulticast mode [ 143.179195][ T36] bridge_slave_0: left promiscuous mode [ 143.179883][ T5842] usb 2-1: Product: syz [ 143.199708][ T5842] usb 2-1: Manufacturer: syz [ 143.205615][ T5842] usb 2-1: SerialNumber: syz [ 143.222381][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.501863][ T5842] usb 2-1: Failed to set altset [ 143.528810][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.545951][ T10] ft260 0003:0403:6030.0017: collection stack underflow [ 143.554624][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.564961][ T5842] usb 2-1: 0:2: cannot create sequencer device [ 143.576857][ T10] ft260 0003:0403:6030.0017: item 0 1 0 12 parsing failed [ 143.585972][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.593896][ T5842] usb 2-1: Failed to set altset [ 143.599333][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.607753][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.627093][ T10] ft260 0003:0403:6030.0017: failed to parse HID [ 143.634624][ T10] ft260 0003:0403:6030.0017: probe with driver ft260 failed with error -22 [ 143.663134][ T5842] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 143.680776][ T5842] usb 2-1: USB disconnect, device number 12 [ 143.763330][ T10] usb 4-1: USB disconnect, device number 12 [ 143.941257][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.049658][ T5930] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 144.156864][ T7428] QAT: Invalid ioctl 1075883590 [ 144.164561][ T7428] QAT: Invalid ioctl 1075883590 [ 144.171888][ T7428] QAT: Invalid ioctl 1075883590 [ 144.176947][ T7428] QAT: Invalid ioctl 1075883590 [ 144.177638][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.194545][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.205432][ T7428] QAT: Invalid ioctl 1075883590 [ 144.207705][ T36] bond0 (unregistering): Released all slaves [ 144.216632][ T7428] QAT: Invalid ioctl 1075883590 [ 144.221844][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 144.234103][ T7428] QAT: Invalid ioctl 1075883590 [ 144.240624][ T5930] usb 1-1: config 211 has an invalid interface number: 98 but max is 0 [ 144.246249][ T7428] QAT: Invalid ioctl 1075883590 [ 144.254218][ T7428] QAT: Invalid ioctl 1075883590 [ 144.270322][ T5930] usb 1-1: config 211 has no interface number 0 [ 144.287023][ T5930] usb 1-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 144.308723][ T5930] usb 1-1: config 211 interface 98 has no altsetting 0 [ 144.317646][ T7428] QAT: Invalid ioctl 1075883590 [ 144.363085][ T5930] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 144.373595][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.389425][ T5930] usb 1-1: Product: syz [ 144.395868][ T5930] usb 1-1: Manufacturer: syz [ 144.419769][ T5930] usb 1-1: SerialNumber: syz [ 144.460169][ T7425] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 144.707088][ T5930] mct_u232 1-1:211.98: MCT U232 converter detected [ 144.735223][ T5930] mct_u232 ttyUSB0: expected endpoint missing [ 144.765327][ T5930] usb 1-1: USB disconnect, device number 11 [ 144.808067][ T5930] mct_u232 1-1:211.98: device disconnected [ 144.850992][ T5938] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 145.030270][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 145.061100][ T5938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.089786][ T5938] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.125889][ T5938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.139392][ T5938] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 145.149004][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.164873][ T5938] usb 2-1: config 0 descriptor?? [ 145.172855][ T36] hsr_slave_0: left promiscuous mode [ 145.179472][ T36] hsr_slave_1: left promiscuous mode [ 145.186070][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.197222][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.207374][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.215664][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.240781][ T36] veth1_macvtap: left promiscuous mode [ 145.246733][ T36] veth0_macvtap: left promiscuous mode [ 145.253710][ T36] veth1_vlan: left promiscuous mode [ 145.281066][ T36] veth0_vlan: left promiscuous mode [ 145.631431][ T5938] kye 0003:0458:4018.0018: unknown main item tag 0x0 [ 145.659978][ T5859] Bluetooth: hci1: command tx timeout [ 145.668443][ T5938] kye 0003:0458:4018.0018: reserved main item tag 0xe [ 145.685769][ T5938] kye 0003:0458:4018.0018: item fetching failed at offset 15/133 [ 145.696218][ T5938] kye 0003:0458:4018.0018: parse failed [ 145.708697][ T5938] kye 0003:0458:4018.0018: probe with driver kye failed with error -22 [ 145.846448][ T5938] usb 2-1: USB disconnect, device number 13 [ 145.960440][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 146.101910][ T5898] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 146.155034][ T10] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 146.174672][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.192546][ T10] usb 1-1: config 0 has no interface number 0 [ 146.198736][ T10] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 146.210863][ T10] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.227128][ T10] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 146.237852][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.246400][ T10] usb 1-1: Product: syz [ 146.251505][ T10] usb 1-1: Manufacturer: syz [ 146.256180][ T10] usb 1-1: SerialNumber: syz [ 146.267383][ T10] usb 1-1: config 0 descriptor?? [ 146.279754][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 146.287652][ T5898] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.298950][ T5898] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.313512][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.323656][ T5898] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 146.334933][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.344120][ T36] team0 (unregistering): Port device team_slave_1 removed [ 146.357207][ T5898] usb 4-1: config 0 descriptor?? [ 146.426499][ T36] team0 (unregistering): Port device team_slave_0 removed [ 146.801153][ T5898] mcp2200 0003:04D8:00DF.0019: item 0 4 0 9 parsing failed [ 146.809500][ T5898] mcp2200 0003:04D8:00DF.0019: can't parse reports [ 146.823818][ T5898] mcp2200 0003:04D8:00DF.0019: probe with driver mcp2200 failed with error -22 [ 146.897745][ T10] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 146.928537][ T10] usb 1-1: USB disconnect, device number 12 [ 147.013873][ T5930] usb 4-1: USB disconnect, device number 13 [ 147.069877][ T5902] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.142333][ T7475] tipc: Started in network mode [ 147.158200][ T7475] tipc: Node identity ac14140f, cluster identity 4711 [ 147.168537][ T7475] tipc: Enabling of bearer rejected, failed to enable media [ 147.191644][ T7422] chnl_net:caif_netlink_parms(): no params data found [ 147.240181][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 147.253969][ T5902] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.279518][ T5902] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.305100][ T5902] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 147.319678][ T5902] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 147.348624][ T5902] usb 3-1: Product: syz [ 147.358014][ T5902] usb 3-1: Manufacturer: syz [ 147.385400][ T5902] hub 3-1:4.0: USB hub found [ 147.636458][ T5902] hub 3-1:4.0: 2 ports detected [ 147.749781][ T5859] Bluetooth: hci1: command tx timeout [ 147.765120][ T7422] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.817515][ T7422] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.849704][ T5902] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 147.858881][ T7422] bridge_slave_0: entered allmulticast mode [ 147.882223][ T7422] bridge_slave_0: entered promiscuous mode [ 147.902187][ T7422] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.909384][ T7422] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.918888][ T7422] bridge_slave_1: entered allmulticast mode [ 147.927442][ T7422] bridge_slave_1: entered promiscuous mode [ 147.933968][ T5902] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 148.609830][ T7502] netlink: 264 bytes leftover after parsing attributes in process `syz.1.714'. [ 149.134168][ T7518] tipc: Started in network mode [ 149.151469][ T7518] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 149.213270][ T7518] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0001 [ 149.288070][ T7518] tipc: Enabled bearer , priority 0 [ 149.351241][ T7422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.462120][ T7422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.565062][ T5930] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 149.752005][ T5930] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 149.785310][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.819879][ T5859] Bluetooth: hci1: command tx timeout [ 149.868275][ T5930] usb 2-1: config 0 descriptor?? [ 150.364354][ T5930] logitech 0003:046D:CA03.001A: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.1-1/input0 [ 150.408791][ T3083] tipc: Node number set to 1 [ 150.428976][ T5930] logitech 0003:046D:CA03.001A: no inputs found [ 150.485539][ T5902] usb 3-1: USB disconnect, device number 8 [ 150.642373][ T5930] usb 2-1: USB disconnect, device number 14 [ 150.734065][ T7422] team0: Port device team_slave_0 added [ 150.825572][ T7422] team0: Port device team_slave_1 added [ 151.343594][ T7422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.412241][ T7422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.438240][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.714937][ T7422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.731884][ T7542] netlink: 180 bytes leftover after parsing attributes in process `syz.3.730'. [ 151.795701][ T7422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.846384][ T7422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.872482][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.929907][ T5859] Bluetooth: hci1: command tx timeout [ 152.144964][ T7422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.882880][ T7422] hsr_slave_0: entered promiscuous mode [ 152.925700][ T7422] hsr_slave_1: entered promiscuous mode [ 153.008188][ T7422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.074623][ T7422] Cannot create hsr debugfs directory [ 153.289690][ T5938] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 153.467769][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.549496][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.605643][ T5938] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.689800][ T5938] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 153.743206][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.841944][ T5938] usb 1-1: config 0 descriptor?? [ 154.314012][ T5938] prodikeys 0003:041E:2801.001B: unknown main item tag 0x0 [ 154.333300][ T5938] prodikeys 0003:041E:2801.001B: unknown main item tag 0x0 [ 154.366952][ T5938] prodikeys 0003:041E:2801.001B: unknown main item tag 0x0 [ 154.389683][ T5938] prodikeys 0003:041E:2801.001B: unknown main item tag 0x0 [ 154.406926][ T5938] prodikeys 0003:041E:2801.001B: unknown main item tag 0x0 [ 154.432660][ T5938] prodikeys 0003:041E:2801.001B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input0 [ 154.515489][ T5938] usb 1-1: USB disconnect, device number 13 [ 154.589001][ T7422] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.656189][ T7422] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.720737][ T7422] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.750952][ T7422] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.067485][ T7422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.223945][ T7422] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.265100][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.273181][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.339084][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.346345][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.596974][ T7605] netlink: 'syz.0.747': attribute type 4 has an invalid length. [ 155.643730][ T7605] netlink: 17 bytes leftover after parsing attributes in process `syz.0.747'. [ 155.831347][ T7422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.134397][ T7422] veth0_vlan: entered promiscuous mode [ 156.227057][ T7422] veth1_vlan: entered promiscuous mode [ 156.526787][ T7422] veth0_macvtap: entered promiscuous mode [ 156.583971][ T7422] veth1_macvtap: entered promiscuous mode [ 156.677830][ T7422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.711213][ T7422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.732431][ T7422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.748134][ T7422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.778516][ T7422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.813124][ T7422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.858011][ T7422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.905507][ T7422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.958003][ T7422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.044930][ T7422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.058509][ T7422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.076710][ T7422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.089098][ T7422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.107648][ T7422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.126616][ T7422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.146157][ T7422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.159222][ T7422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.182405][ T5930] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 157.199124][ T7422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.237283][ T7422] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.289195][ T7422] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.334436][ T7422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.379949][ T7422] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.399933][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.426993][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.508964][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 157.569973][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.656567][ T5930] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 157.708666][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.795620][ T5930] usb 1-1: config 0 descriptor?? [ 157.994514][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.086722][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.307257][ T5930] hid-u2fzero 0003:10C4:8ACF.001C: unknown main item tag 0x0 [ 158.335504][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.355206][ T5930] hid-u2fzero 0003:10C4:8ACF.001C: unknown main item tag 0x0 [ 158.386009][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.417436][ T5930] hid-u2fzero 0003:10C4:8ACF.001C: unknown main item tag 0x0 [ 158.495130][ T5930] hid-u2fzero 0003:10C4:8ACF.001C: unknown main item tag 0x0 [ 158.546876][ T5930] hid-u2fzero 0003:10C4:8ACF.001C: unknown main item tag 0x0 [ 158.644194][ T5930] hid-u2fzero 0003:10C4:8ACF.001C: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 158.771303][ T5930] hid-u2fzero 0003:10C4:8ACF.001C: U2F Zero LED initialised [ 158.795395][ T5930] hid-u2fzero 0003:10C4:8ACF.001C: U2F Zero RNG initialised [ 158.894663][ T5930] usb 1-1: USB disconnect, device number 14 [ 159.563636][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 159.563657][ T30] audit: type=1326 audit(1743577877.461:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7038d169 code=0x7ffc0000 [ 159.816612][ T30] audit: type=1326 audit(1743577877.551:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f6d7038d169 code=0x7ffc0000 [ 159.816668][ T30] audit: type=1326 audit(1743577877.551:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7038d169 code=0x7ffc0000 [ 159.816713][ T30] audit: type=1326 audit(1743577877.551:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7038d169 code=0x7ffc0000 [ 159.816762][ T30] audit: type=1326 audit(1743577877.551:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f6d7038d169 code=0x7ffc0000 [ 159.816806][ T30] audit: type=1326 audit(1743577877.551:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7038d169 code=0x7ffc0000 [ 159.816852][ T30] audit: type=1326 audit(1743577877.551:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7038d169 code=0x7ffc0000 [ 160.459979][ T30] audit: type=1326 audit(1743577878.361:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7660 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7038d169 code=0x7ffc0000 [ 160.460038][ T30] audit: type=1326 audit(1743577878.361:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7660 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7038d169 code=0x7ffc0000 [ 160.462214][ T30] audit: type=1326 audit(1743577878.371:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7660 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6d7038d169 code=0x7ffc0000 [ 161.300276][ T7650] tty tty31: ldisc open failed (-12), clearing slot 30 [ 163.744007][ T5938] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 163.911515][ T5938] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 163.961926][ T5938] usb 6-1: config 179 has no interface number 0 [ 163.976283][ T5938] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 164.041022][ T5938] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 164.097561][ T5938] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 164.159852][ T5938] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 164.241703][ T5938] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 164.339749][ T5938] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 164.419367][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.487545][ T7712] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 164.520971][ T7712] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 164.652209][ T5930] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 164.876326][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 164.980986][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 165.024424][ T5938] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 165.106392][ T5930] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 165.245607][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.255866][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 165.264219][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 165.314648][ T5930] usb 2-1: Product: syz [ 165.318893][ T5930] usb 2-1: Manufacturer: syz [ 165.327550][ T5936] usb 6-1: USB disconnect, device number 2 [ 165.351082][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 165.379376][ T5930] usb 2-1: SerialNumber: syz [ 165.395504][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.438557][ T5930] usb 2-1: config 0 descriptor?? [ 165.458079][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.488443][ T5938] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 165.529427][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.570692][ T5938] usb 1-1: config 0 descriptor?? [ 165.915327][ T5930] gs_usb 2-1:0.0: Configuring for 140 interfaces [ 165.947732][ T5930] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 165.999397][ T5930] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 166.047530][ T5938] appleir 0003:05AC:8241.001D: item fetching failed at offset 3/5 [ 166.108921][ T5938] appleir 0003:05AC:8241.001D: parse failed [ 166.169124][ T5938] appleir 0003:05AC:8241.001D: probe with driver appleir failed with error -22 [ 166.188369][ T5930] usb 2-1: USB disconnect, device number 15 [ 166.294453][ T5938] usb 1-1: USB disconnect, device number 15 [ 167.779560][ C0] sched: DL replenish lagged too much [ 168.435256][ T7779] [U]  [ 168.435305][ T7779] [U] K{ [ 168.435320][ T7779] [U] t 1ŠFfˊ`GJgo/mC [ 168.435369][ T7779] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 168.435430][ T7779] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 168.435501][ T7779] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 168.435619][ T7779] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 168.435661][ T7779] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 168.435683][ T7779] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 168.435737][ T7779] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 168.435969][ T7779] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 168.436010][ T7779] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 168.436029][ T7779] [U] 22Ʃx?0;3u [ 168.436088][ T7779] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 168.436221][ T7779] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 168.436250][ T7779] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 168.436268][ T7779] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 168.436297][ T7779] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 168.436338][ T7779] [U] ec [ 168.436353][ T7779] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 168.459537][ T7778] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 168.838937][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.866532][ T7782] netlink: 192 bytes leftover after parsing attributes in process `syz.3.794'. [ 170.126070][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.029824][ T5936] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 171.179776][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 171.194222][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.224215][ T5936] usb 2-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 171.248781][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.292900][ T5936] usb 2-1: config 0 descriptor?? [ 171.589772][ T5930] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 171.750016][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 171.764203][ T5936] logitech-djreceiver 0003:046D:C531.001E: ignoring exceeding usage max [ 171.782711][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 171.803328][ T5930] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 171.830170][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.864833][ T5930] usb 3-1: Product: syz [ 171.879401][ T5930] usb 3-1: Manufacturer: syz [ 171.894673][ T5930] usb 3-1: SerialNumber: syz [ 171.920962][ T5930] usb 3-1: config 0 descriptor?? [ 171.947388][ T5930] gs_usb 3-1:0.0: Required endpoints not found [ 171.999318][ T5930] usb 2-1: USB disconnect, device number 16 [ 174.644650][ T3083] usb 3-1: USB disconnect, device number 9 [ 175.175721][ T3083] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 175.224789][ T3083] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 177.469728][ T3083] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 177.634692][ T3083] usb 3-1: Using ep0 maxpacket: 16 [ 177.666794][ T3083] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.697190][ T3083] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 177.718231][ T3083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.749065][ T3083] usb 3-1: config 0 descriptor?? [ 178.209337][ T3083] holtek_mouse 0003:04D9:A081.0020: item fetching failed at offset 3/5 [ 178.228102][ T3083] holtek_mouse 0003:04D9:A081.0020: hid parse failed: -22 [ 178.237191][ T3083] holtek_mouse 0003:04D9:A081.0020: probe with driver holtek_mouse failed with error -22 [ 178.428538][ T3083] usb 3-1: USB disconnect, device number 10 [ 182.432132][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.442540][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.450895][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.460080][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.479889][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.073952][ T7912] chnl_net:caif_netlink_parms(): no params data found [ 183.401718][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.409122][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.419313][ T7912] bridge_slave_0: entered allmulticast mode [ 183.434651][ T7912] bridge_slave_0: entered promiscuous mode [ 183.453175][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.464480][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.476227][ T7912] bridge_slave_1: entered allmulticast mode [ 183.495018][ T7912] bridge_slave_1: entered promiscuous mode [ 183.672432][ T7912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.693606][ T7912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.879255][ T7912] team0: Port device team_slave_0 added [ 183.898667][ T7912] team0: Port device team_slave_1 added [ 184.155534][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.168222][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.204016][ T7912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.226052][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.243602][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.285155][ T7912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.468339][ T7912] hsr_slave_0: entered promiscuous mode [ 184.485581][ T7912] hsr_slave_1: entered promiscuous mode [ 184.497147][ T7912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.514577][ T7912] Cannot create hsr debugfs directory [ 184.540574][ T5846] Bluetooth: hci5: command tx timeout [ 185.768458][ T7912] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.843710][ T7912] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.903606][ T7912] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.977086][ T7912] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 186.623830][ T5846] Bluetooth: hci5: command tx timeout [ 186.733508][ T7912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.788617][ T5859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.799776][ T5859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.810143][ T5859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.818934][ T5859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.828807][ T5859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 186.983672][ T7912] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.065575][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.072851][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.267961][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.275252][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.605355][ T7912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.000599][ T7912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.050903][ T5846] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 188.062110][ T5846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 188.074510][ T5846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 188.082857][ T5846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 188.096313][ T5846] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 188.537567][ T7912] veth0_vlan: entered promiscuous mode [ 188.667408][ T7912] veth1_vlan: entered promiscuous mode [ 188.707446][ T5846] Bluetooth: hci5: command tx timeout [ 188.861448][ T5846] Bluetooth: hci6: command tx timeout [ 188.889324][ T7945] chnl_net:caif_netlink_parms(): no params data found [ 189.111145][ T7912] veth0_macvtap: entered promiscuous mode [ 189.233396][ T7912] veth1_macvtap: entered promiscuous mode [ 189.747168][ T7945] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.759951][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.767282][ T7945] bridge_slave_0: entered allmulticast mode [ 189.815951][ T7945] bridge_slave_0: entered promiscuous mode [ 189.845177][ T7945] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.875747][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.897588][ T7945] bridge_slave_1: entered allmulticast mode [ 189.937993][ T7945] bridge_slave_1: entered promiscuous mode [ 189.996243][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.032243][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.070047][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.099839][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.146419][ T5846] Bluetooth: hci7: command tx timeout [ 190.152690][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.189169][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.226823][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.257515][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.268784][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.291761][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.314648][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.492315][ T7945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.603919][ T7945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.782463][ T5846] Bluetooth: hci5: command tx timeout [ 190.942036][ T5846] Bluetooth: hci6: command tx timeout [ 190.974312][ T7945] team0: Port device team_slave_0 added [ 191.039364][ T7945] team0: Port device team_slave_1 added [ 191.083329][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.116047][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.177917][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.268653][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.362547][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.420338][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.475932][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.535980][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.589675][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.641816][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.687661][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.220263][ T5846] Bluetooth: hci7: command tx timeout [ 192.273090][ T7912] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.329735][ T7912] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.338516][ T7912] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.393323][ T7912] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.449367][ T7956] chnl_net:caif_netlink_parms(): no params data found [ 192.550879][ T7945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.569956][ T7945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.690433][ T7945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.857285][ T7945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.881837][ T5859] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 192.893293][ T5859] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 192.902541][ T5859] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 192.911418][ T5859] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 192.919278][ T5859] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 192.973713][ T7945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.034878][ T5859] Bluetooth: hci6: command tx timeout [ 193.098718][ T7945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.888805][ T7945] hsr_slave_0: entered promiscuous mode [ 193.918786][ T7945] hsr_slave_1: entered promiscuous mode [ 193.944491][ T7945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.979985][ T7945] Cannot create hsr debugfs directory [ 194.207913][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.256841][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.300587][ T5859] Bluetooth: hci7: command tx timeout [ 194.827160][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.849998][ T7956] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.857350][ T7956] bridge_slave_0: entered allmulticast mode [ 194.877758][ T7956] bridge_slave_0: entered promiscuous mode [ 194.897939][ T7956] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.930079][ T7956] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.937393][ T7956] bridge_slave_1: entered allmulticast mode [ 194.955422][ T7956] bridge_slave_1: entered promiscuous mode [ 194.995366][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.020253][ T5859] Bluetooth: hci8: command tx timeout [ 195.039897][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.100538][ T5859] Bluetooth: hci6: command tx timeout [ 195.415502][ T7956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.488103][ T7956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.152839][ T7956] team0: Port device team_slave_0 added [ 196.333965][ T7956] team0: Port device team_slave_1 added [ 196.380778][ T5859] Bluetooth: hci7: command tx timeout [ 196.840451][ T7956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.847474][ T7956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.018731][ T7956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.065562][ T8003] chnl_net:caif_netlink_parms(): no params data found [ 197.100338][ T5859] Bluetooth: hci8: command tx timeout [ 197.179233][ T7956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.201777][ T7956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.309355][ T7956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.934665][ T8053] xt_CT: No such helper "pptp" [ 198.015231][ T7956] hsr_slave_0: entered promiscuous mode [ 198.051303][ T7956] hsr_slave_1: entered promiscuous mode [ 198.057849][ T7956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.126652][ T7956] Cannot create hsr debugfs directory [ 198.607132][ T7945] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 198.670313][ T7945] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 198.879840][ T7945] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 198.970778][ T7945] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 199.026601][ T5846] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 199.050044][ T5846] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 199.081565][ T5846] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 199.091621][ T5846] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 199.101490][ T5846] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 199.179910][ T5859] Bluetooth: hci8: command tx timeout [ 199.463096][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.485154][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.510451][ T8003] bridge_slave_0: entered allmulticast mode [ 199.539972][ T8003] bridge_slave_0: entered promiscuous mode [ 199.566234][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.597536][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.604101][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.624175][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.657737][ T8003] bridge_slave_1: entered allmulticast mode [ 199.686289][ T8003] bridge_slave_1: entered promiscuous mode [ 200.126869][ T8003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.326757][ T8003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.711947][ T8003] team0: Port device team_slave_0 added [ 200.813028][ T8003] team0: Port device team_slave_1 added [ 201.180723][ T5859] Bluetooth: hci9: command tx timeout [ 201.260542][ T5859] Bluetooth: hci8: command tx timeout [ 201.420799][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.427982][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.578463][ T8003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.621670][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.628961][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.677332][ T8003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.703747][ T7956] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 201.925566][ T7956] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 202.100733][ T8003] hsr_slave_0: entered promiscuous mode [ 202.107865][ T8003] hsr_slave_1: entered promiscuous mode [ 202.126558][ T8003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.150881][ T8003] Cannot create hsr debugfs directory [ 202.184771][ T7956] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 202.252489][ T7956] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 202.835559][ T8064] chnl_net:caif_netlink_parms(): no params data found [ 203.261311][ T5859] Bluetooth: hci9: command tx timeout [ 203.655443][ T7945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.708465][ T8064] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.727689][ T8064] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.746811][ T8064] bridge_slave_0: entered allmulticast mode [ 203.758510][ T8064] bridge_slave_0: entered promiscuous mode [ 203.811340][ T8064] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.829805][ T8064] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.837155][ T8064] bridge_slave_1: entered allmulticast mode [ 203.855172][ T8064] bridge_slave_1: entered promiscuous mode [ 204.174497][ T8064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.293329][ T8064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.455273][ T7945] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.617741][ T8064] team0: Port device team_slave_0 added [ 204.763402][ T8064] team0: Port device team_slave_1 added [ 204.890396][ T8085] hub 9-0:1.0: USB hub found [ 204.901631][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.908886][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.933865][ T8085] hub 9-0:1.0: 1 port detected [ 205.265996][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.852'. [ 205.343778][ T5846] Bluetooth: hci9: command tx timeout [ 205.388572][ T7956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.452013][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.459414][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.546723][ T8003] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 205.636566][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.645406][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.714433][ T8064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.767111][ T8003] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 205.858538][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.868316][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.915246][ T8064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.958540][ T8003] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 206.107958][ T8003] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 206.193008][ T7956] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.308839][ T8064] hsr_slave_0: entered promiscuous mode [ 206.324894][ T8064] hsr_slave_1: entered promiscuous mode [ 206.353871][ T8064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.388179][ T8064] Cannot create hsr debugfs directory [ 206.586972][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.594265][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.690804][ T7945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.742829][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.750114][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.789290][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 207.365175][ T7945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.420369][ T5859] Bluetooth: hci9: command tx timeout [ 208.512277][ T8003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.519841][ T7945] veth0_vlan: entered promiscuous mode [ 208.624210][ T7956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.699044][ T8003] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.783199][ T7945] veth1_vlan: entered promiscuous mode [ 208.883099][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.890365][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.993538][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.000848][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.285615][ T7945] veth0_macvtap: entered promiscuous mode [ 209.403383][ T7945] veth1_macvtap: entered promiscuous mode [ 209.477937][ T8003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.585257][ T7956] veth0_vlan: entered promiscuous mode [ 209.678612][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.728874][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.758246][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.801968][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.879636][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.929744][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.985495][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.048232][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.089168][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.149862][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.189036][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.257916][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.320305][ T7945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.336137][ T7956] veth1_vlan: entered promiscuous mode [ 210.458918][ T8003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.540968][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.595444][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.636987][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.709384][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.759776][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.802840][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.843579][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.896675][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.952469][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.001762][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.061133][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.107520][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.162459][ T7945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.215382][ T7945] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.302072][ T7945] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.330957][ T7945] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.373752][ T7945] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.764758][ T7956] veth0_macvtap: entered promiscuous mode [ 211.902469][ T5150] Bluetooth: hci4: command 0x0406 tx timeout [ 211.908624][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 211.920672][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 212.015075][ T7956] veth1_macvtap: entered promiscuous mode [ 212.156042][ T8003] veth0_vlan: entered promiscuous mode [ 212.332572][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.376407][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.443474][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.500066][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.560922][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.636988][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.679704][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.730565][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.795715][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.839176][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.896912][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.949718][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.985712][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.051187][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.106432][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.317391][ T8134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.347079][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.399865][ T8134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.416958][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.478001][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.528962][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.599643][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.653856][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.719935][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.773222][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.827985][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.871272][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.929757][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.009960][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.072435][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.086427][ T8142] netlink: 'syz.6.859': attribute type 10 has an invalid length. [ 214.110854][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.152197][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.181798][ T8144] netlink: 'syz.6.859': attribute type 10 has an invalid length. [ 214.297893][ T8003] veth1_vlan: entered promiscuous mode [ 214.408655][ T8142] team0: Port device netdevsim0 added [ 214.534776][ T8144] team0: Port device netdevsim0 removed [ 214.580649][ T8144] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 214.613435][ T7956] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.682667][ T7956] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.718573][ T7956] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.800654][ T7956] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.105499][ T8134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.166189][ T8134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.999363][ T8159] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.009031][ T8159] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.559168][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.606112][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.984738][ T8159] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.008211][ T8159] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.017906][ T8159] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.039475][ T8159] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.596475][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.607707][ T8003] veth0_macvtap: entered promiscuous mode [ 228.670956][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.852464][ T8003] veth1_macvtap: entered promiscuous mode [ 231.163686][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.193371][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.246503][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.280626][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.360621][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.458542][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.523066][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.589358][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.658681][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.709748][ T8188] ALSA: seq fatal error: cannot create timer (-19) [ 231.734501][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.790745][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.869688][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.949290][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.032083][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.086427][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.158056][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.214877][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.444039][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.527969][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.620219][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.692143][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.790744][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.852026][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.949970][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.030758][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.120213][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.180061][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.233935][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.289780][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.360806][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.433897][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.508037][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.728940][ T8003] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.785474][ T8003] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.859878][ T8003] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.868681][ T8003] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.084717][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.8.836'. [ 234.155073][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.8.836'. [ 234.219944][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.8.836'. [ 234.614956][ T7612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.729400][ T7612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.094925][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.137179][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.100005][ T47] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 237.289696][ T47] usb 9-1: Using ep0 maxpacket: 32 [ 237.369744][ T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.429752][ T47] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 237.488921][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.570432][ T47] usb 9-1: config 0 descriptor?? [ 237.616016][ T47] hub 9-1:0.0: bad descriptor, ignoring hub [ 237.665895][ T47] hub 9-1:0.0: probe with driver hub failed with error -5 [ 237.727149][ T47] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 237.790986][ T47] usb 9-1: USB disconnect, device number 2 [ 238.229753][ T47] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 238.433561][ T47] usb 9-1: Using ep0 maxpacket: 32 [ 238.518562][ T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.599860][ T47] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 238.599896][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.630360][ T47] usb 9-1: config 0 descriptor?? [ 238.636426][ T47] hub 9-1:0.0: bad descriptor, ignoring hub [ 238.636470][ T47] hub 9-1:0.0: probe with driver hub failed with error -5 [ 238.689907][ T47] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 239.024108][ T47] usb 9-1: USB disconnect, device number 3 [ 240.808313][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.6.896'. [ 240.909708][ T5938] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 241.104681][ T5938] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 241.149429][ T5938] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 241.248692][ T5938] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.333583][ T5938] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 241.396458][ T5938] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 241.497684][ T5938] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 241.547329][ T5938] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 241.633668][ T5938] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.726325][ T5938] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 241.767374][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 241.767394][ T30] audit: type=1326 audit(1743577959.671:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.6.899" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf64d8d169 code=0x0 [ 241.852118][ T5938] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 241.951891][ T5938] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 242.001905][ T5938] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 242.082742][ T5938] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.183988][ T5938] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 242.259908][ T5938] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 242.355121][ T5938] usb 8-1: string descriptor 0 read error: -22 [ 242.424930][ T5938] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 242.504964][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.616801][ T5938] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 244.923174][ T8343] netlink: 'syz.8.908': attribute type 3 has an invalid length. [ 244.950066][ T8343] netlink: 666 bytes leftover after parsing attributes in process `syz.8.908'. [ 245.031536][ T5938] usb 8-1: USB disconnect, device number 2 [ 245.776406][ T8351] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 247.030053][ T8371] netlink: 60 bytes leftover after parsing attributes in process `syz.8.919'. [ 247.107903][ T8370] netlink: 60 bytes leftover after parsing attributes in process `syz.8.919'. [ 247.418547][ T8375] IPv6: Can't replace route, no match found [ 248.182368][ T5938] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 248.364481][ T5938] usb 9-1: Using ep0 maxpacket: 8 [ 248.415437][ T5938] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 248.460870][ T5938] usb 9-1: config 179 has no interface number 0 [ 248.500745][ T5938] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 248.554865][ T5938] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 248.619758][ T5938] usb 9-1: config 179 interface 65 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.692164][ T5938] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 248.765937][ T5938] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x8F has invalid wMaxPacketSize 0 [ 248.832455][ T5938] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 248.902053][ T5938] usb 9-1: config 179 interface 65 has no altsetting 0 [ 248.960197][ T5938] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 249.004249][ T5938] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.163114][ T5938] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input15 [ 249.575402][ T5936] usb 9-1: USB disconnect, device number 4 [ 249.582040][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 249.670292][ T5936] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 252.474250][ T8443] tipc: Started in network mode [ 252.479198][ T8443] tipc: Node identity 9e78ca64246a, cluster identity 4711 [ 252.517652][ T8443] tipc: Enabled bearer , priority 18 [ 253.049768][ T5936] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 253.250798][ T5936] usb 9-1: Using ep0 maxpacket: 32 [ 253.266961][ T5936] usb 9-1: config 0 interface 0 has no altsetting 0 [ 253.276463][ T5936] usb 9-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 253.315526][ T5936] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.365735][ T5936] usb 9-1: config 0 descriptor?? [ 253.630884][ T5930] tipc: Node number set to 3121793636 [ 253.826634][ T5936] cypress 0003:04B4:BCA1.0021: unknown main item tag 0x0 [ 253.849695][ T5936] cypress 0003:04B4:BCA1.0021: unknown main item tag 0x0 [ 253.903802][ T5936] cypress 0003:04B4:BCA1.0021: hidraw0: USB HID v0.01 Device [HID 04b4:bca1] on usb-dummy_hcd.8-1/input0 [ 254.064771][ T5936] usb 9-1: USB disconnect, device number 5 [ 254.841003][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.8.961'. [ 256.992206][ T30] audit: type=1326 audit(1743577974.901:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.6.971" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf64d8d169 code=0x0 [ 258.305509][ T8500] vlan2: entered allmulticast mode [ 258.340342][ T8500] vlan1: entered allmulticast mode [ 258.345539][ T8500] veth0_vlan: entered allmulticast mode [ 259.402052][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.412505][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.421283][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.437913][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.447159][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.030596][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.036989][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.500062][ T5851] Bluetooth: hci0: command tx timeout [ 261.701145][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.719720][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.728766][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.742217][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.750642][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.582791][ T5846] Bluetooth: hci0: command tx timeout [ 263.821055][ T5846] Bluetooth: hci1: command tx timeout [ 265.659887][ T5846] Bluetooth: hci0: command tx timeout [ 265.899871][ T5846] Bluetooth: hci1: command tx timeout [ 266.958335][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.968426][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.978292][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.990128][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.998006][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.739839][ T5851] Bluetooth: hci0: command tx timeout [ 267.979910][ T5851] Bluetooth: hci1: command tx timeout [ 268.864303][ T8524] netlink: 32 bytes leftover after parsing attributes in process `syz.8.987'. [ 269.109863][ T5851] Bluetooth: hci2: command tx timeout [ 269.509707][ T47] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 269.735051][ T47] usb 9-1: Using ep0 maxpacket: 16 [ 269.767450][ T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.837905][ T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.919659][ T47] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 269.990276][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.008132][ T8516] chnl_net:caif_netlink_parms(): no params data found [ 270.062127][ T5851] Bluetooth: hci1: command tx timeout [ 270.069849][ T47] usb 9-1: config 0 descriptor?? [ 270.536480][ T47] corsair 0003:1B1C:1B02.0022: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.8-1/input0 [ 270.719437][ T47] corsair 0003:1B1C:1B02.0022: Failed to get K90 initial state (error -71). [ 270.791734][ T47] usb 9-1: USB disconnect, device number 6 [ 271.183408][ T5851] Bluetooth: hci2: command tx timeout [ 271.635846][ T8538] chnl_net:caif_netlink_parms(): no params data found [ 271.704682][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.760472][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.767803][ T8516] bridge_slave_0: entered allmulticast mode [ 271.871003][ T8516] bridge_slave_0: entered promiscuous mode [ 271.925321][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.984497][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.028376][ T8516] bridge_slave_1: entered allmulticast mode [ 272.079924][ T8516] bridge_slave_1: entered promiscuous mode [ 272.193202][ T8543] chnl_net:caif_netlink_parms(): no params data found [ 272.651385][ T8574] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1002'. [ 272.683987][ T47] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 272.697928][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.782554][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.899944][ T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.939314][ T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.026835][ T47] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 273.073056][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.127027][ T47] usb 9-1: config 0 descriptor?? [ 273.259970][ T5851] Bluetooth: hci2: command tx timeout [ 273.552597][ T8516] team0: Port device team_slave_0 added [ 273.809973][ T8516] team0: Port device team_slave_1 added [ 273.835426][ T47] hid-led 0003:1D34:000A.0023: probe with driver hid-led failed with error -71 [ 273.911140][ T47] usb 9-1: USB disconnect, device number 7 [ 274.300185][ T8538] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.325107][ T8538] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.342069][ T8538] bridge_slave_0: entered allmulticast mode [ 274.371408][ T8538] bridge_slave_0: entered promiscuous mode [ 274.412280][ T8538] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.441644][ T8538] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.453225][ T8538] bridge_slave_1: entered allmulticast mode [ 274.524667][ T8538] bridge_slave_1: entered promiscuous mode [ 274.591249][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.611552][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.659959][ T8516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.982132][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.021262][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.132189][ T8516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.341547][ T5851] Bluetooth: hci2: command tx timeout [ 275.373010][ T8543] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.398888][ T8543] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.435618][ T8543] bridge_slave_0: entered allmulticast mode [ 275.465910][ T8543] bridge_slave_0: entered promiscuous mode [ 275.495559][ T8543] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.529150][ T8543] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.571772][ T8543] bridge_slave_1: entered allmulticast mode [ 275.621268][ T8543] bridge_slave_1: entered promiscuous mode [ 275.654953][ T8538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.726695][ T8538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.122580][ T5936] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 276.304241][ T8543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.314089][ T5936] usb 9-1: Using ep0 maxpacket: 16 [ 276.363235][ T5936] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.395525][ T8543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.441215][ T5936] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.485542][ T5936] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.524580][ T5936] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 276.557607][ T5936] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.611975][ T5936] usb 9-1: config 0 descriptor?? [ 276.918403][ T8516] hsr_slave_0: entered promiscuous mode [ 276.954854][ T8516] hsr_slave_1: entered promiscuous mode [ 276.971190][ T8516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.991748][ T8516] Cannot create hsr debugfs directory [ 277.033819][ T8538] team0: Port device team_slave_0 added [ 277.060375][ T5936] microsoft 0003:045E:07DA.0024: ignoring exceeding usage max [ 277.131250][ T5936] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0024/input/input16 [ 277.174791][ T8543] team0: Port device team_slave_0 added [ 277.312978][ T8538] team0: Port device team_slave_1 added [ 277.481505][ T8543] team0: Port device team_slave_1 added [ 277.572573][ T5936] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 277.678470][ T5936] usb 9-1: USB disconnect, device number 8 [ 278.891542][ T8538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.950048][ T8538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.122937][ T8538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.204218][ T8538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.243936][ T8538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.378544][ T8538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.444297][ T8543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.485696][ T8543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.670293][ T8543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.733801][ T8543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.783699][ T8543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.914865][ T8543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.361550][ T8538] hsr_slave_0: entered promiscuous mode [ 281.387179][ T8538] hsr_slave_1: entered promiscuous mode [ 281.422511][ T8538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.456200][ T8538] Cannot create hsr debugfs directory [ 281.758060][ T8543] hsr_slave_0: entered promiscuous mode [ 281.784913][ T8543] hsr_slave_1: entered promiscuous mode [ 281.810855][ T8543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.838952][ T8543] Cannot create hsr debugfs directory [ 283.459715][ T8602] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 283.465960][ T8602] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 283.769315][ T8602] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 283.798440][ T8602] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 284.000708][ T8602] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 284.040452][ T8602] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 284.174272][ T8602] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 284.202726][ T8602] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 284.374706][ T8602] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 284.418215][ T8602] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 285.570228][ T8602] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.576211][ T8602] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 285.784653][ T8602] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 285.809939][ T8602] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 285.971572][ T8602] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 285.977550][ T8602] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 290.383038][ T8738] vlan2: entered allmulticast mode [ 290.388240][ T8738] vlan1: entered allmulticast mode [ 290.419815][ T8738] veth0_vlan: entered allmulticast mode [ 295.560617][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.570675][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.581491][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.612168][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.620340][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.647424][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.677183][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.685920][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.696018][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.704143][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.490372][ T8799] chnl_net:caif_netlink_parms(): no params data found [ 296.882378][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.899858][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.907209][ T8799] bridge_slave_0: entered allmulticast mode [ 296.941759][ T8799] bridge_slave_0: entered promiscuous mode [ 296.964776][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.979786][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.987152][ T8799] bridge_slave_1: entered allmulticast mode [ 297.007091][ T8799] bridge_slave_1: entered promiscuous mode [ 297.248251][ T8799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.285693][ T8799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.551304][ T8799] team0: Port device team_slave_0 added [ 297.571674][ T8799] team0: Port device team_slave_1 added [ 297.811831][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.818844][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.859781][ T5846] Bluetooth: hci3: command tx timeout [ 297.884007][ T8799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.912189][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.919197][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.979257][ T8799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.231880][ T8799] hsr_slave_0: entered promiscuous mode [ 298.248693][ T8799] hsr_slave_1: entered promiscuous mode [ 298.260874][ T8799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.268501][ T8799] Cannot create hsr debugfs directory [ 299.899983][ T5846] Bluetooth: hci3: command tx timeout [ 301.983155][ T5846] Bluetooth: hci3: command tx timeout [ 304.060156][ T5846] Bluetooth: hci3: command tx timeout [ 306.076404][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.085518][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.095203][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.104827][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.133470][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.746683][ T8813] chnl_net:caif_netlink_parms(): no params data found [ 307.189183][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.208874][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.236641][ T8813] bridge_slave_0: entered allmulticast mode [ 307.252760][ T8813] bridge_slave_0: entered promiscuous mode [ 307.279075][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.300207][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.307577][ T8813] bridge_slave_1: entered allmulticast mode [ 307.327980][ T8813] bridge_slave_1: entered promiscuous mode [ 307.557637][ T8813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.597940][ T8813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.894914][ T8813] team0: Port device team_slave_0 added [ 307.940965][ T8813] team0: Port device team_slave_1 added [ 308.121194][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.128207][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.177599][ T8813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.207760][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.220485][ T5851] Bluetooth: hci4: command tx timeout [ 308.239810][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.295883][ T8813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.538139][ T8813] hsr_slave_0: entered promiscuous mode [ 308.553312][ T8813] hsr_slave_1: entered promiscuous mode [ 308.570338][ T8813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.578019][ T8813] Cannot create hsr debugfs directory [ 310.300499][ T5851] Bluetooth: hci4: command tx timeout [ 312.380219][ T5846] Bluetooth: hci4: command tx timeout [ 314.461522][ T5846] Bluetooth: hci4: command tx timeout [ 319.096375][ T5851] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 319.106054][ T5851] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 319.115538][ T5851] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 319.125718][ T5851] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 319.133747][ T5851] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 319.784086][ T8823] chnl_net:caif_netlink_parms(): no params data found [ 320.183566][ T8823] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.199747][ T8823] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.207122][ T8823] bridge_slave_0: entered allmulticast mode [ 320.232240][ T8823] bridge_slave_0: entered promiscuous mode [ 320.252009][ T8823] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.269836][ T8823] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.277208][ T8823] bridge_slave_1: entered allmulticast mode [ 320.310055][ T8823] bridge_slave_1: entered promiscuous mode [ 320.533569][ T8823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.559321][ T8823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.821343][ T8823] team0: Port device team_slave_0 added [ 320.870454][ T8823] team0: Port device team_slave_1 added [ 321.168466][ T8823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.180623][ T5846] Bluetooth: hci10: command tx timeout [ 321.210461][ T8823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.301835][ T8823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.342717][ T8823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.369891][ T8823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.460240][ T8823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.733458][ T5851] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 321.751276][ T5851] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 321.769174][ T5851] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 321.778114][ T5851] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 321.787813][ T5851] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 321.845073][ T8823] hsr_slave_0: entered promiscuous mode [ 321.881257][ T8823] hsr_slave_1: entered promiscuous mode [ 321.887797][ T8823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.929725][ T8823] Cannot create hsr debugfs directory [ 322.481701][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.488189][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.929032][ T8835] chnl_net:caif_netlink_parms(): no params data found [ 323.260045][ T5851] Bluetooth: hci10: command tx timeout [ 323.361979][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.379776][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.387236][ T8835] bridge_slave_0: entered allmulticast mode [ 323.421622][ T8835] bridge_slave_0: entered promiscuous mode [ 323.441005][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.448214][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.477939][ T8835] bridge_slave_1: entered allmulticast mode [ 323.486551][ T8835] bridge_slave_1: entered promiscuous mode [ 323.682369][ T8835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.713425][ T8835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.823787][ T5851] Bluetooth: hci11: command tx timeout [ 323.971097][ T8835] team0: Port device team_slave_0 added [ 324.087883][ T8835] team0: Port device team_slave_1 added [ 324.293814][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.310842][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.369209][ T8835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.404594][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.420802][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.479834][ T8835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.743110][ T8835] hsr_slave_0: entered promiscuous mode [ 324.761229][ T8835] hsr_slave_1: entered promiscuous mode [ 324.767826][ T8835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.789778][ T8835] Cannot create hsr debugfs directory [ 325.340348][ T5851] Bluetooth: hci10: command tx timeout [ 325.900323][ T5851] Bluetooth: hci11: command tx timeout [ 327.421542][ T5851] Bluetooth: hci10: command tx timeout [ 327.574381][ T5846] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 327.598061][ T5859] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 327.622486][ T5859] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 327.631206][ T5859] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 327.641716][ T5859] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 327.980181][ T5851] Bluetooth: hci11: command tx timeout [ 328.330164][ T8846] chnl_net:caif_netlink_parms(): no params data found [ 328.752749][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.770400][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.777775][ T8846] bridge_slave_0: entered allmulticast mode [ 328.809964][ T8846] bridge_slave_0: entered promiscuous mode [ 328.821773][ T8846] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.841433][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.848806][ T8846] bridge_slave_1: entered allmulticast mode [ 328.877940][ T8846] bridge_slave_1: entered promiscuous mode [ 329.097397][ T8846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.128869][ T8846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.441249][ T8846] team0: Port device team_slave_0 added [ 329.463265][ T8846] team0: Port device team_slave_1 added [ 329.660161][ T5851] Bluetooth: hci12: command tx timeout [ 329.682773][ T8846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.699789][ T8846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.758672][ T8846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.782707][ T8846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.799954][ T8846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.869697][ T8846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.066883][ T5851] Bluetooth: hci11: command tx timeout [ 330.134885][ T8846] hsr_slave_0: entered promiscuous mode [ 330.164409][ T8846] hsr_slave_1: entered promiscuous mode [ 330.193073][ T8846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.209658][ T8846] Cannot create hsr debugfs directory [ 331.740174][ T5851] Bluetooth: hci12: command tx timeout [ 333.820461][ T5851] Bluetooth: hci12: command tx timeout [ 335.901296][ T5851] Bluetooth: hci12: command tx timeout [ 356.744899][ T5851] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 356.754743][ T5851] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 356.765086][ T5851] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 356.773866][ T5851] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 356.790995][ T5851] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 357.468761][ T8858] chnl_net:caif_netlink_parms(): no params data found [ 357.912578][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.929744][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.937232][ T8858] bridge_slave_0: entered allmulticast mode [ 357.972112][ T8858] bridge_slave_0: entered promiscuous mode [ 357.991533][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.998744][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.030016][ T8858] bridge_slave_1: entered allmulticast mode [ 358.054384][ T8858] bridge_slave_1: entered promiscuous mode [ 358.332355][ T8858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.371779][ T8858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.662981][ T8858] team0: Port device team_slave_0 added [ 358.690948][ T8858] team0: Port device team_slave_1 added [ 358.860355][ T5851] Bluetooth: hci13: command tx timeout [ 358.901758][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.908768][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.977124][ T8858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.011627][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.018634][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.079695][ T8858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.384828][ T8858] hsr_slave_0: entered promiscuous mode [ 359.409069][ T8858] hsr_slave_1: entered promiscuous mode [ 359.422750][ T8858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.442135][ T8858] Cannot create hsr debugfs directory [ 360.940041][ T5851] Bluetooth: hci13: command tx timeout [ 363.021372][ T5851] Bluetooth: hci13: command tx timeout [ 365.100220][ T5851] Bluetooth: hci13: command tx timeout [ 366.584627][ T5859] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 366.596909][ T5859] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 366.610647][ T5859] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 366.621561][ T5859] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 366.630906][ T5859] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 368.560403][ T8872] chnl_net:caif_netlink_parms(): no params data found [ 368.705188][ T5859] Bluetooth: hci14: command tx timeout [ 368.934584][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.951351][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.958746][ T8872] bridge_slave_0: entered allmulticast mode [ 368.991144][ T8872] bridge_slave_0: entered promiscuous mode [ 369.012860][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.029801][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.037203][ T8872] bridge_slave_1: entered allmulticast mode [ 369.062808][ T8872] bridge_slave_1: entered promiscuous mode [ 369.297673][ T8872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.343670][ T8872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.567084][ T8872] team0: Port device team_slave_0 added [ 369.665978][ T8872] team0: Port device team_slave_1 added [ 369.903483][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.919660][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.979353][ T8872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.012489][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.029755][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.078539][ T8872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.341819][ T8872] hsr_slave_0: entered promiscuous mode [ 370.355789][ T8872] hsr_slave_1: entered promiscuous mode [ 370.370965][ T8872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.392115][ T8872] Cannot create hsr debugfs directory [ 370.779958][ T5859] Bluetooth: hci14: command tx timeout [ 372.860550][ T5859] Bluetooth: hci14: command tx timeout [ 374.940211][ T5859] Bluetooth: hci14: command tx timeout [ 379.781527][ T5859] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 379.791561][ T5859] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 379.800432][ T5859] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 379.822464][ T5859] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 379.832671][ T5859] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 380.526952][ T8888] chnl_net:caif_netlink_parms(): no params data found [ 380.994971][ T8888] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.023413][ T8888] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.050305][ T8888] bridge_slave_0: entered allmulticast mode [ 381.082242][ T8888] bridge_slave_0: entered promiscuous mode [ 381.123352][ T8888] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.159838][ T8888] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.167552][ T8888] bridge_slave_1: entered allmulticast mode [ 381.220129][ T8888] bridge_slave_1: entered promiscuous mode [ 381.505567][ T8888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.565037][ T8888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.863694][ T5851] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 381.873127][ T5851] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 381.882867][ T5851] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 381.902123][ T5851] Bluetooth: hci15: command tx timeout [ 381.911411][ T5851] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 381.919339][ T5851] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 381.951965][ T8888] team0: Port device team_slave_0 added [ 381.991263][ T8888] team0: Port device team_slave_1 added [ 382.310184][ T8888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.317291][ T8888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.390073][ T8888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.432819][ T8888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.452410][ T8888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.523054][ T8888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.886238][ T8888] hsr_slave_0: entered promiscuous mode [ 382.901930][ T8888] hsr_slave_1: entered promiscuous mode [ 382.920898][ T8888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.928613][ T8888] Cannot create hsr debugfs directory [ 383.734208][ T8898] chnl_net:caif_netlink_parms(): no params data found [ 383.912540][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.919089][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.980472][ T5859] Bluetooth: hci16: command tx timeout [ 383.986725][ T5859] Bluetooth: hci15: command tx timeout [ 384.213295][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.230399][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.237849][ T8898] bridge_slave_0: entered allmulticast mode [ 384.272074][ T8898] bridge_slave_0: entered promiscuous mode [ 384.291572][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.298888][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.322236][ T8898] bridge_slave_1: entered allmulticast mode [ 384.343848][ T8898] bridge_slave_1: entered promiscuous mode [ 384.593448][ T8898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.633085][ T8898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.951034][ T8898] team0: Port device team_slave_0 added [ 384.983361][ T8898] team0: Port device team_slave_1 added [ 385.253464][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.269634][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.330325][ T8898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.364833][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.389853][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.449956][ T8898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.725290][ T8898] hsr_slave_0: entered promiscuous mode [ 385.755978][ T8898] hsr_slave_1: entered promiscuous mode [ 385.772253][ T8898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.786556][ T8898] Cannot create hsr debugfs directory [ 385.820378][ T31] INFO: task syz.5.781:7735 blocked for more than 143 seconds. [ 385.828008][ T31] Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 [ 385.844186][ T31] Blocked by coredump. [ 385.848841][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 385.880274][ T31] task:syz.5.781 state:D stack:24616 pid:7735 tgid:7735 ppid:7422 task_flags:0x40044c flags:0x00004006 [ 385.928794][ T31] Call Trace: [ 385.939715][ T31] [ 385.942729][ T31] __schedule+0x1b88/0x5240 [ 385.947328][ T31] ? schedule+0x163/0x360 [ 386.070655][ T5859] Bluetooth: hci15: command tx timeout [ 386.076235][ T5859] Bluetooth: hci16: command tx timeout [ 386.089806][ T31] ? __pfx___schedule+0x10/0x10 [ 386.094794][ T31] ? schedule+0x90/0x360 [ 386.099091][ T31] ? schedule+0x90/0x360 [ 386.156491][ T31] schedule+0x163/0x360 [ 386.169807][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 386.174665][ T31] schedule_preempt_disabled+0x13/0x30 [ 386.193393][ T31] __mutex_lock+0x805/0x10c0 [ 386.198164][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 386.221738][ T31] ? rcu_barrier+0x4c/0x530 [ 386.226349][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 386.243069][ T31] ? __mutex_unlock_slowpath+0x79a/0x800 [ 386.248894][ T31] ? do_group_exit+0x207/0x2c0 [ 386.269827][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 386.275912][ T31] rcu_barrier+0x4c/0x530 [ 386.290707][ T31] netdev_run_todo+0x380/0xf30 [ 386.295893][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 386.320079][ T31] ? netdev_state_change+0xa9/0x1a0 [ 386.325371][ T31] ? __pfx_netdev_state_change+0x10/0x10 [ 386.340484][ T31] ? kfree+0x198/0x430 [ 386.344635][ T31] ? tun_chr_close+0x105/0x1b0 [ 386.361947][ T31] tun_chr_close+0x137/0x1b0 [ 386.366737][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 386.389907][ T31] __fput+0x3e9/0x9f0 [ 386.393992][ T31] task_work_run+0x251/0x310 [ 386.398647][ T31] ? __pfx_task_work_run+0x10/0x10 [ 386.419691][ T31] ? do_exit+0xa0c/0x28c0 [ 386.424119][ T31] ? do_exit+0xa0c/0x28c0 [ 386.428600][ T31] do_exit+0xa11/0x28c0 [ 386.450515][ T31] ? do_raw_spin_lock+0x151/0x370 [ 386.455642][ T31] ? __pfx_do_exit+0x10/0x10 [ 386.479803][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 386.485292][ T31] do_group_exit+0x207/0x2c0 [ 386.499723][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.505024][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 386.523032][ T31] get_signal+0x1696/0x1730 [ 386.527633][ T31] ? __pfx_get_signal+0x10/0x10 [ 386.551411][ T31] arch_do_signal_or_restart+0x98/0x840 [ 386.557067][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 386.590088][ T31] ? task_work_run+0x2c9/0x310 [ 386.594968][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 386.609743][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 386.615388][ T31] do_syscall_64+0x100/0x230 [ 386.639867][ T31] ? clear_bhb_loop+0x45/0xa0 [ 386.644645][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.661453][ T31] RIP: 0033:0x7f3a2cf8d169 [ 386.665977][ T31] RSP: 002b:00007f3a2d2cfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 386.700017][ T31] RAX: 0000000000000000 RBX: 00007f3a2d1a7ba0 RCX: 00007f3a2cf8d169 [ 386.708077][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 386.731498][ T31] RBP: 00007f3a2d1a7ba0 R08: 0000000000000e68 R09: 000000032d2cfe7f [ 386.759758][ T31] R10: 00000000005fca8c R11: 0000000000000246 R12: 0000000000028b98 [ 386.767818][ T31] R13: 00007f3a2d1a6080 R14: ffffffffffffffff R15: 00007f3a2d2cfca0 [ 386.792828][ T31] [ 386.801231][ T31] INFO: task syz.3.803:7802 blocked for more than 144 seconds. [ 386.808856][ T31] Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 [ 386.872706][ T31] Blocked by coredump. [ 386.877388][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.919715][ T31] task:syz.3.803 state:D stack:22328 pid:7802 tgid:7802 ppid:5863 task_flags:0x40044c flags:0x00004006 [ 386.948631][ T31] Call Trace: [ 386.955393][ T31] [ 386.958509][ T31] __schedule+0x1b88/0x5240 [ 386.970204][ T31] ? schedule+0x163/0x360 [ 386.974628][ T31] ? __pfx___schedule+0x10/0x10 [ 386.999887][ T31] ? schedule+0x90/0x360 [ 387.004243][ T31] ? schedule+0x90/0x360 [ 387.008552][ T31] schedule+0x163/0x360 [ 387.030054][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 387.034909][ T31] schedule_preempt_disabled+0x13/0x30 [ 387.058535][ T31] __mutex_lock+0x805/0x10c0 [ 387.064314][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 387.069150][ T31] ? rcu_barrier+0x4c/0x530 [ 387.093148][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 387.098264][ T31] ? __mutex_unlock_slowpath+0x79a/0x800 [ 387.123268][ T31] ? do_group_exit+0x207/0x2c0 [ 387.130358][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 387.136427][ T31] rcu_barrier+0x4c/0x530 [ 387.159832][ T31] netdev_run_todo+0x380/0xf30 [ 387.164715][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 387.181493][ T31] ? netdev_state_change+0xa9/0x1a0 [ 387.186782][ T31] ? __pfx_netdev_state_change+0x10/0x10 [ 387.211747][ T31] ? kfree+0x198/0x430 [ 387.215912][ T31] ? tun_chr_close+0x105/0x1b0 [ 387.233739][ T31] tun_chr_close+0x137/0x1b0 [ 387.238426][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 387.260017][ T31] __fput+0x3e9/0x9f0 [ 387.264101][ T31] task_work_run+0x251/0x310 [ 387.268758][ T31] ? __pfx_task_work_run+0x10/0x10 [ 387.291039][ T31] ? do_exit+0xa0c/0x28c0 [ 387.295509][ T31] ? do_exit+0xa0c/0x28c0 [ 387.313257][ T31] do_exit+0xa11/0x28c0 [ 387.317510][ T31] ? do_raw_spin_lock+0x151/0x370 [ 387.332365][ T31] ? __pfx_do_exit+0x10/0x10 [ 387.337042][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 387.361729][ T31] do_group_exit+0x207/0x2c0 [ 387.366407][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.389870][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 387.395166][ T31] get_signal+0x1696/0x1730 [ 387.409673][ T31] ? __pfx_get_signal+0x10/0x10 [ 387.414632][ T31] arch_do_signal_or_restart+0x98/0x840 [ 387.439863][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 387.446124][ T31] ? task_work_run+0x2c9/0x310 [ 387.469668][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 387.475500][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 387.490062][ T31] do_syscall_64+0x100/0x230 [ 387.494733][ T31] ? clear_bhb_loop+0x45/0xa0 [ 387.511081][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.517054][ T31] RIP: 0033:0x7f671e78d169 [ 387.541265][ T31] RSP: 002b:00007f671eacfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 387.565021][ T31] RAX: 0000000000000000 RBX: 0000000000029897 RCX: 00007f671e78d169 [ 387.589731][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 387.597791][ T31] RBP: 00007f671e9a7ba0 R08: 0000000000000001 R09: 000000031eacfe7f [ 387.621145][ T31] R10: 00007f671e600000 R11: 0000000000000246 R12: 00007f671e9a5fac [ 387.629202][ T31] R13: 00007f671e9a5fa0 R14: ffffffffffffffff R15: 00007f671eacfca0 [ 387.660505][ T31] [ 387.663714][ T31] INFO: task syz.0.810:7816 blocked for more than 145 seconds. [ 387.699746][ T31] Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 [ 387.707096][ T31] Blocked by coredump. [ 387.747907][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.783711][ T31] task:syz.0.810 state:D stack:24232 pid:7816 tgid:7816 ppid:5862 task_flags:0x40044c flags:0x00004006 [ 387.819730][ T31] Call Trace: [ 387.823083][ T31] [ 387.826048][ T31] __schedule+0x1b88/0x5240 [ 387.862260][ T31] ? schedule+0x163/0x360 [ 387.866696][ T31] ? __pfx___schedule+0x10/0x10 [ 387.900103][ T31] ? schedule+0x90/0x360 [ 387.904447][ T31] ? schedule+0x90/0x360 [ 387.908750][ T31] schedule+0x163/0x360 [ 387.939707][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 387.944566][ T31] schedule_preempt_disabled+0x13/0x30 [ 387.982819][ T31] __mutex_lock+0x805/0x10c0 [ 387.987615][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 388.019653][ T31] ? rcu_barrier+0x4c/0x530 [ 388.024247][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 388.029309][ T31] ? __mutex_unlock_slowpath+0x7f9/0x800 [ 388.069684][ T31] ? do_group_exit+0x207/0x2c0 [ 388.074553][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 388.113968][ T31] rcu_barrier+0x4c/0x530 [ 388.118419][ T31] netdev_run_todo+0x380/0xf30 [ 388.140503][ T5859] Bluetooth: hci16: command tx timeout [ 388.146106][ T5851] Bluetooth: hci15: command tx timeout [ 388.159004][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 388.170723][ T31] ? netdev_state_change+0xa9/0x1a0 [ 388.176014][ T31] ? __pfx_netdev_state_change+0x10/0x10 [ 388.210113][ T31] ? kfree+0x198/0x430 [ 388.214274][ T31] ? tun_chr_close+0x105/0x1b0 [ 388.219094][ T31] tun_chr_close+0x137/0x1b0 [ 388.269792][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 388.274999][ T31] __fput+0x3e9/0x9f0 [ 388.279044][ T31] task_work_run+0x251/0x310 [ 388.314300][ T31] ? __pfx_task_work_run+0x10/0x10 [ 388.340110][ T31] ? do_exit+0xa0c/0x28c0 [ 388.344544][ T31] ? do_exit+0xa0c/0x28c0 [ 388.348950][ T31] do_exit+0xa11/0x28c0 [ 388.380757][ T31] ? do_raw_spin_lock+0x151/0x370 [ 388.385881][ T31] ? __pfx_do_exit+0x10/0x10 [ 388.424170][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 388.443123][ T31] do_group_exit+0x207/0x2c0 [ 388.447808][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.480228][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 388.485529][ T31] get_signal+0x1696/0x1730 [ 388.509866][ T31] ? __pfx_get_signal+0x10/0x10 [ 388.514826][ T31] arch_do_signal_or_restart+0x98/0x840 [ 388.555344][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 388.570287][ T31] ? task_work_run+0x2c9/0x310 [ 388.575175][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 388.599946][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 388.605590][ T31] do_syscall_64+0x100/0x230 [ 388.620243][ T31] ? clear_bhb_loop+0x45/0xa0 [ 388.625010][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.644431][ T31] RIP: 0033:0x7f6d7038d169 [ 388.648923][ T31] RSP: 002b:00007f6d706cfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 388.680127][ T31] RAX: 0000000000000000 RBX: 0000000000029c06 RCX: 00007f6d7038d169 [ 388.688188][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 388.709715][ T31] RBP: 00007f6d705a7ba0 R08: 0000000000000001 R09: 00000003706cfe7f [ 388.717864][ T31] R10: 00007f6d70200000 R11: 0000000000000246 R12: 00007f6d705a5fac [ 388.754228][ T31] R13: 00007f6d705a5fa0 R14: ffffffffffffffff R15: 00007f6d706cfca0 [ 388.773162][ T31] [ 388.777499][ T31] INFO: task syz.2.834:7911 blocked for more than 146 seconds. [ 388.800062][ T31] Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 [ 388.807416][ T31] Blocked by coredump. [ 388.832813][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.849941][ T31] task:syz.2.834 state:D stack:23944 pid:7911 tgid:7911 ppid:5865 task_flags:0x40044c flags:0x00004006 [ 388.883334][ T31] Call Trace: [ 388.886735][ T31] [ 388.900120][ T31] __schedule+0x1b88/0x5240 [ 388.904740][ T31] ? schedule+0x163/0x360 [ 388.909125][ T31] ? __pfx___schedule+0x10/0x10 [ 388.929821][ T31] ? schedule+0x90/0x360 [ 388.934162][ T31] ? schedule+0x90/0x360 [ 388.938458][ T31] schedule+0x163/0x360 [ 388.960005][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 388.964874][ T31] schedule_preempt_disabled+0x13/0x30 [ 388.993447][ T31] __mutex_lock+0x805/0x10c0 [ 388.998137][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 389.010368][ T31] ? rcu_barrier+0x4c/0x530 [ 389.014961][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 389.039899][ T31] ? __mutex_unlock_slowpath+0x79a/0x800 [ 389.045625][ T31] ? do_group_exit+0x207/0x2c0 [ 389.070072][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 389.076155][ T31] rcu_barrier+0x4c/0x530 [ 389.103798][ T31] netdev_run_todo+0x380/0xf30 [ 389.108671][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 389.129827][ T31] ? netdev_state_change+0xa9/0x1a0 [ 389.135222][ T31] ? __pfx_netdev_state_change+0x10/0x10 [ 389.149668][ T31] ? kfree+0x198/0x430 [ 389.153830][ T31] ? tun_chr_close+0x105/0x1b0 [ 389.158656][ T31] tun_chr_close+0x137/0x1b0 [ 389.179851][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 389.185060][ T31] __fput+0x3e9/0x9f0 [ 389.189094][ T31] task_work_run+0x251/0x310 [ 389.220215][ T31] ? __pfx_task_work_run+0x10/0x10 [ 389.225606][ T31] ? do_exit+0xa0c/0x28c0 [ 389.240089][ T31] ? do_exit+0xa0c/0x28c0 [ 389.244514][ T31] do_exit+0xa11/0x28c0 [ 389.248727][ T31] ? do_raw_spin_lock+0x151/0x370 [ 389.270242][ T31] ? __pfx_do_exit+0x10/0x10 [ 389.274922][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 389.304338][ T31] do_group_exit+0x207/0x2c0 [ 389.309019][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.327053][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 389.340560][ T31] get_signal+0x1696/0x1730 [ 389.345153][ T31] ? __pfx_get_signal+0x10/0x10 [ 389.360197][ T31] ? __phys_addr+0xba/0x170 [ 389.364796][ T31] arch_do_signal_or_restart+0x98/0x840 [ 389.390819][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 389.397073][ T31] ? task_work_run+0x2c9/0x310 [ 389.415937][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 389.433128][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 389.438780][ T31] do_syscall_64+0x100/0x230 [ 389.459850][ T31] ? clear_bhb_loop+0x45/0xa0 [ 389.464626][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.479672][ T31] RIP: 0033:0x7f128cf8d169 [ 389.484175][ T31] RSP: 002b:00007f128d2cfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 389.509855][ T31] RAX: 0000000000000000 RBX: 000000000002c91b RCX: 00007f128cf8d169 [ 389.517913][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 389.549897][ T31] RBP: 00007f128d1a7ba0 R08: 0000000000000001 R09: 000000038d2cfe7f [ 389.557953][ T31] R10: 00007f128ce00000 R11: 0000000000000246 R12: 00007f128d1a5fac [ 389.589986][ T31] R13: 00007f128d1a5fa0 R14: ffffffffffffffff R15: 00007f128d2cfca0 [ 389.598064][ T31] [ 389.620837][ T31] [ 389.620837][ T31] Showing all locks held in the system: [ 389.628626][ T31] 2 locks held by kworker/0:0/9: [ 389.660711][ T31] 3 locks held by kworker/0:1/10: [ 389.665818][ T31] 1 lock held by khungtaskd/31: [ 389.690000][ T31] #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 389.712893][ T31] 4 locks held by kworker/u8:2/36: [ 389.718077][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 389.744127][ T31] #1: ffffc90000ad7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 389.779733][ T31] #2: ffffffff900ef690 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 389.789263][ T31] #3: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 389.817349][ T31] 3 locks held by kworker/1:1/47: [ 389.829786][ T31] #0: ffff88807dbad548 ((wq_completion)wg-kex-wg1#20){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 389.859954][ T31] #1: ffffc90000b87c60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 389.938546][ T31] #2: ffff888079f46830 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x41/0x1a0 [ 389.963176][ T31] 2 locks held by getty/5591: [ 389.967928][ T31] #0: ffff888036a9a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 389.999976][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x53d/0x16b0 [ 390.024437][ T31] 1 lock held by kworker/R-wg-cr/5880: [ 390.039886][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xa44/0x1020 [ 390.061682][ T31] 1 lock held by kworker/R-wg-cr/5884: [ 390.067220][ T31] 1 lock held by kworker/R-wg-cr/5890: [ 390.090616][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xa44/0x1020 [ 390.109699][ T31] 1 lock held by kworker/R-wg-cr/5894: [ 390.115229][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xa44/0x1020 [ 390.149932][ T31] 2 locks held by kworker/0:7/5902: [ 390.155230][ T31] 1 lock held by kworker/R-wg-cr/7482: [ 390.183224][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xa44/0x1020 [ 390.209903][ T31] 1 lock held by kworker/R-wg-cr/7485: [ 390.215539][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 390.226687][ T5859] Bluetooth: hci16: command tx timeout [ 390.249813][ T31] 1 lock held by syz.5.781/7735: [ 390.254827][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 390.280949][ T31] 1 lock held by syz.3.803/7802: [ 390.285960][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 390.319749][ T31] 1 lock held by syz.0.810/7816: [ 390.324770][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 390.359771][ T31] 1 lock held by syz.1.824/7853: [ 390.364814][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 390.391425][ T31] 1 lock held by syz.2.834/7911: [ 390.396430][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 390.430016][ T31] 1 lock held by kworker/R-wg-cr/7970: [ 390.435562][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xa44/0x1020 [ 390.469933][ T31] 1 lock held by kworker/R-wg-cr/8017: [ 390.475505][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 390.511050][ T31] 7 locks held by syz-executor/8064: [ 390.516416][ T31] #0: ffff888036c76420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 390.540262][ T31] #1: ffff88807d831088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 390.572093][ T31] #2: ffff888027a7fe18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 390.589998][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 390.611447][ T31] #4: ffff88807c4ba0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 [ 390.649884][ T31] #5: ffff88807c4bb250 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 390.672982][ T31] #6: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 390.700788][ T31] 3 locks held by kworker/u8:11/8164: [ 390.706241][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 390.731176][ T31] #1: ffffc9000f66fc60 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 390.759777][ T31] #2: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 390.785829][ T31] 1 lock held by syz.7.911/8350: [ 390.799700][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 390.830835][ T31] 1 lock held by syz.9.943/8419: [ 390.835847][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 390.859919][ T31] 4 locks held by syz-executor/8516: [ 390.865277][ T31] #0: ffff888036c76420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 390.893230][ T31] #1: ffff88805a5ea088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 390.919945][ T31] #2: ffff888027a7fe18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 390.942786][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 390.969987][ T31] 3 locks held by kworker/0:18/8528: [ 390.975356][ T31] 4 locks held by syz-executor/8538: [ 390.999161][ T31] #0: ffff888036c76420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 391.020717][ T31] #1: ffff8880589c8088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 391.041406][ T31] #2: ffff888027a7fe18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 391.072124][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 391.091733][ T31] 4 locks held by syz-executor/8543: [ 391.097089][ T31] #0: ffff888036c76420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 391.125106][ T31] #1: ffff88807e3fa888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 391.149890][ T31] #2: ffff888027a7fe18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 391.180096][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 391.199559][ T31] 1 lock held by syz.8.1014/8624: [ 391.204655][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 391.237080][ T31] 3 locks held by kworker/0:19/8655: [ 391.250041][ T31] 3 locks held by kworker/0:21/8731: [ 391.255487][ T31] 2 locks held by syz.6.1022/8738: [ 391.270724][ T31] #0: ffffffff9061bd10 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 391.302067][ T31] #1: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 391.319614][ T31] 4 locks held by syz-executor/8799: [ 391.324982][ T31] #0: ffff888036c76420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 391.362061][ T31] #1: ffff8880648c5c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 391.380541][ T31] #2: ffff888027a7fe18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 391.409294][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 391.429544][ T31] 4 locks held by syz-executor/8813: [ 391.434904][ T31] #0: ffff888036c76420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 391.469630][ T31] #1: ffff888143bca088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 391.490694][ T31] #2: ffff888027a7fe18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 391.509630][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 391.539949][ T31] 4 locks held by syz-executor/8823: [ 391.545309][ T31] #0: ffff888036c76420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 391.580455][ T31] #1: ffff88803b234c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 391.600651][ T31] #2: ffff888027a7fe18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 391.620024][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 391.647815][ T31] 4 locks held by syz-executor/8835: [ 391.660372][ T31] #0: ffff888036c76420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 391.669381][ T31] #1: ffff88803d324088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 391.711116][ T31] #2: ffff888027a7fe18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 391.740128][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 391.761351][ T31] 4 locks held by syz-executor/8846: [ 391.766703][ T31] #0: ffff888036c76420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 391.799784][ T31] #1: ffff88803de51888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 391.821801][ T31] #2: ffff888027a7fe18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 391.839893][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 391.862017][ T31] 6 locks held by kworker/0:24/8853: [ 391.867363][ T31] 4 locks held by syz-executor/8858: [ 391.895098][ T31] #0: ffff888036c76420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 391.919765][ T31] #1: ffff888086a13c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 391.940769][ T31] #2: ffff888027a7fe18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 391.972257][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 391.989665][ T31] 4 locks held by syz-executor/8872: [ 391.995066][ T31] #0: ffff888036c76420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 392.028329][ T31] #1: ffff88809233fc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 392.050962][ T31] #2: ffff888027a7fe18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 392.069621][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 392.099769][ T31] 4 locks held by syz-executor/8888: [ 392.105134][ T31] #0: ffff888036c76420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 392.131103][ T31] #1: ffff8880622dd888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 392.154929][ T31] #2: ffff888027a7fe18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 392.179694][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 392.210081][ T31] 1 lock held by kworker/R-bond0/8891: [ 392.215613][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xd2/0x1020 [ 392.260820][ T31] 1 lock held by kworker/R-wg-cr/8893: [ 392.266532][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xd2/0x1020 [ 392.289786][ T31] 1 lock held by kworker/R-wg-cr/8894: [ 392.295404][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xd2/0x1020 [ 392.328031][ T31] 1 lock held by kworker/R-wg-cr/8895: [ 392.334435][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xd2/0x1020 [ 392.381424][ T31] 3 locks held by syz-executor/8898: [ 392.386791][ T31] #0: ffff888099cdcd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 392.412227][ T31] #1: ffff888099cdc078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 392.429594][ T31] #2: ffffffff8ed434f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x384/0x830 [ 392.461769][ T31] 1 lock held by kworker/R-bond0/8901: [ 392.467315][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xd2/0x1020 [ 392.499832][ T31] 1 lock held by kworker/R-wg-cr/8903: [ 392.505375][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xd2/0x1020 [ 392.531969][ T31] 1 lock held by kworker/R-wg-cr/8904: [ 392.537519][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xd2/0x1020 [ 392.571393][ T31] 1 lock held by kworker/R-wg-cr/8905: [ 392.576929][ T31] #0: ffffffff8ebe5468 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xd2/0x1020 [ 392.609919][ T31] [ 392.612366][ T31] ============================================= [ 392.612366][ T31] [ 392.659665][ T31] NMI backtrace for cpu 1 [ 392.659700][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 392.659742][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 392.659763][ T31] Call Trace: [ 392.659777][ T31] [ 392.659792][ T31] dump_stack_lvl+0x241/0x360 [ 392.659852][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.659904][ T31] ? __pfx__printk+0x10/0x10 [ 392.659976][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 392.660039][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 392.660081][ T31] ? _printk+0xd5/0x120 [ 392.660130][ T31] ? __wake_up_klogd+0xcc/0x110 [ 392.660173][ T31] ? __pfx__printk+0x10/0x10 [ 392.660205][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 392.660228][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 392.660261][ T31] watchdog+0x1058/0x10a0 [ 392.660285][ T31] ? watchdog+0x1ea/0x10a0 [ 392.660311][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.660333][ T31] kthread+0x7b7/0x940 [ 392.660364][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.660393][ T31] ? __pfx_kthread+0x10/0x10 [ 392.660419][ T31] ? __pfx_kthread+0x10/0x10 [ 392.660447][ T31] ? __pfx_kthread+0x10/0x10 [ 392.660475][ T31] ? __pfx_kthread+0x10/0x10 [ 392.660502][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.660530][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 392.660549][ T31] ? __pfx_kthread+0x10/0x10 [ 392.660579][ T31] ret_from_fork+0x4b/0x80 [ 392.660600][ T31] ? __pfx_kthread+0x10/0x10 [ 392.660629][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.660665][ T31] [ 392.660672][ T31] Sending NMI from CPU 1 to CPUs 0: [ 392.824903][ C0] NMI backtrace for cpu 0 [ 392.824923][ C0] CPU: 0 UID: 0 PID: 8853 Comm: kworker/0:24 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 392.824944][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 392.824956][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 392.824988][ C0] RIP: 0010:mark_lock+0x4a/0x1b0 [ 392.825010][ C0] Code: 83 f5 09 eb 0b 89 d5 83 fa 20 0f 83 5d 01 00 00 bb 01 00 00 00 89 e9 d3 e3 41 8b 47 20 25 ff 1f 00 00 48 0f a3 05 c6 e4 d0 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 c0 06 11 94 eb 38 83 3d dd 73 [ 392.825025][ C0] RSP: 0018:ffffc90000006ac0 EFLAGS: 00000007 [ 392.825039][ C0] RAX: 0000000000000806 RBX: 0000000000000004 RCX: 0000000000000002 [ 392.825049][ C0] RDX: 0000000000000002 RSI: ffff888027ab0b18 RDI: ffff888027ab0000 [ 392.825061][ C0] RBP: 0000000000000002 R08: ffffffff905fc077 R09: 1ffffffff20bf80e [ 392.825072][ C0] R10: dffffc0000000000 R11: fffffbfff20bf80f R12: ffff888027ab0b18 [ 392.825102][ C0] R13: ffffffff93687020 R14: ffff888027ab0000 R15: ffff888027ab0b18 [ 392.825115][ C0] FS: 0000000000000000(0000) GS:ffff888124f99000(0000) knlGS:0000000000000000 [ 392.825129][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.825141][ C0] CR2: 00007f17c54fe270 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 392.825156][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 392.825166][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 392.825177][ C0] Call Trace: [ 392.825184][ C0] [ 392.825193][ C0] lockdep_hardirqs_on_prepare+0x131/0x2b0 [ 392.825213][ C0] trace_hardirqs_on+0x28/0x40 [ 392.825228][ C0] __local_bh_enable_ip+0x168/0x200 [ 392.825246][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 392.825264][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 392.825282][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 392.825299][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 392.825316][ C0] __dev_queue_xmit+0x1780/0x3f60 [ 392.825332][ C0] ? __lock_acquire+0xad5/0xd80 [ 392.825354][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 392.825372][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 392.825391][ C0] ? __asan_memset+0x23/0x50 [ 392.825408][ C0] ? ipv4_synproxy_hook+0x288/0xfb0 [ 392.825431][ C0] ? nf_confirm+0x1ba/0x1040 [ 392.825451][ C0] ? __lock_acquire+0xad5/0xd80 [ 392.825471][ C0] ? synproxy_send_client_synack+0x8ea/0xf70 [ 392.825494][ C0] ? ip_finish_output2+0x947/0x12e0 [ 392.825513][ C0] ip_finish_output2+0xcd2/0x12e0 [ 392.825529][ C0] ? ip_finish_output2+0x43d/0x12e0 [ 392.825547][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 392.825564][ C0] ? ip_skb_dst_mtu+0x147/0xbc0 [ 392.825590][ C0] ? __ip_finish_output+0x34c/0x400 [ 392.825624][ C0] synproxy_send_client_synack+0x8ea/0xf70 [ 392.825649][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 392.825670][ C0] ? nft_redir_ipv6_destroy+0x8/0x40 [ 392.825691][ C0] ? synproxy_pernet+0x45/0x280 [ 392.825715][ C0] nft_synproxy_eval_v4+0x3cc/0x610 [ 392.825742][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 392.825764][ C0] ? nf_conntrack_in+0xb56/0x18c0 [ 392.825787][ C0] ? nf_ip_checksum+0x13a/0x500 [ 392.825811][ C0] nft_synproxy_do_eval+0x36a/0xa90 [ 392.825834][ C0] ? process_scheduled_works+0xac3/0x18e0 [ 392.825855][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 392.825887][ C0] nft_do_chain+0x4b2/0x1db0 [ 392.825916][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 392.825938][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 392.825971][ C0] nft_do_chain_inet+0x41f/0x6b0 [ 392.825994][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 392.826015][ C0] ? ipt_do_table+0x314/0x1870 [ 392.826040][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 392.826062][ C0] nf_hook_slow+0xc8/0x220 [ 392.826082][ C0] NF_HOOK+0x29b/0x450 [ 392.826101][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 392.826120][ C0] ? NF_HOOK+0x9e/0x450 [ 392.826137][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 392.826157][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 392.826179][ C0] ? ip_rcv_finish+0x409/0x560 [ 392.826199][ C0] NF_HOOK+0x3a0/0x450 [ 392.826225][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 392.826243][ C0] ? NF_HOOK+0x9e/0x450 [ 392.826260][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 392.826277][ C0] ? ip_rcv_core+0x80c/0xd20 [ 392.826296][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 392.826318][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 392.826337][ C0] __netif_receive_skb+0x2c9/0x670 [ 392.826360][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 392.826389][ C0] process_backlog+0x664/0x15c0 [ 392.826413][ C0] ? process_backlog+0x33d/0x15c0 [ 392.826438][ C0] ? __pfx_process_backlog+0x10/0x10 [ 392.826459][ C0] ? __lock_acquire+0xad5/0xd80 [ 392.826476][ C0] ? do_raw_spin_lock+0x151/0x370 [ 392.826501][ C0] __napi_poll+0xcb/0x480 [ 392.826522][ C0] net_rx_action+0x89d/0x1240 [ 392.826565][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 392.826585][ C0] ? __run_timer_base+0x17a/0x8e0 [ 392.826601][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 392.826637][ C0] handle_softirqs+0x2d6/0x9b0 [ 392.826657][ C0] ? do_softirq+0x11f/0x1e0 [ 392.826673][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 392.826693][ C0] do_softirq+0x11f/0x1e0 [ 392.826707][ C0] [ 392.826712][ C0] [ 392.826719][ C0] ? __pfx_do_softirq+0x10/0x10 [ 392.826736][ C0] ? kernel_fpu_end+0xf9/0x150 [ 392.826760][ C0] ? lockdep_softirqs_on+0x144/0x1d0 [ 392.826777][ C0] __local_bh_enable_ip+0x1be/0x200 [ 392.826792][ C0] ? __crypto_xor+0x1b37/0x1ba0 [ 392.826811][ C0] ? kernel_fpu_end+0xf9/0x150 [ 392.826833][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 392.826851][ C0] ? kernel_fpu_begin_mask+0x2cd/0x3a0 [ 392.826876][ C0] kernel_fpu_end+0x103/0x150 [ 392.826899][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 392.826927][ C0] blake2s_compress+0x5f/0xd0 [ 392.826949][ C0] blake2s_final+0x114/0x260 [ 392.826971][ C0] hmac+0x674/0x9d0 [ 392.826996][ C0] ? __pfx_hmac+0x10/0x10 [ 392.827019][ C0] ? __pfx_do_softirq+0x10/0x10 [ 392.827041][ C0] ? kdf+0x139/0x3a0 [ 392.827059][ C0] kdf+0x1a5/0x3a0 [ 392.827079][ C0] ? __pfx_kdf+0x10/0x10 [ 392.827098][ C0] ? wg_pubkey_hashtable_lookup+0x1e/0x360 [ 392.827119][ C0] ? wg_pubkey_hashtable_lookup+0x1e/0x360 [ 392.827136][ C0] wg_noise_handshake_consume_initiation+0x50b/0xd60 [ 392.827159][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 392.827182][ C0] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 392.827203][ C0] ? stack_depot_save_flags+0x44/0x940 [ 392.827220][ C0] ? blake2s_final+0x13c/0x260 [ 392.827240][ C0] ? __asan_memset+0x23/0x50 [ 392.827256][ C0] ? blake2s_final+0x14b/0x260 [ 392.827281][ C0] ? __pfx_compute_mac1+0x10/0x10 [ 392.827307][ C0] ? wg_cookie_validate_packet+0x21a/0x340 [ 392.827329][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 392.827349][ C0] wg_packet_handshake_receive_worker+0x5bd/0xf60 [ 392.827381][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 392.827408][ C0] ? register_lock_class+0x54/0x330 [ 392.827426][ C0] ? __lock_acquire+0xad5/0xd80 [ 392.827452][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 392.827469][ C0] process_scheduled_works+0xac3/0x18e0 [ 392.827499][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 392.827522][ C0] ? assign_work+0x367/0x3d0 [ 392.827541][ C0] worker_thread+0x870/0xd50 [ 392.827566][ C0] ? __kthread_parkme+0x1a8/0x200 [ 392.827587][ C0] ? __pfx_worker_thread+0x10/0x10 [ 392.827610][ C0] kthread+0x7b7/0x940 [ 392.827633][ C0] ? __pfx_worker_thread+0x10/0x10 [ 392.827652][ C0] ? __pfx_kthread+0x10/0x10 [ 392.827672][ C0] ? __pfx_kthread+0x10/0x10 [ 392.827693][ C0] ? __pfx_kthread+0x10/0x10 [ 392.827714][ C0] ? __pfx_kthread+0x10/0x10 [ 392.827735][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.827757][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 392.827771][ C0] ? __pfx_kthread+0x10/0x10 [ 392.827793][ C0] ret_from_fork+0x4b/0x80 [ 392.827809][ C0] ? __pfx_kthread+0x10/0x10 [ 392.827831][ C0] ret_from_fork_asm+0x1a/0x30 [ 392.827852][ C0] [ 393.259821][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 393.259849][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 393.259876][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.259890][ T31] Call Trace: [ 393.259900][ T31] [ 393.259911][ T31] dump_stack_lvl+0x241/0x360 [ 393.259951][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.259983][ T31] ? __pfx__printk+0x10/0x10 [ 393.260019][ T31] ? vscnprintf+0x5d/0x90 [ 393.260051][ T31] panic+0x349/0x880 [ 393.260077][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 393.260111][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 393.260142][ T31] ? __pfx_panic+0x10/0x10 [ 393.260168][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 393.260203][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 393.260229][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 393.260257][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 393.260291][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 393.260324][ T31] watchdog+0x1097/0x10a0 [ 393.260349][ T31] ? watchdog+0x1ea/0x10a0 [ 393.260376][ T31] ? __pfx_watchdog+0x10/0x10 [ 393.260415][ T31] kthread+0x7b7/0x940 [ 393.260447][ T31] ? __pfx_watchdog+0x10/0x10 [ 393.260471][ T31] ? __pfx_kthread+0x10/0x10 [ 393.260506][ T31] ? __pfx_kthread+0x10/0x10 [ 393.260535][ T31] ? __pfx_kthread+0x10/0x10 [ 393.260564][ T31] ? __pfx_kthread+0x10/0x10 [ 393.260593][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 393.260623][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 393.260644][ T31] ? __pfx_kthread+0x10/0x10 [ 393.260674][ T31] ret_from_fork+0x4b/0x80 [ 393.260697][ T31] ? __pfx_kthread+0x10/0x10 [ 393.260726][ T31] ret_from_fork_asm+0x1a/0x30 [ 393.260764][ T31] [ 393.261110][ T31] Kernel Offset: disabled