last executing test programs: 11m4.443457042s ago: executing program 0 (id=2424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}}], {0x14}}, 0xa8}}, 0x0) 11m3.150329243s ago: executing program 0 (id=2433): unshare(0x2c020400) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11m1.927666312s ago: executing program 0 (id=2440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 10m59.595217487s ago: executing program 0 (id=2447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 10m58.395221134s ago: executing program 0 (id=2450): unshare(0x2c020400) r0 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 10m57.955917364s ago: executing program 0 (id=2455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000d80)={0x0, [{0x0, 0x0, 0xffffffff, 0x0}, {0x3, 0x20, 0x10001, &(0x7f0000000440)="1caeebc5"}, {0x1, 0x40, 0x4, &(0x7f0000000540)="9aa9b3b0c48242d8"}, {0x1, 0x0, 0xacd6, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xa0000, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x0, 0x90, 0x7fff, &(0x7f0000000800)="42f05450751271415708c5351c77038a3ff2"}, {0x1, 0x0, 0xd2bc, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x2, 0x0, 0xffffff81, &(0x7f0000000ac0)}, {0x3, 0x0, 0x78c, 0x0}, {0x3, 0x0, 0xcbe6, 0x0}, {0x1, 0x0, 0x91, 0xfffffffffffffffc}, {0x1, 0x0, 0x5c, 0x0}]}) 10m50.346951778s ago: executing program 4 (id=2479): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x100, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000001401000f8e010080"}}}]}, 0x48}}, 0x0) 10m48.939223781s ago: executing program 4 (id=2484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000851}, 0x24000840) 10m46.91007031s ago: executing program 4 (id=2492): r0 = memfd_secret(0x80000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap$IORING_OFF_SQ_RING(&(0x7f0000c4d000/0x3000)=nil, 0x3000, 0x4000002, 0x12, r0, 0x0) 10m45.557738855s ago: executing program 4 (id=2496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x400c081) sync_file_range(r0, 0x100, 0x80, 0x2) 10m44.636125344s ago: executing program 4 (id=2499): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa7\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\xa5'}]}, 0xd) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10m43.874634087s ago: executing program 4 (id=2505): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 10m42.611350332s ago: executing program 32 (id=2455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000d80)={0x0, [{0x0, 0x0, 0xffffffff, 0x0}, {0x3, 0x20, 0x10001, &(0x7f0000000440)="1caeebc5"}, {0x1, 0x40, 0x4, &(0x7f0000000540)="9aa9b3b0c48242d8"}, {0x1, 0x0, 0xacd6, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xa0000, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x0, 0x90, 0x7fff, &(0x7f0000000800)="42f05450751271415708c5351c77038a3ff2"}, {0x1, 0x0, 0xd2bc, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x2, 0x0, 0xffffff81, &(0x7f0000000ac0)}, {0x3, 0x0, 0x78c, 0x0}, {0x3, 0x0, 0xcbe6, 0x0}, {0x1, 0x0, 0x91, 0xfffffffffffffffc}, {0x1, 0x0, 0x5c, 0x0}]}) 10m36.475043358s ago: executing program 2 (id=2529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb3280df659b977f16d875fcc707b3cbb7b7a9c1d65d36636748dffc9414d25c561e46fe57c40e41404929394b03cdee6a1b0981334afa94d03d91841c75a6", 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x4006c, r0}, 0x38) 10m35.669056812s ago: executing program 2 (id=2533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340fffffffe080001400000000f05000200070000000800066000000002080004400000003d0900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 10m34.92469201s ago: executing program 2 (id=2537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000000001010200000000000000000200000004001880240001801400018008000100e000000108000200e00000010c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10m33.8101512s ago: executing program 2 (id=2541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a600000001d0a090400000000000000000200fffe0900020073797a32000000000900010073797a3000"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 10m32.277619045s ago: executing program 2 (id=2546): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0x1, &(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000900000092000000000305000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) 10m30.721072373s ago: executing program 2 (id=2549): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x1, 0x0, 0x1, 0xffffffffffffffff, 0x1}) 10m28.248838923s ago: executing program 33 (id=2505): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 10m15.460493884s ago: executing program 34 (id=2549): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x1, 0x0, 0x1, 0xffffffffffffffff, 0x1}) 6.466070057s ago: executing program 1 (id=4141): r0 = socket$inet6(0xa, 0x3, 0x89) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0xffffffffffffffc0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8094) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c) 5.251958262s ago: executing program 1 (id=4144): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) 4.123548056s ago: executing program 1 (id=4145): r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 4.123316174s ago: executing program 3 (id=4146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000280)="66b9800000c00f326635002000000f30baf80c66b89002c88166efbafc0c66b80000000066ef66b9180a000066b80040000066ba000000000f300f01c8640f0050a6ba4300ed0f01c20f01cbba610066b80300000066ef67260f01df", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.000218622s ago: executing program 3 (id=4147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/sync_on_suspend', 0x200a00, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080)="fbb74fa651eb", &(0x7f0000000000)=""/6, 0x2}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) 3.865991856s ago: executing program 1 (id=4148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 2.784200619s ago: executing program 3 (id=4149): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001400030532bd7000fddbdf25021f00ff", @ANYRES32=r3, @ANYBLOB="080002007f000001140300"], 0x34}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.935163677s ago: executing program 3 (id=4150): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@delchain={0x24, 0x2e, 0x50b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = syz_io_uring_setup(0x77cc, &(0x7f00000008c0)={0x0, 0x6429, 0x10000, 0x1, 0x196}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)) r2 = eventfd2(0xbfb, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000240)=r2, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3, 0x10a9, 0x3, 0x0, 0x0) 1.925027564s ago: executing program 1 (id=4151): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1104"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 1.199287657s ago: executing program 3 (id=4152): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3fd}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000c40)=""/4081, 0xff1}], 0x1) 443.019965ms ago: executing program 3 (id=4153): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 0s ago: executing program 1 (id=4154): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000000}) kernel console output (not intermixed with test programs): d=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e071c629 code=0x7ffc0000 [ 201.893543][ T36] audit: type=1326 audit(1771699573.986:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa8e071c629 code=0x7ffc0000 [ 201.893603][ T36] audit: type=1326 audit(1771699573.986:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e071c629 code=0x7ffc0000 [ 201.893641][ T36] audit: type=1326 audit(1771699573.986:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e071c629 code=0x7ffc0000 [ 201.893679][ T36] audit: type=1326 audit(1771699573.986:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fa8e071c629 code=0x7ffc0000 [ 201.893716][ T36] audit: type=1326 audit(1771699573.986:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e071c629 code=0x7ffc0000 [ 202.577745][ T5956] hid-generic FFFF:0008:0003.0013: item fetching failed at offset 0/1 [ 202.578412][ T5956] hid-generic FFFF:0008:0003.0013: probe with driver hid-generic failed with error -22 [ 202.607236][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 203.500252][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1587'. [ 204.159000][ T5956] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 204.177350][ T9298] ptrace attach of "./syz-executor exec"[5805] was attempted by " "[9298] [ 204.354601][ T5956] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 204.354629][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.354647][ T5956] usb 4-1: Product: syz [ 204.354659][ T5956] usb 4-1: Manufacturer: syz [ 204.354672][ T5956] usb 4-1: SerialNumber: syz [ 204.411097][ T5956] usb 4-1: config 0 descriptor?? [ 204.455409][ T5956] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 204.476751][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.491891][ T5956] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 204.491969][ T5956] usb 4-1: media controller created [ 204.537678][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.995099][ T5956] DVB: Unable to find symbol mt352_attach() [ 205.228204][ T5956] DVB: Unable to find symbol nxt6000_attach() [ 205.228295][ T5956] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 205.276487][ T5956] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 205.387980][ T1238] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 205.429009][ T5956] dvb-usb: schedule remote query interval to 1000 msecs. [ 205.429031][ T5956] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 205.429045][ T5956] dvb-usb: bulk message failed: -22 (7/0) [ 205.429059][ T5956] dvb-usb: bulk message failed: -22 (7/0) [ 205.518297][ T5956] usb 4-1: USB disconnect, device number 13 [ 205.709577][ T1238] usb 1-1: unable to get BOS descriptor or descriptor too short [ 205.711629][ T1238] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 205.711665][ T1238] usb 1-1: can't read configurations, error -71 [ 206.578562][ T5866] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 206.743319][ T9304] Bluetooth: hci1: command 0x0406 tx timeout [ 206.743364][ T9304] Bluetooth: hci0: command 0x0c20 tx timeout [ 206.743387][ T9304] Bluetooth: hci2: command 0x0406 tx timeout [ 206.743408][ T9304] Bluetooth: hci3: command 0x0406 tx timeout [ 206.777508][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.777537][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.777555][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.777591][ T5866] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 206.777609][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.857662][ T5866] usb 2-1: config 0 descriptor?? [ 207.674476][ T5956] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 207.903052][ T5866] hid-multitouch 0003:0EEF:72D0.0014: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.1-1/input0 [ 207.990510][ T5866] usb 2-1: USB disconnect, device number 8 [ 208.552165][ T9354] fido_id[9354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 209.571181][ T9368] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 211.213576][ T5866] IPVS: starting estimator thread 0... [ 211.300829][ T9426] IPVS: using max 8 ests per chain, 19200 per kthread [ 211.447753][ T9429] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 211.458253][ T9429] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 211.458427][ T9429] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 211.459803][ T9429] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 211.459964][ T9429] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 211.460108][ T9429] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 211.460245][ T9429] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 211.460384][ T9429] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 211.460524][ T9429] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 213.476437][ T9468] netlink: 'syz.1.1674': attribute type 2 has an invalid length. [ 213.490930][ T9468] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1674'. [ 214.057045][ T9480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1680'. [ 214.349204][ T9484] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1681'. [ 214.722045][ T9498] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1689'. [ 214.920231][ T5866] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 215.078633][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 215.085034][ T5866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.085059][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.106097][ T5866] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.106126][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.106143][ T5866] usb 3-1: Product: syz [ 215.106155][ T5866] usb 3-1: Manufacturer: syz [ 215.106166][ T5866] usb 3-1: SerialNumber: syz [ 215.208095][ T5956] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 215.358005][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 215.383591][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.384330][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.384372][ T5956] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 215.384392][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.485909][ T5866] usb 3-1: 0:2 : does not exist [ 215.496847][ T5866] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 215.564799][ T5956] usb 2-1: config 0 descriptor?? [ 216.085501][ T5956] prodikeys 0003:041E:2801.0015: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 216.280119][ T810] usb 2-1: USB disconnect, device number 9 [ 216.330721][ T5866] usb 3-1: USB disconnect, device number 12 [ 216.579393][ T9529] tipc: Started in network mode [ 216.579422][ T9529] tipc: Node identity ac14140f, cluster identity 4711 [ 216.621176][ T9529] tipc: Enabled bearer , priority 10 [ 216.985139][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.109685][ T9534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1705'. [ 217.697926][ T5866] tipc: Node number set to 2886997007 [ 218.807104][ T9567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1720'. [ 218.807130][ T9567] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1720'. [ 218.807176][ T9567] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1720'. [ 220.009794][ C1] net_ratelimit: 45 callbacks suppressed [ 220.009815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.929104][ T9596] tipc: Enabling of bearer rejected, failed to enable media [ 222.017654][ T5866] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 222.177654][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 222.213707][ T5866] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 222.213736][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.213753][ T5866] usb 1-1: Product: syz [ 222.213766][ T5866] usb 1-1: Manufacturer: syz [ 222.213779][ T5866] usb 1-1: SerialNumber: syz [ 222.317685][ T5866] usb 1-1: config 0 descriptor?? [ 222.335618][ T5866] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 222.820188][ T9620] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 222.893367][ T5866] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 223.037758][ T5866] usb 1-1: USB disconnect, device number 11 [ 223.101398][ T5866] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 223.113513][ T5866] visor 1-1:0.0: device disconnected [ 223.116122][ T9624] bond1: (slave lo): Device is not bonding slave [ 223.116140][ T9624] bond1: option active_slave: invalid value (lo) [ 223.187802][ T9624] bond1 (unregistering): Released all slaves [ 224.093071][ T9648] binder: 9647:9648 ioctl c00c6211 0 returned -14 [ 224.388153][ T9658] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 224.434127][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'. [ 225.549532][ T9690] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 225.574322][ T9694] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 228.351395][ T5937] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 228.477408][ T5866] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 228.539814][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 228.539847][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 228.539885][ T5937] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 228.539904][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.550910][ T5937] usb 4-1: config 0 descriptor?? [ 228.551914][ T9754] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.627214][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 228.630913][ T5866] usb 2-1: config 0 interface 0 has no altsetting 0 [ 228.631004][ T5866] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 228.631025][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.688784][ T5866] usb 2-1: config 0 descriptor?? [ 230.528885][ T5937] a4tech 0003:09DA:001A.0016: report_id 56362 is invalid [ 230.528909][ T5937] a4tech 0003:09DA:001A.0016: item 0 2 1 8 parsing failed [ 230.532127][ T5866] kye 0003:0458:5019.0017: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 230.533140][ T5866] kye 0003:0458:5019.0017: unknown main item tag 0x0 [ 230.533174][ T5866] kye 0003:0458:5019.0017: unknown main item tag 0x0 [ 230.533199][ T5866] kye 0003:0458:5019.0017: unknown main item tag 0x0 [ 230.533223][ T5866] kye 0003:0458:5019.0017: unknown main item tag 0x0 [ 230.533256][ T5866] kye 0003:0458:5019.0017: unknown main item tag 0x0 [ 230.533281][ T5866] kye 0003:0458:5019.0017: unknown main item tag 0x0 [ 230.533306][ T5866] kye 0003:0458:5019.0017: unknown main item tag 0x0 [ 230.536625][ T5937] a4tech 0003:09DA:001A.0016: parse failed [ 230.536731][ T5937] a4tech 0003:09DA:001A.0016: probe with driver a4tech failed with error -22 [ 230.728441][ T5866] kye 0003:0458:5019.0017: hidraw0: USB HID v76.48 Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 230.728509][ T5866] kye 0003:0458:5019.0017: tablet-enabling feature report not found [ 230.728521][ T5866] kye 0003:0458:5019.0017: tablet enabling failed [ 230.746855][ T5937] usb 4-1: USB disconnect, device number 14 [ 230.875169][ T5866] usb 2-1: USB disconnect, device number 10 [ 232.084015][ T9782] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 232.192653][ T9773] fido_id[9773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 233.896987][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 234.783916][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 234.786639][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 234.786665][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.786684][ T9] usb 5-1: Product: syz [ 234.786696][ T9] usb 5-1: Manufacturer: syz [ 234.786709][ T9] usb 5-1: SerialNumber: syz [ 234.977069][ T9] usb 5-1: config 0 descriptor?? [ 237.296868][ T9] usb 5-1: USB disconnect, device number 9 [ 237.329532][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 237.329557][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 237.329580][ T9827] netlink: 'syz.1.1831': attribute type 18 has an invalid length. [ 238.112626][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.129749][ T9846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1840'. [ 240.716667][ T810] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 241.136551][ T810] usb 3-1: Using ep0 maxpacket: 16 [ 241.164525][ T810] usb 3-1: config 1 has an invalid interface number: 102 but max is 0 [ 241.164552][ T810] usb 3-1: config 1 has no interface number 0 [ 241.164582][ T810] usb 3-1: config 1 interface 102 has no altsetting 0 [ 241.168633][ T810] usb 3-1: New USB device found, idVendor=0489, idProduct=e003, bcdDevice=dd.d1 [ 241.168660][ T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.168678][ T810] usb 3-1: Product: syz [ 241.168690][ T810] usb 3-1: Manufacturer: syz [ 241.168703][ T810] usb 3-1: SerialNumber: syz [ 241.210155][ T810] cp210x 3-1:1.102: cp210x converter detected [ 242.154430][ T810] cp210x 3-1:1.102: failed to get vendor val 0x370b size 1: -71 [ 242.154472][ T810] cp210x 3-1:1.102: querying part number failed [ 242.402304][ T5866] kernel read not supported for file /media1 (pid: 5866 comm: kworker/0:5) [ 242.489064][ T810] usb 3-1: cp210x converter now attached to ttyUSB0 [ 242.553509][ T810] usb 3-1: USB disconnect, device number 13 [ 242.623055][ T810] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 242.670080][ T810] cp210x 3-1:1.102: device disconnected [ 243.350053][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 243.350087][ T9883] bond0: option resend_igmp: invalid value (11272192) [ 243.350104][ T9883] bond0: option resend_igmp: allowed values 0 - 255 [ 243.766482][ T5866] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 244.329559][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 244.331705][ T5866] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 244.331729][ T5866] usb 1-1: config 0 has no interface number 0 [ 244.334484][ T5866] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 244.334511][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.334528][ T5866] usb 1-1: Product: syz [ 244.334541][ T5866] usb 1-1: Manufacturer: syz [ 244.334553][ T5866] usb 1-1: SerialNumber: syz [ 244.401668][ T5866] usb 1-1: config 0 descriptor?? [ 244.493276][ T5866] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 245.521614][ T5866] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 245.539507][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 245.889152][ T5866] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 245.955902][ T5866] usb 1-1: USB disconnect, device number 12 [ 245.991301][ T5866] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 246.031986][ T5866] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 246.033014][ T5866] quatech2 1-1:0.51: device disconnected [ 246.762668][ T9915] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1869'. [ 247.796214][ T5937] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 248.309851][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.309885][ T5937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 248.309925][ T5937] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 248.309944][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.316181][ T5876] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 248.327894][ T5937] usb 5-1: config 0 descriptor?? [ 248.580596][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 248.582976][ T5876] usb 3-1: config 0 interface 0 has no altsetting 0 [ 248.583013][ T5876] usb 3-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 248.583033][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.854511][ T5876] usb 3-1: config 0 descriptor?? [ 248.976271][ T810] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 248.977982][ T5937] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 248.978027][ T5937] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 248.978057][ T5937] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 248.978089][ T5937] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 248.978114][ T5937] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 248.978146][ T5937] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 248.978169][ T5937] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 248.978200][ T5937] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 248.978225][ T5937] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 248.978249][ T5937] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 249.129978][ T810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.130004][ T810] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 249.130106][ T810] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 249.130127][ T810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.655570][ T5876] hid (null): global environment stack underflow [ 250.116896][ T5937] cougar 0003:060B:500A.0018: hidraw0: USB HID v80.00 Device [HID 060b:500a] on usb-dummy_hcd.4-1/input0 [ 250.117675][ T810] usb 2-1: config 0 descriptor?? [ 250.131593][ T810] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 250.131646][ T810] dvb-usb: bulk message failed: -22 (3/0) [ 250.191660][ T5876] input: HID 28bd:1903 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:1903.0019/input/input13 [ 250.664118][ T810] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 250.665112][ T810] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 250.665181][ T810] usb 2-1: media controller created [ 250.669607][ T810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.286287][ T5937] usb 5-1: USB disconnect, device number 10 [ 251.396001][ T5876] uclogic 0003:28BD:1903.0019: input,hidraw1: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.2-1/input0 [ 251.777922][ T810] dvb-usb: bulk message failed: -22 (6/0) [ 251.778040][ T810] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 252.181761][ T810] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 253.227827][ T5876] usb 3-1: USB disconnect, device number 14 [ 253.434439][ T810] dvb-usb: schedule remote query interval to 150 msecs. [ 253.434465][ T810] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 253.655048][ T5873] dvb-usb: bulk message failed: -22 (1/0) [ 253.655098][ T5873] dvb-usb: error while querying for an remote control event. [ 253.850023][ T5873] dvb-usb: bulk message failed: -22 (1/0) [ 253.850053][ T5873] dvb-usb: error while querying for an remote control event. [ 253.871175][ T810] usb 2-1: USB disconnect, device number 11 [ 256.031597][ T9990] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 256.031629][ T9990] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 256.069033][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.077262][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.384934][ T9990] vhci_hcd vhci_hcd.0: Device attached [ 256.395330][ T9991] vhci_hcd: connection closed [ 256.472077][ T1308] vhci_hcd vhci_hcd.2: stop threads [ 256.499348][ T1308] vhci_hcd vhci_hcd.2: release socket [ 256.499492][ T1308] vhci_hcd vhci_hcd.2: disconnect device [ 256.734502][ T810] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 258.872817][ T5876] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 259.375498][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 259.377847][ T5876] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 259.377871][ T5876] usb 1-1: config 0 has no interface number 0 [ 259.380476][ T5876] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 259.380500][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.380518][ T5876] usb 1-1: Product: syz [ 259.380530][ T5876] usb 1-1: Manufacturer: syz [ 259.380542][ T5876] usb 1-1: SerialNumber: syz [ 259.545621][ T5876] usb 1-1: config 0 descriptor?? [ 259.549754][ T5876] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 260.028726][ T5876] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 260.207288][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48 [ 260.806657][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 261.201113][ T5876] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 261.463097][ T5876] usb 1-1: USB disconnect, device number 13 [ 261.595971][ T5876] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 261.657801][ T5876] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 261.658718][ T5876] quatech2 1-1:0.51: device disconnected [ 261.785408][ T5866] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 262.129517][ T5866] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 262.129573][ T5866] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 262.129594][ T5866] usb 3-1: config 0 interface 0 has no altsetting 0 [ 262.719301][ T5866] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 262.719332][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 262.719350][ T5866] usb 3-1: Product: syz [ 262.719362][ T5866] usb 3-1: Manufacturer: syz [ 262.719374][ T5866] usb 3-1: SerialNumber: syz [ 262.758588][ T5866] usb 3-1: config 0 descriptor?? [ 262.878265][ T5866] hub 3-1:0.0: bad descriptor, ignoring hub [ 262.878302][ T5866] hub 3-1:0.0: probe with driver hub failed with error -5 [ 263.005128][ T5866] usb 3-1: selecting invalid altsetting 0 [ 264.227445][ T5866] usb 3-1: USB disconnect, device number 15 [ 264.301149][T10048] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1929'. [ 264.301192][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'. [ 264.555007][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.091974][T10060] tipc: Enabling of bearer rejected, failed to enable media [ 266.225492][ T5866] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 266.778470][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 266.781332][ T5866] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 266.781357][ T5866] usb 5-1: config 0 has no interface number 0 [ 266.781419][ T5866] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.781445][ T5866] usb 5-1: config 0 interface 85 has no altsetting 0 [ 267.025499][ T5866] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 267.025529][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.025546][ T5866] usb 5-1: Product: syz [ 267.025559][ T5866] usb 5-1: Manufacturer: syz [ 267.025572][ T5866] usb 5-1: SerialNumber: syz [ 267.030857][ T5866] usb 5-1: config 0 descriptor?? [ 267.707146][ T5866] appletouch 5-1:0.85: Failed to read mode from device. [ 267.707375][ T5866] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 267.829425][ T5866] usb 5-1: USB disconnect, device number 11 [ 269.722758][ T5866] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 270.446948][ T5866] usb 5-1: config 5 has an invalid interface number: 211 but max is 0 [ 270.446977][ T5866] usb 5-1: config 5 has no interface number 0 [ 270.618007][ T5866] usb 5-1: New USB device found, idVendor=813a, idProduct=22fe, bcdDevice=89.9c [ 270.618036][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.618052][ T5866] usb 5-1: Product: syz [ 270.618064][ T5866] usb 5-1: Manufacturer: syz [ 270.618077][ T5866] usb 5-1: SerialNumber: syz [ 270.679160][ T5866] usb 5-1: bad CDC descriptors [ 270.821835][T10097] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1950'. [ 270.822179][T10097] hsr0: entered promiscuous mode [ 271.052985][ T5866] usb 5-1: USB disconnect, device number 12 [ 275.323005][T10148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1974'. [ 275.449929][ T36] audit: type=1326 audit(1771699647.550:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10151 comm="syz.0.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238cbcc629 code=0x7ffc0000 [ 275.450202][ T36] audit: type=1326 audit(1771699647.550:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10151 comm="syz.0.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238cbcc629 code=0x7ffc0000 [ 275.507127][ T36] audit: type=1326 audit(1771699647.610:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10151 comm="syz.0.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f238cbcc629 code=0x7ffc0000 [ 275.507176][ T36] audit: type=1326 audit(1771699647.610:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10151 comm="syz.0.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238cbcc629 code=0x7ffc0000 [ 275.507910][ T36] audit: type=1326 audit(1771699647.610:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10151 comm="syz.0.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238cbcc629 code=0x7ffc0000 [ 276.414692][ T5876] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 276.843297][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 276.912290][ T5876] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 276.912320][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.912338][ T5876] usb 3-1: Product: syz [ 276.912351][ T5876] usb 3-1: Manufacturer: syz [ 276.912364][ T5876] usb 3-1: SerialNumber: syz [ 276.964149][ T5876] usb 3-1: config 0 descriptor?? [ 276.978802][ T5876] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 277.967300][ T5876] gspca_vc032x: reg_r err -71 [ 277.967393][ T5876] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 278.127692][ T5876] usb 3-1: USB disconnect, device number 16 [ 279.488419][T10189] tipc: Enabling not permitted [ 279.488452][T10189] tipc: Enabling of bearer rejected, failed to enable media [ 282.004552][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2002'. [ 283.364231][ T5873] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 283.815192][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 283.858822][ T5873] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 283.858931][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.858951][ T5873] usb 1-1: Product: syz [ 283.858963][ T5873] usb 1-1: Manufacturer: syz [ 283.858976][ T5873] usb 1-1: SerialNumber: syz [ 283.913218][ T5873] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 284.244407][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 284.398702][ T5876] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 284.414246][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 284.419190][ T43] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 284.419217][ T43] usb 3-1: config 0 has no interface number 0 [ 284.419310][ T43] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 284.466597][ T43] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 284.466678][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.466694][ T43] usb 3-1: Product: syz [ 284.466706][ T43] usb 3-1: Manufacturer: syz [ 284.466718][ T43] usb 3-1: SerialNumber: syz [ 285.816263][ T5937] usb 1-1: USB disconnect, device number 14 [ 285.875093][ T43] usb 3-1: config 0 descriptor?? [ 285.875978][T10244] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 287.024551][ T43] asix 3-1:0.191: probe with driver asix failed with error -71 [ 287.025742][ T5876] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 287.028353][ T5876] ath9k_htc: Failed to initialize the device [ 287.031607][ T5937] usb 1-1: ath9k_htc: USB layer deinitialized [ 287.324057][ T43] usb 3-1: USB disconnect, device number 17 [ 289.863968][ T5876] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 290.796170][ T5876] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 290.796200][ T5876] usb 3-1: config 0 interface 0 has no altsetting 0 [ 290.821177][ T5876] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 290.821206][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 290.821225][ T5876] usb 3-1: Product: syz [ 290.821237][ T5876] usb 3-1: Manufacturer: syz [ 290.821248][ T5876] usb 3-1: SerialNumber: syz [ 290.859902][ T5876] usb 3-1: config 0 descriptor?? [ 290.958018][ T5876] usb 3-1: selecting invalid altsetting 0 [ 291.951114][ T5876] usb 3-1: USB disconnect, device number 18 [ 293.146205][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.541768][T10374] mmap: syz.2.2063 (10374) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 302.371711][T10426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2101'. [ 303.091885][T10426] erspan0: entered promiscuous mode [ 303.165643][T10426] erspan0: left promiscuous mode [ 309.802716][ T36] audit: type=1326 audit(1771699681.892:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10483 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb349fc629 code=0x7ffc0000 [ 309.802773][ T36] audit: type=1326 audit(1771699681.892:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10483 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb349fc629 code=0x7ffc0000 [ 309.876907][ T36] audit: type=1326 audit(1771699681.972:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10483 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fdb349fc629 code=0x7ffc0000 [ 309.883024][ T36] audit: type=1326 audit(1771699681.972:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10483 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb349fc629 code=0x7ffc0000 [ 309.883085][ T36] audit: type=1326 audit(1771699681.972:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10483 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fdb349fc629 code=0x7ffc0000 [ 309.883126][ T36] audit: type=1326 audit(1771699681.972:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10483 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb349fc629 code=0x7ffc0000 [ 315.211470][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2150'. [ 315.362765][ T1238] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 315.769442][ T1238] usb 1-1: Using ep0 maxpacket: 8 [ 315.834976][ T1238] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 315.835002][ T1238] usb 1-1: config 0 has no interface number 0 [ 315.835063][ T1238] usb 1-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 315.835086][ T1238] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 315.835110][ T1238] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 315.835149][ T1238] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 315.835169][ T1238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.840092][ T1238] usb 1-1: config 0 descriptor?? [ 316.430575][ T1238] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 317.342483][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.342554][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.337606][ T810] usb 1-1: USB disconnect, device number 15 [ 321.962336][T10581] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2170'. [ 321.963248][T10581] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2170'. [ 323.313109][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 326.286327][T10621] netlink: 'syz.2.2187': attribute type 32 has an invalid length. [ 326.286350][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2187'. [ 326.366278][T10621] bond1: Setting coupled_control to off (0) [ 338.190609][T10749] tc_dump_action: action bad kind [ 341.142417][T10774] program syz.0.2260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.210930][ T810] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 344.266596][ T810] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.266624][ T810] usb 1-1: config 0 has no interface number 0 [ 344.266673][ T810] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 344.266693][ T810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.313195][ T810] usb 1-1: config 0 descriptor?? [ 344.855509][ T810] usb 1-1: selecting invalid altsetting 1 [ 344.856658][ T810] dvb_ttusb_budget: ttusb_init_controller: error [ 344.856674][ T810] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 346.505121][ T810] DVB: Unable to find symbol cx22700_attach() [ 346.676476][ T810] DVB: Unable to find symbol tda10046_attach() [ 346.676493][ T810] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 346.882336][ T810] usb 1-1: USB disconnect, device number 16 [ 352.251027][T10884] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 352.251056][T10884] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.251155][T10884] vhci_hcd vhci_hcd.0: Device attached [ 352.600509][ T5876] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 352.680344][ T43] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 352.783177][ T5876] usb 1-1: config 0 has no interfaces? [ 352.783215][ T5876] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 352.783236][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.816815][ T5876] usb 1-1: config 0 descriptor?? [ 353.067065][ T5876] usb 1-1: USB disconnect, device number 17 [ 353.130765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.674053][ T43] usb 33-1: device descriptor read/64, error -71 [ 353.708568][T10885] vhci_hcd: connection closed [ 353.740776][ T13] vhci_hcd vhci_hcd.0: stop threads [ 353.740801][ T13] vhci_hcd vhci_hcd.0: release socket [ 353.741460][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 353.929500][ T43] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 354.840190][ T5937] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 354.991679][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 354.994133][ T5937] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.994160][ T5937] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.994184][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 354.994215][ T5937] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 354.994235][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.082160][ T5937] usb 5-1: config 0 descriptor?? [ 356.695730][ T5937] kye 0003:0458:0138.001A: unbalanced collection at end of report description [ 356.696523][ T5937] kye 0003:0458:0138.001A: parse failed [ 356.696591][ T5937] kye 0003:0458:0138.001A: probe with driver kye failed with error -22 [ 356.828161][ T5937] usb 5-1: USB disconnect, device number 13 [ 357.530078][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 357.710183][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 357.712480][ T9] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 357.715544][ T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 357.715570][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.715588][ T9] usb 3-1: Product: syz [ 357.715600][ T9] usb 3-1: Manufacturer: syz [ 357.715613][ T9] usb 3-1: SerialNumber: syz [ 357.864212][ T9] usb 3-1: config 0 descriptor?? [ 358.073664][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 358.073730][ T9] usb 3-1: setting power ON [ 358.073749][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 358.128637][T10925] dvb-usb: bulk message failed: -22 (3/0) [ 358.128661][T10925] dvb-usb: bulk message failed: -22 (4/0) [ 358.128674][T10925] cxusb: i2c read failed [ 358.170267][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 358.176059][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 358.176141][ T9] usb 3-1: media controller created [ 358.415504][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.938093][ T9] usb 3-1: selecting invalid altsetting 6 [ 358.938116][ T9] usb 3-1: digital interface selection failed (-22) [ 358.938131][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 358.939587][ T9] usb 3-1: setting power OFF [ 358.939742][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 358.939760][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 358.939771][ T9] (NULL device *): no alternate interface [ 359.510093][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 359.672262][ T9] usb 3-1: USB disconnect, device number 19 [ 363.269744][ T5876] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 363.975000][ T5876] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 363.975030][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.049690][ T5876] usb 3-1: config 0 descriptor?? [ 364.060241][ T5876] cp210x 3-1:0.0: cp210x converter detected [ 365.210490][ T5876] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 365.210517][ T5876] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 365.250883][ T5876] usb 3-1: cp210x converter now attached to ttyUSB0 [ 365.259932][ T5876] usb 3-1: USB disconnect, device number 20 [ 365.380590][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 365.427066][ T5876] cp210x 3-1:0.0: device disconnected [ 365.809575][ T43] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 366.046161][ T43] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 366.046188][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.046206][ T43] usb 5-1: config 0 has no interface number 0 [ 366.046250][ T43] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 366.046270][ T43] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.049105][ T43] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 366.049131][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.049149][ T43] usb 5-1: Product: syz [ 366.049162][ T43] usb 5-1: Manufacturer: syz [ 366.049180][ T43] usb 5-1: SerialNumber: syz [ 366.404505][ T43] usb 5-1: config 0 descriptor?? [ 368.029596][ T43] usb 5-1: USB disconnect, device number 14 [ 370.059094][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2385'. [ 375.232312][T11117] netlink: 'syz.2.2416': attribute type 1 has an invalid length. [ 375.232335][T11117] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2416'. [ 375.232349][T11117] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2416'. [ 378.048965][ T5873] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 378.642554][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.642599][ T5873] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 378.642620][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.675031][ T5873] usb 3-1: config 0 descriptor?? [ 378.895897][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.905810][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.212041][ T5873] uclogic 0003:5543:0042.001B: unbalanced delimiter at end of report description [ 380.212806][ T5873] uclogic 0003:5543:0042.001B: parse failed [ 380.212903][ T5873] uclogic 0003:5543:0042.001B: probe with driver uclogic failed with error -22 [ 380.563721][ T9] usb 3-1: USB disconnect, device number 21 [ 382.932629][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 382.932652][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2453'. [ 382.932676][T11190] netlink: 'syz.4.2453': attribute type 14 has an invalid length. [ 382.932689][T11190] netlink: 'syz.4.2453': attribute type 11 has an invalid length. [ 388.425435][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2472'. [ 388.425462][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2472'. [ 389.326593][ C0] ODEBUG: Out of memory. ODEBUG disabled [ 390.518197][ T5876] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 391.048208][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 391.141889][ T5876] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 391.141917][ T5876] usb 3-1: config 0 has no interface number 0 [ 391.141974][ T5876] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 391.141997][ T5876] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 391.144246][ T5876] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 391.144273][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.144291][ T5876] usb 3-1: Product: syz [ 391.144304][ T5876] usb 3-1: Manufacturer: syz [ 391.144317][ T5876] usb 3-1: SerialNumber: syz [ 391.154136][ T5876] usb 3-1: config 0 descriptor?? [ 391.154893][T11242] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 391.154991][T11242] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 391.438576][T11242] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 391.438719][T11242] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 391.945325][ T5876] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 391.945356][ T5876] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 391.945635][ T5876] asix 3-1:0.251: probe with driver asix failed with error -71 [ 392.082781][ T5876] usb 3-1: USB disconnect, device number 22 [ 398.296845][T11302] bridge0: entered promiscuous mode [ 398.740411][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 399.476347][T11302] bridge0: left promiscuous mode [ 399.885522][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 399.885556][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.885590][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 399.885611][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.909785][ T9] usb 3-1: config 0 descriptor?? [ 400.034547][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.055671][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.060186][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 400.073309][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 400.075695][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.396769][ T9] konepure 0003:1E7D:2DBE.001C: item fetching failed at offset 3/7 [ 401.407866][ T9] konepure 0003:1E7D:2DBE.001C: parse failed [ 401.407936][ T9] konepure 0003:1E7D:2DBE.001C: probe with driver konepure failed with error -22 [ 401.507824][ T9] usb 3-1: USB disconnect, device number 23 [ 402.487602][ T5804] Bluetooth: hci5: command tx timeout [ 404.566767][ T5804] Bluetooth: hci5: command tx timeout [ 406.637288][ T5804] Bluetooth: hci5: command tx timeout [ 407.069430][T11376] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2541'. [ 408.036592][T11316] chnl_net:caif_netlink_parms(): no params data found [ 408.717218][ T5804] Bluetooth: hci5: command tx timeout [ 410.547636][T11316] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.547759][T11316] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.547976][T11316] bridge_slave_0: entered allmulticast mode [ 410.550566][T11316] bridge_slave_0: entered promiscuous mode [ 410.593180][T11316] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.904489][T11316] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.904726][T11316] bridge_slave_1: entered allmulticast mode [ 410.910517][T11316] bridge_slave_1: entered promiscuous mode [ 413.028663][T11316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.063556][T11316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.561056][T11316] team0: Port device team_slave_0 added [ 413.564330][T11316] team0: Port device team_slave_1 added [ 414.376455][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.440999][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.447141][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.459081][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.471400][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.077776][T11316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.077794][T11316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.077820][T11316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.449624][T11316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.449641][T11316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.449666][T11316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.556732][ T5804] Bluetooth: hci2: command tx timeout [ 416.885872][T11316] hsr_slave_0: entered promiscuous mode [ 416.947497][T11316] hsr_slave_1: entered promiscuous mode [ 416.948390][T11316] debugfs: 'hsr0' already exists in 'hsr' [ 416.948415][T11316] Cannot create hsr debugfs directory [ 418.733650][ T5804] Bluetooth: hci2: command tx timeout [ 420.812952][ T5804] Bluetooth: hci2: command tx timeout [ 422.877343][ T5804] Bluetooth: hci2: command tx timeout [ 427.567902][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.699457][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.700315][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.701592][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.702421][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 428.002908][T11424] chnl_net:caif_netlink_parms(): no params data found [ 428.838828][T11316] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 429.637424][T11316] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 430.032752][T11316] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 430.356045][ T61] Bluetooth: hci1: command tx timeout [ 431.305262][T11424] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.305385][T11424] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.305586][T11424] bridge_slave_0: entered allmulticast mode [ 431.332471][T11424] bridge_slave_0: entered promiscuous mode [ 431.755930][T11316] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 432.002256][T11424] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.002377][T11424] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.002561][T11424] bridge_slave_1: entered allmulticast mode [ 432.005024][T11424] bridge_slave_1: entered promiscuous mode [ 432.395833][ T61] Bluetooth: hci1: command tx timeout [ 433.648016][T11424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.102631][T11424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.493209][ T61] Bluetooth: hci1: command tx timeout [ 435.223580][T11424] team0: Port device team_slave_0 added [ 435.358833][T11424] team0: Port device team_slave_1 added [ 436.555570][ T61] Bluetooth: hci1: command tx timeout [ 440.165798][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.165853][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.441518][T11424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.441535][T11424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.441560][T11424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.256692][T11424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.256711][T11424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.256736][T11424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.673778][ T1479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.493942][T11424] hsr_slave_0: entered promiscuous mode [ 449.557118][T11424] hsr_slave_1: entered promiscuous mode [ 449.560477][T11424] debugfs: 'hsr0' already exists in 'hsr' [ 449.560503][T11424] Cannot create hsr debugfs directory [ 449.945984][T11505] chnl_net:caif_netlink_parms(): no params data found [ 454.326867][T11505] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.326992][T11505] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.327226][T11505] bridge_slave_0: entered allmulticast mode [ 454.329794][T11505] bridge_slave_0: entered promiscuous mode [ 454.658045][T11505] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.658248][T11505] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.658478][T11505] bridge_slave_1: entered allmulticast mode [ 454.661145][T11505] bridge_slave_1: entered promiscuous mode [ 455.868178][T11505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.911196][T11505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.200147][T11505] team0: Port device team_slave_0 added [ 456.381443][T11505] team0: Port device team_slave_1 added [ 456.866003][T11316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.853027][T11505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.853051][T11505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.853076][T11505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.148146][T11505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.148164][T11505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.148188][T11505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.230562][T11424] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 460.693668][T11424] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 460.805808][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 460.833395][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 460.833819][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 460.864513][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 460.865253][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 461.017062][T11505] hsr_slave_0: entered promiscuous mode [ 461.035219][T11505] hsr_slave_1: entered promiscuous mode [ 461.038295][T11505] debugfs: 'hsr0' already exists in 'hsr' [ 461.038322][T11505] Cannot create hsr debugfs directory [ 461.084371][T11424] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 463.314131][ T61] Bluetooth: hci0: command tx timeout [ 465.353993][ T5804] Bluetooth: hci0: command tx timeout [ 466.122261][ T1479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.289141][T11424] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 467.433900][ T5804] Bluetooth: hci0: command tx timeout [ 469.533772][ T5804] Bluetooth: hci0: command tx timeout [ 474.717564][T11505] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 475.288349][T11505] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 475.426874][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 475.436961][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 475.437355][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 475.438665][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 475.439461][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 475.633638][T11505] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 477.593358][ T61] Bluetooth: hci5: command tx timeout [ 478.517461][ T1479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.967707][T11505] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 479.351418][T11761] chnl_net:caif_netlink_parms(): no params data found [ 479.673344][ T61] Bluetooth: hci5: command tx timeout [ 481.903042][ T61] Bluetooth: hci5: command tx timeout [ 484.153550][ T61] Bluetooth: hci5: command tx timeout [ 485.034090][T11316] syz-executor (11316) used greatest stack depth: 17856 bytes left [ 486.454521][T11761] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.454643][T11761] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.454863][T11761] bridge_slave_0: entered allmulticast mode [ 486.473006][T11761] bridge_slave_0: entered promiscuous mode [ 486.559899][T11761] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.579280][T11761] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.591812][T11761] bridge_slave_1: entered allmulticast mode [ 486.901197][T11761] bridge_slave_1: entered promiscuous mode [ 487.128871][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 487.172938][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 487.177119][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 487.230206][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 487.231500][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 487.658318][T11761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.906067][T11761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.476527][T11761] team0: Port device team_slave_0 added [ 488.502294][T11761] team0: Port device team_slave_1 added [ 489.922978][ T61] Bluetooth: hci2: command tx timeout [ 490.676601][T11761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.676618][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.676642][T11761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.222849][T11761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.222867][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.222892][T11761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.993149][ T61] Bluetooth: hci2: command tx timeout [ 494.075048][ T5114] Bluetooth: hci2: command tx timeout [ 496.152425][ T5114] Bluetooth: hci2: command tx timeout [ 497.937350][ T1479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.551111][T11761] hsr_slave_0: entered promiscuous mode [ 499.573162][T11761] hsr_slave_1: entered promiscuous mode [ 499.574079][T11761] debugfs: 'hsr0' already exists in 'hsr' [ 499.574103][T11761] Cannot create hsr debugfs directory [ 501.602486][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.602555][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.971505][T11866] chnl_net:caif_netlink_parms(): no params data found [ 506.443098][T11956] chnl_net:caif_netlink_parms(): no params data found [ 506.766616][T11866] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.766760][T11866] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.767029][T11866] bridge_slave_0: entered allmulticast mode [ 506.770013][T11866] bridge_slave_0: entered promiscuous mode [ 507.136400][T11866] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.136529][T11866] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.136792][T11866] bridge_slave_1: entered allmulticast mode [ 507.139462][T11866] bridge_slave_1: entered promiscuous mode [ 508.697889][T11866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.783177][T11866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.193860][T11866] team0: Port device team_slave_0 added [ 516.243673][T11866] team0: Port device team_slave_1 added [ 516.731410][T11956] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.731546][T11956] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.731782][T11956] bridge_slave_0: entered allmulticast mode [ 516.751824][T11956] bridge_slave_0: entered promiscuous mode [ 517.434036][T11956] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.434148][T11956] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.434331][T11956] bridge_slave_1: entered allmulticast mode [ 517.438054][T11956] bridge_slave_1: entered promiscuous mode [ 517.658116][T11866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.658134][T11866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.658158][T11866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.802939][T11866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.802958][T11866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.802984][T11866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.232920][T11956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.095634][T11956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.016724][T11956] team0: Port device team_slave_0 added [ 521.234818][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 521.414720][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 521.444355][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 521.549526][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 521.550477][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 522.451909][T11956] team0: Port device team_slave_1 added [ 522.783876][T11866] hsr_slave_0: entered promiscuous mode [ 522.785313][T11866] hsr_slave_1: entered promiscuous mode [ 522.786296][T11866] debugfs: 'hsr0' already exists in 'hsr' [ 522.786319][T11866] Cannot create hsr debugfs directory [ 523.677854][ T61] Bluetooth: hci1: command tx timeout [ 525.760601][ T61] Bluetooth: hci1: command tx timeout [ 527.520836][T12229] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2911'. [ 527.781554][T11956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.781571][T11956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.781596][T11956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.830795][ T61] Bluetooth: hci1: command tx timeout [ 528.051475][T11956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.051491][T11956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.051516][T11956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.324159][ T1479] bridge_slave_1: left allmulticast mode [ 528.324342][ T1479] bridge_slave_1: left promiscuous mode [ 528.327703][ T1479] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.283530][ T1479] bridge_slave_0: left allmulticast mode [ 529.283561][ T1479] bridge_slave_0: left promiscuous mode [ 529.284296][ T1479] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.910373][ T61] Bluetooth: hci1: command tx timeout [ 536.721221][ T5114] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 536.735420][ T5114] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 536.735803][ T5114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 536.740519][ T5114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 536.741197][ T5114] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 538.950597][ T5114] Bluetooth: hci6: command tx timeout [ 541.029803][ T5114] Bluetooth: hci6: command tx timeout [ 543.109704][ T5114] Bluetooth: hci6: command tx timeout [ 545.249575][ T5114] Bluetooth: hci6: command tx timeout [ 547.757295][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 547.904639][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 547.907877][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 547.924550][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 548.127269][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 550.580606][ T61] Bluetooth: hci7: command tx timeout [ 552.639253][ T61] Bluetooth: hci7: command tx timeout [ 554.709332][ T61] Bluetooth: hci7: command tx timeout [ 556.788998][ T61] Bluetooth: hci7: command tx timeout [ 563.119405][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.119481][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.820590][ T1479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.868524][ T1479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.234342][ T1479] bond0 (unregistering): Released all slaves [ 576.698117][ T1479] team0: Port device bond1 removed [ 576.701126][ T1479] bond1 (unregistering): Released all slaves [ 583.422188][ T5114] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 583.433103][ T5114] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 583.433514][ T5114] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 583.434877][ T5114] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 583.435597][ T5114] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 585.778198][T12571] Bluetooth: hci0: command 0x0406 tx timeout [ 585.778273][T12571] Bluetooth: hci8: command tx timeout [ 587.827736][ T61] Bluetooth: hci8: command tx timeout [ 590.058808][ T61] Bluetooth: hci8: command tx timeout [ 592.146970][ T61] Bluetooth: hci8: command tx timeout [ 593.689923][ T1479] hmac(sha224: left promiscuous mode [ 594.612825][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 594.655787][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 594.786495][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 595.262845][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 595.297920][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 597.431650][ T5114] Bluetooth: hci2: command tx timeout [ 599.506514][ T5114] Bluetooth: hci2: command tx timeout [ 601.586333][ T5114] Bluetooth: hci2: command tx timeout [ 602.426988][T12349] chnl_net:caif_netlink_parms(): no params data found [ 603.463284][T12568] chnl_net:caif_netlink_parms(): no params data found [ 603.666242][ T5114] Bluetooth: hci2: command tx timeout [ 608.442788][T12667] chnl_net:caif_netlink_parms(): no params data found [ 608.562693][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 608.650238][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 608.650648][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 608.652983][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 608.653752][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 609.106297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.786185][ T61] Bluetooth: hci5: command tx timeout [ 611.187840][T12568] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.187963][T12568] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.188237][T12568] bridge_slave_0: entered allmulticast mode [ 611.190832][T12568] bridge_slave_0: entered promiscuous mode [ 611.714864][T12568] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.714994][T12568] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.715244][T12568] bridge_slave_1: entered allmulticast mode [ 611.740822][T12568] bridge_slave_1: entered promiscuous mode [ 613.107474][ T61] Bluetooth: hci5: command tx timeout [ 615.185814][ T61] Bluetooth: hci5: command tx timeout [ 615.389776][T12568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.460116][T12568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.966698][T12667] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.966829][T12667] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.967113][T12667] bridge_slave_0: entered allmulticast mode [ 616.973723][T12667] bridge_slave_0: entered promiscuous mode [ 617.305472][ T61] Bluetooth: hci5: command tx timeout [ 617.478822][T12667] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.478923][T12667] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.479115][T12667] bridge_slave_1: entered allmulticast mode [ 617.517611][T12667] bridge_slave_1: entered promiscuous mode [ 617.952588][T12568] team0: Port device team_slave_0 added [ 618.100088][T12568] team0: Port device team_slave_1 added [ 619.611633][T12667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.786582][ T1479] : left promiscuous mode [ 621.688301][T12667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.713085][T12568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.713100][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.713123][T12568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.467353][T12568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.467371][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.467396][T12568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.620578][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.628636][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.463952][T12667] team0: Port device team_slave_0 added [ 625.568118][T12667] team0: Port device team_slave_1 added [ 626.776851][T12568] hsr_slave_0: entered promiscuous mode [ 626.785677][T12568] hsr_slave_1: entered promiscuous mode [ 626.786732][T12568] debugfs: 'hsr0' already exists in 'hsr' [ 626.786755][T12568] Cannot create hsr debugfs directory [ 626.789874][T12667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.789887][T12667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.789910][T12667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.798110][T12667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.798124][T12667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.798149][T12667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.575541][T12667] hsr_slave_0: entered promiscuous mode [ 631.576986][T12667] hsr_slave_1: entered promiscuous mode [ 631.577921][T12667] debugfs: 'hsr0' already exists in 'hsr' [ 631.577943][T12667] Cannot create hsr debugfs directory [ 634.166757][T12797] chnl_net:caif_netlink_parms(): no params data found [ 643.161590][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 643.187751][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 643.204251][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 643.221300][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 643.234068][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 643.825961][T12797] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.826084][T12797] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.826375][T12797] bridge_slave_0: entered allmulticast mode [ 643.829093][T12797] bridge_slave_0: entered promiscuous mode [ 644.164318][T12797] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.164469][T12797] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.164756][T12797] bridge_slave_1: entered allmulticast mode [ 644.167502][T12797] bridge_slave_1: entered promiscuous mode [ 645.356993][T12571] Bluetooth: hci0: command tx timeout [ 647.500093][ T5114] Bluetooth: hci1: command 0x0406 tx timeout [ 647.500366][ T5114] Bluetooth: hci0: command tx timeout [ 647.541175][T12797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.060471][T12797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.909758][T12797] team0: Port device team_slave_0 added [ 649.543718][ T61] Bluetooth: hci0: command tx timeout [ 651.584832][ T61] Bluetooth: hci0: command tx timeout [ 652.775983][T12797] team0: Port device team_slave_1 added [ 657.767063][T12571] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 657.780082][T12571] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 657.782095][T12571] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 657.785048][T12571] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 657.785749][T12571] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 659.825338][T12571] Bluetooth: hci7: command tx timeout [ 661.479308][T12797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.479325][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.479359][T12797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.629444][T12797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.629462][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.629488][T12797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.903386][T12571] Bluetooth: hci7: command tx timeout [ 662.546921][T12571] Bluetooth: hci6: command 0x0406 tx timeout [ 664.064240][ T61] Bluetooth: hci7: command tx timeout [ 664.333347][T12797] hsr_slave_0: entered promiscuous mode [ 664.334885][T12797] hsr_slave_1: entered promiscuous mode [ 664.342952][T12797] debugfs: 'hsr0' already exists in 'hsr' [ 664.342979][T12797] Cannot create hsr debugfs directory [ 666.188296][T12571] Bluetooth: hci7: command tx timeout [ 669.700905][T11761] syz-executor (11761) used greatest stack depth: 17664 bytes left [ 670.085476][T13064] chnl_net:caif_netlink_parms(): no params data found [ 670.207752][ T61] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 670.212283][ T61] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 670.225499][ T61] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 670.241176][ T61] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 670.241908][ T61] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 672.309097][T12571] Bluetooth: hci8: command tx timeout [ 675.032190][T12571] Bluetooth: hci8: command tx timeout [ 677.132332][ T61] Bluetooth: hci8: command tx timeout [ 679.182047][ T61] Bluetooth: hci8: command tx timeout [ 680.096090][T13172] chnl_net:caif_netlink_parms(): no params data found [ 682.836884][T13064] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.837006][T13064] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.837308][T13064] bridge_slave_0: entered allmulticast mode [ 682.923272][T13064] bridge_slave_0: entered promiscuous mode [ 683.622011][T13064] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.622134][T13064] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.622450][T13064] bridge_slave_1: entered allmulticast mode [ 683.669418][T13064] bridge_slave_1: entered promiscuous mode [ 685.909386][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.909481][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.224776][T13064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.367490][T13064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.752110][T13172] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.752231][T13172] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.752524][T13172] bridge_slave_0: entered allmulticast mode [ 687.024371][T13172] bridge_slave_0: entered promiscuous mode [ 687.612086][T13172] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.612223][T13172] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.612523][T13172] bridge_slave_1: entered allmulticast mode [ 687.721871][T13172] bridge_slave_1: entered promiscuous mode [ 687.767817][T13064] team0: Port device team_slave_0 added [ 687.824728][T13064] team0: Port device team_slave_1 added [ 688.023003][T13172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.415600][T13172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.441302][T13064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.441317][T13064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.441342][T13064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.743173][T13064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.743191][T13064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.743217][T13064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.994119][T13172] team0: Port device team_slave_0 added [ 690.104038][T13172] team0: Port device team_slave_1 added [ 691.360416][T13064] hsr_slave_0: entered promiscuous mode [ 691.412810][T13064] hsr_slave_1: entered promiscuous mode [ 691.413811][T13064] debugfs: 'hsr0' already exists in 'hsr' [ 691.413835][T13064] Cannot create hsr debugfs directory [ 691.818422][T13172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.818440][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.818464][T13172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.060171][T13172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.060189][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.060213][T13172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.813525][T13172] hsr_slave_0: entered promiscuous mode [ 693.819570][T13172] hsr_slave_1: entered promiscuous mode [ 693.820619][T13172] debugfs: 'hsr0' already exists in 'hsr' [ 693.820644][T13172] Cannot create hsr debugfs directory [ 693.845660][T13254] chnl_net:caif_netlink_parms(): no params data found [ 705.467459][T12571] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 705.488399][T12571] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 705.488818][T12571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 705.490340][T12571] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 705.521704][T12571] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 707.580511][T12571] Bluetooth: hci1: command tx timeout [ 709.660414][T12571] Bluetooth: hci1: command tx timeout [ 711.594854][T13254] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.594979][T13254] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.595213][T13254] bridge_slave_0: entered allmulticast mode [ 711.597821][T13254] bridge_slave_0: entered promiscuous mode [ 711.740203][T12571] Bluetooth: hci1: command tx timeout [ 713.820505][T12571] Bluetooth: hci1: command tx timeout [ 715.264013][T13254] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.264135][T13254] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.264388][T13254] bridge_slave_1: entered allmulticast mode [ 715.290263][T13254] bridge_slave_1: entered promiscuous mode [ 716.472275][T13254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.808962][T13254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.038243][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 717.054351][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 717.054774][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 717.061381][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 717.062042][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 717.943717][T13254] team0: Port device team_slave_0 added [ 718.830787][ T5114] Bluetooth: hci2: command 0x0406 tx timeout [ 719.242594][T13254] team0: Port device team_slave_1 added [ 719.409049][ T5114] Bluetooth: hci0: command tx timeout [ 721.419694][ T61] Bluetooth: hci0: command tx timeout [ 721.503215][T13254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.503232][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.503258][T13254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.654237][T13254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.654255][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.654279][T13254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.650228][ T61] Bluetooth: hci0: command tx timeout [ 725.659638][ T61] Bluetooth: hci0: command tx timeout [ 728.803064][T13254] hsr_slave_0: entered promiscuous mode [ 728.804548][T13254] hsr_slave_1: entered promiscuous mode [ 728.805512][T13254] debugfs: 'hsr0' already exists in 'hsr' [ 728.805535][T13254] Cannot create hsr debugfs directory [ 731.703219][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 731.815180][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 731.834164][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 731.835218][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 731.835964][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 734.779484][ T61] Bluetooth: hci5: command tx timeout [ 736.890101][ T5114] Bluetooth: hci5: command tx timeout [ 738.435069][T13487] chnl_net:caif_netlink_parms(): no params data found [ 738.968805][ T5114] Bluetooth: hci5: command tx timeout [ 741.258657][ T5114] Bluetooth: hci5: command tx timeout [ 744.370659][T13575] chnl_net:caif_netlink_parms(): no params data found [ 744.959798][T13487] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.959920][T13487] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.960258][T13487] bridge_slave_0: entered allmulticast mode [ 744.990198][T13487] bridge_slave_0: entered promiscuous mode [ 745.205432][T13487] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.205628][T13487] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.205917][T13487] bridge_slave_1: entered allmulticast mode [ 745.253840][T13487] bridge_slave_1: entered promiscuous mode [ 747.470341][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.478526][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.714405][T13487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.730654][T13487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.290548][T13487] team0: Port device team_slave_0 added [ 751.332286][T13487] team0: Port device team_slave_1 added [ 751.478995][T13575] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.479116][T13575] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.479335][T13575] bridge_slave_0: entered allmulticast mode [ 751.511308][T13575] bridge_slave_0: entered promiscuous mode [ 752.160774][T13575] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.160905][T13575] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.161232][T13575] bridge_slave_1: entered allmulticast mode [ 752.213769][T13575] bridge_slave_1: entered promiscuous mode [ 752.379443][T13487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.379461][T13487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.379486][T13487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.725850][T13487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.725869][T13487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.725895][T13487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.554252][T13653] chnl_net:caif_netlink_parms(): no params data found [ 754.622400][T13575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.980319][T13575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.931309][T13487] hsr_slave_0: entered promiscuous mode [ 755.932800][T13487] hsr_slave_1: entered promiscuous mode [ 755.933800][T13487] debugfs: 'hsr0' already exists in 'hsr' [ 755.933822][T13487] Cannot create hsr debugfs directory [ 756.621876][T13575] team0: Port device team_slave_0 added [ 756.625251][T13575] team0: Port device team_slave_1 added [ 758.762249][T13575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.762267][T13575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.762292][T13575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.031092][T13575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.031110][T13575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.031136][T13575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.411998][T13653] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.418275][T13653] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.418603][T13653] bridge_slave_0: entered allmulticast mode [ 762.421128][T13653] bridge_slave_0: entered promiscuous mode [ 763.763262][T13653] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.763426][T13653] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.763672][T13653] bridge_slave_1: entered allmulticast mode [ 763.766290][T13653] bridge_slave_1: entered promiscuous mode [ 764.689912][T13575] hsr_slave_0: entered promiscuous mode [ 764.908841][T13575] hsr_slave_1: entered promiscuous mode [ 764.925524][T13575] debugfs: 'hsr0' already exists in 'hsr' [ 764.925551][T13575] Cannot create hsr debugfs directory [ 765.304185][T13653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.311513][T13653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.383946][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 767.399505][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 767.402725][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 767.418224][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 767.430332][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 767.919809][T13653] team0: Port device team_slave_0 added [ 768.001710][T13653] team0: Port device team_slave_1 added [ 769.617178][ T61] Bluetooth: hci6: command tx timeout [ 771.747067][ T61] Bluetooth: hci6: command tx timeout [ 773.886918][ T61] Bluetooth: hci6: command tx timeout [ 774.589759][T13653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.589774][T13653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.589796][T13653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.671108][T13653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.671124][T13653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.671144][T13653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.016958][ T5114] Bluetooth: hci6: command tx timeout [ 777.512612][ T1479] hsr_slave_0: left promiscuous mode [ 777.676768][ T1479] hsr_slave_1: left promiscuous mode [ 777.678152][ T1479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.678218][ T1479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.448490][ T1479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.448520][ T1479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.517695][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 778.521225][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 778.521616][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 778.523359][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 778.524079][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 780.893697][ T5114] Bluetooth: hci1: command tx timeout [ 780.942665][ T1479] veth1_macvtap: left promiscuous mode [ 780.942916][ T1479] veth0_macvtap: left promiscuous mode [ 780.943122][ T1479] veth1_vlan: left promiscuous mode [ 780.943423][ T1479] veth0_vlan: left promiscuous mode [ 782.946199][ T5114] Bluetooth: hci1: command tx timeout [ 785.031660][ T5114] Bluetooth: hci1: command tx timeout [ 787.096361][ T5114] Bluetooth: hci1: command tx timeout [ 793.980165][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 794.007721][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 794.010640][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 794.030632][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 794.031352][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 796.147826][ T5114] Bluetooth: hci0: command tx timeout [ 798.215579][ T5114] Bluetooth: hci0: command tx timeout [ 800.512656][ T5114] Bluetooth: hci0: command tx timeout [ 802.535115][ T5114] Bluetooth: hci0: command tx timeout [ 803.422159][ T1479] team0 (unregistering): Port device team_slave_1 removed [ 804.377710][ T1479] team0 (unregistering): Port device team_slave_0 removed [ 808.039587][T14069] syz.1.3656 (14069) used greatest stack depth: 16128 bytes left [ 808.782228][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.782295][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 825.186014][T13843] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 828.715074][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 828.744609][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 829.319354][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 829.353891][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 829.356774][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 831.413658][ T61] Bluetooth: hci5: command tx timeout [ 831.736339][T13920] chnl_net:caif_netlink_parms(): no params data found [ 833.578728][ T61] Bluetooth: hci5: command tx timeout [ 835.653595][ T61] Bluetooth: hci5: command tx timeout [ 837.685778][T13987] chnl_net:caif_netlink_parms(): no params data found [ 837.856751][ T61] Bluetooth: hci5: command tx timeout [ 842.270684][T12571] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 842.281872][T12571] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 842.282282][T12571] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 842.284699][T12571] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 842.285405][T12571] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 844.204165][T13987] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.204357][T13987] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.204696][T13987] bridge_slave_0: entered allmulticast mode [ 844.241643][T13987] bridge_slave_0: entered promiscuous mode [ 845.253678][T13987] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.253803][T13987] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.254152][T13987] bridge_slave_1: entered allmulticast mode [ 845.256962][T13987] bridge_slave_1: entered promiscuous mode [ 845.637414][T13987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.735643][ T5114] Bluetooth: hci6: command tx timeout [ 847.812526][ T5114] Bluetooth: hci6: command tx timeout [ 847.905867][T13987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.323306][T14181] chnl_net:caif_netlink_parms(): no params data found [ 849.090851][T13987] team0: Port device team_slave_0 added [ 849.242572][T13987] team0: Port device team_slave_1 added [ 850.077891][ T61] Bluetooth: hci6: command tx timeout [ 852.152482][ T61] Bluetooth: hci6: command tx timeout [ 854.416969][T14181] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.417088][T14181] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.417451][T14181] bridge_slave_0: entered allmulticast mode [ 854.444942][T14181] bridge_slave_0: entered promiscuous mode [ 854.505638][T14181] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.505759][T14181] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.506105][T14181] bridge_slave_1: entered allmulticast mode [ 854.541106][T14181] bridge_slave_1: entered promiscuous mode [ 855.086880][T14181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.553984][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 855.567560][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 855.567938][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 855.568910][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 855.569798][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 855.848394][T14181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.822104][ T5114] Bluetooth: hci1: command tx timeout [ 860.121897][ T5114] Bluetooth: hci1: command tx timeout [ 861.173826][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3783'. [ 861.188762][T14181] team0: Port device team_slave_0 added [ 861.244613][T14181] team0: Port device team_slave_1 added [ 861.262129][T14257] chnl_net:caif_netlink_parms(): no params data found [ 861.902353][T14181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.902371][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.902395][T14181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.173435][ T61] Bluetooth: hci1: command tx timeout [ 862.615934][T14181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.615951][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.615976][T14181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.212023][ T61] Bluetooth: hci1: command tx timeout [ 867.527902][T14257] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.528023][T14257] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.528362][T14257] bridge_slave_0: entered allmulticast mode [ 867.531194][T14257] bridge_slave_0: entered promiscuous mode [ 867.963947][T14181] hsr_slave_0: entered promiscuous mode [ 868.003518][T14181] hsr_slave_1: entered promiscuous mode [ 868.017576][T14181] debugfs: 'hsr0' already exists in 'hsr' [ 868.017603][T14181] Cannot create hsr debugfs directory [ 868.043126][T14257] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.062802][T14257] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.063159][T14257] bridge_slave_1: entered allmulticast mode [ 868.471947][T14257] bridge_slave_1: entered promiscuous mode [ 870.385342][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.385409][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.916201][T14257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.309852][T14257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.575485][T14257] team0: Port device team_slave_0 added [ 873.330921][T14257] team0: Port device team_slave_1 added [ 876.335813][T14257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.335831][T14257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.335856][T14257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.602357][T14257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.602374][T14257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.602399][T14257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.225953][T14331] chnl_net:caif_netlink_parms(): no params data found [ 879.663039][T14257] hsr_slave_0: entered promiscuous mode [ 879.702197][T14257] hsr_slave_1: entered promiscuous mode [ 879.715948][T14257] debugfs: 'hsr0' already exists in 'hsr' [ 879.715974][T14257] Cannot create hsr debugfs directory [ 885.764307][T14331] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.764430][T14331] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.764683][T14331] bridge_slave_0: entered allmulticast mode [ 885.767359][T14331] bridge_slave_0: entered promiscuous mode [ 885.820628][T14331] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.820750][T14331] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.821128][T14331] bridge_slave_1: entered allmulticast mode [ 885.826021][T14331] bridge_slave_1: entered promiscuous mode [ 886.988488][T14331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.167584][T14331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.057768][T14331] team0: Port device team_slave_0 added [ 889.191797][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 889.196031][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 889.196411][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 889.264381][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 889.265126][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 890.083101][T14331] team0: Port device team_slave_1 added [ 890.316003][T14331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.316021][T14331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.316043][T14331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.325400][T14331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.325416][T14331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.325440][T14331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.870278][ T61] Bluetooth: hci0: command tx timeout [ 893.900921][ T5114] Bluetooth: hci0: command tx timeout [ 894.665024][T14331] hsr_slave_0: entered promiscuous mode [ 894.670811][T14331] hsr_slave_1: entered promiscuous mode [ 894.696884][T14331] debugfs: 'hsr0' already exists in 'hsr' [ 894.696912][T14331] Cannot create hsr debugfs directory [ 895.970167][ T5114] Bluetooth: hci0: command tx timeout [ 898.071402][ T5114] Bluetooth: hci0: command tx timeout [ 902.276779][T14508] chnl_net:caif_netlink_parms(): no params data found [ 902.903174][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 902.911605][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 902.912013][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 902.912998][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 902.913673][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 903.778391][T14508] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.778509][T14508] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.778883][T14508] bridge_slave_0: entered allmulticast mode [ 903.793035][T14508] bridge_slave_0: entered promiscuous mode [ 903.933434][T14508] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.933553][T14508] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.933923][T14508] bridge_slave_1: entered allmulticast mode [ 903.939819][T14508] bridge_slave_1: entered promiscuous mode [ 905.029342][ T5114] Bluetooth: hci7: command tx timeout [ 905.810378][T14508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.046266][T14508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.089279][ T5114] Bluetooth: hci7: command tx timeout [ 907.921595][T14508] team0: Port device team_slave_0 added [ 907.974772][T14508] team0: Port device team_slave_1 added [ 908.549660][T14508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.549676][T14508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.549695][T14508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.552677][T14508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.552691][T14508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.552716][T14508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.219174][ T5114] Bluetooth: hci7: command tx timeout [ 911.702008][ T5114] Bluetooth: hci7: command tx timeout [ 912.847322][T14508] hsr_slave_0: entered promiscuous mode [ 913.025419][T14508] hsr_slave_1: entered promiscuous mode [ 913.049458][T14508] debugfs: 'hsr0' already exists in 'hsr' [ 913.049484][T14508] Cannot create hsr debugfs directory [ 913.393283][T14563] chnl_net:caif_netlink_parms(): no params data found [ 918.531205][ T61] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 918.564203][ T61] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 918.766655][ T61] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 918.849725][ T61] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 918.850442][ T61] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 919.330002][T14563] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.330125][T14563] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.330359][T14563] bridge_slave_0: entered allmulticast mode [ 919.332529][T14563] bridge_slave_0: entered promiscuous mode [ 919.335272][T14563] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.335389][T14563] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.335610][T14563] bridge_slave_1: entered allmulticast mode [ 919.338083][T14563] bridge_slave_1: entered promiscuous mode [ 920.142841][T14563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.422582][T14563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.856044][T14563] team0: Port device team_slave_0 added [ 920.928584][T12571] Bluetooth: hci8: command tx timeout [ 920.957026][T14563] team0: Port device team_slave_1 added [ 923.025372][T12571] Bluetooth: hci8: command tx timeout [ 924.838379][T14563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.838395][T14563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.838419][T14563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.845504][T14563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.845520][T14563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.845544][T14563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.088475][T12571] Bluetooth: hci8: command tx timeout [ 925.758754][T14563] hsr_slave_0: entered promiscuous mode [ 925.811638][T14563] hsr_slave_1: entered promiscuous mode [ 925.812964][T14563] debugfs: 'hsr0' already exists in 'hsr' [ 925.813004][T14563] Cannot create hsr debugfs directory [ 927.410167][ T5114] Bluetooth: hci8: command tx timeout [ 929.890071][T14648] chnl_net:caif_netlink_parms(): no params data found [ 931.898572][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.898639][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.433531][T14648] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.433658][T14648] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.434044][T14648] bridge_slave_0: entered allmulticast mode [ 934.452650][T14648] bridge_slave_0: entered promiscuous mode [ 934.721311][T14648] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.721440][T14648] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.721752][T14648] bridge_slave_1: entered allmulticast mode [ 934.724535][T14648] bridge_slave_1: entered promiscuous mode [ 936.396981][T14648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.494415][T14648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.001224][T14648] team0: Port device team_slave_0 added [ 937.006489][T14648] team0: Port device team_slave_1 added [ 940.532780][T14648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.532799][T14648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.532824][T14648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.657722][T14648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.657741][T14648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.657767][T14648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.074271][T14648] hsr_slave_0: entered promiscuous mode [ 941.098231][T14648] hsr_slave_1: entered promiscuous mode [ 941.106261][T14648] debugfs: 'hsr0' already exists in 'hsr' [ 941.106289][T14648] Cannot create hsr debugfs directory [ 950.037251][ T5876] kworker/1:4 (5876) used greatest stack depth: 14912 bytes left [ 952.561090][T14844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 952.576922][T14844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 952.577344][T14844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 952.591507][T14844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 952.592290][T14844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 954.371072][T14844] Bluetooth: hci5: command 0x0406 tx timeout [ 954.686980][T14844] Bluetooth: hci9: command tx timeout [ 956.811087][T12571] Bluetooth: hci9: command tx timeout [ 957.810035][T14842] chnl_net:caif_netlink_parms(): no params data found [ 958.846987][T12571] Bluetooth: hci9: command tx timeout [ 960.652821][T14842] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.926988][T12571] Bluetooth: hci9: command tx timeout [ 960.986266][T14842] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.986668][T14842] bridge_slave_0: entered allmulticast mode [ 960.989728][T14842] bridge_slave_0: entered promiscuous mode [ 961.007525][T14842] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.007719][T14842] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.008046][T14842] bridge_slave_1: entered allmulticast mode [ 961.010807][T14842] bridge_slave_1: entered promiscuous mode [ 962.312170][T14842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.504396][T14842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.046818][T14844] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 965.057976][T14844] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 965.058440][T14844] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 965.059644][T14844] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 965.060436][T14844] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 966.401646][T14842] team0: Port device team_slave_0 added [ 966.464616][T14842] team0: Port device team_slave_1 added [ 967.089599][T12571] Bluetooth: hci10: command tx timeout [ 967.946894][T14842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.946912][T14842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.946934][T14842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.364460][T14842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.364477][T14842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.364503][T14842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.285788][T14844] Bluetooth: hci10: command tx timeout [ 969.565765][T14844] Bluetooth: hci6: command 0x0406 tx timeout [ 970.421015][T14842] hsr_slave_0: entered promiscuous mode [ 970.422797][T14842] hsr_slave_1: entered promiscuous mode [ 970.423967][T14842] debugfs: 'hsr0' already exists in 'hsr' [ 970.423989][T14842] Cannot create hsr debugfs directory [ 971.326188][T12571] Bluetooth: hci10: command tx timeout [ 973.667305][T12571] Bluetooth: hci10: command tx timeout [ 974.331506][T14903] chnl_net:caif_netlink_parms(): no params data found [ 979.079446][T14903] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.118588][T14903] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.119009][T14903] bridge_slave_0: entered allmulticast mode [ 979.146494][T14903] bridge_slave_0: entered promiscuous mode [ 979.186445][ T5114] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 979.210901][ T5114] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 979.225305][ T5114] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 979.261284][T14903] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.261417][T14903] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.261829][T14903] bridge_slave_1: entered allmulticast mode [ 979.297321][ T5114] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 979.613328][T14903] bridge_slave_1: entered promiscuous mode [ 979.675494][ T5114] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 979.806233][T12571] Bluetooth: hci1: command 0x0406 tx timeout [ 980.286785][T14903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.817041][T14903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.109703][T14844] Bluetooth: hci11: command tx timeout [ 982.689489][T14903] team0: Port device team_slave_0 added [ 982.969910][T14903] team0: Port device team_slave_1 added [ 984.194973][T14844] Bluetooth: hci11: command tx timeout [ 986.205135][T14844] Bluetooth: hci11: command tx timeout [ 988.344823][T14844] Bluetooth: hci11: command tx timeout [ 993.092659][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.092728][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.245909][T14903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.245926][T14903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.245951][T14903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.316794][T14903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.316810][T14903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.316835][T14903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.578527][T14903] hsr_slave_0: entered promiscuous mode [ 994.580268][T14903] hsr_slave_1: entered promiscuous mode [ 994.581362][T14903] debugfs: 'hsr0' already exists in 'hsr' [ 994.581384][T14903] Cannot create hsr debugfs directory [ 1001.392339][T14969] chnl_net:caif_netlink_parms(): no params data found [ 1003.003598][T14969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.003726][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.025811][T14969] bridge_slave_0: entered allmulticast mode [ 1003.043248][T14969] bridge_slave_0: entered promiscuous mode [ 1003.074888][T14969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.075015][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.075452][T14969] bridge_slave_1: entered allmulticast mode [ 1003.112825][T14969] bridge_slave_1: entered promiscuous mode [ 1005.418312][T14969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.441270][T14969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.326511][T14969] team0: Port device team_slave_0 added [ 1006.330613][T14969] team0: Port device team_slave_1 added [ 1008.548622][T14969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.548639][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.548665][T14969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.573407][T14969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.585629][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.585661][T14969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.899484][T14969] hsr_slave_0: entered promiscuous mode [ 1010.901211][T14969] hsr_slave_1: entered promiscuous mode [ 1010.902304][T14969] debugfs: 'hsr0' already exists in 'hsr' [ 1010.902327][T14969] Cannot create hsr debugfs directory [ 1015.023747][T12571] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1015.150563][T12571] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1015.151045][T12571] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1015.152253][T12571] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1015.178270][T12571] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1015.913164][T12571] Bluetooth: hci0: command 0x0406 tx timeout [ 1017.243246][T12571] Bluetooth: hci2: command tx timeout [ 1019.324730][T14844] Bluetooth: hci2: command tx timeout [ 1021.402946][T14844] Bluetooth: hci2: command tx timeout [ 1021.993464][T15117] chnl_net:caif_netlink_parms(): no params data found [ 1023.682740][T14844] Bluetooth: hci2: command tx timeout [ 1024.734972][ T5114] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1024.766480][ T5114] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1024.771930][ T5114] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1024.852894][ T5114] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1024.870701][ T5114] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1026.184767][T15117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.184889][T15117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.185160][T15117] bridge_slave_0: entered allmulticast mode [ 1026.224760][T15117] bridge_slave_0: entered promiscuous mode [ 1026.274046][T15117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.274166][T15117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.274577][T15117] bridge_slave_1: entered allmulticast mode [ 1026.669328][T15117] bridge_slave_1: entered promiscuous mode [ 1026.743108][ T5114] Bluetooth: hci7: command 0x0406 tx timeout [ 1026.922870][ T5114] Bluetooth: hci12: command tx timeout [ 1027.800059][T15117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.162451][ T5114] Bluetooth: hci12: command tx timeout [ 1029.346769][T15117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.370016][T12571] Bluetooth: hci12: command tx timeout [ 1032.419682][T15117] team0: Port device team_slave_0 added [ 1032.796091][T15117] team0: Port device team_slave_1 added [ 1033.722332][T12571] Bluetooth: hci12: command tx timeout [ 1034.008414][T15117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.008430][T15117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.008462][T15117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.158470][T15117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.158489][T15117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.158514][T15117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.406307][T15117] hsr_slave_0: entered promiscuous mode [ 1038.408038][T15117] hsr_slave_1: entered promiscuous mode [ 1038.409151][T15117] debugfs: 'hsr0' already exists in 'hsr' [ 1038.409173][T15117] Cannot create hsr debugfs directory [ 1039.941267][T15162] chnl_net:caif_netlink_parms(): no params data found [ 1039.967072][T14844] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1039.972182][T14844] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1039.992414][T14844] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1040.003116][T14844] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1040.012253][T14844] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1040.522309][ T37] INFO: task syz-executor:14257 blocked for more than 143 seconds. [ 1040.522343][ T37] Tainted: G L syzkaller #0 [ 1040.522354][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1040.522363][ T37] task:syz-executor state:D stack:20744 pid:14257 tgid:14257 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1040.522419][ T37] Call Trace: [ 1040.522430][ T37] [ 1040.522445][ T37] __schedule+0x14fb/0x52c0 [ 1040.522660][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1040.522715][ T37] ? rt_mutex_adjust_prio_chain+0x21fd/0x23f0 [ 1040.522736][ T37] ? __pfx___schedule+0x10/0x10 [ 1040.522772][ T37] rt_mutex_schedule+0x76/0xf0 [ 1040.522852][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1040.522896][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1040.522918][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1040.522944][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1040.522981][ T37] ? del_device_store+0xd7/0x370 [ 1040.523098][ T37] ? del_device_store+0xd7/0x370 [ 1040.523117][ T37] mutex_lock_nested+0x168/0x1d0 [ 1040.523141][ T37] del_device_store+0xd7/0x370 [ 1040.523161][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 1040.523246][ T37] ? __pfx_del_device_store+0x10/0x10 [ 1040.523266][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 1040.523291][ T37] ? sysfs_kf_write+0x166/0x260 [ 1040.523318][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1040.523341][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 1040.523378][ T37] vfs_write+0x629/0xba0 [ 1040.523481][ T37] ? __pfx_vfs_write+0x10/0x10 [ 1040.523507][ T37] ? kmem_cache_free+0x185/0x6b0 [ 1040.523584][ T37] ? do_sys_openat2+0x14c/0x200 [ 1040.523620][ T37] ksys_write+0x156/0x270 [ 1040.523645][ T37] ? __pfx_ksys_write+0x10/0x10 [ 1040.523678][ T37] do_syscall_64+0x14d/0xf80 [ 1040.523740][ T37] ? trace_irq_disable+0x3b/0x150 [ 1040.523774][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.523811][ T37] ? clear_bhb_loop+0x40/0x90 [ 1040.523834][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.523852][ T37] RIP: 0033:0x7f9d5f06cece [ 1040.523869][ T37] RSP: 002b:00007ffcf1e0bdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1040.523888][ T37] RAX: ffffffffffffffda RBX: 00005555748d6500 RCX: 00007f9d5f06cece [ 1040.523902][ T37] RDX: 0000000000000001 RSI: 00007ffcf1e0be40 RDI: 0000000000000005 [ 1040.523913][ T37] RBP: 00007f9d5f14343f R08: 0000000000000000 R09: 0000000000000000 [ 1040.523931][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.523942][ T37] R13: 00007ffcf1e0be40 R14: 00007f9d5fe54620 R15: 0000000000000003 [ 1040.523973][ T37] [ 1040.524020][ T37] [ 1040.524020][ T37] Showing all locks held in the system: [ 1040.524031][ T37] 8 locks held by ktimers/1/29: [ 1040.524043][ T37] 1 lock held by khungtaskd/37: [ 1040.524053][ T37] #0: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1040.524123][ T37] 3 locks held by kworker/0:2/956: [ 1040.524138][ T37] 5 locks held by kworker/u8:12/1479: [ 1040.524148][ T37] #0: ffff88801aed9138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1040.524195][ T37] #1: ffffc90006537c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1040.524241][ T37] #2: ffffffff8f14af80 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1040.524366][ T37] #3: ffff88805da257b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 1040.524483][ T37] #4: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1040.524547][ T37] 2 locks held by getty/5551: [ 1040.524557][ T37] #0: ffff888027c880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1040.524656][ T37] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1040.524727][ T37] 6 locks held by syz-executor/5806: [ 1040.524738][ T37] 9 locks held by syz-executor/5807: [ 1040.524758][ T37] 3 locks held by kworker/u8:4/12412: [ 1040.524769][ T37] 3 locks held by kworker/u9:2/12571: [ 1040.524779][ T37] #0: ffff88806c3fb138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1040.524825][ T37] #1: ffffc90004357c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1040.524871][ T37] #2: ffff888061a1cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1040.524968][ T37] 1 lock held by syz-executor/12667: [ 1040.524978][ T37] #0: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1040.525021][ T37] 5 locks held by kworker/0:1/12670: [ 1040.525038][ T37] 7 locks held by syz-executor/14181: [ 1040.525048][ T37] #0: ffff8880114fa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1040.525097][ T37] #1: ffff8880110e3478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1040.525142][ T37] #2: ffff888027d45a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1040.525191][ T37] #3: ffffffff8e9c7338 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1040.525235][ T37] #4: ffff8880409700d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1040.525362][ T37] #5: ffff8880384c6300 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1040.525438][ T37] #6: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1040.525482][ T37] 4 locks held by syz-executor/14257: [ 1040.525492][ T37] #0: ffff8880114fa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1040.525539][ T37] #1: ffff88806e5be478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1040.525584][ T37] #2: ffff888027d45a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1040.525650][ T37] #3: ffffffff8e9c7338 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1040.525695][ T37] 4 locks held by syz-executor/14331: [ 1040.525704][ T37] #0: ffff8880114fa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1040.525752][ T37] #1: ffff88803b423478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1040.525796][ T37] #2: ffff888027d45a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1040.525845][ T37] #3: ffffffff8e9c7338 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1040.525889][ T37] 4 locks held by syz-executor/14508: [ 1040.525900][ T37] #0: ffff8880114fa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1040.525954][ T37] #1: ffff8880513ed878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1040.526001][ T37] #2: ffff888027d45a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1040.526045][ T37] #3: ffffffff8e9c7338 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1040.526087][ T37] 4 locks held by syz-executor/14563: [ 1040.526095][ T37] #0: ffff8880114fa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1040.526141][ T37] #1: ffff888076ca1878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1040.526185][ T37] #2: ffff888027d45a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1040.526233][ T37] #3: ffffffff8e9c7338 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1040.526278][ T37] 4 locks held by syz-executor/14648: [ 1040.526288][ T37] #0: ffff8880114fa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1040.526335][ T37] #1: ffff88807e7fa878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1040.526379][ T37] #2: ffff888027d45a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1040.526427][ T37] #3: ffffffff8e9c7338 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1040.526472][ T37] 4 locks held by syz-executor/14842: [ 1040.526481][ T37] #0: ffff8880114fa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1040.526529][ T37] #1: ffff888053416c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1040.526573][ T37] #2: ffff888027d45a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1040.526623][ T37] #3: ffffffff8e9c7338 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1040.526666][ T37] 4 locks held by syz-executor/14903: [ 1040.526676][ T37] #0: ffff8880114fa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1040.526724][ T37] #1: ffff88808d3d1078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1040.526768][ T37] #2: ffff888027d45a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1040.526821][ T37] #3: ffffffff8e9c7338 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1040.526865][ T37] 4 locks held by syz-executor/14969: [ 1040.526875][ T37] #0: ffff8880114fa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1040.526929][ T37] #1: ffff888096c6f078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1040.526974][ T37] #2: ffff888027d45a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1040.527023][ T37] #3: ffffffff8e9c7338 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1040.527067][ T37] 3 locks held by syz-executor/15117: [ 1040.527079][ T37] 1 lock held by syz-executor/15162: [ 1040.527089][ T37] 1 lock held by syz-executor/15238: [ 1040.527099][ T37] #0: ffffffff8f1597b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1040.527215][ T37] [ 1040.527219][ T37] ============================================= [ 1040.527219][ T37] [ 1040.527236][ T37] NMI backtrace for cpu 0 [ 1040.527259][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1040.527293][ T37] Tainted: [L]=SOFTLOCKUP [ 1040.527300][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1040.527310][ T37] Call Trace: [ 1040.527317][ T37] [ 1040.527325][ T37] dump_stack_lvl+0xe8/0x150 [ 1040.527361][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1040.527410][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1040.527452][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1040.527479][ T37] sys_info+0x135/0x170 [ 1040.527526][ T37] watchdog+0xfd9/0x1030 [ 1040.527558][ T37] ? watchdog+0x21a/0x1030 [ 1040.527586][ T37] kthread+0x388/0x470 [ 1040.527604][ T37] ? __pfx_watchdog+0x10/0x10 [ 1040.527622][ T37] ? __pfx_kthread+0x10/0x10 [ 1040.527641][ T37] ret_from_fork+0x51e/0xb90 [ 1040.527667][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1040.527688][ T37] ? __switch_to+0xc7d/0x1450 [ 1040.527727][ T37] ? __pfx_kthread+0x10/0x10 [ 1040.527746][ T37] ret_from_fork_asm+0x1a/0x30 [ 1040.527778][ T37] [ 1040.527785][ T37] Sending NMI from CPU 0 to CPUs 1: [ 1040.527813][ C1] NMI backtrace for cpu 1 [ 1040.527828][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1040.527850][ C1] Tainted: [L]=SOFTLOCKUP [ 1040.527856][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1040.527864][ C1] RIP: 0010:__lock_acquire+0x460/0x2cf0 [ 1040.527896][ C1] Code: 0f 44 ca 89 0c 24 45 8b a6 70 0b 00 00 41 8d 4c 24 ff 83 f9 ff 41 bd ff ff ff ff 44 0f 4c e9 41 ff c5 41 8d 5c 24 01 49 ff cc <89> d9 83 c1 fe 78 40 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d [ 1040.527908][ C1] RSP: 0018:ffffc90000a3ea78 EFLAGS: 00000046 [ 1040.527921][ C1] RAX: 000000000002000b RBX: 0000000000000001 RCX: 00000000000400fb [ 1040.527932][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1040.527942][ C1] RBP: ffff88801d2bc898 R08: ffffffff81766a15 R09: ffffffff8ddcd780 [ 1040.527953][ C1] R10: ffffc90000a3ed58 R11: ffffffff81af68e0 R12: ffffffffffffffff [ 1040.527964][ C1] R13: 0000000000000000 R14: ffff88801d2bbc80 R15: 0000000000000000 [ 1040.527974][ C1] FS: 0000000000000000(0000) GS:ffff888126442000(0000) knlGS:0000000000000000 [ 1040.527987][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1040.527997][ C1] CR2: 000055558cae4a28 CR3: 000000003349c000 CR4: 00000000003526f0 [ 1040.528011][ C1] Call Trace: [ 1040.528016][ C1] [ 1040.528025][ C1] ? netif_rx_internal+0x120/0x590 [ 1040.528076][ C1] ? __pfx_netif_rx_internal+0x10/0x10 [ 1040.528093][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1040.528115][ C1] lock_acquire+0xf0/0x2e0 [ 1040.528135][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1040.528150][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1040.528163][ C1] ? net_rx_action+0x696/0xe00 [ 1040.528200][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1040.528213][ C1] unwind_next_frame+0xc2/0x23c0 [ 1040.528226][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1040.528242][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1040.528256][ C1] ? __napi_poll+0xaf/0x580 [ 1040.528268][ C1] ? net_rx_action+0x696/0xe00 [ 1040.528283][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1040.528311][ C1] arch_stack_walk+0x11b/0x150 [ 1040.528327][ C1] ? net_rx_action+0x696/0xe00 [ 1040.528343][ C1] stack_trace_save+0xa9/0x100 [ 1040.528360][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1040.528379][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1040.528398][ C1] kasan_save_track+0x3e/0x80 [ 1040.528447][ C1] ? kasan_save_track+0x3e/0x80 [ 1040.528463][ C1] ? kasan_save_free_info+0x46/0x50 [ 1040.528501][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1040.528517][ C1] ? kmem_cache_free+0x185/0x6b0 [ 1040.528536][ C1] ? skb_release_data+0x6c3/0x940 [ 1040.528579][ C1] ? __kfree_skb+0x5d/0x210 [ 1040.528594][ C1] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 1040.528653][ C1] ? nft_synproxy_do_eval+0x305/0x580 [ 1040.528669][ C1] ? nft_do_chain+0x45e/0x1990 [ 1040.528732][ C1] ? nft_do_chain_inet+0x29d/0x380 [ 1040.528794][ C1] ? nf_hook_slow+0xc5/0x220 [ 1040.528840][ C1] ? NF_HOOK+0x21f/0x3c0 [ 1040.528889][ C1] ? NF_HOOK+0x336/0x3c0 [ 1040.528905][ C1] ? process_backlog+0x569/0xc60 [ 1040.528919][ C1] ? __napi_poll+0xaf/0x580 [ 1040.528931][ C1] ? net_rx_action+0x696/0xe00 [ 1040.528961][ C1] kasan_save_free_info+0x46/0x50 [ 1040.528975][ C1] __kasan_slab_free+0x5c/0x80 [ 1040.528993][ C1] kmem_cache_free+0x185/0x6b0 [ 1040.529011][ C1] ? skb_release_data+0x6c3/0x940 [ 1040.529030][ C1] skb_release_data+0x6c3/0x940 [ 1040.529050][ C1] __kfree_skb+0x5d/0x210 [ 1040.529066][ C1] nft_synproxy_eval_v4+0x352/0x4e0 [ 1040.529086][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1040.529104][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1040.529123][ C1] nft_synproxy_do_eval+0x305/0x580 [ 1040.529142][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1040.529166][ C1] nft_do_chain+0x45e/0x1990 [ 1040.529184][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1040.529201][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1040.529227][ C1] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1040.529244][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1040.529260][ C1] nft_do_chain_inet+0x29d/0x380 [ 1040.529277][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1040.529296][ C1] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1040.529313][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1040.529330][ C1] nf_hook_slow+0xc5/0x220 [ 1040.529346][ C1] NF_HOOK+0x21f/0x3c0 [ 1040.529364][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1040.529381][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1040.529397][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1040.529412][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1040.529455][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1040.529474][ C1] ? skb_dst+0x4f/0xd0 [ 1040.529490][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1040.529509][ C1] NF_HOOK+0x336/0x3c0 [ 1040.529524][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1040.529543][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1040.529560][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1040.529575][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1040.529592][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1040.529611][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1040.529627][ C1] ? process_backlog+0x271/0xc60 [ 1040.529641][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1040.529658][ C1] process_backlog+0x569/0xc60 [ 1040.529685][ C1] __napi_poll+0xaf/0x580 [ 1040.529697][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1040.529713][ C1] net_rx_action+0x696/0xe00 [ 1040.529733][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1040.529758][ C1] handle_softirqs+0x1de/0x6f0 [ 1040.529786][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1040.529806][ C1] run_ktimerd+0x69/0x100 [ 1040.529824][ C1] smpboot_thread_fn+0x541/0xa50 [ 1040.529844][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1040.529866][ C1] kthread+0x388/0x470 [ 1040.529880][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1040.529898][ C1] ? __pfx_kthread+0x10/0x10 [ 1040.529913][ C1] ret_from_fork+0x51e/0xb90 [ 1040.529933][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1040.529950][ C1] ? __switch_to+0xc7d/0x1450 [ 1040.529968][ C1] ? __pfx_kthread+0x10/0x10 [ 1040.529982][ C1] ret_from_fork_asm+0x1a/0x30 [ 1040.530002][ C1] [ 1040.530821][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1040.530837][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1040.530861][ T37] Tainted: [L]=SOFTLOCKUP [ 1040.530868][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1040.530878][ T37] Call Trace: [ 1040.530886][ T37] [ 1040.530893][ T37] vpanic+0x56c/0xa60 [ 1040.530928][ T37] ? __pfx_vpanic+0x10/0x10 [ 1040.530960][ T37] panic+0xc5/0xd0 [ 1040.530983][ T37] ? __pfx_panic+0x10/0x10 [ 1040.531003][ T37] ? printk_trigger_flush+0x117/0x180 [ 1040.531027][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1040.531055][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1040.531083][ T37] watchdog+0x1023/0x1030 [ 1040.531109][ T37] ? watchdog+0x21a/0x1030 [ 1040.531136][ T37] kthread+0x388/0x470 [ 1040.531155][ T37] ? __pfx_watchdog+0x10/0x10 [ 1040.531172][ T37] ? __pfx_kthread+0x10/0x10 [ 1040.531192][ T37] ret_from_fork+0x51e/0xb90 [ 1040.531216][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1040.531237][ T37] ? __switch_to+0xc7d/0x1450 [ 1040.531261][ T37] ? __pfx_kthread+0x10/0x10 [ 1040.531281][ T37] ret_from_fork_asm+0x1a/0x30 [ 1040.531313][ T37] [ 1040.531457][ T37] Kernel Offset: disabled