last executing test programs: 1m26.788366089s ago: executing program 2 (id=1666): r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x100) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000200000201b14700c1e0ac74f000000001200000000000900"}) 1m26.635960404s ago: executing program 2 (id=1667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 1m24.027791164s ago: executing program 0 (id=1687): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b706000014008004b703000000060000850000002f000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m23.740869411s ago: executing program 0 (id=1690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="0bc3", 0x2}, {&(0x7f0000000240)="5cfb52", 0x3}], 0x2) 1m19.903116713s ago: executing program 2 (id=1705): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@host}, {@my=0x1, 0x9}, 0x400, "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"}, 0x418, 0x40}) 1m19.512316901s ago: executing program 2 (id=1708): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 1m17.362251154s ago: executing program 4 (id=1721): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'lo\x00', @remote}) r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs={0xa, 0x0, 0xfffffffe}, 0x6e) getsockname$packet(r0, 0x0, &(0x7f0000000040)) 1m17.017237011s ago: executing program 4 (id=1724): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) 1m16.680344699s ago: executing program 4 (id=1726): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m16.358594775s ago: executing program 1 (id=1727): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 1m16.343972466s ago: executing program 2 (id=1728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x1, 0x1, 0x31237648, 0x5, 0xfffffbff, 0xffffffff}]}) 1m13.378331891s ago: executing program 4 (id=1735): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x2}, {0x6, 0x4, 0x0, 0x101}]}) write$ppp(r0, &(0x7f00000010c0)="1e00", 0x2) 1m11.136244499s ago: executing program 0 (id=1736): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xfff) accept4(r0, 0x0, 0x0, 0x0) 1m10.078403111s ago: executing program 0 (id=1737): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121143, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) 1m10.014300452s ago: executing program 0 (id=1738): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r1, 0xffec}, 0x8) 1m9.891425375s ago: executing program 0 (id=1739): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 1m2.773689419s ago: executing program 4 (id=1741): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) utimes(0x0, 0x0) 1m2.772492825s ago: executing program 1 (id=1742): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) 1m2.771816438s ago: executing program 2 (id=1743): r0 = epoll_create1(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1}) 1m2.29718636s ago: executing program 1 (id=1744): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600020906ffffffffffffffff03003e0000000000000100000000000040000000000000009a010000000000000000000000003800030000000100000051e574640900000087000000000000000e0000000000000000000000000000800500000000000000bf04000000000000ffffffffffffffff0700000003000000ff030000000000000300000000000000050000000000000005000000000000000000000000000010040000000000000003"], 0xe8) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1m1.949585126s ago: executing program 1 (id=1746): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x11, 0x4000, @fd_index, 0x6, 0xc}) io_uring_enter(r0, 0x627, 0x14, 0x43, 0x0, 0x0) 1m1.17831893s ago: executing program 1 (id=1749): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) bind$inet(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 1m0.594904236s ago: executing program 1 (id=1751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008302"]) 1m0.400587329s ago: executing program 4 (id=1752): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 54.598292883s ago: executing program 32 (id=1739): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 49.316068921s ago: executing program 5 (id=1767): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r0) writev(r0, &(0x7f0000001340)=[{&(0x7f0000002e80)='\t', 0x1}], 0x1) fadvise64(r0, 0x18, 0x0, 0x4) 49.0083128s ago: executing program 5 (id=1777): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) 48.819506785s ago: executing program 5 (id=1778): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0x40000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10007, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9f1, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x40000, 0x687, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000001, 0x0, 0x2, 0x1, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x4, 0x3, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, 0x8000000, 0x6], [0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xc, 0x2000000, 0x40, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x0, 0x3, 0xfffffffd, 0x0, 0x1, 0x0, 0x6, 0x40, 0x0, 0x2], [0x401, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x2, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x7fe, 0xa, 0x0, 0x0, 0x800000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x3, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x7ff, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x4], [0x4, 0x4, 0x4, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd, 0xa, 0x5, 0x0, 0x0, 0x0, 0x480, 0x4, 0xfffffffc, 0x3, 0x1, 0x7, 0x8f3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3]}, 0x45c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000740)={0xfff, {{0x2, 0x4e21, @multicast2}}}, 0x90) 48.651574096s ago: executing program 5 (id=1779): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f00004fa000/0x2000)=nil, 0x2000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) 48.522785297s ago: executing program 5 (id=1780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETOWNER(r0, 0x801054db, 0x0) 47.518073422s ago: executing program 33 (id=1743): r0 = epoll_create1(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1}) 44.44843914s ago: executing program 34 (id=1751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008302"]) 44.104549997s ago: executing program 35 (id=1752): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 34.074460649s ago: executing program 3 (id=1801): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x4000, 0x0, 0x0, 0x0, 0x4}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) 33.808719644s ago: executing program 3 (id=1802): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') 33.667757414s ago: executing program 3 (id=1803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f00e4000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x4c085}, 0x0) 33.359836209s ago: executing program 36 (id=1780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETOWNER(r0, 0x801054db, 0x0) 33.351694601s ago: executing program 3 (id=1805): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 33.033454186s ago: executing program 3 (id=1806): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000ac0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x00\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83d\x10\x10\xd7\x01M\x7fML\x18\'\x1a\xc1\xf1\x9e\"\x93\x19\x01\x80\x00\x00y\xd2~%\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x00\x00\x00\x00\x00\x00,\xb1|\x0f\"\x1dL\x10\x8e\x17D\xca\x8b\xe5\xca\xc1\xcf\xb2\xdc\xfc\x14+@\xdc\x9fXo\xd7\xc3\x1a\xfeA\xc2\x9a\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfb{\xf5\xdby\x9d;;30\xa7\x94\xfdh)\xa0\"r\xa4\xf4\n\xf7\xb4\xder\xc8\xf2\xa5\xc0\x15\xc5E\xf6\x1dTB\xa2\xa6\xfbN\xb7\xed\xad\x9e\xb6\x87.\xf7=\xd3U\xf0\x1dH\x99\xe6\x97\x92g\xdf\ra\x82\xc7\x00\x92\xdfB\xb2\xac\xf3V\ve\xdd(\x85u\x04\xfcD[\xa4\b\xc8Bt_\x19\xb4\xd9\x97\tD\x8a\xa6\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xf) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x801b013, r0, 0x0) pread64(r0, &(0x7f000001a240)=""/102385, 0x18ff1, 0x1135) 32.704953847s ago: executing program 3 (id=1807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="820000000000000003000040"]) 26.783909648s ago: executing program 6 (id=1783): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) 26.538626451s ago: executing program 6 (id=1808): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x400, 0x2, 0x1, 0xfffffffd, 0xffffff00}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x8001, 0xf22, 0x5, 0x1, 0xfffffffa, 0x3800000, 0x7, 0x6}}) 26.227340589s ago: executing program 6 (id=1809): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 24.37075591s ago: executing program 7 (id=1785): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv6_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffc}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 23.962910703s ago: executing program 7 (id=1810): unshare(0xc040400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 23.604481753s ago: executing program 7 (id=1811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000300000005000000000000000008000000000000000000ffffffffff"]) 21.592317778s ago: executing program 9 (id=1804): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x5, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) 21.311002718s ago: executing program 9 (id=1815): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utime(0x0, 0x0) 19.012745239s ago: executing program 9 (id=1820): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01082cbd7000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB="3000508011000a0056bee339084eeef16f162471f4000000080007"], 0x58}, 0x1, 0x0, 0x0, 0x44151}, 0x0) 18.442709059s ago: executing program 9 (id=1822): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100), 0x0, 0x1, 0x0, 0x0, r2}) 17.994477303s ago: executing program 8 (id=1824): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)="f17e", 0x2}], 0x1}}], 0x2, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x0, 0x0, 0x0) 17.859003084s ago: executing program 8 (id=1825): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) 17.504686714s ago: executing program 37 (id=1807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="820000000000000003000040"]) 17.483775811s ago: executing program 8 (id=1827): timer_create(0x3, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x40000000) timer_gettime(0x0, &(0x7f0000000240)) 16.78382742s ago: executing program 8 (id=1828): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) 15.576210583s ago: executing program 8 (id=1829): r0 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x1885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r0, 0xb516, 0xc2de, 0x8, 0x0, 0x0) 15.256470002s ago: executing program 8 (id=1830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7}]}) 10.99622141s ago: executing program 38 (id=1809): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 8.568010095s ago: executing program 39 (id=1811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000300000005000000000000000008000000000000000000ffffffffff"]) 3.024542116s ago: executing program 40 (id=1822): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100), 0x0, 0x1, 0x0, 0x0, r2}) 0s ago: executing program 41 (id=1830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7}]}) kernel console output (not intermixed with test programs): he firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 153.419568][ T5906] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 153.471252][ T5906] usb 4-1: USB disconnect, device number 3 [ 154.088819][ T8291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1107'. [ 154.312547][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 154.339594][ T8303] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 154.788652][ T5906] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 154.972887][ T5906] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 154.995716][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.034684][ T5906] usb 2-1: Product: syz [ 155.038459][ T8326] sch_fq: defrate 16 ignored. [ 155.039626][ T5906] usb 2-1: Manufacturer: syz [ 155.064364][ T5906] usb 2-1: SerialNumber: syz [ 155.098158][ T5906] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 155.156464][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 155.254778][ T8299] syz.0.1111: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 155.330128][ T8299] CPU: 0 UID: 0 PID: 8299 Comm: syz.0.1111 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 155.330159][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.330178][ T8299] Call Trace: [ 155.330189][ T8299] [ 155.330198][ T8299] dump_stack_lvl+0x189/0x250 [ 155.330238][ T8299] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.330268][ T8299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.330315][ T8299] warn_alloc+0x214/0x310 [ 155.330345][ T8299] ? __pfx_warn_alloc+0x10/0x10 [ 155.330375][ T8299] ? __get_vm_area_node+0x28f/0x300 [ 155.330394][ T8299] ? packet_set_ring+0x6f4/0x2380 [ 155.330423][ T8299] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 155.330473][ T8299] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.330496][ T8299] ? alloc_pages_mpol+0x3c4/0x4a0 [ 155.330519][ T8299] ? packet_set_ring+0x6f4/0x2380 [ 155.330544][ T8299] vzalloc_noprof+0xb2/0xf0 [ 155.330572][ T8299] ? packet_set_ring+0x6f4/0x2380 [ 155.330599][ T8299] packet_set_ring+0x6f4/0x2380 [ 155.330645][ T8299] ? __pfx_packet_set_ring+0x10/0x10 [ 155.330686][ T8299] ? _copy_from_user+0x94/0xb0 [ 155.330709][ T8299] packet_setsockopt+0xc5a/0x12c0 [ 155.330735][ T8299] ? __pfx_packet_setsockopt+0x10/0x10 [ 155.330756][ T8299] ? futex_wait+0x285/0x360 [ 155.330783][ T8299] ? __pfx_futex_wait+0x10/0x10 [ 155.330813][ T8299] ? aa_sk_perm+0x81e/0x950 [ 155.330845][ T8299] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.330864][ T8299] ? __lock_acquire+0xab9/0xd20 [ 155.330893][ T8299] ? aa_sock_opt_perm+0x74/0x110 [ 155.330917][ T8299] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 155.330939][ T8299] ? __pfx_packet_setsockopt+0x10/0x10 [ 155.330964][ T8299] do_sock_setsockopt+0x257/0x3e0 [ 155.330990][ T8299] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 155.331016][ T8299] ? __fget_files+0x2a/0x420 [ 155.331043][ T8299] __x64_sys_setsockopt+0x18b/0x220 [ 155.331070][ T8299] do_syscall_64+0xfa/0x3b0 [ 155.331085][ T8299] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.331110][ T8299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.331127][ T8299] ? clear_bhb_loop+0x60/0xb0 [ 155.331151][ T8299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.331170][ T8299] RIP: 0033:0x7f941098e929 [ 155.331193][ T8299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.331210][ T8299] RSP: 002b:00007f94117bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.331232][ T8299] RAX: ffffffffffffffda RBX: 00007f9410bb5fa0 RCX: 00007f941098e929 [ 155.331247][ T8299] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 155.331258][ T8299] RBP: 00007f9410a10b39 R08: 000000000000001c R09: 0000000000000000 [ 155.331269][ T8299] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 155.331280][ T8299] R13: 0000000000000000 R14: 00007f9410bb5fa0 R15: 00007f9410cdfa28 [ 155.331306][ T8299] [ 155.331357][ T8299] Mem-Info: [ 155.546976][ T43] usb 2-1: USB disconnect, device number 17 [ 155.565720][ T8299] active_anon:5358 inactive_anon:0 isolated_anon:2 [ 155.565720][ T8299] active_file:11368 inactive_file:39892 isolated_file:0 [ 155.565720][ T8299] unevictable:780 dirty:418 writeback:0 [ 155.565720][ T8299] slab_reclaimable:9977 slab_unreclaimable:98644 [ 155.565720][ T8299] mapped:30071 shmem:1360 pagetables:1317 [ 155.565720][ T8299] sec_pagetables:0 bounce:0 [ 155.565720][ T8299] kernel_misc_reclaimable:0 [ 155.565720][ T8299] free:1302529 free_pcp:19997 free_cma:0 [ 155.599274][ T5928] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.611465][ T8299] Node 0 active_anon:21432kB inactive_anon:0kB active_file:45472kB inactive_file:159368kB unevictable:1584kB isolated(anon):8kB isolated(file):0kB mapped:120284kB dirty:1672kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12028kB pagetables:5108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.721303][ T8299] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.758050][ T8299] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.818427][ T8299] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 155.824888][ T8299] Node 0 DMA32 free:1330004kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21380kB inactive_anon:0kB active_file:45472kB inactive_file:157544kB unevictable:1584kB writepending:1672kB present:3129332kB managed:2561024kB mlocked:112kB bounce:0kB free_pcp:48304kB local_pcp:16544kB free_cma:0kB [ 155.869792][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 155.883851][ T8299] lowmem_reserve[]: 0 0 1 1 1 [ 155.891533][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.892892][ T8299] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 155.912629][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.940031][ T8299] lowmem_reserve[]: 0 0 0 0 0 [ 155.945669][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 155.951939][ T8299] Node 1 Normal free:3864732kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:31912kB local_pcp:19180kB free_cma:0kB [ 155.988122][ T5928] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 156.000608][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.006334][ T8299] lowmem_reserve[]: 0 0 0 0 0 [ 156.022691][ T8299] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.035912][ T8299] Node 0 DMA32: 47*4kB (UE) 382*8kB (UM) 275*16kB (UM) 283*32kB (UM) 316*64kB (UME) 89*128kB (UME) 52*256kB (UME) 35*512kB (UME) 13*1024kB (UME) 11*2048kB (UM) 297*4096kB (UM) = 1331900kB [ 156.036469][ T5928] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.059355][ T8299] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 156.082120][ T8299] Node 1 Normal: 3*4kB (E) 6*8kB (UME) 8*16kB (UME) 5*32kB (ME) 7*64kB (UME) 5*128kB (UME) 3*256kB (ME) 4*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 941*4096kB (M) = 3864732kB [ 156.105213][ T5928] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.117135][ T5928] usb 4-1: Manufacturer: syz [ 156.122444][ T8299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.134518][ T8299] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.149285][ T5928] usb 4-1: config 0 descriptor?? [ 156.158885][ T8299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.173886][ T8299] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.183381][ T8299] 52618 total pagecache pages [ 156.188090][ T8299] 0 pages in swap cache [ 156.199453][ T8299] Free swap = 124996kB [ 156.221368][ T8299] Total swap = 124996kB [ 156.225570][ T8299] 2097051 pages RAM [ 156.234827][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 156.244275][ T9] ath9k_htc: Failed to initialize the device [ 156.252678][ T8299] 0 pages HighMem/MovableOnly [ 156.257391][ T8299] 424689 pages reserved [ 156.264015][ T8299] 0 pages cma reserved [ 156.264050][ T43] usb 2-1: ath9k_htc: USB layer deinitialized [ 156.508611][ T5928] rc_core: IR keymap rc-hauppauge not found [ 156.526383][ T5928] Registered IR keymap rc-empty [ 156.546215][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.594826][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.663703][ T5928] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 156.705429][ T5928] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 156.737147][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.818740][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.838686][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.889581][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.919519][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.938932][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.958799][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.998782][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.036130][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.079522][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.123608][ T5928] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 157.140662][ T5928] mceusb 4-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 157.193482][ T5928] usb 4-1: USB disconnect, device number 4 [ 157.658132][ T8388] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1153'. [ 157.918814][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1158'. [ 158.063951][ T30] audit: type=1326 audit(1750224541.811:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.2.1162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10d098e929 code=0x0 [ 158.108679][ T43] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 158.280140][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 158.298438][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.322990][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.352300][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.375941][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 158.394371][ T43] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 158.406096][ T43] usb 5-1: Product: syz [ 158.414358][ T43] usb 5-1: Manufacturer: syz [ 158.419292][ T43] usb 5-1: SerialNumber: syz [ 158.441984][ T43] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input13 [ 158.691626][ T43] usb 5-1: USB disconnect, device number 13 [ 158.745228][ T43] appletouch 5-1:1.0: input: appletouch disconnected [ 158.918582][ T30] audit: type=1326 audit(1750224542.661:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941098e929 code=0x7ffc0000 [ 159.002185][ T30] audit: type=1326 audit(1750224542.661:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941098e929 code=0x7ffc0000 [ 159.077802][ T30] audit: type=1326 audit(1750224542.701:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f941098e929 code=0x7ffc0000 [ 159.128570][ T30] audit: type=1326 audit(1750224542.701:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941098e929 code=0x7ffc0000 [ 159.191671][ T30] audit: type=1326 audit(1750224542.701:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941098e929 code=0x7ffc0000 [ 159.222532][ T30] audit: type=1326 audit(1750224542.701:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f941098e929 code=0x7ffc0000 [ 159.245830][ T30] audit: type=1326 audit(1750224542.701:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941098e929 code=0x7ffc0000 [ 159.298610][ T5906] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 159.505850][ T5906] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 159.539341][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 159.547412][ T5906] usb 3-1: Product: syz [ 159.567773][ T5906] usb 3-1: Manufacturer: syz [ 159.576531][ T5906] usb 3-1: SerialNumber: syz [ 159.588440][ T5906] usb 3-1: config 0 descriptor?? [ 159.604214][ T5906] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 159.859827][ T5907] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 160.018861][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 160.044211][ T5907] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 160.056795][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.075009][ T5907] usb 2-1: config 0 descriptor?? [ 160.206866][ T5906] gspca_sunplus: reg_r err -71 [ 160.219637][ T5906] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 160.234832][ T5906] usb 3-1: USB disconnect, device number 14 [ 160.294991][ T5907] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 160.466499][ T30] audit: type=1326 audit(1750224544.211:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.3.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a638e929 code=0x7ffc0000 [ 160.497145][ T30] audit: type=1326 audit(1750224544.211:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.3.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a638e929 code=0x7ffc0000 [ 160.702800][ T5907] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 160.719970][ T5907] asix 2-1:0.0: probe with driver asix failed with error -71 [ 160.740528][ T5907] usb 2-1: USB disconnect, device number 18 [ 160.871397][ T8502] tipc: Started in network mode [ 160.876493][ T8502] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 160.885361][ T8502] tipc: Enabled bearer , priority 10 [ 161.020039][ T5906] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 161.217823][ T8516] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1215'. [ 161.230550][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.266710][ T5906] usb 5-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 161.307081][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.347533][ T5906] usb 5-1: config 0 descriptor?? [ 161.803555][ T5906] wacom 0003:056A:00B0.0015: unknown main item tag 0x0 [ 161.835715][ T5906] wacom 0003:056A:00B0.0015: unknown main item tag 0x0 [ 161.848360][ T5906] wacom 0003:056A:00B0.0015: unknown main item tag 0x0 [ 161.860780][ T5906] wacom 0003:056A:00B0.0015: unknown main item tag 0x0 [ 161.889792][ T5907] tipc: Node number set to 10070698 [ 161.903752][ T5906] wacom 0003:056A:00B0.0015: unknown main item tag 0x0 [ 162.019212][ T5906] usb 5-1: USB disconnect, device number 14 [ 162.255832][ T8550] ptrace attach of "./syz-executor exec"[8551] was attempted by "./syz-executor exec"[8550] [ 162.868693][ T8580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1246'. [ 162.954774][ T8580] vxcan3: entered promiscuous mode [ 163.670371][ T8619] sock: sock_timestamping_bind_phc: sock not bind to device [ 163.706206][ T5928] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 163.878602][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 163.898261][ T5928] usb 5-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 163.928898][ T5928] usb 5-1: config 0 interface 0 altsetting 109 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.958634][ T5928] usb 5-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 164.005257][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.032398][ T5928] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 164.094462][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.128574][ T5906] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 164.153454][ T5928] usb 5-1: config 0 descriptor?? [ 164.281070][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.317021][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.365890][ T5906] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 164.387855][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.415465][ T5906] usb 2-1: config 0 descriptor?? [ 164.605800][ T5928] waltop 0003:172F:0500.0016: unknown main item tag 0x0 [ 164.628966][ T5928] waltop 0003:172F:0500.0016: unknown main item tag 0x0 [ 164.636104][ T5928] waltop 0003:172F:0500.0016: unknown main item tag 0x0 [ 164.653468][ T5928] waltop 0003:172F:0500.0016: unknown main item tag 0x0 [ 164.668601][ T5928] waltop 0003:172F:0500.0016: unknown main item tag 0x0 [ 164.686383][ T5928] waltop 0003:172F:0500.0016: hidraw0: USB HID v0.05 Device [HID 172f:0500] on usb-dummy_hcd.4-1/input0 [ 164.810044][ T5928] usb 5-1: USB disconnect, device number 15 [ 164.889468][ T8635] fido_id[8635]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 164.972063][ T5906] hid-led 0003:04D8:F372.0017: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 165.072414][ T8617] syz.0.1264 (8617): drop_caches: 2 [ 165.144341][ T5906] hid-led 0003:04D8:F372.0017: Greynut Luxafor initialized [ 165.214659][ T5906] usb 2-1: USB disconnect, device number 19 [ 165.262647][ T59] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 165.311545][ T12] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 165.357968][ T12] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 165.417369][ T12] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 165.440335][ T12] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 165.475172][ T8652] fido_id[8652]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 165.484003][ T12] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 165.524758][ T13] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 165.569368][ T13] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 165.621240][ T12] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 165.663772][ T36] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 165.702621][ T8663] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1285'. [ 165.713107][ T36] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 165.737841][ T36] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 165.779729][ T12] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 165.800262][ T36] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 165.853080][ T12] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 165.892175][ T12] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 165.927664][ T12] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 165.973189][ T12] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 166.328835][ T5906] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 166.396353][ T8694] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 166.402932][ T8694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.418729][ T8694] vhci_hcd vhci_hcd.0: Device attached [ 166.467488][ T8694] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 166.474068][ T8694] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 166.492651][ T8694] vhci_hcd vhci_hcd.0: Device attached [ 166.506269][ T8696] vhci_hcd: connection closed [ 166.506506][ T8699] vhci_hcd: connection closed [ 166.506522][ T1144] vhci_hcd: stop threads [ 166.521300][ T1144] vhci_hcd: release socket [ 166.526049][ T1144] vhci_hcd: disconnect device [ 166.534063][ T1144] vhci_hcd: stop threads [ 166.549677][ T1144] vhci_hcd: release socket [ 166.558920][ T5906] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 166.578339][ T1144] vhci_hcd: disconnect device [ 166.583413][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.616758][ T5906] usb 2-1: Product: syz [ 166.621471][ T5906] usb 2-1: Manufacturer: syz [ 166.631123][ T5906] usb 2-1: SerialNumber: syz [ 166.655310][ T5906] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 166.680408][ T8705] netlink: 'syz.4.1302': attribute type 28 has an invalid length. [ 166.680599][ T1213] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 166.956354][ T5836] Bluetooth: hci0: Unknown advertising packet type: 0x75 [ 166.956423][ T5836] Bluetooth: hci0: Malformed LE Event: 0x0d [ 166.964193][ T9] usb 2-1: USB disconnect, device number 20 [ 167.755417][ T1213] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 167.776305][ T1213] ath9k_htc: Failed to initialize the device [ 167.786704][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1320'. [ 167.797711][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 168.103013][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 168.103032][ T30] audit: type=1326 audit(1750224551.841:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.3.1326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05a638e929 code=0x0 [ 168.138686][ T9] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 168.337601][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 168.356957][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.378532][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 168.432124][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.433581][ T8763] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1330'. [ 168.450712][ T8763] netlink: zone id is out of range [ 168.457622][ T8763] netlink: get zone limit has 8 unknown bytes [ 168.464600][ T9] usb 2-1: config 0 descriptor?? [ 168.465339][ T8738] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 168.833807][ T8778] tipc: Enabling of bearer rejected, media not registered [ 168.887241][ T9] konepure 0003:1E7D:2DBE.0018: unknown main item tag 0x0 [ 168.897937][ T8780] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1338'. [ 168.918537][ T9] konepure 0003:1E7D:2DBE.0018: unknown main item tag 0x0 [ 168.962442][ T9] konepure 0003:1E7D:2DBE.0018: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 169.015084][ T30] audit: type=1326 audit(1750224552.761:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.2.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d098e929 code=0x50000 [ 169.102883][ T30] audit: type=1326 audit(1750224552.761:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.2.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d098e929 code=0x50000 [ 169.176586][ T1213] usb 2-1: USB disconnect, device number 21 [ 169.177984][ T30] audit: type=1326 audit(1750224552.761:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.2.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d098e929 code=0x50000 [ 169.270698][ T30] audit: type=1326 audit(1750224552.761:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.2.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d098e929 code=0x50000 [ 169.343187][ T30] audit: type=1326 audit(1750224552.761:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.2.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d098e929 code=0x50000 [ 169.384750][ T30] audit: type=1326 audit(1750224552.761:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.2.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d098e929 code=0x50000 [ 169.406675][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.425452][ T30] audit: type=1326 audit(1750224552.761:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.2.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d098e929 code=0x50000 [ 169.458758][ T30] audit: type=1326 audit(1750224552.761:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.2.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d098e929 code=0x50000 [ 169.498556][ T30] audit: type=1326 audit(1750224552.761:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.2.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d098e929 code=0x50000 [ 169.520531][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.012149][ T8803] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1348'. [ 170.652408][ T8817] CUSE: unknown device info "€" [ 170.657324][ T8817] CUSE: zero length info key specified [ 172.772734][ T8883] netlink: 'syz.1.1386': attribute type 6 has an invalid length. [ 173.755563][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1405'. [ 173.906933][ T8925] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 173.939361][ T8925] team0: Device ipvlan2 is already an upper device of the team interface [ 174.268192][ T30] kauditd_printk_skb: 2751 callbacks suppressed [ 174.268211][ T30] audit: type=1326 audit(1750224558.011:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d098e929 code=0x7ffc0000 [ 174.355287][ T30] audit: type=1326 audit(1750224558.011:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d098e929 code=0x7ffc0000 [ 174.406862][ T30] audit: type=1326 audit(1750224558.031:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10d098e929 code=0x7ffc0000 [ 174.468052][ T30] audit: type=1326 audit(1750224558.031:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d098e929 code=0x7ffc0000 [ 174.519770][ T30] audit: type=1326 audit(1750224558.031:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f10d098e929 code=0x7ffc0000 [ 174.578030][ T30] audit: type=1326 audit(1750224558.031:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d098e929 code=0x7ffc0000 [ 174.578609][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 174.789377][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 174.791360][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.791385][ T24] usb 4-1: config 0 has no interface number 0 [ 174.791422][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.791447][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.791482][ T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 174.791503][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.795255][ T24] usb 4-1: config 0 descriptor?? [ 175.405282][ T24] uclogic 0003:28BD:0094.0019: failed retrieving string descriptor #100: -71 [ 175.424485][ T24] uclogic 0003:28BD:0094.0019: failed retrieving pen parameters: -71 [ 175.438771][ T24] uclogic 0003:28BD:0094.0019: pen probing failed: -71 [ 175.456651][ T24] uclogic 0003:28BD:0094.0019: failed probing parameters: -71 [ 175.465500][ T24] uclogic 0003:28BD:0094.0019: probe with driver uclogic failed with error -71 [ 175.485281][ T24] usb 4-1: USB disconnect, device number 5 [ 175.508674][ T5928] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 175.693934][ T5928] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.707468][ T5928] usb 5-1: config 0 has no interface number 0 [ 175.714281][ T5928] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 175.728561][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.739831][ T5928] usb 5-1: config 0 descriptor?? [ 175.759497][ T5928] usb 5-1: selecting invalid altsetting 1 [ 175.799522][ T5928] dvb_ttusb_budget: ttusb_init_controller: error [ 175.805910][ T5928] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 175.953416][ T5928] DVB: Unable to find symbol cx22700_attach() [ 176.087492][ T5928] DVB: Unable to find symbol tda10046_attach() [ 176.118639][ T5928] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 176.138701][ T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 176.173308][ T5928] usb 5-1: USB disconnect, device number 16 [ 176.310007][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 176.329857][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.352642][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.373433][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.393389][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 176.428666][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.474180][ T43] usb 2-1: config 0 descriptor?? [ 176.936444][ T43] ryos 0003:1E7D:31CE.001A: unbalanced delimiter at end of report description [ 176.980040][ T43] ryos 0003:1E7D:31CE.001A: parse failed [ 176.987694][ T43] ryos 0003:1E7D:31CE.001A: probe with driver ryos failed with error -22 [ 177.155707][ T24] usb 2-1: USB disconnect, device number 22 [ 177.472585][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.497059][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.506888][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.526343][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.542007][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.554615][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.562154][ T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 177.592661][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.617355][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.637322][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.649599][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.657634][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.668291][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.682301][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.709003][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 177.710138][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.727518][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.734162][ T1213] hid-generic FFF9:0000:0203.001B: unknown main item tag 0x0 [ 177.781434][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.783636][ T1213] hid-generic FFF9:0000:0203.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 177.826879][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.903651][ T43] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 177.968536][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.974401][ T9068] fido_id[9068]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 178.042798][ T43] usb 5-1: config 0 descriptor?? [ 178.472853][ T43] microsoft 0003:045E:07DA.001C: ignoring exceeding usage max [ 178.518966][ T43] microsoft 0003:045E:07DA.001C: No inputs registered, leaving [ 178.547538][ T43] microsoft 0003:045E:07DA.001C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 178.561697][ T5899] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 178.599164][ T43] microsoft 0003:045E:07DA.001C: no inputs found [ 178.605564][ T43] microsoft 0003:045E:07DA.001C: could not initialize ff, continuing anyway [ 178.676102][ T43] usb 5-1: USB disconnect, device number 17 [ 178.700097][ T9094] fido_id[9094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 178.739731][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 178.746611][ T5899] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.766884][ T5899] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.786936][ T5899] usb 2-1: config 0 interface 0 has no altsetting 0 [ 178.793981][ T5899] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 178.803397][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.828155][ T5899] usb 2-1: config 0 descriptor?? [ 179.073229][ T5899] usbhid 2-1:0.0: can't add hid device: -71 [ 179.093526][ T5899] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 179.113292][ T5899] usb 2-1: USB disconnect, device number 23 [ 179.323719][ T9121] sit0: entered promiscuous mode [ 179.335762][ T9121] netlink: 'syz.4.1498': attribute type 1 has an invalid length. [ 179.359446][ T9121] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1498'. [ 179.504504][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'. [ 179.515741][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1501'. [ 179.548639][ T9128] netlink: 'syz.4.1501': attribute type 11 has an invalid length. [ 179.556510][ T9128] netlink: 'syz.4.1501': attribute type 12 has an invalid length. [ 180.408861][ T5899] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 180.601646][ T5899] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.627650][ T5899] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.656053][ T5899] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.670362][ T5899] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 180.719303][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.757123][ T5899] usb 5-1: config 0 descriptor?? [ 180.882265][ T9175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1521'. [ 181.438896][ T5899] usb 5-1: string descriptor 0 read error: -71 [ 181.455431][ T5899] uclogic 0003:5543:3031.001D: failed retrieving string descriptor #200: -71 [ 181.480762][ T5899] uclogic 0003:5543:3031.001D: failed retrieving pen parameters: -71 [ 181.512117][ T5899] uclogic 0003:5543:3031.001D: failed probing pen v2 parameters: -71 [ 181.523299][ T5899] uclogic 0003:5543:3031.001D: failed probing parameters: -71 [ 181.531134][ T5899] uclogic 0003:5543:3031.001D: probe with driver uclogic failed with error -71 [ 181.551282][ T5899] usb 5-1: USB disconnect, device number 18 [ 182.148762][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 182.534401][ T9243] tipc: Enabling of bearer rejected, failed to enable media [ 182.548687][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 182.688785][ T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 182.710500][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.729049][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.740202][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 182.798646][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.828178][ T9] usb 5-1: config 0 descriptor?? [ 182.840731][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.868918][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.895057][ T43] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.915252][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.942653][ T43] usb 2-1: SerialNumber: syz [ 183.183671][ T43] usb 2-1: 0:2 : does not exist [ 183.207029][ T43] usb 2-1: unit 255 not found! [ 183.264721][ T9] hid-rmi 0003:06CB:81A7.001E: unknown main item tag 0x0 [ 183.293763][ T9] hid-rmi 0003:06CB:81A7.001E: unknown main item tag 0x0 [ 183.311155][ T9] hid-rmi 0003:06CB:81A7.001E: unknown main item tag 0x0 [ 183.321304][ T43] usb 2-1: USB disconnect, device number 24 [ 183.336749][ T9] hid-rmi 0003:06CB:81A7.001E: unknown main item tag 0x0 [ 183.356689][ T9] hid-rmi 0003:06CB:81A7.001E: unknown main item tag 0x0 [ 183.396857][ T9] hid-rmi 0003:06CB:81A7.001E: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 183.403865][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.484844][ T9] usb 5-1: USB disconnect, device number 19 [ 183.524209][ T9269] fido_id[9269]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 183.578986][ T5928] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 183.731638][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.747550][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.757639][ T5928] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 183.774744][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.789710][ T5928] usb 4-1: config 0 descriptor?? [ 184.149910][ T43] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 184.206223][ T5928] isku 0003:1E7D:319C.001F: item fetching failed at offset 5/7 [ 184.219330][ T5928] isku 0003:1E7D:319C.001F: parse failed [ 184.234316][ T5928] isku 0003:1E7D:319C.001F: probe with driver isku failed with error -22 [ 184.333738][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.364169][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.377361][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 184.408851][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 184.420627][ T43] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 184.430640][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.430649][ T9] usb 4-1: USB disconnect, device number 6 [ 184.454046][ T43] usb 2-1: config 0 descriptor?? [ 184.737568][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1580'. [ 184.747515][ T9301] netlink: 'syz.2.1580': attribute type 2 has an invalid length. [ 184.755399][ T9301] netlink: 'syz.2.1580': attribute type 1 has an invalid length. [ 184.764562][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 184.823700][ T9303] netlink: 'syz.2.1581': attribute type 3 has an invalid length. [ 184.883207][ T43] hid-u2fzero 0003:10C4:8ACF.0020: unknown main item tag 0x0 [ 184.895431][ T43] hid-u2fzero 0003:10C4:8ACF.0020: unknown main item tag 0x0 [ 184.907778][ T43] hid-u2fzero 0003:10C4:8ACF.0020: unknown main item tag 0x0 [ 184.920266][ T43] hid-u2fzero 0003:10C4:8ACF.0020: unknown main item tag 0x0 [ 184.927749][ T43] hid-u2fzero 0003:10C4:8ACF.0020: unknown main item tag 0x0 [ 184.956932][ T43] hid-u2fzero 0003:10C4:8ACF.0020: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0 [ 184.987468][ T43] hid-u2fzero 0003:10C4:8ACF.0020: U2F Zero LED initialised [ 185.010912][ T43] hid-u2fzero 0003:10C4:8ACF.0020: U2F Zero RNG initialised [ 185.106323][ T1213] usb 2-1: USB disconnect, device number 25 [ 185.448725][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 185.488585][ T5928] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 185.598832][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 185.605411][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.617477][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.627705][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 185.640891][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 185.646957][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 185.656848][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.666244][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 185.687068][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 185.709535][ T43] usb 4-1: config 0 descriptor?? [ 185.759065][ T5928] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 185.768213][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.816416][ T5928] usb 3-1: config 0 descriptor?? [ 185.913095][ T9330] netlink: 'syz.1.1593': attribute type 1 has an invalid length. [ 186.137520][ T43] logitech 0003:046D:C293.0021: bogus close delimiter [ 186.183586][ T43] logitech 0003:046D:C293.0021: item 0 1 2 10 parsing failed [ 186.214642][ T43] logitech 0003:046D:C293.0021: parse failed [ 186.223580][ T43] logitech 0003:046D:C293.0021: probe with driver logitech failed with error -22 [ 186.255152][ T5928] kovaplus 0003:1E7D:2D50.0022: item fetching failed at offset 0/3 [ 186.296352][ T5928] kovaplus 0003:1E7D:2D50.0022: parse failed [ 186.324625][ T5928] kovaplus 0003:1E7D:2D50.0022: probe with driver kovaplus failed with error -22 [ 186.357794][ T43] usb 4-1: USB disconnect, device number 7 [ 186.492084][ T5928] usb 3-1: USB disconnect, device number 15 [ 187.637868][ T9378] xt_socket: unknown flags 0xd0 [ 187.667729][ T9379] RDS: rds_bind could not find a transport for ::c000:0:20:0, load rds_tcp or rds_rdma? [ 188.255607][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 188.337033][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 188.564837][ T9395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1625'. [ 189.687750][ T9418] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1636'. [ 189.753551][ T9418] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1636'. [ 189.842849][ T9418] netlink: 'syz.2.1636': attribute type 6 has an invalid length. [ 189.932333][ T9418] netlink: 'syz.2.1636': attribute type 5 has an invalid length. [ 189.964776][ T9418] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1636'. [ 190.718630][ T5928] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 190.928718][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 190.956200][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.048692][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.124885][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.215815][ T5928] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 191.278958][ T5928] usb 3-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0 [ 191.287187][ T5928] usb 3-1: Manufacturer: syz [ 191.378743][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'. [ 191.418606][ T9444] openvswitch: netlink: Unknown nsh attribute 0 [ 191.433409][ T5928] usb 3-1: config 0 descriptor?? [ 191.483409][ T9444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.821261][ T5984] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 191.928168][ T5928] ryos 0003:1E7D:3138.0023: unknown main item tag 0x0 [ 191.951530][ T5928] ryos 0003:1E7D:3138.0023: unknown main item tag 0x0 [ 191.972848][ T5928] ryos 0003:1E7D:3138.0023: unknown main item tag 0x0 [ 192.008763][ T5984] usb 4-1: Using ep0 maxpacket: 16 [ 192.026365][ T5928] ryos 0003:1E7D:3138.0023: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 192.049035][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.070446][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.120331][ T5984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.147839][ T5928] usb 3-1: USB disconnect, device number 16 [ 192.214310][ T5984] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.275100][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.348581][ T5984] usb 4-1: config 0 descriptor?? [ 192.505278][ T9453] fido_id[9453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 192.678714][ T5899] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 192.815604][ T5984] microsoft 0003:045E:07DA.0024: No inputs registered, leaving [ 192.858775][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 192.880709][ T5899] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 192.897431][ T5984] microsoft 0003:045E:07DA.0024: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 192.929497][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.962713][ T5984] microsoft 0003:045E:07DA.0024: no inputs found [ 192.977036][ T5899] usb 5-1: Product: syz [ 192.995031][ T5899] usb 5-1: Manufacturer: syz [ 193.001658][ T5984] microsoft 0003:045E:07DA.0024: could not initialize ff, continuing anyway [ 193.031208][ T5899] usb 5-1: SerialNumber: syz [ 193.072454][ T5899] usb 5-1: config 0 descriptor?? [ 193.104217][ T5984] usb 4-1: USB disconnect, device number 8 [ 193.254334][ T9458] fido_id[9458]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 193.691813][ T5899] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 194.372910][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.379466][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.343575][ T9491] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1669'. [ 195.428518][ C0] sched: DL replenish lagged too much [ 195.490979][ T9489] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1669'. [ 196.108840][ T43] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 196.286521][ T43] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 196.318645][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.363371][ T43] usb 2-1: config 0 descriptor?? [ 196.388266][ T43] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 196.813142][ T43] gspca_cpia1: usb_control_msg 03, error -32 [ 196.825531][ T43] gspca_cpia1: usb_control_msg 03, error -71 [ 196.848797][ T43] gspca_cpia1: usb_control_msg 01, error -71 [ 196.866037][ T43] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 196.914292][ T43] usb 2-1: USB disconnect, device number 26 [ 199.828802][ T5928] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 199.993849][ T5928] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 200.008432][ T5928] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 200.023179][ T5928] usb 2-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 200.035090][ T5928] usb 2-1: config 220 has no interface number 2 [ 200.046313][ T5928] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 200.063747][ T5928] usb 2-1: config 220 interface 0 has no altsetting 0 [ 200.071983][ T5928] usb 2-1: config 220 interface 76 has no altsetting 0 [ 200.083971][ T5928] usb 2-1: config 220 interface 1 has no altsetting 0 [ 200.096478][ T5928] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 200.113570][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.125743][ T5928] usb 2-1: Product: syz [ 200.132424][ T5928] usb 2-1: Manufacturer: syz [ 200.137194][ T5928] usb 2-1: SerialNumber: syz [ 200.377717][ T5928] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 200.385814][ T5928] usb 2-1: No valid video chain found. [ 200.395113][ T5928] usb 2-1: selecting invalid altsetting 0 [ 200.423953][ T5928] usb 2-1: selecting invalid altsetting 0 [ 200.433951][ T5928] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 200.489348][ T5928] usb 2-1: USB disconnect, device number 27 [ 201.254079][ T5899] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 201.353955][ T5899] usb 5-1: USB disconnect, device number 20 [ 204.529543][ T5928] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 204.738917][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 204.778787][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.867834][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.921504][ T5928] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 204.971574][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.069590][ T5928] usb 4-1: config 0 descriptor?? [ 205.574010][ T5928] holtek 0003:1241:5015.0025: unknown main item tag 0x0 [ 205.609358][ T5928] holtek 0003:1241:5015.0025: unknown main item tag 0x0 [ 205.647818][ T5928] holtek 0003:1241:5015.0025: unknown main item tag 0x0 [ 205.681307][ T5928] holtek 0003:1241:5015.0025: unknown main item tag 0x0 [ 205.712437][ T5928] holtek 0003:1241:5015.0025: unknown main item tag 0x0 [ 205.790259][ T5928] holtek 0003:1241:5015.0025: hidraw0: USB HID vff.ff Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 205.855962][ T5928] holtek 0003:1241:5015.0025: no inputs found [ 205.926527][ T5928] usb 4-1: USB disconnect, device number 9 [ 206.161404][ T9619] fido_id[9619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 206.711448][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 206.717565][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 206.729664][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 206.735863][ T5155] Bluetooth: hci4: command 0x0406 tx timeout [ 206.742156][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 207.750752][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 208.038355][ T9632] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 208.065012][ T9632] syzkaller1: linktype set to 780 [ 211.527007][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1739'. [ 219.028366][ T9647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.117591][ T9647] bond0: (slave bond1): Enslaving as an active interface with an up link [ 219.800777][ T9663] cgroup: fork rejected by pids controller in /syz1 [ 223.900438][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 224.071808][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.088438][ T43] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 224.098013][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.121658][ T43] usb 4-1: config 0 descriptor?? [ 224.560767][ T43] razer 0003:1532:010E.0026: unknown main item tag 0x0 [ 224.573521][ T43] razer 0003:1532:010E.0026: unknown main item tag 0x0 [ 224.583627][ T43] razer 0003:1532:010E.0026: unknown main item tag 0x0 [ 224.594392][ T43] razer 0003:1532:010E.0026: unknown main item tag 0x0 [ 224.604988][ T43] razer 0003:1532:010E.0026: unknown main item tag 0x0 [ 224.769551][ T43] razer 0003:1532:010E.0026: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 224.986557][ T43] usb 4-1: USB disconnect, device number 10 [ 225.938975][ T5928] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 226.108722][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 226.120265][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.137992][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.155370][ T5928] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 226.164901][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.181656][ T5928] usb 4-1: config 0 descriptor?? [ 226.200114][ T5928] hub 4-1:0.0: USB hub found [ 226.416227][ T5928] hub 4-1:0.0: 1 port detected [ 226.623752][ T5928] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 226.655104][ T5928] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 226.667772][ T5928] usbhid 4-1:0.0: can't add hid device: -71 [ 226.677171][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 226.720722][ T5928] usb 4-1: USB disconnect, device number 11 [ 227.220164][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.238825][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.247094][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 227.255210][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.270264][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 227.716558][ T9845] chnl_net:caif_netlink_parms(): no params data found [ 228.027796][ T9845] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.039976][ T9845] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.047371][ T9845] bridge_slave_0: entered allmulticast mode [ 228.059140][ T9845] bridge_slave_0: entered promiscuous mode [ 228.068247][ T9845] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.091053][ T9845] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.098402][ T9845] bridge_slave_1: entered allmulticast mode [ 228.110698][ T9845] bridge_slave_1: entered promiscuous mode [ 228.277923][ T9845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.316899][ T9845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.567934][ T9845] team0: Port device team_slave_0 added [ 228.613748][ T9845] team0: Port device team_slave_1 added [ 228.927967][ T9845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.946792][ T9845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.984124][ T9845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.005000][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1771'. [ 229.068041][ T9845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.094299][ T9845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.173275][ T9845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.348817][ T5844] Bluetooth: hci5: command tx timeout [ 229.445817][ T9845] hsr_slave_0: entered promiscuous mode [ 229.453074][ T9845] hsr_slave_1: entered promiscuous mode [ 229.464785][ T9845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.474716][ T9845] Cannot create hsr debugfs directory [ 230.018047][ T9845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.056703][ T9845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.087987][ T9845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.119390][ T9845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.421492][ T9845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.501491][ T9845] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.550255][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.557433][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.606925][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.614980][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.787926][ T9845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.924647][ T9845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.079183][ T9845] veth0_vlan: entered promiscuous mode [ 231.122916][ T9845] veth1_vlan: entered promiscuous mode [ 231.238504][ T9845] veth0_macvtap: entered promiscuous mode [ 231.271094][ T9845] veth1_macvtap: entered promiscuous mode [ 231.291214][ T9876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1775'. [ 231.349422][ T9845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.401826][ T9845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.429279][ T5844] Bluetooth: hci5: command tx timeout [ 231.441670][ T9845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.472966][ T9845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.494713][ T9845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.518009][ T9845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.738808][ T5928] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 231.774636][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.807245][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.866092][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.881308][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.941198][ T5928] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.963841][ T5928] usb 4-1: config 0 has no interface number 0 [ 231.999571][ T5928] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 232.033288][ T5928] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 232.090554][ T5928] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.138264][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.199634][ T5928] usb 4-1: config 0 descriptor?? [ 232.229362][ T9878] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 232.285433][ T5928] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 232.519642][ T5928] usb 4-1: USB disconnect, device number 12 [ 232.525630][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 232.977910][ T9888] tun0: tun_chr_ioctl cmd 2148553947 [ 233.523419][ T5844] Bluetooth: hci5: command tx timeout [ 234.706491][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 234.717067][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 234.725933][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 234.737071][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 234.746312][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.515121][ T9900] chnl_net:caif_netlink_parms(): no params data found [ 235.589154][ T5842] Bluetooth: hci5: command tx timeout [ 236.789185][ T5842] Bluetooth: hci6: command tx timeout [ 237.249914][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.257092][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.365665][ T9900] bridge_slave_0: entered allmulticast mode [ 237.434651][ T9900] bridge_slave_0: entered promiscuous mode [ 237.518294][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.566752][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.620287][ T9900] bridge_slave_1: entered allmulticast mode [ 237.660597][ T9900] bridge_slave_1: entered promiscuous mode [ 238.134205][ T9900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.243917][ T9900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.848701][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.857581][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.868850][ T5839] Bluetooth: hci6: command tx timeout [ 238.875547][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.889499][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.897277][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.965065][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 238.989009][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 238.997564][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 239.009468][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 239.018421][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 239.099335][ T9900] team0: Port device team_slave_0 added [ 239.179644][ T9900] team0: Port device team_slave_1 added [ 239.779355][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.786355][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.873447][ T9900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.951742][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.978518][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.050881][ T9900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.480279][ T9900] hsr_slave_0: entered promiscuous mode [ 240.487006][ T9900] hsr_slave_1: entered promiscuous mode [ 240.516588][ T9900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.538282][ T9900] Cannot create hsr debugfs directory [ 240.949075][ T5842] Bluetooth: hci7: command tx timeout [ 240.954794][ T5844] Bluetooth: hci6: command tx timeout [ 241.110940][ T5842] Bluetooth: hci8: command tx timeout [ 242.356887][ T9915] chnl_net:caif_netlink_parms(): no params data found [ 242.445585][ T9917] chnl_net:caif_netlink_parms(): no params data found [ 243.030545][ T5842] Bluetooth: hci7: command tx timeout [ 243.036468][ T5844] Bluetooth: hci6: command tx timeout [ 243.175605][ T9900] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 243.188783][ T5842] Bluetooth: hci8: command tx timeout [ 243.347940][ T9915] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.384333][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.407108][ T9915] bridge_slave_0: entered allmulticast mode [ 243.442605][ T9915] bridge_slave_0: entered promiscuous mode [ 243.473224][ T9900] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 243.530776][ T9900] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 243.834315][ T9915] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.861263][ T9915] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.887609][ T9915] bridge_slave_1: entered allmulticast mode [ 243.895845][ T9915] bridge_slave_1: entered promiscuous mode [ 244.022264][ T9900] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 244.067162][ T9917] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.087657][ T9917] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.118748][ T9917] bridge_slave_0: entered allmulticast mode [ 244.137388][ T9917] bridge_slave_0: entered promiscuous mode [ 244.285368][ T9917] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.308518][ T9917] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.329503][ T9917] bridge_slave_1: entered allmulticast mode [ 244.348617][ T9917] bridge_slave_1: entered promiscuous mode [ 244.472351][ T9915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.644849][ T9917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.699008][ T9915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.716517][ T9917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.108780][ T5842] Bluetooth: hci7: command tx timeout [ 245.268683][ T5842] Bluetooth: hci8: command tx timeout [ 245.314512][ T9915] team0: Port device team_slave_0 added [ 245.337685][ T9917] team0: Port device team_slave_0 added [ 245.365300][ T9917] team0: Port device team_slave_1 added [ 245.442596][ T9915] team0: Port device team_slave_1 added [ 245.522795][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 245.886436][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.915757][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.968154][ T9915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.991745][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.009322][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.043936][ T9917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.067556][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.084118][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.126209][ T9915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.159575][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.166574][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.193845][ T5899] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 246.217171][ T9917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.388960][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 246.395858][ T5899] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 246.411828][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.462235][ T5899] usb 4-1: config 0 descriptor?? [ 246.478099][ T9915] hsr_slave_0: entered promiscuous mode [ 246.504294][ T5899] as10x_usb: device has been detected [ 246.513888][ T9915] hsr_slave_1: entered promiscuous mode [ 246.530816][ T5899] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 246.540562][ T9915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.548149][ T9915] Cannot create hsr debugfs directory [ 246.630184][ T5899] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 246.744291][ T5899] as10x_usb: error during firmware upload part1 [ 246.777334][ T5899] Registered device nBox DVB-T Dongle [ 246.820422][ T5899] usb 4-1: USB disconnect, device number 13 [ 246.931973][ T5899] Unregistered device nBox DVB-T Dongle [ 246.938430][ T5899] as10x_usb: device has been disconnected [ 247.004626][ T9917] hsr_slave_0: entered promiscuous mode [ 247.025259][ T9917] hsr_slave_1: entered promiscuous mode [ 247.042086][ T9917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.054529][ T9917] Cannot create hsr debugfs directory [ 247.189335][ T5842] Bluetooth: hci7: command tx timeout [ 247.349049][ T5842] Bluetooth: hci8: command tx timeout [ 247.916292][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.189732][ T9900] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.371866][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.379072][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.459708][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.466891][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.917020][ T9915] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 249.044751][ T9915] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 249.150323][ T9915] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 249.227888][ T9915] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 249.366233][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.375389][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.386763][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.396463][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.404817][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.667408][ T9900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.798596][ T9917] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 249.858279][ T9917] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 249.943407][ T9917] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 250.006500][ T9917] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 250.238782][ T9900] veth0_vlan: entered promiscuous mode [ 250.406151][ T9915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.437308][ T9900] veth1_vlan: entered promiscuous mode [ 250.677158][ T9915] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.754165][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.761397][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.857120][ T9900] veth0_macvtap: entered promiscuous mode [ 250.890561][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.897827][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.943306][ T9987] chnl_net:caif_netlink_parms(): no params data found [ 251.037356][ T9900] veth1_macvtap: entered promiscuous mode [ 251.353908][ T9917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.373192][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.429709][ T5842] Bluetooth: hci1: command tx timeout [ 251.522258][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.662368][ T9900] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.685930][ T9900] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.703565][ T9900] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.724323][ T9900] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.755805][ T9987] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.770926][ T9987] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.786118][ T9987] bridge_slave_0: entered allmulticast mode [ 251.804528][ T9987] bridge_slave_0: entered promiscuous mode [ 251.834188][ T9917] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.860661][ T9915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.877011][ T9987] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.890524][ T9987] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.897888][ T9987] bridge_slave_1: entered allmulticast mode [ 251.918309][ T9987] bridge_slave_1: entered promiscuous mode [ 252.160794][ T9987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.215243][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.222444][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.264168][ T9987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.541885][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.549088][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.585682][ T9987] team0: Port device team_slave_0 added [ 252.597980][ T9987] team0: Port device team_slave_1 added [ 252.986016][ T9915] veth0_vlan: entered promiscuous mode [ 253.092919][ T9987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.107655][ T9987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.150305][ T9987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.175556][ T9987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.189751][ T9987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.232237][ T9987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.384054][ T9915] veth1_vlan: entered promiscuous mode [ 253.509480][ T5842] Bluetooth: hci1: command tx timeout [ 253.635723][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.716073][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.742766][ T9987] hsr_slave_0: entered promiscuous mode [ 253.772265][ T9987] hsr_slave_1: entered promiscuous mode [ 253.789256][ T9987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.796868][ T9987] Cannot create hsr debugfs directory [ 254.019904][ T9915] veth0_macvtap: entered promiscuous mode [ 254.035345][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.090985][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.116074][ T9915] veth1_macvtap: entered promiscuous mode [ 254.304642][ T9917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.473061][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.643102][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.922527][ T9915] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.957024][ T9915] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.973760][ T9915] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.985047][ T9915] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.156702][ T9917] veth0_vlan: entered promiscuous mode [ 255.256245][ T9917] veth1_vlan: entered promiscuous mode [ 255.366188][T10008] bond_slave_0: entered promiscuous mode [ 255.372123][T10008] bond_slave_1: entered promiscuous mode [ 255.406002][T10008] macsec1: entered allmulticast mode [ 255.415188][T10008] bond0: entered allmulticast mode [ 255.436497][T10008] bond_slave_0: entered allmulticast mode [ 255.445982][T10008] bond_slave_1: entered allmulticast mode [ 255.482953][T10008] bond0: left allmulticast mode [ 255.487976][T10008] bond_slave_0: left allmulticast mode [ 255.510392][T10008] bond_slave_1: left allmulticast mode [ 255.525035][T10008] bond_slave_0: left promiscuous mode [ 255.530581][T10008] bond_slave_1: left promiscuous mode [ 255.589615][ T5842] Bluetooth: hci1: command tx timeout [ 255.759398][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.772287][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.927713][ T9917] veth0_macvtap: entered promiscuous mode [ 256.025512][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.067750][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.089658][ T9917] veth1_macvtap: entered promiscuous mode [ 256.267487][ T9917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.286754][ T9987] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 256.353770][ T9917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.371165][ T9987] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 256.424001][ T9987] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 256.466936][ T9917] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.495578][ T9917] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.509231][ T9917] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.518075][ T9917] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.542732][ T9987] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 256.554462][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.584421][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.175531][T10009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.199745][T10017] netlink: 'syz.7.1785': attribute type 9 has an invalid length. [ 257.219020][T10009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.244788][T10017] netlink: 212260 bytes leftover after parsing attributes in process `syz.7.1785'. [ 257.448292][ T9987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.527092][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.567157][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.602680][ T9987] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.671652][ T5842] Bluetooth: hci1: command tx timeout [ 257.711278][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.718528][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.764583][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.771780][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.315116][ T9987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.502077][ T9987] veth0_vlan: entered promiscuous mode [ 258.532338][ T9987] veth1_vlan: entered promiscuous mode [ 258.634448][ T9987] veth0_macvtap: entered promiscuous mode [ 258.675876][ T9987] veth1_macvtap: entered promiscuous mode [ 258.745761][ T9987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.778592][ T9987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.812272][ T9987] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.827604][ T9987] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.849137][ T9987] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.860859][ T9987] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.265248][T10027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.308342][T10027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.474836][T10027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.525881][T10027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.043046][ C1] hrtimer: interrupt took 15631 ns [ 262.560088][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1820'. [ 262.618987][T10049] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1820'. [ 265.314322][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 265.330725][ T5844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 265.341900][ T5844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 265.358073][ T5844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 265.373581][ T5844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 266.655162][T10072] chnl_net:caif_netlink_parms(): no params data found [ 267.247070][T10072] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.265665][T10072] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.287660][T10072] bridge_slave_0: entered allmulticast mode [ 267.308208][T10072] bridge_slave_0: entered promiscuous mode [ 267.322842][T10072] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.342939][T10072] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.359919][T10072] bridge_slave_1: entered allmulticast mode [ 267.376500][T10072] bridge_slave_1: entered promiscuous mode [ 267.428996][ T5844] Bluetooth: hci9: command tx timeout [ 267.546106][T10072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.575565][T10072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.762363][T10072] team0: Port device team_slave_0 added [ 267.778149][T10072] team0: Port device team_slave_1 added [ 267.989515][T10072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.996510][T10072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.048361][T10072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.076692][T10072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.093421][T10072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.135232][T10072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.334530][T10072] hsr_slave_0: entered promiscuous mode [ 268.353311][T10072] hsr_slave_1: entered promiscuous mode [ 268.367598][T10072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.385639][T10072] Cannot create hsr debugfs directory [ 269.129870][T10072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.509253][ T5844] Bluetooth: hci9: command tx timeout [ 271.085069][ T5842] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 271.099874][ T5842] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 271.107884][ T5842] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 271.121721][ T5842] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 271.130065][ T5842] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 271.588786][ T5842] Bluetooth: hci9: command tx timeout [ 271.787000][T10088] chnl_net:caif_netlink_parms(): no params data found [ 272.178288][T10088] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.194529][T10088] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.205271][T10088] bridge_slave_0: entered allmulticast mode [ 272.237347][T10088] bridge_slave_0: entered promiscuous mode [ 272.259001][T10088] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.266207][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.285751][T10088] bridge_slave_1: entered allmulticast mode [ 272.311283][T10088] bridge_slave_1: entered promiscuous mode [ 272.481885][T10088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.508387][T10088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.724247][T10088] team0: Port device team_slave_0 added [ 272.755183][T10088] team0: Port device team_slave_1 added [ 273.020045][T10088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.027126][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.158602][T10088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.206945][ T5842] Bluetooth: hci10: command tx timeout [ 273.216453][T10088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.249413][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.333269][T10088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.671049][ T5842] Bluetooth: hci9: command tx timeout [ 273.687037][T10088] hsr_slave_0: entered promiscuous mode [ 273.733544][T10088] hsr_slave_1: entered promiscuous mode [ 273.759840][T10088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.767449][T10088] Cannot create hsr debugfs directory [ 273.797145][ T5842] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 273.807563][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 273.816361][ T5842] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 273.825652][ T5842] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 273.840033][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 275.269124][ T5842] Bluetooth: hci10: command tx timeout [ 275.928847][ T5842] Bluetooth: hci11: command tx timeout [ 276.258329][T10097] chnl_net:caif_netlink_parms(): no params data found [ 277.005612][T10097] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.022445][T10097] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.049034][T10097] bridge_slave_0: entered allmulticast mode [ 277.057772][T10097] bridge_slave_0: entered promiscuous mode [ 277.082962][T10097] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.101813][T10097] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.116395][T10097] bridge_slave_1: entered allmulticast mode [ 277.150026][T10097] bridge_slave_1: entered promiscuous mode [ 277.331039][T10097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.359129][ T5842] Bluetooth: hci10: command tx timeout [ 277.372632][T10097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.593916][T10097] team0: Port device team_slave_0 added [ 277.617392][T10097] team0: Port device team_slave_1 added [ 277.780003][T10097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.787027][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.827212][T10097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.872405][T10097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.888727][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.934271][T10097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.988984][ T5842] Bluetooth: hci11: command tx timeout [ 278.203816][T10097] hsr_slave_0: entered promiscuous mode [ 278.221222][T10097] hsr_slave_1: entered promiscuous mode [ 278.228069][T10097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.248166][T10097] Cannot create hsr debugfs directory [ 279.233706][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.246740][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.255160][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.265322][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.287276][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.435094][ T5842] Bluetooth: hci10: command tx timeout [ 279.941508][T10109] chnl_net:caif_netlink_parms(): no params data found [ 280.074032][ T5842] Bluetooth: hci11: command tx timeout [ 280.319960][T10109] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.327195][T10109] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.348962][T10109] bridge_slave_0: entered allmulticast mode [ 280.356875][T10109] bridge_slave_0: entered promiscuous mode [ 280.381242][T10109] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.388457][T10109] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.429022][T10109] bridge_slave_1: entered allmulticast mode [ 280.448961][T10109] bridge_slave_1: entered promiscuous mode [ 280.649610][T10109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.672855][T10109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.886438][T10109] team0: Port device team_slave_0 added [ 280.906174][T10109] team0: Port device team_slave_1 added [ 281.088960][T10109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.095950][T10109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.141702][T10109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.165944][T10109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.179537][T10109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.230279][T10109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.356201][ T5842] Bluetooth: hci0: command tx timeout [ 281.590288][T10109] hsr_slave_0: entered promiscuous mode [ 281.620217][T10109] hsr_slave_1: entered promiscuous mode [ 281.667845][T10109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.689989][T10109] Cannot create hsr debugfs directory [ 282.160428][ T5842] Bluetooth: hci11: command tx timeout [ 282.299190][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.308336][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.317963][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.329878][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.341758][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.022227][T10118] chnl_net:caif_netlink_parms(): no params data found [ 283.382644][T10118] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.410318][T10118] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.417657][T10118] bridge_slave_0: entered allmulticast mode [ 283.437336][T10118] bridge_slave_0: entered promiscuous mode [ 283.443809][ T5844] Bluetooth: hci0: command tx timeout [ 283.462504][T10118] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.482369][T10118] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.499692][T10118] bridge_slave_1: entered allmulticast mode [ 283.531013][T10118] bridge_slave_1: entered promiscuous mode [ 283.732051][T10118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.772435][T10118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.049389][T10118] team0: Port device team_slave_0 added [ 284.072170][T10118] team0: Port device team_slave_1 added [ 284.269856][T10118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.276839][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.333795][T10118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.355428][T10118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.370538][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.397643][ T5844] Bluetooth: hci3: command tx timeout [ 284.428595][T10118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.634251][T10118] hsr_slave_0: entered promiscuous mode [ 284.649840][T10118] hsr_slave_1: entered promiscuous mode [ 284.662974][T10118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.683603][T10118] Cannot create hsr debugfs directory [ 285.509007][ T5844] Bluetooth: hci0: command tx timeout [ 286.473111][ T5844] Bluetooth: hci3: command tx timeout [ 287.589426][ T5844] Bluetooth: hci0: command tx timeout [ 288.550816][ T5844] Bluetooth: hci3: command tx timeout [ 290.633232][ T5844] Bluetooth: hci3: command tx timeout [ 317.201191][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.207541][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.126093][T10072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.279491][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.294016][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.302617][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.311125][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.319091][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.966095][T10137] chnl_net:caif_netlink_parms(): no params data found [ 326.400650][T10137] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.407909][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.431065][T10137] bridge_slave_0: entered allmulticast mode [ 326.443985][T10137] bridge_slave_0: entered promiscuous mode [ 326.461336][T10137] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.478587][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.509528][T10137] bridge_slave_1: entered allmulticast mode [ 326.538058][T10137] bridge_slave_1: entered promiscuous mode [ 326.773068][T10137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.811022][T10137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.079693][T10137] team0: Port device team_slave_0 added [ 327.112363][T10137] team0: Port device team_slave_1 added [ 327.340593][T10137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.347576][T10137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.374770][ T5842] Bluetooth: hci2: command tx timeout [ 327.388969][T10137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.425912][T10137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.478528][T10137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.555286][T10137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.892731][T10137] hsr_slave_0: entered promiscuous mode [ 327.949386][T10137] hsr_slave_1: entered promiscuous mode [ 327.976437][T10137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.999799][T10137] Cannot create hsr debugfs directory [ 329.439465][ T5842] Bluetooth: hci2: command tx timeout [ 331.509959][ T5842] Bluetooth: hci2: command tx timeout [ 331.674026][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.683689][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.692441][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.703185][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.715377][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.372213][T10150] chnl_net:caif_netlink_parms(): no params data found [ 332.812874][T10150] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.833202][T10150] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.880436][T10150] bridge_slave_0: entered allmulticast mode [ 332.918766][T10150] bridge_slave_0: entered promiscuous mode [ 332.952211][T10150] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.979025][T10150] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.986653][T10150] bridge_slave_1: entered allmulticast mode [ 333.046779][T10150] bridge_slave_1: entered promiscuous mode [ 333.321609][T10150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.382084][T10150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.590094][ T5844] Bluetooth: hci2: command tx timeout [ 333.674551][T10150] team0: Port device team_slave_0 added [ 333.722269][T10150] team0: Port device team_slave_1 added [ 333.804406][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.816173][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.824584][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.832557][ T5842] Bluetooth: hci4: command tx timeout [ 333.841789][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.866739][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.094016][T10150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.108644][T10150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.157991][T10150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.225877][T10150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.248723][T10150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.295843][T10150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.648378][T10150] hsr_slave_0: entered promiscuous mode [ 334.670136][T10150] hsr_slave_1: entered promiscuous mode [ 334.676707][T10150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.707512][T10150] Cannot create hsr debugfs directory [ 335.549194][T10159] chnl_net:caif_netlink_parms(): no params data found [ 335.910238][ T5842] Bluetooth: hci5: command tx timeout [ 335.916345][ T5842] Bluetooth: hci4: command tx timeout [ 335.940779][T10159] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.949349][T10159] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.956699][T10159] bridge_slave_0: entered allmulticast mode [ 335.983978][T10159] bridge_slave_0: entered promiscuous mode [ 336.030658][T10159] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.037831][T10159] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.061953][T10159] bridge_slave_1: entered allmulticast mode [ 336.089755][T10159] bridge_slave_1: entered promiscuous mode [ 336.313042][T10159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.364094][T10159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.642308][T10159] team0: Port device team_slave_0 added [ 336.671563][T10159] team0: Port device team_slave_1 added [ 336.905590][T10159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.926123][T10159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.976945][T10159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.010508][T10159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.017492][T10159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.095052][T10159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.411180][T10159] hsr_slave_0: entered promiscuous mode [ 337.418173][T10159] hsr_slave_1: entered promiscuous mode [ 337.447770][T10159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.468723][T10159] Cannot create hsr debugfs directory [ 337.988992][ T5842] Bluetooth: hci4: command tx timeout [ 337.994443][ T5842] Bluetooth: hci5: command tx timeout [ 339.165757][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.175231][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.195844][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.206799][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.219450][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.895745][T10170] chnl_net:caif_netlink_parms(): no params data found [ 340.068983][ T5842] Bluetooth: hci4: command tx timeout [ 340.074454][ T5844] Bluetooth: hci5: command tx timeout [ 340.320281][T10170] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.327517][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.351102][T10170] bridge_slave_0: entered allmulticast mode [ 340.368941][T10170] bridge_slave_0: entered promiscuous mode [ 340.395504][T10170] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.428795][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.436416][T10170] bridge_slave_1: entered allmulticast mode [ 340.459493][T10170] bridge_slave_1: entered promiscuous mode [ 340.682656][T10170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.714028][T10170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.036313][T10170] team0: Port device team_slave_0 added [ 341.061680][T10170] team0: Port device team_slave_1 added [ 341.269499][ T5844] Bluetooth: hci6: command tx timeout [ 341.296424][T10170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.309487][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.377038][T10170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.397156][T10170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.421139][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.493035][T10170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.781413][T10170] hsr_slave_0: entered promiscuous mode [ 341.799870][T10170] hsr_slave_1: entered promiscuous mode [ 341.809877][T10170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.817489][T10170] Cannot create hsr debugfs directory [ 342.149213][ T5844] Bluetooth: hci5: command tx timeout [ 342.802082][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 342.811835][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 342.822044][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 342.835436][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 342.847110][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 343.348832][ T5842] Bluetooth: hci6: command tx timeout [ 343.505260][T10182] chnl_net:caif_netlink_parms(): no params data found [ 343.922718][T10182] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.939034][T10182] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.946428][T10182] bridge_slave_0: entered allmulticast mode [ 343.994161][T10182] bridge_slave_0: entered promiscuous mode [ 344.016093][T10182] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.047726][T10182] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.055768][T10182] bridge_slave_1: entered allmulticast mode [ 344.102464][T10182] bridge_slave_1: entered promiscuous mode [ 344.353803][T10182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.382955][T10182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.637532][T10182] team0: Port device team_slave_0 added [ 344.667550][T10182] team0: Port device team_slave_1 added [ 344.872957][T10182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.888597][T10182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.936940][T10182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.969064][ T5842] Bluetooth: hci8: command tx timeout [ 344.981195][T10182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.988183][T10182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.066917][T10182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.432137][ T5842] Bluetooth: hci6: command tx timeout [ 345.471724][T10182] hsr_slave_0: entered promiscuous mode [ 345.489606][T10182] hsr_slave_1: entered promiscuous mode [ 345.496202][T10182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.525025][T10182] Cannot create hsr debugfs directory [ 347.029323][ T5842] Bluetooth: hci8: command tx timeout [ 347.509265][ T5842] Bluetooth: hci6: command tx timeout [ 349.109392][ T5842] Bluetooth: hci8: command tx timeout [ 351.189130][ T5842] Bluetooth: hci8: command tx timeout [ 365.349271][ T5844] Bluetooth: hci7: command 0x0406 tx timeout [ 368.404492][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 375.594424][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 378.651278][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.657695][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.158027][ T5842] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 386.172659][ T5842] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 386.182284][ T5842] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 386.200028][ T5842] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 386.207870][ T5842] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 386.854592][T10202] chnl_net:caif_netlink_parms(): no params data found [ 387.252324][T10202] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.280204][T10202] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.287615][T10202] bridge_slave_0: entered allmulticast mode [ 387.318089][T10202] bridge_slave_0: entered promiscuous mode [ 387.345548][T10202] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.369947][T10202] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.389279][T10202] bridge_slave_1: entered allmulticast mode [ 387.399330][T10202] bridge_slave_1: entered promiscuous mode [ 387.628312][T10202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.663018][T10202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.936160][T10202] team0: Port device team_slave_0 added [ 387.960963][T10202] team0: Port device team_slave_1 added [ 388.143193][T10202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.159205][T10202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.228639][T10202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.273163][T10202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.289027][T10202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.332252][ T5844] Bluetooth: hci12: command tx timeout [ 388.364734][T10202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.672010][T10202] hsr_slave_0: entered promiscuous mode [ 388.689587][T10202] hsr_slave_1: entered promiscuous mode [ 388.702934][T10202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.729160][T10202] Cannot create hsr debugfs directory [ 390.389499][ T5842] Bluetooth: hci12: command tx timeout [ 390.954864][ T5842] Bluetooth: hci9: command 0x0406 tx timeout [ 392.205871][ T5842] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 392.214759][ T5842] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 392.223598][ T5842] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 392.246170][ T5842] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 392.257694][ T5842] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 392.469061][ T5844] Bluetooth: hci12: command tx timeout [ 393.010502][T10213] chnl_net:caif_netlink_parms(): no params data found [ 393.577734][T10213] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.608969][T10213] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.616425][T10213] bridge_slave_0: entered allmulticast mode [ 393.690213][T10213] bridge_slave_0: entered promiscuous mode [ 393.710939][T10213] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.728939][T10213] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.750727][T10213] bridge_slave_1: entered allmulticast mode [ 393.789326][T10213] bridge_slave_1: entered promiscuous mode [ 394.011025][ T5843] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 394.020493][ T5843] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 394.028921][ T5843] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 394.037286][ T5843] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 394.053743][ T5843] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 394.197830][T10213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.234553][T10213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.309102][ T5843] Bluetooth: hci13: command tx timeout [ 394.549087][ T5843] Bluetooth: hci12: command tx timeout [ 394.573382][T10213] team0: Port device team_slave_0 added [ 394.606075][T10213] team0: Port device team_slave_1 added [ 394.882385][T10213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.908521][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.967848][T10213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.114996][T10213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.128617][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.189357][T10213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.530812][T10213] hsr_slave_0: entered promiscuous mode [ 395.552713][T10213] hsr_slave_1: entered promiscuous mode [ 395.570082][T10213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.577695][T10213] Cannot create hsr debugfs directory [ 396.075510][ T5843] Bluetooth: hci10: command 0x0406 tx timeout [ 396.082347][ T5844] Bluetooth: hci11: command 0x0406 tx timeout [ 396.149429][ T5843] Bluetooth: hci14: command tx timeout [ 396.285928][T10222] chnl_net:caif_netlink_parms(): no params data found [ 396.388954][ T5839] Bluetooth: hci13: command tx timeout [ 396.931767][T10222] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.963540][T10222] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.982548][T10222] bridge_slave_0: entered allmulticast mode [ 397.002411][T10222] bridge_slave_0: entered promiscuous mode [ 397.027596][T10222] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.058807][T10222] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.066206][T10222] bridge_slave_1: entered allmulticast mode [ 397.095452][T10222] bridge_slave_1: entered promiscuous mode [ 397.342776][T10222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.391300][T10222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.641260][T10222] team0: Port device team_slave_0 added [ 397.673133][T10222] team0: Port device team_slave_1 added [ 397.853800][T10222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.881987][T10222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.942938][T10222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.984494][T10222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.009143][T10222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.057500][T10222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.228996][ T5839] Bluetooth: hci14: command tx timeout [ 398.324923][T10222] hsr_slave_0: entered promiscuous mode [ 398.341423][T10222] hsr_slave_1: entered promiscuous mode [ 398.361270][T10222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.379381][T10222] Cannot create hsr debugfs directory [ 398.469555][ T5839] Bluetooth: hci13: command tx timeout [ 399.459291][ T5842] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 399.470228][ T5842] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 399.478392][ T5842] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 399.487101][ T5842] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 399.509362][ T5842] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 400.231343][T10233] chnl_net:caif_netlink_parms(): no params data found [ 400.309407][ T5839] Bluetooth: hci14: command tx timeout [ 400.549464][ T5839] Bluetooth: hci13: command tx timeout [ 400.702330][T10233] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.718789][T10233] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.750632][T10233] bridge_slave_0: entered allmulticast mode [ 400.768919][T10233] bridge_slave_0: entered promiscuous mode [ 400.790756][T10233] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.797922][T10233] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.820221][T10233] bridge_slave_1: entered allmulticast mode [ 400.871215][T10233] bridge_slave_1: entered promiscuous mode [ 401.047021][T10233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.086896][T10233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.336845][T10233] team0: Port device team_slave_0 added [ 401.387240][T10233] team0: Port device team_slave_1 added [ 401.593182][ T5839] Bluetooth: hci15: command tx timeout [ 401.782033][T10233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.799703][T10233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.869567][T10233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.899182][T10233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.906175][T10233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.001272][T10233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.350908][T10233] hsr_slave_0: entered promiscuous mode [ 402.384722][T10233] hsr_slave_1: entered promiscuous mode [ 402.394140][ T5839] Bluetooth: hci14: command tx timeout [ 402.419799][T10233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.427397][T10233] Cannot create hsr debugfs directory [ 403.046040][ T5842] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 403.061271][ T5842] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 403.070207][ T5842] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 403.093098][ T5842] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 403.102431][ T5842] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 403.668876][ T5842] Bluetooth: hci15: command tx timeout [ 403.881232][T10245] chnl_net:caif_netlink_parms(): no params data found [ 404.324515][T10245] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.338779][T10245] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.346160][T10245] bridge_slave_0: entered allmulticast mode [ 404.375210][T10245] bridge_slave_0: entered promiscuous mode [ 404.403404][T10245] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.429835][T10245] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.437230][T10245] bridge_slave_1: entered allmulticast mode [ 404.460788][T10245] bridge_slave_1: entered promiscuous mode [ 404.694886][T10245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.762684][T10245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.005803][T10245] team0: Port device team_slave_0 added [ 405.034259][T10245] team0: Port device team_slave_1 added [ 405.189037][ T5843] Bluetooth: hci16: command tx timeout [ 405.254890][T10245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.271238][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.342674][T10245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.381449][T10245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.388443][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.467481][T10245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.749437][ T5843] Bluetooth: hci15: command tx timeout [ 405.781136][T10245] hsr_slave_0: entered promiscuous mode [ 405.799442][T10245] hsr_slave_1: entered promiscuous mode [ 405.806195][T10245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.838871][T10245] Cannot create hsr debugfs directory [ 406.318339][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 406.324587][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 407.268939][ T5839] Bluetooth: hci16: command tx timeout [ 407.829602][ T5839] Bluetooth: hci15: command tx timeout [ 409.349816][ T5839] Bluetooth: hci16: command tx timeout [ 411.428878][ T5842] Bluetooth: hci16: command tx timeout [ 422.149341][ T31] INFO: task syz.9.1822:10053 blocked for more than 143 seconds. [ 422.157128][ T31] Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 422.191904][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.228757][ T31] task:syz.9.1822 state:D stack:27688 pid:10053 tgid:10052 ppid:9987 task_flags:0x400040 flags:0x00004004 [ 422.350764][ T31] Call Trace: [ 422.354103][ T31] [ 422.357050][ T31] __schedule+0x16f5/0x4d00 [ 422.445856][ T31] ? schedule+0x165/0x360 [ 422.490760][ T31] ? __lock_acquire+0xab9/0xd20 [ 422.495696][ T31] ? __pfx___schedule+0x10/0x10 [ 422.544082][ T31] ? schedule+0x91/0x360 [ 422.548413][ T31] schedule+0x165/0x360 [ 422.605281][ T31] schedule_timeout+0x9a/0x270 [ 422.632727][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 422.638185][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.718949][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.724221][ T31] ? wait_for_completion+0x267/0x5d0 [ 422.796194][ T31] wait_for_completion+0x2bf/0x5d0 [ 422.821268][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 422.826971][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 422.892681][ T31] kthread_flush_worker+0x1c6/0x240 [ 422.897963][ T31] ? __pfx_kthread_flush_worker+0x10/0x10 [ 422.956652][ T31] ? __pfx_kthread_flush_work_fn+0x10/0x10 [ 423.008704][ T31] ? drm_atomic_bridge_chain_disable+0x157/0x180 [ 423.015110][ T31] ? __pfx_vkms_crtc_atomic_disable+0x10/0x10 [ 423.074716][ T31] drm_atomic_helper_commit_modeset_disables+0xc99/0x1950 [ 423.098737][ T31] vkms_atomic_commit_tail+0x51/0x210 [ 423.104181][ T31] ? read_tsc+0x9/0x20 [ 423.108272][ T31] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 423.138890][ T31] commit_tail+0x281/0x3a0 [ 423.143383][ T31] drm_atomic_helper_commit+0xa6b/0xb10 [ 423.170336][ T31] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 423.176645][ T31] drm_atomic_commit+0x25f/0x2c0 [ 423.200213][ T31] ? __pfx_drm_atomic_commit+0x10/0x10 [ 423.205736][ T31] ? __pfx___drm_printfn_info+0x10/0x10 [ 423.228795][ T31] ? drm_atomic_state_init+0x231/0x310 [ 423.234329][ T31] drm_atomic_helper_set_config+0xe2/0x160 [ 423.261188][ T31] drm_mode_setcrtc+0x9a4/0x1c50 [ 423.266211][ T31] ? kfree+0x18e/0x440 [ 423.279219][ T31] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 423.284937][ T31] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 423.313682][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 423.328866][ T31] ? _raw_spin_unlock+0x28/0x50 [ 423.333786][ T31] ? drm_is_current_master+0x19f/0x200 [ 423.347668][ T31] drm_ioctl_kernel+0x2cc/0x390 [ 423.370645][ T31] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 423.376090][ T31] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 423.388937][ T31] drm_ioctl+0x67f/0xb10 [ 423.393247][ T31] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 423.420419][ T31] ? __pfx_drm_ioctl+0x10/0x10 [ 423.425270][ T31] ? __fget_files+0x2a/0x420 [ 423.439047][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 423.459525][ T31] ? __pfx_drm_ioctl+0x10/0x10 [ 423.464367][ T31] __se_sys_ioctl+0xfc/0x170 [ 423.482559][ T31] do_syscall_64+0xfa/0x3b0 [ 423.487120][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.513419][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.530135][ T31] ? clear_bhb_loop+0x60/0xb0 [ 423.534881][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.548696][ T31] RIP: 0033:0x7f183258e929 [ 423.553166][ T31] RSP: 002b:00007f183348a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.591372][ T31] RAX: ffffffffffffffda RBX: 00007f18327b5fa0 RCX: 00007f183258e929 [ 423.609174][ T31] RDX: 00002000000002c0 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 423.617201][ T31] RBP: 00007f1832610b39 R08: 0000000000000000 R09: 0000000000000000 [ 423.659068][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.678884][ T31] R13: 0000000000000000 R14: 00007f18327b5fa0 R15: 00007f18328dfa28 [ 423.686936][ T31] [ 423.719569][ T31] INFO: task syz.9.1822:10056 blocked for more than 144 seconds. [ 423.727350][ T31] Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 [ 423.751317][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.779079][ T31] task:syz.9.1822 state:D stack:28456 pid:10056 tgid:10052 ppid:9987 task_flags:0x400040 flags:0x00004004 [ 423.802203][ T31] Call Trace: [ 423.805533][ T31] [ 423.818641][ T31] __schedule+0x16f5/0x4d00 [ 423.823213][ T31] ? __lock_acquire+0xab9/0xd20 [ 423.828092][ T31] ? schedule+0x165/0x360 [ 423.860859][ T31] ? __pfx___schedule+0x10/0x10 [ 423.865800][ T31] ? schedule+0x91/0x360 [ 423.888956][ T31] schedule+0x165/0x360 [ 423.893179][ T31] ? __ww_mutex_lock+0xa43/0x2760 [ 423.898225][ T31] schedule_preempt_disabled+0x13/0x30 [ 423.929057][ T31] __ww_mutex_lock+0x101e/0x2760 [ 423.934199][ T31] ? __lock_acquire+0xab9/0xd20 [ 423.950872][ T31] ? __ww_mutex_lock+0xa43/0x2760 [ 423.955964][ T31] ? modeset_lock+0x2be/0x650 [ 423.979183][ T31] ? __pfx___ww_mutex_lock+0x10/0x10 [ 423.984542][ T31] ? __pfx___might_resched+0x10/0x10 [ 424.008786][ T31] ? drm_helper_probe_single_connector_modes+0x100/0x17d0 [ 424.015960][ T31] ? __pfx___drm_dev_dbg+0x10/0x10 [ 424.038750][ T31] ww_mutex_lock+0x3f/0x1c0 [ 424.043304][ T31] modeset_lock+0x2be/0x650 [ 424.047832][ T31] drm_helper_probe_single_connector_modes+0x30a/0x17d0 [ 424.084672][ T31] ? __pfx_drm_helper_probe_single_connector_modes+0x10/0x10 [ 424.109090][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 424.114356][ T31] ? _raw_spin_unlock+0x28/0x50 [ 424.134694][ T31] ? drm_is_current_master+0x19f/0x200 [ 424.143219][ T31] drm_mode_getconnector+0x659/0x1370 [ 424.158925][ T31] ? __lock_acquire+0xab9/0xd20 [ 424.171656][ T31] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 424.199226][ T31] ? drm_dev_enter+0x49/0x150 [ 424.203990][ T31] drm_ioctl_kernel+0x2cc/0x390 [ 424.218625][ T31] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 424.224492][ T31] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 424.241335][ T31] drm_ioctl+0x67f/0xb10 [ 424.251205][ T31] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 424.257061][ T31] ? __pfx_drm_ioctl+0x10/0x10 [ 424.286669][ T31] ? __fget_files+0x2a/0x420 [ 424.298639][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 424.303631][ T31] ? __pfx_drm_ioctl+0x10/0x10 [ 424.308416][ T31] __se_sys_ioctl+0xfc/0x170 [ 424.328778][ T31] do_syscall_64+0xfa/0x3b0 [ 424.333335][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.351275][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.370080][ T31] ? clear_bhb_loop+0x60/0xb0 [ 424.374813][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.399640][ T31] RIP: 0033:0x7f183258e929 [ 424.404110][ T31] RSP: 002b:00007f1833469038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.439100][ T31] RAX: ffffffffffffffda RBX: 00007f18327b6080 RCX: 00007f183258e929 [ 424.447137][ T31] RDX: 0000200000000240 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 424.478815][ T31] RBP: 00007f1832610b39 R08: 0000000000000000 R09: 0000000000000000 [ 424.501378][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.518676][ T31] R13: 0000000000000001 R14: 00007f18327b6080 R15: 00007f18328dfa28 [ 424.526724][ T31] [ 424.549316][ T31] INFO: task syz-executor:10088 blocked for more than 145 seconds. [ 424.557304][ T31] Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 [ 424.638557][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.647288][ T31] task:syz-executor state:D stack:22344 pid:10088 tgid:10088 ppid:1 task_flags:0x400140 flags:0x00004004 [ 424.682795][ T31] Call Trace: [ 424.686182][ T31] [ 424.709471][ T31] __schedule+0x16f5/0x4d00 [ 424.714043][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 424.739778][ T31] ? __lock_acquire+0xab9/0xd20 [ 424.744704][ T31] ? schedule+0x165/0x360 [ 424.760050][ T31] ? __pfx___schedule+0x10/0x10 [ 424.764981][ T31] ? schedule+0x91/0x360 [ 424.778946][ T31] schedule+0x165/0x360 [ 424.783173][ T31] schedule_preempt_disabled+0x13/0x30 [ 424.809014][ T31] __mutex_lock+0x724/0xe80 [ 424.813581][ T31] ? __mutex_lock+0x51b/0xe80 [ 424.818278][ T31] ? del_device_store+0xd1/0x360 [ 424.849607][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 424.854696][ T31] ? __lock_acquire+0xab9/0xd20 [ 424.870353][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 424.875268][ T31] del_device_store+0xd1/0x360 [ 424.908606][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 424.913521][ T31] ? __pfx_del_device_store+0x10/0x10 [ 424.928879][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 424.933874][ T31] ? sysfs_kf_write+0x166/0x260 [ 424.959896][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 424.965182][ T31] kernfs_fop_write_iter+0x375/0x4f0 [ 424.978678][ T31] vfs_write+0x548/0xa90 [ 424.982986][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 425.008607][ T31] ? __pfx_vfs_write+0x10/0x10 [ 425.013443][ T31] ? do_sys_openat2+0x154/0x1c0 [ 425.018315][ T31] ? kmem_cache_free+0x18f/0x400 [ 425.038827][ T31] ksys_write+0x145/0x250 [ 425.043222][ T31] ? __pfx_ksys_write+0x10/0x10 [ 425.048098][ T31] ? do_syscall_64+0xbe/0x3b0 [ 425.080252][ T31] do_syscall_64+0xfa/0x3b0 [ 425.086052][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.104194][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.118840][ T31] ? clear_bhb_loop+0x60/0xb0 [ 425.129162][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.135094][ T31] RIP: 0033:0x7fe719d8d3df [ 425.163753][ T31] RSP: 002b:00007fe71a0df220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 425.179893][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fe719d8d3df [ 425.187924][ T31] RDX: 0000000000000001 RSI: 00007fe71a0df270 RDI: 0000000000000005 [ 425.229353][ T31] RBP: 00007fe719e11d8d R08: 0000000000000000 R09: 00007fe71a0df077 [ 425.237392][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 425.259077][ T31] R13: 00007fe71a0df270 R14: 00007fe71aae4620 R15: 0000000000000003 [ 425.267140][ T31] [ 425.290156][ T31] [ 425.290156][ T31] Showing all locks held in the system: [ 425.297923][ T31] 3 locks held by kworker/0:0/9: [ 425.329058][ T31] 3 locks held by kworker/0:1/10: [ 425.334139][ T31] 3 locks held by kworker/u8:0/12: [ 425.371252][ T31] 1 lock held by kworker/R-mm_pe/14: [ 425.376580][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 425.414916][ T31] 4 locks held by kworker/1:0/24: [ 425.430957][ T31] #0: ffff88805794e548 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 425.458731][ T31] #1: ffffc900001e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 425.559183][ T31] #2: ffff888053dd9308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 425.589156][ T31] #3: ffff888058c8d278 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 425.616490][ T31] 1 lock held by khungtaskd/31: [ 425.629641][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 425.659296][ T31] 4 locks held by kworker/1:1/43: [ 425.664376][ T31] #0: ffff888030e3f548 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 425.697531][ T31] #1: ffffc90000b37bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 425.799611][ T31] #2: ffff88802739d308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 425.834278][ T31] #3: ffff88807c3e5c60 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 425.866368][ T31] 4 locks held by kworker/u8:3/49: [ 425.889123][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 425.910491][ T31] #1: ffffc90000ba7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 425.949174][ T31] #2: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 425.971821][ T31] #3: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 425.995907][ T31] 4 locks held by kworker/u8:4/59: [ 426.008965][ T31] #0: ffff8880567e1148 ((wq_completion)wg-kex-wg1#13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 426.048801][ T31] #1: ffffc9000210fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 426.081878][ T31] #2: ffff88804d0bd308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 426.112617][ T31] #3: ffff888058c78d20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 426.159249][ T31] 4 locks held by kworker/u8:8/1165: [ 426.168858][ T31] 4 locks held by kworker/1:2/2156: [ 426.174956][ T31] #0: ffff8880510f5948 ((wq_completion)wg-kex-wg2#16){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 426.238599][ T31] #1: ffffc9000569fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 426.348876][ T31] #2: ffff888029f71308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 426.368927][ T31] #3: ffff888058c7d278 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 426.399141][ T31] 2 locks held by getty/5599: [ 426.403869][ T31] #0: ffff88803054e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 426.448519][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 426.469248][ T31] 2 locks held by kworker/0:3/5833: [ 426.474493][ T31] 1 lock held by kworker/R-wg-cr/5870: [ 426.488897][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 426.517307][ T31] 1 lock held by kworker/R-wg-cr/5872: [ 426.542535][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 426.570119][ T31] 1 lock held by kworker/R-wg-cr/5873: [ 426.575635][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 426.609018][ T31] 1 lock held by kworker/R-wg-cr/5874: [ 426.614524][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 426.669086][ T31] 1 lock held by kworker/R-wg-cr/5875: [ 426.674591][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 426.702041][ T31] 1 lock held by kworker/R-wg-cr/5876: [ 426.707632][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 426.740866][ T31] 1 lock held by kworker/R-wg-cr/5877: [ 426.746380][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 426.790484][ T31] 1 lock held by kworker/R-wg-cr/5878: [ 426.795992][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 426.821816][ T31] 2 locks held by kworker/R-wg-cr/5879: [ 426.827407][ T31] 1 lock held by kworker/R-wg-cr/5881: [ 426.859817][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 426.888802][ T31] 1 lock held by kworker/R-wg-cr/5882: [ 426.894395][ T31] 1 lock held by kworker/R-wg-cr/5883: [ 426.908853][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 426.939160][ T31] 1 lock held by kworker/R-wg-cr/5884: [ 426.952899][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 426.984944][ T31] 4 locks held by kworker/0:4/5906: [ 426.998861][ T31] 2 locks held by kworker/0:5/5907: [ 427.004106][ T31] 2 locks held by kworker/0:6/5914: [ 427.020878][ T31] 4 locks held by kworker/0:7/5921: [ 427.026122][ T31] 3 locks held by kworker/0:8/5972: [ 427.048371][ T31] 2 locks held by kworker/0:9/9490: [ 427.068705][ T31] 1 lock held by syz.4.1752/9809: [ 427.073775][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 427.109529][ T31] 2 locks held by kworker/0:10/9844: [ 427.115897][ T31] 1 lock held by kworker/R-wg-cr/9853: [ 427.128949][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 427.158689][ T31] 1 lock held by kworker/R-wg-cr/9854: [ 427.164193][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 427.205059][ T31] 1 lock held by kworker/R-wg-cr/9855: [ 427.229774][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 427.252569][ T31] 2 locks held by kworker/0:11/9866: [ 427.257906][ T31] 1 lock held by kworker/R-wg-cr/9904: [ 427.269422][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 427.301633][ T31] 1 lock held by kworker/R-wg-cr/9905: [ 427.307135][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 427.348518][ T31] 1 lock held by kworker/R-wg-cr/9939: [ 427.368778][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 427.388898][ T31] 1 lock held by kworker/R-wg-cr/9940: [ 427.394405][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 427.435442][ T31] 1 lock held by kworker/R-wg-cr/9941: [ 427.444958][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 427.479053][ T31] 1 lock held by kworker/R-wg-cr/9942: [ 427.484566][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 427.509422][ T31] 1 lock held by kworker/R-wg-cr/9943: [ 427.515030][ T31] 1 lock held by kworker/R-wg-cr/9945: [ 427.546155][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 427.578752][ T31] 1 lock held by syz.3.1807/9980: [ 427.583840][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 427.608768][ T31] 1 lock held by kworker/R-wg-cr/9999: [ 427.614279][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 427.654749][ T31] 1 lock held by kworker/R-wg-cr/10000: [ 427.679749][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 427.708924][ T31] 1 lock held by kworker/R-wg-cr/10001: [ 427.714520][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 427.739643][ T31] 1 lock held by syz.6.1809/10008: [ 427.744822][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 427.789837][ T31] 1 lock held by syz.7.1811/10021: [ 427.795005][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 427.819175][ T31] 2 locks held by kworker/u8:10/10027: [ 427.824680][ T31] 2 locks held by syz.9.1822/10053: [ 427.850160][ T31] #0: ffffc9000bf07b20 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_setcrtc+0x552/0x1c50 [ 427.877082][ T31] #1: ffffc9000bf07b48 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_mode_setcrtc+0x552/0x1c50 [ 427.910458][ T31] 3 locks held by syz.9.1822/10056: [ 427.915702][ T31] #0: ffff888024dd4490 (&dev->mode_config.mutex){+.+.}-{4:4}, at: drm_mode_getconnector+0x57b/0x1370 [ 427.939002][ T31] #1: ffffc9000c32f990 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_helper_probe_single_connector_modes+0x100/0x17d0 [ 427.983760][ T31] #2: ffffc9000c32f9b8 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_helper_probe_single_connector_modes+0x100/0x17d0 [ 428.012718][ T31] 7 locks held by syz-executor/10072: [ 428.018138][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 428.048831][ T31] #1: ffff888045817c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 428.073468][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 428.108666][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 428.129266][ T31] #4: ffff88806e5500e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 428.159222][ T31] #5: ffff88806e551250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 428.189191][ T31] #6: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 428.219010][ T31] 1 lock held by syz.8.1830/10077: [ 428.224178][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 428.249118][ T31] 2 locks held by kworker/0:12/10083: [ 428.254551][ T31] 4 locks held by syz-executor/10088: [ 428.276164][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 428.299782][ T31] #1: ffff88805557fc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 428.328723][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 428.358835][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 428.378603][ T31] 4 locks held by syz-executor/10097: [ 428.384027][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 428.423876][ T31] #1: ffff888080cee488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 428.451796][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 428.466591][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 428.498839][ T31] 4 locks held by syz-executor/10109: [ 428.504259][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 428.533937][ T31] #1: ffff888084774c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 428.563427][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 428.588555][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 428.618717][ T31] 4 locks held by syz-executor/10118: [ 428.624151][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 428.649772][ T31] #1: ffff888032502088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 428.673924][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 428.709034][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 428.728283][ T31] 4 locks held by syz-executor/10137: [ 428.739773][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 428.768704][ T31] #1: ffff88808057b088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 428.796024][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 428.822902][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 428.849981][ T31] 4 locks held by syz-executor/10150: [ 428.855401][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 428.894534][ T31] #1: ffff888034ea2488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 428.918745][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 428.938936][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 428.961555][ T31] 4 locks held by syz-executor/10159: [ 428.966971][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 429.008716][ T31] #1: ffff88807a78b088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 429.029425][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 429.054515][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 429.079564][ T31] 4 locks held by syz-executor/10170: [ 429.084993][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 429.129216][ T31] #1: ffff88807a497088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 429.154143][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 429.180172][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 429.212791][ T31] 4 locks held by kworker/0:13/10177: [ 429.218211][ T31] 4 locks held by syz-executor/10182: [ 429.248856][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 429.257841][ T31] #1: ffff888022b64488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 429.281819][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 429.308892][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 429.349444][ T31] 2 locks held by kworker/0:14/10186: [ 429.354869][ T31] 3 locks held by kworker/0:15/10193: [ 429.368891][ T31] 4 locks held by syz-executor/10202: [ 429.374309][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 429.409877][ T31] #1: ffff88808c8b7c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 429.432939][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 429.459022][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 429.488991][ T31] 4 locks held by syz-executor/10213: [ 429.494415][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 429.529008][ T31] #1: ffff88804c690888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 429.559077][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 429.581012][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 429.607803][ T31] 4 locks held by syz-executor/10222: [ 429.620065][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 429.640662][ T31] #1: ffff888077280088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 429.678837][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 429.698892][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 429.730046][ T31] 4 locks held by syz-executor/10233: [ 429.735476][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 429.762966][ T31] #1: ffff888058e71c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 429.789063][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 429.819046][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 429.839910][ T31] 4 locks held by syz-executor/10245: [ 429.845425][ T31] #0: ffff888034b88428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 429.876054][ T31] #1: ffff8880977aec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 429.900132][ T31] #2: ffff888143b08f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 429.939137][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 429.959586][ T31] [ 429.961966][ T31] ============================================= [ 429.961966][ T31] [ 429.982691][ T31] NMI backtrace for cpu 1 [ 429.982716][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 429.982739][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.982752][ T31] Call Trace: [ 429.982759][ T31] [ 429.982768][ T31] dump_stack_lvl+0x189/0x250 [ 429.982800][ T31] ? __wake_up_klogd+0xd9/0x110 [ 429.982872][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.982901][ T31] ? __pfx__printk+0x10/0x10 [ 429.982933][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 429.982996][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 429.983018][ T31] ? _printk+0xcf/0x120 [ 429.983042][ T31] ? __pfx__printk+0x10/0x10 [ 429.983064][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 429.983091][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 429.983118][ T31] watchdog+0xfee/0x1030 [ 429.983145][ T31] ? watchdog+0x1de/0x1030 [ 429.983177][ T31] kthread+0x70e/0x8a0 [ 429.983202][ T31] ? __pfx_watchdog+0x10/0x10 [ 429.983225][ T31] ? __pfx_kthread+0x10/0x10 [ 429.983247][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.983272][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.983296][ T31] ? __pfx_kthread+0x10/0x10 [ 429.983318][ T31] ret_from_fork+0x3f9/0x770 [ 429.983347][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 429.983377][ T31] ? __switch_to_asm+0x39/0x70 [ 429.983396][ T31] ? __switch_to_asm+0x33/0x70 [ 429.983413][ T31] ? __pfx_kthread+0x10/0x10 [ 429.983435][ T31] ret_from_fork_asm+0x1a/0x30 [ 429.983469][ T31] [ 429.983475][ T31] Sending NMI from CPU 1 to CPUs 0: [ 430.152835][ C0] NMI backtrace for cpu 0 [ 430.152852][ C0] CPU: 0 UID: 0 PID: 9905 Comm: kworker/R-wg-cr Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 430.152873][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.152886][ C0] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 430.152915][ C0] RIP: 0010:__lock_acquire+0x467/0xd20 [ 430.152940][ C0] Code: c5 45 8d 7c 24 01 49 ff cc 44 89 f9 83 c1 fe 78 44 44 89 e3 81 e3 ff ff ff 7f 83 f9 31 73 1d 48 8d 0c 9b 8b 8c cf 10 0b 00 00 <31> c1 41 ff cf 49 ff cc f7 c1 00 60 00 00 74 cf eb 1c 48 c7 c7 90 [ 430.152955][ C0] RSP: 0018:ffffc90000006728 EFLAGS: 00000087 [ 430.152969][ C0] RAX: 0000000000022007 RBX: 0000000000000003 RCX: 0000000000022007 [ 430.152980][ C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: ffff888028f80000 [ 430.152991][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81729af5 [ 430.153002][ C0] R10: ffffc90000006978 R11: ffffffff81acf690 R12: 0000000000000003 [ 430.153014][ C0] R13: 0000000000000001 R14: ffff888028f80bb8 R15: 0000000000000005 [ 430.153026][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 430.153039][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.153051][ C0] CR2: 00007f9410cdeccc CR3: 000000000df38000 CR4: 00000000003526f0 [ 430.153066][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.153076][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.153087][ C0] Call Trace: [ 430.153093][ C0] [ 430.153104][ C0] ? unwind_next_frame+0xa5/0x2390 [ 430.153127][ C0] lock_acquire+0x120/0x360 [ 430.153148][ C0] ? unwind_next_frame+0xa5/0x2390 [ 430.153173][ C0] ? unwind_next_frame+0xa5/0x2390 [ 430.153196][ C0] ? __netif_receive_skb+0x143/0x380 [ 430.153213][ C0] ? unwind_next_frame+0xa5/0x2390 [ 430.153237][ C0] unwind_next_frame+0xc2/0x2390 [ 430.153260][ C0] ? unwind_next_frame+0xa5/0x2390 [ 430.153285][ C0] ? unwind_next_frame+0xa5/0x2390 [ 430.153308][ C0] ? NF_HOOK+0x309/0x3a0 [ 430.153327][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 430.153346][ C0] arch_stack_walk+0x11c/0x150 [ 430.153364][ C0] ? __netif_receive_skb+0x143/0x380 [ 430.153381][ C0] stack_trace_save+0x9c/0xe0 [ 430.153397][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 430.153414][ C0] ? NF_HOOK+0x309/0x3a0 [ 430.153433][ C0] ? __lock_acquire+0xab9/0xd20 [ 430.153455][ C0] kasan_save_track+0x3e/0x80 [ 430.153479][ C0] ? kasan_save_track+0x3e/0x80 [ 430.153501][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 430.153515][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 430.153540][ C0] ? dst_alloc+0x105/0x170 [ 430.153560][ C0] ? ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 430.153584][ C0] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 430.153612][ C0] ? ip_route_output_flow+0x2a/0x150 [ 430.153632][ C0] ? ip_route_me_harder+0x6b9/0xfe0 [ 430.153655][ C0] ? synproxy_send_tcp+0x359/0x6c0 [ 430.153674][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 430.153692][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 430.153713][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 430.153735][ C0] ? nft_do_chain+0x409/0x1920 [ 430.153754][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 430.153775][ C0] ? nf_hook_slow+0xc5/0x220 [ 430.153792][ C0] ? NF_HOOK+0x206/0x3a0 [ 430.153808][ C0] ? NF_HOOK+0x309/0x3a0 [ 430.153824][ C0] ? __netif_receive_skb+0x143/0x380 [ 430.153852][ C0] __kasan_slab_alloc+0x6c/0x80 [ 430.153869][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 430.153893][ C0] ? dst_alloc+0x105/0x170 [ 430.153915][ C0] dst_alloc+0x105/0x170 [ 430.153937][ C0] ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 430.153965][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 430.153988][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 430.154011][ C0] ? __lock_acquire+0xab9/0xd20 [ 430.154032][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 430.154058][ C0] ? ip_route_me_harder+0x494/0xfe0 [ 430.154084][ C0] ip_route_output_flow+0x2a/0x150 [ 430.154105][ C0] ? ip_route_me_harder+0x6a7/0xfe0 [ 430.154129][ C0] ip_route_me_harder+0x6b9/0xfe0 [ 430.154156][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 430.154190][ C0] synproxy_send_tcp+0x359/0x6c0 [ 430.154212][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 430.154236][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 430.154255][ C0] ? nft_masq_init+0x128/0x270 [ 430.154272][ C0] ? synproxy_pernet+0x45/0x270 [ 430.154296][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 430.154321][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 430.154342][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 430.154363][ C0] ? nf_ip_checksum+0x13c/0x510 [ 430.154386][ C0] nft_synproxy_do_eval+0x345/0x570 [ 430.154407][ C0] ? kthread+0x70e/0x8a0 [ 430.154423][ C0] ? ret_from_fork+0x3f9/0x770 [ 430.154444][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 430.154463][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 430.154492][ C0] nft_do_chain+0x409/0x1920 [ 430.154517][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 430.154552][ C0] nft_do_chain_inet+0x25d/0x340 [ 430.154573][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 430.154599][ C0] ? ipt_do_table+0x2a3/0x1640 [ 430.154618][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 430.154636][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 430.154658][ C0] nf_hook_slow+0xc5/0x220 [ 430.154677][ C0] NF_HOOK+0x206/0x3a0 [ 430.154695][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 430.154713][ C0] ? NF_HOOK+0x9a/0x3a0 [ 430.154730][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 430.154746][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 430.154766][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 430.154785][ C0] ? skb_dst+0x4f/0xd0 [ 430.154802][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 430.154821][ C0] NF_HOOK+0x309/0x3a0 [ 430.154839][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 430.154856][ C0] ? NF_HOOK+0x9a/0x3a0 [ 430.154873][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 430.154889][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 430.154907][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 430.154928][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 430.154945][ C0] __netif_receive_skb+0x143/0x380 [ 430.154961][ C0] ? process_backlog+0x2d5/0x14f0 [ 430.154979][ C0] process_backlog+0x60e/0x14f0 [ 430.154995][ C0] ? __lock_acquire+0xab9/0xd20 [ 430.155021][ C0] ? __pfx_process_backlog+0x10/0x10 [ 430.155041][ C0] __napi_poll+0xc7/0x480 [ 430.155055][ C0] ? net_rx_action+0x46d/0xe30 [ 430.155072][ C0] net_rx_action+0x707/0xe30 [ 430.155088][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.155116][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 430.155145][ C0] handle_softirqs+0x286/0x870 [ 430.155170][ C0] ? do_softirq+0xec/0x180 [ 430.155194][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 430.155224][ C0] ? wg_packet_decrypt_worker+0xc6f/0xd10 [ 430.155248][ C0] do_softirq+0xec/0x180 [ 430.155270][ C0] [ 430.155276][ C0] [ 430.155282][ C0] ? __pfx_do_softirq+0x10/0x10 [ 430.155307][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 430.155330][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 430.155353][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 430.155379][ C0] ? wg_packet_decrypt_worker+0xc6f/0xd10 [ 430.155403][ C0] wg_packet_decrypt_worker+0xc6f/0xd10 [ 430.155433][ C0] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 430.155489][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 430.155514][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.155535][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 430.155558][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 430.155582][ C0] process_scheduled_works+0xae1/0x17b0 [ 430.155620][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.155647][ C0] ? assign_work+0x381/0x410 [ 430.155671][ C0] rescuer_thread+0x53c/0xdd0 [ 430.155689][ C0] ? rescuer_thread+0xbb/0xdd0 [ 430.155712][ C0] kthread+0x70e/0x8a0 [ 430.155730][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 430.155746][ C0] ? __pfx_kthread+0x10/0x10 [ 430.155763][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.155784][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.155807][ C0] ? __pfx_kthread+0x10/0x10 [ 430.155824][ C0] ret_from_fork+0x3f9/0x770 [ 430.155846][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 430.155871][ C0] ? __switch_to_asm+0x39/0x70 [ 430.155886][ C0] ? __switch_to_asm+0x33/0x70 [ 430.155902][ C0] ? __pfx_kthread+0x10/0x10 [ 430.155919][ C0] ret_from_fork_asm+0x1a/0x30 [ 430.155941][ C0] [ 431.614215][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 431.621118][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 431.632939][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 431.643012][ T31] Call Trace: [ 431.646305][ T31] [ 431.649246][ T31] dump_stack_lvl+0x99/0x250 [ 431.653857][ T31] ? __asan_memcpy+0x40/0x70 [ 431.658465][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.663690][ T31] ? __pfx__printk+0x10/0x10 [ 431.668313][ T31] panic+0x2db/0x790 [ 431.672234][ T31] ? __pfx_panic+0x10/0x10 [ 431.676669][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 431.682508][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 431.687897][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 431.694086][ T31] watchdog+0x102d/0x1030 [ 431.698446][ T31] ? watchdog+0x1de/0x1030 [ 431.702896][ T31] kthread+0x70e/0x8a0 [ 431.706992][ T31] ? __pfx_watchdog+0x10/0x10 [ 431.711699][ T31] ? __pfx_kthread+0x10/0x10 [ 431.716307][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.721529][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.726750][ T31] ? __pfx_kthread+0x10/0x10 [ 431.731359][ T31] ret_from_fork+0x3f9/0x770 [ 431.735974][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 431.741109][ T31] ? __switch_to_asm+0x39/0x70 [ 431.745892][ T31] ? __switch_to_asm+0x33/0x70 [ 431.750673][ T31] ? __pfx_kthread+0x10/0x10 [ 431.755280][ T31] ret_from_fork_asm+0x1a/0x30 [ 431.760080][ T31] [ 431.763400][ T31] Kernel Offset: disabled [ 431.767723][ T31] Rebooting in 86400 seconds..