last executing test programs: 4m55.807703904s ago: executing program 0 (id=69): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 4m55.325883328s ago: executing program 0 (id=76): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xffff, 0x6d7, 0x0, 0x79, 0x3, "5acf8f53872ebc82"}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000480)="b9e94d05d9adf5e171261092d920194b9c340d", 0x13}], 0x1) 4m55.024326306s ago: executing program 0 (id=80): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) 4m54.532617642s ago: executing program 0 (id=85): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487a71fe2c251244961f2a74ac35ff5fc62c141dd3649af9d1587d741f8369d27d6c3d109bfffb92d594b3545a0b324", 0x5d}], 0x1}, 0x0) 4m54.060028301s ago: executing program 0 (id=91): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) fcntl$setstatus(r0, 0x4, 0x2c00) 4m53.768382562s ago: executing program 0 (id=95): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27050200340f14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600004000000000805db18fd822e3f0e1e15ac708693eb6a76ee23c580d48a1", 0x5f}, {&(0x7f0000000380)="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", 0xefc}], 0x2}, 0x20008010) 4m38.644602058s ago: executing program 32 (id=95): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27050200340f14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600004000000000805db18fd822e3f0e1e15ac708693eb6a76ee23c580d48a1", 0x5f}, {&(0x7f0000000380)="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", 0xefc}], 0x2}, 0x20008010) 3m59.101280013s ago: executing program 4 (id=629): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) move_pages(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000000540), 0x0) 3m57.999676288s ago: executing program 4 (id=633): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000b00)={0x1, @raw_data="a3cee4611ce72e82177fe53c177fe53ca3e9a1314ef9ab611e95c6105be0d22400d969dc0c6753df3aa5fc6e26dc96c7bc800431bfacaf375bdd5cae064862716842b61348cc0aafddf01bfab25ee29ac6cd223f025558d60960b013139afc82b24d86b68f1eafe6b266c04b792fa9ae85329d3073427f831269b33de1ed5a17b9efe4c8a1ea5b675e4f1631d06a6b984224b8d8ba5b1872c12be90256a3758d2a5012296fabdffeb4a760063b00da991d7743bde9ba9a29ac05b2e02c7ffc690ffcad027adc538c"}) 3m57.630848045s ago: executing program 4 (id=635): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000006800010000000000000000000a00000000000000280008802400010000000000000000000000040000000000fe8000000000000000000000000000aa060007000500000008000500", @ANYRES32=r0], 0x50}}, 0x0) 3m54.774665488s ago: executing program 4 (id=636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000008700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c27438ffffffffcb864bd57221bc", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m54.750031124s ago: executing program 4 (id=637): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b3c, 0x0) 3m54.745890339s ago: executing program 4 (id=638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0) 3m41.106474344s ago: executing program 33 (id=638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0) 1m19.007418859s ago: executing program 1 (id=2367): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sm3\x00'}}) 1m17.460746254s ago: executing program 1 (id=2384): r0 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x503a7000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x20) 1m17.22690487s ago: executing program 1 (id=2387): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40043, @mcast1, 0xf}, {0x2, 0xfff8, 0xc00, @empty, 0x10000}, r1, 0x9dffffff}}, 0x48) 1m17.008714438s ago: executing program 1 (id=2390): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x920421, 0x0) 1m16.890944487s ago: executing program 1 (id=2392): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$getenv(0x4201, r0, 0x9, &(0x7f0000000280)) 1m16.048586696s ago: executing program 1 (id=2398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r1, 0x5, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x30}}, 0x0) 55.656160532s ago: executing program 6 (id=2513): setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) lchown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 55.584098238s ago: executing program 6 (id=2514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 55.056331087s ago: executing program 6 (id=2515): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r1, &(0x7f0000000040)='\x00', 0x1, 0x1300) 54.995818028s ago: executing program 6 (id=2516): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x9, 0x1) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 54.672714569s ago: executing program 6 (id=2517): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0xb5}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 54.370770289s ago: executing program 6 (id=2518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000000000000b2000040ed"]) 47.241882931s ago: executing program 3 (id=2539): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}]}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0xfffffffe, @empty, 0xca70}}, 0x0, 0x0, 0x40000002, 0x4, 0xa17433da3c5d69a1, 0x2, 0x81}, 0x9c) 47.180177813s ago: executing program 3 (id=2540): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) setreuid(0x0, 0xee00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0xbc, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_tunnel_key={0xa4, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffff8}]}, {0x39, 0x6, "d97de479e66de707db2b8984b3e0f623b9779a17091e15640b2aaeeb19e747dfccb0a477e3a22664399c9594860524a751939e1905"}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 46.91757859s ago: executing program 3 (id=2542): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 46.353547733s ago: executing program 2 (id=2545): setresuid(0x0, 0xee00, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 45.957554413s ago: executing program 3 (id=2549): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 45.248419152s ago: executing program 2 (id=2550): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500"], 0x50) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 45.164618898s ago: executing program 2 (id=2551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x42}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r2, r1}, 0xc) 44.857906696s ago: executing program 2 (id=2553): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 44.471359239s ago: executing program 2 (id=2555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000070a057a00000000000000000a0040010900010073797a31000000000900020073797a"], 0x2c}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 43.879537586s ago: executing program 3 (id=2556): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 43.852352968s ago: executing program 3 (id=2558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x7, 0x1, 0x0, r2, 0x4}) 43.010719188s ago: executing program 2 (id=2561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de130101c0"]) 39.121068876s ago: executing program 34 (id=2518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000000000000b2000040ed"]) 28.673380045s ago: executing program 35 (id=2558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x7, 0x1, 0x0, r2, 0x4}) 27.645654431s ago: executing program 36 (id=2561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de130101c0"]) 16.55160892s ago: executing program 5 (id=2631): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xdddd1000, 0x100000, 0x4, 0x8, 0x3, 0xfb, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x9}, {}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x54}) 16.48243739s ago: executing program 5 (id=2632): timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mlockall(0x7) 16.345893289s ago: executing program 5 (id=2633): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/133, 0x18}, {&(0x7f0000000940)=""/114}], 0x44) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 16.253724177s ago: executing program 5 (id=2634): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000180)={0x2, 0x0, @multicast2, 0x4}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 16.190345577s ago: executing program 5 (id=2635): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 15.538570272s ago: executing program 5 (id=2636): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3d}}]}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 0s ago: executing program 37 (id=2636): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3d}}]}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) kernel console output (not intermixed with test programs): 224.814461][ T5993] usb 2-1: selecting invalid altsetting 0 [ 224.814499][ T5993] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 224.856367][ T5993] usb 2-1: USB disconnect, device number 12 [ 225.244345][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 225.399605][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 225.403223][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.403270][ T31] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 225.403294][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.446392][ T31] usb 4-1: config 0 descriptor?? [ 225.785934][ T8706] dummy0: entered promiscuous mode [ 225.786153][ T8706] macvtap1: entered promiscuous mode [ 225.900487][ T31] lenovo 0003:17EF:60A3.0017: hidraw0: USB HID v0.80 Device [HID 17ef:60a3] on usb-dummy_hcd.3-1/input0 [ 226.097474][ T5993] usb 4-1: USB disconnect, device number 10 [ 226.286032][ T8716] fido_id[8716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 227.539654][ T8732] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 227.747758][ T8754] pimreg: entered allmulticast mode [ 227.776068][ T8755] pimreg: left allmulticast mode [ 228.149717][ T8769] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1150'. [ 228.573202][ T8769] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1150'. [ 229.974443][ T8804] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1166'. [ 230.085199][ T8811] program syz.6.1169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.444087][ T5891] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 230.596671][ T5891] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.596698][ T5891] usb 2-1: config 0 has no interface number 0 [ 230.620484][ T5891] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 230.620518][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.620538][ T5891] usb 2-1: Product: syz [ 230.620551][ T5891] usb 2-1: Manufacturer: syz [ 230.620566][ T5891] usb 2-1: SerialNumber: syz [ 230.660935][ T8829] program syz.5.1179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.682469][ T5891] usb 2-1: config 0 descriptor?? [ 230.895311][ T5891] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 230.901383][ T5891] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 230.901824][ T5891] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 230.901873][ T5891] usb 2-1: media controller created [ 230.967390][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.970971][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 231.388612][ T8844] bpf: Bad value for 'gid' [ 232.076320][ T5891] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 232.150798][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1193'. [ 232.239789][ T5891] usb 2-1: USB disconnect, device number 13 [ 232.239964][ T8863] ip6gre1: entered promiscuous mode [ 232.239984][ T8863] ip6gre1: entered allmulticast mode [ 232.300027][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.300387][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.315974][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.464216][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.589946][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.026476][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'. [ 234.989336][ T8951] netlink: 212 bytes leftover after parsing attributes in process `syz.6.1220'. [ 235.694102][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 235.848977][ T31] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 235.849008][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.892323][ T31] usb 7-1: config 0 descriptor?? [ 235.924572][ T31] cp210x 7-1:0.0: cp210x converter detected [ 236.074223][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.318111][ T31] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 236.386830][ T31] usb 7-1: cp210x converter now attached to ttyUSB0 [ 236.556470][ T5993] usb 7-1: USB disconnect, device number 3 [ 236.604956][ T5993] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 236.724700][ T5993] cp210x 7-1:0.0: device disconnected [ 238.283770][ T9025] sctp: [Deprecated]: syz.6.1242 (pid 9025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.283770][ T9025] Use struct sctp_sack_info instead [ 241.245247][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1278'. [ 241.814328][ T993] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 241.920225][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1288'. [ 241.964037][ T993] usb 2-1: Using ep0 maxpacket: 16 [ 241.967071][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.967116][ T993] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 241.967138][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.973681][ T993] usb 2-1: config 0 descriptor?? [ 242.241221][ T37] audit: type=1326 audit(1763365038.335:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9137 comm="syz.5.1291" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1acfedf6c9 code=0x0 [ 242.596583][ T993] hid-led 0003:1D34:000A.0018: probe with driver hid-led failed with error -71 [ 242.622205][ T993] usb 2-1: USB disconnect, device number 14 [ 243.537845][ T9171] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 244.154157][ T5891] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 244.154176][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.194152][ T5884] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 244.304257][ T5891] usb 7-1: Using ep0 maxpacket: 16 [ 244.310224][ T5891] usb 7-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 244.310252][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.310265][ T5891] usb 7-1: Product: syz [ 244.310273][ T5891] usb 7-1: Manufacturer: syz [ 244.310280][ T5891] usb 7-1: SerialNumber: syz [ 244.347487][ T5884] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 244.347521][ T5884] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 244.347559][ T5884] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.347581][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.432790][ T9187] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 244.765564][ T5891] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.050821][ T5884] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.059901][ T5891] snd-usb-audio 7-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 245.227557][ T5891] usb 7-1: USB disconnect, device number 4 [ 245.286232][ T9215] loop7: detected capacity change from 0 to 7 [ 245.303349][ T5884] usb 3-1: USB disconnect, device number 12 [ 245.319561][ T7125] udevd[7125]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.362060][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.362226][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.389583][ T9215] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.389618][ T9215] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.390291][ T9215] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.390321][ T9215] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.390456][ T9215] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.390481][ T9215] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.390635][ T9215] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.390660][ T9215] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.390805][ T9215] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.390830][ T9215] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.390958][ T9215] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.390988][ T9215] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.391076][ T9215] ldm_validate_partition_table(): Disk read failed. [ 245.391133][ T9215] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.391157][ T9215] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.391287][ T9215] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.391311][ T9215] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.392333][ T9215] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.392365][ T9215] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.392588][ T9215] Dev loop7: unable to read RDB block 0 [ 245.393076][ T9215] loop7: unable to read partition table [ 245.393310][ T9215] loop7: partition table beyond EOD, truncated [ 245.393343][ T9215] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 245.721502][ T6902] udevd[6902]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.816869][ T5818] block nbd0: Receive control failed (result -32) [ 247.394107][ T5914] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 247.544432][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 247.547293][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 247.550509][ T5914] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 247.550540][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.550560][ T5914] usb 6-1: Product: syz [ 247.550575][ T5914] usb 6-1: Manufacturer: syz [ 247.550589][ T5914] usb 6-1: SerialNumber: syz [ 247.611592][ T5914] usb 6-1: config 0 descriptor?? [ 247.629089][ T5914] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 247.629127][ T5914] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 248.251637][ T5914] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 248.546040][ T5914] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 248.546083][ T5914] em28xx 6-1:0.0: board has no eeprom [ 248.585286][ T9306] openvswitch: netlink: nsh attr 0 has unexpected len 29281 expected 0 [ 248.585326][ T9306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.634397][ T5914] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 248.634425][ T5914] em28xx 6-1:0.0: dvb set to bulk mode. [ 248.636396][ T9] em28xx 6-1:0.0: Binding DVB extension [ 248.694758][ T5914] usb 6-1: USB disconnect, device number 6 [ 248.697120][ T5914] em28xx 6-1:0.0: Disconnecting em28xx [ 248.845577][ T9] em28xx 6-1:0.0: Registering input extension [ 248.849461][ T5914] em28xx 6-1:0.0: Closing input extension [ 248.992255][ T5914] em28xx 6-1:0.0: Freeing device [ 249.223730][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1375'. [ 249.223766][ T9325] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1375'. [ 249.296705][ T9325] vlan2: entered allmulticast mode [ 249.476312][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1377'. [ 249.574145][ T5821] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 249.738127][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.738154][ T5821] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.739675][ T5821] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.739701][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.739718][ T5821] usb 2-1: SerialNumber: syz [ 249.859305][ T9345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1383'. [ 249.873670][ T9345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1383'. [ 249.910851][ T9347] C: renamed from team_slave_0 (while UP) [ 249.956649][ T9347] netlink: 'syz.5.1384': attribute type 3 has an invalid length. [ 249.956672][ T9347] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1384'. [ 249.957384][ T9347] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 250.021962][ T5821] usb 2-1: 0:2 : does not exist [ 250.129215][ T5821] usb 2-1: USB disconnect, device number 15 [ 250.415256][ T7125] udevd[7125]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.358396][ T5821] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 251.483247][ T9355] syz.6.1390 (9355): drop_caches: 2 [ 251.506831][ T5821] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 251.506861][ T5821] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 251.506880][ T5821] usb 3-1: config 135 has no interface number 0 [ 251.506913][ T5821] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 251.506954][ T5821] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 251.506982][ T5821] usb 3-1: config 135 interface 230 has no altsetting 0 [ 251.518332][ T5821] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 251.518359][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.518379][ T5821] usb 3-1: Product: syz [ 251.518394][ T5821] usb 3-1: Manufacturer: syz [ 251.518408][ T5821] usb 3-1: SerialNumber: syz [ 251.644004][ T5821] uvcvideo 3-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 251.644040][ T5821] uvcvideo 3-1:135.230: No valid video chain found. [ 251.854724][ T5821] usb 3-1: USB disconnect, device number 13 [ 252.090485][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'. [ 252.090507][ T9403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1411'. [ 252.124057][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 252.287565][ T9408] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 252.294469][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 252.296882][ T9] usb 2-1: config 0 interface 0 altsetting 218 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.296912][ T9] usb 2-1: config 0 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 252.296938][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 252.296971][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 252.296992][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.302378][ T9] usb 2-1: config 0 descriptor?? [ 252.761109][ T9] redragon 0003:0C45:760B.0019: unknown main item tag 0x6 [ 252.761147][ T9] redragon 0003:0C45:760B.0019: item fetching failed at offset 5/7 [ 252.761979][ T9] redragon 0003:0C45:760B.0019: probe with driver redragon failed with error -22 [ 252.974187][ T5891] usb 2-1: USB disconnect, device number 16 [ 253.549460][ T5821] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 253.734784][ T5821] usb 7-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 253.734814][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.740264][ T5821] usb 7-1: config 0 descriptor?? [ 254.090898][ T9410] syz.2.1414 (9410): drop_caches: 2 [ 254.166141][ T5821] apple 0003:05AC:029F.001A: unbalanced delimiter at end of report description [ 254.166960][ T5821] apple 0003:05AC:029F.001A: parse failed [ 254.167064][ T5821] apple 0003:05AC:029F.001A: probe with driver apple failed with error -22 [ 254.416770][ T5914] usb 7-1: USB disconnect, device number 5 [ 254.498733][ T9450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1432'. [ 255.280310][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1438'. [ 255.681775][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.681845][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.875054][ T9480] batadv_slave_0: entered promiscuous mode [ 255.879122][ T9480] batman_adv: batadv0: Adding interface: macsec1 [ 255.879136][ T9480] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.879164][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.879179][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.879192][ T9480] batman_adv: batadv0: Interface activated: macsec1 [ 256.094051][ T5821] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 256.184038][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 256.250269][ T5821] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 256.250300][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.250318][ T5821] usb 4-1: Product: syz [ 256.250331][ T5821] usb 4-1: Manufacturer: syz [ 256.250346][ T5821] usb 4-1: SerialNumber: syz [ 256.305854][ T5821] usb 4-1: config 0 descriptor?? [ 256.324468][ T5821] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 256.334107][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 256.350788][ T31] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 256.350817][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.473553][ T31] pvrusb2: Hardware description: Terratec Grabster AV400 [ 256.473575][ T31] pvrusb2: ********** [ 256.473583][ T31] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 256.473595][ T31] pvrusb2: Important functionality might not be entirely working. [ 256.473604][ T31] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 256.473616][ T31] pvrusb2: ********** [ 256.663197][ T2370] pvrusb2: Invalid write control endpoint [ 256.872515][ T9484] pvrusb2: Invalid write control endpoint [ 256.882774][ T31] usb 2-1: USB disconnect, device number 17 [ 256.987297][ T2370] pvrusb2: Invalid write control endpoint [ 256.987313][ T2370] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 256.987322][ T2370] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 256.987330][ T2370] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 256.987340][ T2370] pvrusb2: Device being rendered inoperable [ 256.989097][ T2370] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 256.989188][ T2370] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 257.044756][ T2370] pvrusb2: Attached sub-driver cx25840 [ 257.044783][ T2370] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 257.044793][ T2370] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 257.170392][ T5821] gspca_stk1135: reg_w 0x5 err -71 [ 257.171457][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 257.171472][ T5821] gspca_stk1135: Sensor write failed [ 257.171502][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 257.171517][ T5821] gspca_stk1135: Sensor write failed [ 257.171544][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 257.171553][ T5821] gspca_stk1135: Sensor read failed [ 257.171580][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 257.171590][ T5821] gspca_stk1135: Sensor read failed [ 257.171597][ T5821] gspca_stk1135: Detected sensor type unknown (0x0) [ 257.171633][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 257.171643][ T5821] gspca_stk1135: Sensor read failed [ 257.171670][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 257.171679][ T5821] gspca_stk1135: Sensor read failed [ 257.171707][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 257.171716][ T5821] gspca_stk1135: Sensor write failed [ 257.171743][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 257.171752][ T5821] gspca_stk1135: Sensor write failed [ 257.171844][ T5821] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 257.343167][ T5821] usb 4-1: USB disconnect, device number 11 [ 258.231182][ T9544] delete_channel: no stack [ 258.649399][ T9548] vcan0: tx address claim with dlc 0 [ 259.196140][ T9533] syz.1.1471 (9533): drop_caches: 2 [ 259.514290][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.994567][ T9586] pimreg1: tun_chr_ioctl cmd 1074025681 [ 260.735508][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1500'. [ 260.747213][ T9596] syz.3.1498 (9596): drop_caches: 2 [ 261.263522][ T9625] input: syz1 as /devices/virtual/input/input17 [ 261.486860][ T9638] tipc: Started in network mode [ 261.486889][ T9638] tipc: Node identity ac141441, cluster identity 4711 [ 261.492008][ T9638] tipc: Enabling of bearer rejected, failed to enable media [ 261.867420][ T9652] syz.5.1518 (9652): drop_caches: 2 [ 262.122931][ T5884] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 262.122969][ T5884] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 262.122996][ T5884] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 262.123022][ T5884] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 262.123047][ T5884] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 262.123073][ T5884] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 262.123100][ T5884] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 262.123125][ T5884] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 262.123148][ T5884] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 262.123170][ T5884] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 262.147996][ T5884] hid-generic 0003:0004:0000.001B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 262.254315][ T5914] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 262.404296][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 262.409569][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.409627][ T5914] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 262.409650][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.453778][ T5914] usb 4-1: config 0 descriptor?? [ 262.930014][ T5914] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 263.242191][ T5884] hid-generic 0005:0B57:0002.001D: item fetching failed at offset 0/1 [ 263.242958][ T5884] hid-generic 0005:0B57:0002.001D: probe with driver hid-generic failed with error -22 [ 263.378489][ T5884] usb 4-1: USB disconnect, device number 12 [ 263.391374][ T9680] veth0_to_bridge: entered promiscuous mode [ 263.392820][ T9678] veth0_to_bridge: left promiscuous mode [ 263.917767][ T9695] syz.5.1536 (9695): drop_caches: 2 [ 264.063362][ T9701] netlink: 'syz.5.1539': attribute type 13 has an invalid length. [ 264.063393][ T9701] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 264.074473][ T5821] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 264.226870][ T5821] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 264.226898][ T5821] usb 7-1: config 0 has no interface number 0 [ 264.230452][ T5821] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 264.230479][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.230500][ T5821] usb 7-1: Product: syz [ 264.230515][ T5821] usb 7-1: Manufacturer: syz [ 264.230530][ T5821] usb 7-1: SerialNumber: syz [ 264.264210][ T5821] usb 7-1: config 0 descriptor?? [ 264.294506][ T5821] hub 7-1:0.217: bad descriptor, ignoring hub [ 264.294543][ T5821] hub 7-1:0.217: probe with driver hub failed with error -5 [ 264.504212][ T5821] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 264.519908][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 264.524702][ T5821] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 264.524765][ T5821] usb 7-1: media controller created [ 264.627997][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.667321][ T9716] tipc: New replicast peer: 255.255.255.255 [ 264.683809][ T9716] tipc: Enabled bearer , priority 10 [ 264.685482][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1544'. [ 264.685502][ T9716] tipc: Disabling bearer [ 264.770687][ T5821] DVB: Unable to find symbol dib7000p_attach() [ 264.770702][ T5821] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 264.844383][ T5821] rc_core: IR keymap rc-dib0700-rc5 not found [ 264.844403][ T5821] Registered IR keymap rc-empty [ 264.844709][ T5821] dvb-usb: could not initialize remote control. [ 264.844719][ T5821] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 264.929959][ T5821] usb 7-1: USB disconnect, device number 6 [ 265.119273][ T9726] block nbd1: server does not support multiple connections per device. [ 265.151670][ T9726] block nbd1: shutting down sockets [ 265.152981][ T5821] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 266.496417][ T37] audit: type=1326 audit(1763365068.601:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9781 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 266.496566][ T37] audit: type=1326 audit(1763365068.601:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9781 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 266.556473][ T37] audit: type=1326 audit(1763365068.661:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9781 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 266.556522][ T37] audit: type=1326 audit(1763365068.661:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9781 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 266.556560][ T37] audit: type=1326 audit(1763365068.661:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9781 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 266.568822][ T37] audit: type=1326 audit(1763365068.661:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9781 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 266.610387][ T37] audit: type=1326 audit(1763365068.711:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9781 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0931a0b789 code=0x7ffc0000 [ 266.618270][ T37] audit: type=1326 audit(1763365068.711:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9781 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0931a0b789 code=0x7ffc0000 [ 266.619280][ T37] audit: type=1326 audit(1763365068.721:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9781 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0931a0b789 code=0x7ffc0000 [ 266.620359][ T37] audit: type=1326 audit(1763365068.721:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9781 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0931a0b789 code=0x7ffc0000 [ 266.630373][ T5993] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 266.825749][ T5993] usb 3-1: Using ep0 maxpacket: 16 [ 266.831174][ T5993] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 266.831202][ T5993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.831223][ T5993] usb 3-1: Product: syz [ 266.831238][ T5993] usb 3-1: Manufacturer: syz [ 266.831252][ T5993] usb 3-1: SerialNumber: syz [ 266.884615][ T5993] usb 3-1: config 0 descriptor?? [ 266.888633][ T5993] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 266.937959][ T9787] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 266.938114][ T9787] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 267.291718][ T9795] netlink: 'syz.5.1580': attribute type 1 has an invalid length. [ 267.331695][ T5993] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 267.536372][ T5993] usb 3-1: USB disconnect, device number 14 [ 267.568342][ T5993] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 267.569094][ T5993] visor 3-1:0.0: device disconnected [ 268.181882][ T9813] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1590'. [ 269.383049][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1610'. [ 269.497832][ T9852] netem: incorrect gi model size [ 269.497851][ T9852] netem: change failed [ 269.753889][ T9868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1615'. [ 270.683658][ T9899] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1628'. [ 270.864498][ T5971] kernel write not supported for file /input/mouse0 (pid: 5971 comm: kworker/1:7) [ 270.886327][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 270.886359][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'. [ 270.945951][ T9633] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.946321][ T9633] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.946360][ T9633] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.946395][ T9633] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.164568][ T9946] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[9946] [ 272.481956][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1651'. [ 272.526112][ T9954] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 273.769478][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1666'. [ 275.624408][T10043] netlink: 'syz.3.1686': attribute type 30 has an invalid length. [ 275.736860][T10043] bond1: option arp_missed_max: invalid value (0) [ 275.736886][T10043] bond1: option arp_missed_max: allowed values 1 - 255 [ 275.744057][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 275.902895][T10043] bond1 (unregistering): Released all slaves [ 275.903130][ T9] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.903156][ T9] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 275.903184][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 275.903219][ T9] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 275.903243][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.978727][ T9] usb 2-1: config 0 descriptor?? [ 276.245509][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 276.245772][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 276.291691][ T9] usb 2-1: USB disconnect, device number 18 [ 277.274903][ T9] kernel write not supported for file /779/loginuid (pid: 9 comm: kworker/0:0) [ 277.854058][ T5884] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 278.005223][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 278.009676][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.009709][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.009732][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 278.009776][ T5884] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 278.009807][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.034296][ T5884] usb 2-1: config 0 descriptor?? [ 278.452134][ T5884] logitech 0003:046D:C293.001E: nested delimiters [ 278.452155][ T5884] logitech 0003:046D:C293.001E: item 0 4 2 10 parsing failed [ 278.452835][ T5884] logitech 0003:046D:C293.001E: parse failed [ 278.452918][ T5884] logitech 0003:046D:C293.001E: probe with driver logitech failed with error -22 [ 278.718225][ T5884] usb 2-1: USB disconnect, device number 19 [ 279.823069][T10127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1725'. [ 279.823097][T10127] netlink: 'syz.1.1725': attribute type 6 has an invalid length. [ 279.823108][T10127] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1725'. [ 280.604364][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 280.774025][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 280.776663][ T9] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 280.776690][ T9] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 280.776711][ T9] usb 2-1: config 166 has no interface number 0 [ 280.776728][ T9] usb 2-1: config 166 has no interface number 1 [ 280.776795][ T9] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 280.776818][ T9] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 280.776857][ T9] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 280.776887][ T9] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 280.776912][ T9] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 280.776939][ T9] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 280.776963][ T9] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 280.776989][ T9] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 280.777011][ T9] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 280.777036][ T9] usb 2-1: config 166 interface 177 has no altsetting 0 [ 280.777054][ T9] usb 2-1: config 166 interface 34 has no altsetting 0 [ 280.780626][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 280.780654][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.780674][ T9] usb 2-1: Product: syz [ 280.780689][ T9] usb 2-1: Manufacturer: syz [ 280.780703][ T9] usb 2-1: SerialNumber: syz [ 281.236417][ T9] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 281.549944][ T9] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 281.943965][ T9] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 281.954470][ T9] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 281.954503][ T9] uvcvideo 2-1:166.34: No valid video chain found. [ 282.047466][ T9] usb 2-1: USB disconnect, device number 20 [ 282.531794][T10183] input: syz0 as /devices/virtual/input/input19 [ 283.019333][ T37] kauditd_printk_skb: 463 callbacks suppressed [ 283.019351][ T37] audit: type=1326 audit(1763365085.121:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.5.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1acfe7b789 code=0x7ffc0000 [ 283.019970][ T37] audit: type=1326 audit(1763365085.121:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.5.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acfedf6c9 code=0x7ffc0000 [ 283.020015][ T37] audit: type=1326 audit(1763365085.121:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.5.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acfedf6c9 code=0x7ffc0000 [ 283.020058][ T37] audit: type=1326 audit(1763365085.121:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.5.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acfedf6c9 code=0x7ffc0000 [ 283.020099][ T37] audit: type=1326 audit(1763365085.121:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.5.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acfedf6c9 code=0x7ffc0000 [ 283.034814][ T37] audit: type=1326 audit(1763365085.141:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.5.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1acfe7b789 code=0x7ffc0000 [ 283.039938][ T37] audit: type=1326 audit(1763365085.141:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.5.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1acfe7b789 code=0x7ffc0000 [ 283.040308][ T37] audit: type=1326 audit(1763365085.141:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.5.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1acfe7b789 code=0x7ffc0000 [ 283.040754][ T37] audit: type=1326 audit(1763365085.141:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.5.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1acfe7b789 code=0x7ffc0000 [ 283.041112][ T37] audit: type=1326 audit(1763365085.141:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10194 comm="syz.5.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1acfe7b789 code=0x7ffc0000 [ 284.406674][T10235] blkio.reset_stats is deprecated [ 284.559008][T10000] Set syz1 is full, maxelem 65536 reached [ 284.857530][T10245] batman_adv: batadv0: Adding interface: ipvlan3 [ 284.857548][T10245] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.857575][T10245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.857591][T10245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.857606][T10245] batman_adv: batadv0: Interface activated: ipvlan3 [ 285.860535][T10281] vxcan1: entered allmulticast mode [ 285.870998][T10281] vxcan1: left allmulticast mode [ 286.351102][T10291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.046196][T10302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.284276][T10305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.351839][T10313] pimreg: entered allmulticast mode [ 287.352074][T10313] pimreg: left allmulticast mode [ 287.850522][T10333] Bluetooth: MGMT ver 1.23 [ 288.197109][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 288.331795][T10350] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.344051][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 288.346442][ T31] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 288.346470][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.347003][T10350] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.387577][ T31] usb 6-1: config 0 descriptor?? [ 288.455498][ T993] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 288.616817][ T31] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 288.630030][ T993] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 288.630062][ T993] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 288.630091][ T993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 288.630125][ T993] usb 7-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 288.630148][ T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.680300][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 288.684813][ T993] usb 7-1: config 0 descriptor?? [ 288.699169][ T31] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 288.699224][ T31] usb 6-1: media controller created [ 288.717039][T10347] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 288.757681][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.830940][ T31] az6027: usb out operation failed. (-71) [ 288.831360][ T31] az6027: usb out operation failed. (-71) [ 288.831373][ T31] stb0899_attach: Driver disabled by Kconfig [ 288.831382][ T31] az6027: no front-end attached [ 288.831382][ T31] [ 288.832408][ T31] az6027: usb out operation failed. (-71) [ 288.832424][ T31] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 288.878031][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20 [ 288.902125][ T31] dvb-usb: schedule remote query interval to 400 msecs. [ 288.902148][ T31] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 288.928247][ T31] usb 6-1: USB disconnect, device number 7 [ 289.088482][ T31] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 289.206300][ T993] hid-u2fzero 0003:10C4:8ACF.001F: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.6-1/input0 [ 289.213531][ T993] hid-u2fzero 0003:10C4:8ACF.001F: U2F Zero LED initialised [ 289.213762][ T993] hid-u2fzero 0003:10C4:8ACF.001F: U2F Zero RNG initialised [ 289.408793][ T31] usb 7-1: USB disconnect, device number 7 [ 289.640313][T10372] fido_id[10372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 290.874186][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.072388][T10450] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1851'. [ 292.578259][T10466] vlan2: entered promiscuous mode [ 292.578281][T10466] bond0: entered promiscuous mode [ 292.578296][T10466] bond_slave_0: entered promiscuous mode [ 292.578655][T10466] bond_slave_1: entered promiscuous mode [ 292.994507][T10479] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 293.709533][ T5884] kernel write not supported for file /comedi4 (pid: 5884 comm: kworker/1:4) [ 293.711219][T10497] netlink: 'syz.5.1874': attribute type 2 has an invalid length. [ 293.894778][T10508] netlink: 'syz.1.1877': attribute type 10 has an invalid length. [ 294.021163][T10500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.209163][T10508] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 294.440110][T10500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.452880][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1889'. [ 294.841318][T10500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.136210][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.156743][T10558] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1905'. [ 295.210510][T10500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.645761][ T1482] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.719184][ T989] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.801896][ T1482] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.901582][ T1482] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.221224][T10597] loop8: detected capacity change from 0 to 1 [ 296.246376][T10597] Dev loop8: unable to read RDB block 1 [ 296.246425][T10597] loop8: unable to read partition table [ 296.246651][T10597] loop8: partition table beyond EOD, truncated [ 296.246671][T10597] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 296.409052][T10611] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1926'. [ 296.488481][T10617] netlink: 'syz.5.1929': attribute type 2 has an invalid length. [ 296.488505][T10617] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1929'. [ 296.589104][T10621] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1931'. [ 298.264351][ T5821] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 298.267749][T10694] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1965'. [ 298.420669][ T5821] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.420706][ T5821] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 298.420735][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.420770][ T5821] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 298.420794][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.430101][ T5821] usb 2-1: config 0 descriptor?? [ 298.431096][T10688] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 298.865926][ T5821] hid-u2fzero 0003:10C4:8ACF.0020: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0 [ 298.874300][ T5821] hid-u2fzero 0003:10C4:8ACF.0020: U2F Zero LED initialised [ 298.875388][ T5821] hid-u2fzero 0003:10C4:8ACF.0020: U2F Zero RNG initialised [ 298.938511][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'. [ 299.062781][ T5821] usb 2-1: USB disconnect, device number 21 [ 299.084070][ T5993] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 299.237565][ T5993] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 299.237594][ T5993] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 299.237614][ T5993] usb 3-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 299.237633][ T5993] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 299.237652][ T5993] usb 3-1: config 220 has no interface number 2 [ 299.237724][ T5993] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 299.237753][ T5993] usb 3-1: config 220 interface 0 has no altsetting 0 [ 299.237772][ T5993] usb 3-1: config 220 interface 76 has no altsetting 0 [ 299.237791][ T5993] usb 3-1: config 220 interface 1 has no altsetting 0 [ 299.240937][ T5993] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 299.240965][ T5993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.240984][ T5993] usb 3-1: Product: syz [ 299.240991][ T5993] usb 3-1: Manufacturer: syz [ 299.240999][ T5993] usb 3-1: SerialNumber: syz [ 299.448170][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1985'. [ 299.453187][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1985'. [ 299.590404][ T5993] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 299.590440][ T5993] uvcvideo 3-1:220.0: No valid video chain found. [ 299.590508][ T5993] usb 3-1: selecting invalid altsetting 0 [ 299.643406][ T5993] usb 3-1: selecting invalid altsetting 0 [ 299.643447][ T5993] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 299.663094][ T5993] usb 3-1: USB disconnect, device number 15 [ 300.200957][T10739] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 300.622357][T10756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.821424][T10751] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.863083][T10754] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1995'. [ 300.863111][T10754] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1995'. [ 300.863709][T10758] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1995'. [ 300.863729][T10758] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1995'. [ 301.160060][T10751] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.296356][T10774] netlink: 'syz.5.2002': attribute type 25 has an invalid length. [ 301.296377][T10774] netlink: 'syz.5.2002': attribute type 7 has an invalid length. [ 301.858232][T10785] input: syz1 as /devices/virtual/input/input21 [ 302.260038][T10751] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.316521][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.506650][T10807] (syz.6.2018,10807,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 302.751107][T10751] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.894422][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 302.936133][T10827] netlink: 'syz.1.2027': attribute type 5 has an invalid length. [ 303.057167][ T31] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 303.057195][ T31] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 303.057213][ T31] usb 6-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 303.057230][ T31] usb 6-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 303.057249][ T31] usb 6-1: config 220 has no interface number 2 [ 303.057319][ T31] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 303.057348][ T31] usb 6-1: config 220 interface 0 has no altsetting 0 [ 303.057375][ T31] usb 6-1: config 220 interface 76 has no altsetting 0 [ 303.057393][ T31] usb 6-1: config 220 interface 1 has no altsetting 0 [ 303.060546][ T31] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 303.060575][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.060595][ T31] usb 6-1: Product: syz [ 303.060609][ T31] usb 6-1: Manufacturer: syz [ 303.060623][ T31] usb 6-1: SerialNumber: syz [ 303.304094][ T9633] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.348770][ T9633] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.441032][ T31] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 303.441069][ T31] uvcvideo 6-1:220.0: No valid video chain found. [ 303.441129][ T31] usb 6-1: selecting invalid altsetting 0 [ 303.473536][ T9633] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.502834][ T31] usb 6-1: selecting invalid altsetting 0 [ 303.502873][ T31] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 303.531932][ T1466] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.533231][ T31] usb 6-1: USB disconnect, device number 8 [ 303.624426][T10842] sctp: [Deprecated]: syz.2.2034 (pid 10842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.624426][T10842] Use struct sctp_sack_info instead [ 304.127724][T10872] netlink: 'syz.5.2047': attribute type 10 has an invalid length. [ 304.201975][T10872] bridge0: port 3(syz_tun) entered disabled state [ 304.215881][T10872] syz_tun: left allmulticast mode [ 304.215909][T10872] syz_tun: left promiscuous mode [ 304.216223][T10872] bridge0: port 3(syz_tun) entered disabled state [ 304.221318][T10879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.227441][T10877] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2060'. [ 304.365311][T10872] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 304.423365][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2055'. [ 304.491590][T10884] geneve2: entered promiscuous mode [ 305.124737][T10912] input: syz1 as /devices/virtual/input/input22 [ 305.323071][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2071'. [ 305.399579][T10920] geneve2: entered promiscuous mode [ 305.532352][T10932] netlink: 316 bytes leftover after parsing attributes in process `syz.3.2073'. [ 305.831125][T10946] netlink: 'syz.2.2081': attribute type 10 has an invalid length. [ 305.900858][T10946] syz_tun: entered promiscuous mode [ 305.902059][T10946] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 306.268549][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2086'. [ 306.538241][T10967] netdevsim netdevsim1: Direct firmware load for þ failed with error -2 [ 306.538273][T10967] netdevsim netdevsim1: Falling back to sysfs fallback for: þ [ 306.607858][T10972] program syz.2.2095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.920206][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880293b6000: rx timeout, send abort [ 307.394148][T10995] sctp: [Deprecated]: syz.2.2105 (pid 10995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.394148][T10995] Use struct sctp_sack_info instead [ 307.421216][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880293b6000: abort rx timeout. Force session deactivation [ 307.677363][T11009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2112'. [ 307.846464][T11016] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 307.846503][T11016] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 307.846995][T11016] overlayfs: failed to set uuid (335/file0, err=-13); falling back to uuid=null. [ 307.954449][ T5993] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 308.104120][ T5993] usb 2-1: Using ep0 maxpacket: 16 [ 308.109047][ T5993] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 308.109080][ T5993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 308.113208][ T5993] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 308.113237][ T5993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.113258][ T5993] usb 2-1: Product: syz [ 308.113273][ T5993] usb 2-1: Manufacturer: syz [ 308.113287][ T5993] usb 2-1: SerialNumber: syz [ 308.133764][ T5993] usb 2-1: config 0 descriptor?? [ 308.153821][ T5993] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 308.153856][ T5993] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 308.770721][ T5993] em28xx 2-1:0.0: chip ID is em2710 [ 308.968026][ T5993] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 308.970980][ T5993] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 308.971001][ T5993] em28xx 2-1:0.0: No AC97 audio processor [ 309.024641][ T5993] usb 2-1: USB disconnect, device number 22 [ 309.026970][ T5993] em28xx 2-1:0.0: Disconnecting em28xx [ 309.065194][ T5993] em28xx 2-1:0.0: Freeing device [ 309.136512][T11060] netlink: 'syz.3.2136': attribute type 2 has an invalid length. [ 309.348948][T11071] netlink: 'syz.6.2141': attribute type 9 has an invalid length. [ 309.867678][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.349333][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2152'. [ 310.638432][T11112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2161'. [ 310.661412][T11112] bond0: entered promiscuous mode [ 310.661435][T11112] bond_slave_0: entered promiscuous mode [ 310.661679][T11112] bond_slave_1: entered promiscuous mode [ 310.695896][T11112] bond0: left promiscuous mode [ 310.695917][T11112] bond_slave_0: left promiscuous mode [ 310.696178][T11112] bond_slave_1: left promiscuous mode [ 310.779131][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2162'. [ 311.151860][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.262781][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2182'. [ 312.262806][T11163] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 312.477142][ T37] kauditd_printk_skb: 132 callbacks suppressed [ 312.477160][ T37] audit: type=1326 audit(1763365114.581:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.1.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809cf2f6c9 code=0x7ffc0000 [ 312.480251][ T37] audit: type=1326 audit(1763365114.581:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.1.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809cf2f6c9 code=0x7ffc0000 [ 312.480537][ T37] audit: type=1326 audit(1763365114.581:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.1.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f809cf2f6c9 code=0x7ffc0000 [ 312.480794][ T37] audit: type=1326 audit(1763365114.581:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.1.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809cf2f6c9 code=0x7ffc0000 [ 312.481094][ T37] audit: type=1326 audit(1763365114.581:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.1.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809cf2f6c9 code=0x7ffc0000 [ 312.481530][ T37] audit: type=1326 audit(1763365114.581:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.1.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f809cf2f6c9 code=0x7ffc0000 [ 312.574119][ T37] audit: type=1326 audit(1763365114.661:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.1.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809cf2f6c9 code=0x7ffc0000 [ 312.574180][ T37] audit: type=1326 audit(1763365114.671:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11172 comm="syz.1.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f809cf61f85 code=0x7ffc0000 [ 312.574497][ T37] audit: type=1326 audit(1763365114.681:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.1.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809cf2f6c9 code=0x7ffc0000 [ 312.641813][ T37] audit: type=1326 audit(1763365114.741:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.1.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f809cf2f6c9 code=0x7ffc0000 [ 312.734330][ T5884] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 312.891872][ T5884] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 312.891901][ T5884] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 312.891940][ T5884] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 312.891965][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.183331][ T993] usb 6-1: USB disconnect, device number 9 [ 313.893595][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'. [ 313.906624][T11218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2206'. [ 314.358669][ T993] IPVS: starting estimator thread 0... [ 314.410045][T11249] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 314.410045][T11249] The task syz.5.2216 (11249) triggered the difference, watch for misbehavior. [ 314.444422][T11244] IPVS: using max 10 ests per chain, 24000 per kthread [ 314.572469][T11254] sctp: [Deprecated]: syz.6.2222 (pid 11254) Use of int in max_burst socket option deprecated. [ 314.572469][T11254] Use struct sctp_assoc_value instead [ 314.951826][T11273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2231'. [ 314.951857][T11273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2231'. [ 315.654149][ T5884] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 315.804024][ T5884] usb 7-1: Using ep0 maxpacket: 16 [ 315.806395][ T5884] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 315.806419][ T5884] usb 7-1: config 0 has no interface number 0 [ 315.806467][ T5884] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 315.806494][ T5884] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 315.808417][ T5884] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 315.808443][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 315.808463][ T5884] usb 7-1: Product: syz [ 315.808477][ T5884] usb 7-1: SerialNumber: syz [ 315.813744][ T5884] usb 7-1: config 0 descriptor?? [ 315.900441][ T5884] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 315.903898][ T5884] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input24 [ 316.127551][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 316.134434][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 316.134686][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 316.134931][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 316.135169][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 316.135405][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 316.135635][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 316.135866][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 316.136096][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 316.136335][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 316.141346][ T5993] usb 7-1: USB disconnect, device number 8 [ 316.141387][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 316.255284][ T5993] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 317.128618][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.128690][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.155548][T11354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2270'. [ 318.414062][ T993] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 318.450129][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2300'. [ 318.467944][T11424] Bluetooth: MGMT ver 1.23 [ 318.583357][ T993] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 318.583388][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.597022][ T993] usb 2-1: config 0 descriptor?? [ 318.622274][ T993] cp210x 2-1:0.0: cp210x converter detected [ 318.742952][T11432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2304'. [ 319.252980][ T993] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 319.253043][ T993] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 319.274357][ T993] usb 2-1: cp210x converter now attached to ttyUSB0 [ 319.277315][ T993] usb 2-1: USB disconnect, device number 23 [ 319.299437][ T993] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 319.300005][ T993] cp210x 2-1:0.0: device disconnected [ 319.797503][T11460] binder: 11458:11460 ioctl c0306201 0 returned -14 [ 319.948847][T11464] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2319'. [ 320.014427][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2320'. [ 320.606757][T11480] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2327'. [ 321.486344][T11509] binder: 11507:11509 ioctl c0306201 200000000040 returned -14 [ 321.883802][T11522] bridge0: entered promiscuous mode [ 321.910892][T11522] bridge0: port 3(macvtap2) entered blocking state [ 321.911098][T11522] bridge0: port 3(macvtap2) entered disabled state [ 321.911347][T11522] macvtap2: entered allmulticast mode [ 321.911363][T11522] bridge0: entered allmulticast mode [ 321.921198][T11522] macvtap2: left allmulticast mode [ 321.921218][T11522] bridge0: left allmulticast mode [ 322.020868][T11522] bridge0: left promiscuous mode [ 322.197195][ T5884] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 322.344045][ T5884] usb 7-1: Using ep0 maxpacket: 8 [ 322.348382][ T5884] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.348411][ T5884] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.348438][ T5884] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.348462][ T5884] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.348504][ T5884] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.348528][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.594556][ T5884] usb 7-1: GET_CAPABILITIES returned 0 [ 322.594606][ T5884] usbtmc 7-1:16.0: can't read capabilities [ 322.638720][T11532] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2349'. [ 322.801812][ T993] usb 7-1: USB disconnect, device number 9 [ 322.861802][T11543] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2355'. [ 323.047650][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 323.545797][T11565] overlayfs: invalid origin (0000) [ 324.014425][T11576] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 324.654274][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 324.654289][ T37] audit: type=1326 audit(1763365126.741:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11593 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 324.654330][ T37] audit: type=1326 audit(1763365126.751:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11593 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 324.654362][ T37] audit: type=1326 audit(1763365126.751:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11593 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 324.655487][ T37] audit: type=1326 audit(1763365126.761:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11593 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 324.655527][ T37] audit: type=1326 audit(1763365126.761:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11593 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 324.655559][ T37] audit: type=1326 audit(1763365126.761:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11593 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 324.655592][ T37] audit: type=1326 audit(1763365126.761:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11593 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 324.665885][ T37] audit: type=1326 audit(1763365126.761:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11593 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 324.667244][ T37] audit: type=1326 audit(1763365126.771:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11593 comm="syz.3.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0931a6f6c9 code=0x7ffc0000 [ 325.544359][ T5884] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 325.714151][ T5884] usb 6-1: Using ep0 maxpacket: 32 [ 325.716600][ T5884] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 325.716630][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.727736][ T5884] usb 6-1: config 0 descriptor?? [ 325.848121][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.943428][ T5884] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 325.983789][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 325.986016][ T5884] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 325.986073][ T5884] usb 6-1: media controller created [ 326.013594][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.064575][ T5806] bond0: (slave syz_tun): Releasing backup interface [ 326.160955][ T5884] az6027: usb out operation failed. (-71) [ 326.161892][ T5884] az6027: usb out operation failed. (-71) [ 326.161909][ T5884] stb0899_attach: Driver disabled by Kconfig [ 326.161919][ T5884] az6027: no front-end attached [ 326.161919][ T5884] [ 326.162825][ T5884] az6027: usb out operation failed. (-71) [ 326.162948][ T5884] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 326.168058][ T5884] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input25 [ 326.170966][ T5884] dvb-usb: schedule remote query interval to 400 msecs. [ 326.170984][ T5884] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 326.176542][ T5884] usb 6-1: USB disconnect, device number 10 [ 326.406683][ T5884] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 326.660105][T11636] sp0: Synchronizing with TNC [ 327.105956][T11652] netlink: 'syz.2.2408': attribute type 8 has an invalid length. [ 327.290649][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 327.306609][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 327.308209][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 327.312676][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 327.314913][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.741419][T11642] syz.3.2404 (11642) used greatest stack depth: 18240 bytes left [ 328.082218][T11670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2413'. [ 328.281849][ T37] audit: type=1326 audit(1763365130.371:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11647 comm="syz.5.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acfedf6c9 code=0x7fc00000 [ 328.487056][T11657] chnl_net:caif_netlink_parms(): no params data found [ 329.444846][ T5818] Bluetooth: hci1: command tx timeout [ 331.514394][ T5818] Bluetooth: hci1: command tx timeout [ 332.082328][T11692] netlink: 'syz.2.2422': attribute type 8 has an invalid length. [ 332.082590][T11692] sch_fq: defrate 0 ignored. [ 332.083241][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2427'. [ 332.646830][ T5821] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 332.796126][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 332.798748][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.798797][ T5821] usb 3-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.00 [ 332.798821][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.858519][ T5821] usb 3-1: config 0 descriptor?? [ 332.875212][ T5821] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input26 [ 333.101470][ T5155] bcm5974 3-1:0.0: could not read from device [ 333.377118][T11746] openvswitch: netlink: Message has 4 unknown bytes. [ 333.594782][ T5818] Bluetooth: hci1: command tx timeout [ 334.043229][ T5821] usb 3-1: USB disconnect, device number 16 [ 335.035351][T11760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2452'. [ 335.674629][ T5818] Bluetooth: hci1: command tx timeout [ 336.089106][T11657] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.089303][T11657] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.089549][T11657] bridge_slave_0: entered allmulticast mode [ 336.216246][T11657] bridge_slave_0: entered promiscuous mode [ 336.256728][T11657] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.256862][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.257077][T11657] bridge_slave_1: entered allmulticast mode [ 336.260009][T11657] bridge_slave_1: entered promiscuous mode [ 336.317667][T11778] program syz.2.2461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.664060][ T5810] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 338.754412][T11657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.781393][T11657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.996413][ T5810] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.999105][ T5810] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 338.999136][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.999157][ T5810] usb 3-1: Product: syz [ 338.999172][ T5810] usb 3-1: Manufacturer: syz [ 338.999187][ T5810] usb 3-1: SerialNumber: syz [ 339.274267][ T5810] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 339.369634][T11825] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 339.486905][ T5821] usb 3-1: USB disconnect, device number 17 [ 339.537128][ T5821] usblp0: removed [ 340.102369][T11833] netlink: 'syz.2.2488': attribute type 10 has an invalid length. [ 340.569707][T11833] macvlan0: entered promiscuous mode [ 340.569737][T11833] macvlan0: entered allmulticast mode [ 340.597462][T11833] veth1_vlan: entered allmulticast mode [ 340.610164][T11833] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 340.629665][T11657] team0: Port device team_slave_0 added [ 340.642985][T11657] team0: Port device team_slave_1 added [ 341.193162][T11846] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2492'. [ 341.193187][T11846] netlink: 67 bytes leftover after parsing attributes in process `syz.5.2492'. [ 341.374040][ T5993] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 341.588001][ T5993] usb 4-1: unable to get BOS descriptor or descriptor too short [ 341.588087][ T5993] usb 4-1: no configurations [ 341.588101][ T5993] usb 4-1: can't read configurations, error -22 [ 341.651319][T11848] bond0: entered promiscuous mode [ 341.651342][T11848] bond_slave_0: entered promiscuous mode [ 341.651574][T11848] bond_slave_1: entered promiscuous mode [ 341.651804][T11848] syz_tun: entered promiscuous mode [ 341.674693][T11848] batadv0: entered promiscuous mode [ 341.690443][T11848] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 342.324850][T11848] bond0: left promiscuous mode [ 342.324875][T11848] bond_slave_0: left promiscuous mode [ 342.325232][T11848] bond_slave_1: left promiscuous mode [ 342.325448][T11848] syz_tun: left promiscuous mode [ 342.712248][T11848] batadv0: left promiscuous mode [ 343.952783][T11657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.952801][T11657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.952828][T11657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.008611][T11657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.008628][T11657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.008655][T11657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.446644][T11868] loop4: detected capacity change from 0 to 7 [ 344.447650][T11868] buffer_io_error: 5 callbacks suppressed [ 344.447666][T11868] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.447790][T11868] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.447902][T11868] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.448007][T11868] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.448644][T11868] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.448774][T11868] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.448882][T11868] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.448956][T11868] ldm_validate_partition_table(): Disk read failed. [ 344.449004][T11868] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.449112][T11868] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.449223][T11868] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.449401][T11868] Dev loop4: unable to read RDB block 0 [ 344.449700][T11868] loop4: unable to read partition table [ 344.449933][T11868] loop4: partition table beyond EOD, truncated [ 344.449950][T11868] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 344.605525][T11868] ldm_validate_partition_table(): Disk read failed. [ 344.606593][T11868] Dev loop4: unable to read RDB block 0 [ 344.606920][T11868] loop4: unable to read partition table [ 344.607304][T11868] loop4: partition table beyond EOD, truncated [ 344.988904][T11875] program syz.2.2505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.547753][T11657] hsr_slave_0: entered promiscuous mode [ 345.549202][T11657] hsr_slave_1: entered promiscuous mode [ 345.551300][T11657] debugfs: 'hsr0' already exists in 'hsr' [ 345.551324][T11657] Cannot create hsr debugfs directory [ 346.467570][T11888] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2510'. [ 350.451606][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.671383][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.197060][ T5818] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 351.197229][ T5818] Bluetooth: hci0: Injecting HCI hardware error event [ 351.200584][ T5817] Bluetooth: hci0: hardware error 0x00 [ 352.269769][T11923] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 352.379723][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.932350][T11657] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.932385][T11657] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.594518][ T5817] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 354.091039][T11940] syz.3.2532 (11940) used greatest stack depth: 17480 bytes left [ 354.518050][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 355.074902][T11955] IPVS: sh: UDP 172.20.20.187:0 - no destination available [ 355.251915][T11960] program syz.3.2540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.162875][T11975] netlink: 556 bytes leftover after parsing attributes in process `syz.5.2546'. [ 357.400321][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2552'. [ 358.086348][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 361.071069][T12027] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2569'. [ 364.064993][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.087576][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.094267][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.118685][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.119582][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.863176][T12040] chnl_net:caif_netlink_parms(): no params data found [ 365.911851][T12040] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.912061][T12040] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.912371][T12040] bridge_slave_0: entered allmulticast mode [ 365.939448][T12040] bridge_slave_0: entered promiscuous mode [ 365.990851][T12063] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2582'. [ 366.043112][T12040] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.062618][T12040] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.062874][T12040] bridge_slave_1: entered allmulticast mode [ 366.079947][T12040] bridge_slave_1: entered promiscuous mode [ 366.235572][ T5818] Bluetooth: hci2: command tx timeout [ 366.325411][ T1482] tipc: Subscription rejected, illegal request [ 366.497475][T12071] fuse: Bad value for 'fd' [ 367.920300][T12040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.958679][T12040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.314745][ T5818] Bluetooth: hci2: command tx timeout [ 370.394400][ T5817] Bluetooth: hci2: command tx timeout [ 370.826433][T12040] team0: Port device team_slave_0 added [ 370.851490][T12040] team0: Port device team_slave_1 added [ 370.950613][T12101] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2600'. [ 371.281238][T12101] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2600'. [ 371.613884][T12040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.613902][T12040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.614418][T12040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.616926][T12040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.616938][T12040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.616964][T12040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.476661][ T5817] Bluetooth: hci2: command tx timeout [ 372.668145][T12108] ref_ctr_offset mismatch. inode: 0x970 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1140200000010 [ 373.413249][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.801581][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.118855][T11657] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.118891][T11657] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.280025][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.286572][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.288026][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.290432][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.292258][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.414109][T12040] hsr_slave_0: entered promiscuous mode [ 374.417716][T12040] hsr_slave_1: entered promiscuous mode [ 374.418918][T12040] debugfs: 'hsr0' already exists in 'hsr' [ 374.418942][T12040] Cannot create hsr debugfs directory [ 375.301550][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 375.313817][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.316487][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.317581][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.319524][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 376.194749][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2610'. [ 376.394920][ T5817] Bluetooth: hci0: command tx timeout [ 377.354293][ T5817] Bluetooth: hci6: command tx timeout [ 378.474711][ T5817] Bluetooth: hci0: command tx timeout [ 378.559727][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.559786][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.944985][T12115] chnl_net:caif_netlink_parms(): no params data found [ 378.972960][T12118] chnl_net:caif_netlink_parms(): no params data found [ 379.434190][ T5818] Bluetooth: hci6: command tx timeout [ 380.561288][ T5818] Bluetooth: hci0: command tx timeout [ 381.451075][T12167] macvlan0: entered promiscuous mode [ 381.453547][T12167] bond0: entered promiscuous mode [ 381.453568][T12167] bond_slave_0: entered promiscuous mode [ 381.453815][T12167] bond_slave_1: entered promiscuous mode [ 381.476161][T12167] syz_tun: entered promiscuous mode [ 381.492420][T12167] hsr1: entered allmulticast mode [ 381.492442][T12167] macvlan0: entered allmulticast mode [ 381.492455][T12167] veth1_vlan: entered allmulticast mode [ 381.492488][T12167] bond0: entered allmulticast mode [ 381.492502][T12167] bond_slave_0: entered allmulticast mode [ 381.492519][T12167] bond_slave_1: entered allmulticast mode [ 381.492537][T12167] syz_tun: entered allmulticast mode [ 381.524388][ T5818] Bluetooth: hci6: command tx timeout [ 381.554846][T12115] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.554996][T12115] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.555236][T12115] bridge_slave_0: entered allmulticast mode [ 381.558858][T12115] bridge_slave_0: entered promiscuous mode [ 381.563298][T12118] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.563455][T12118] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.563657][T12118] bridge_slave_0: entered allmulticast mode [ 381.616087][T12118] bridge_slave_0: entered promiscuous mode [ 381.622038][T12115] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.622192][T12115] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.622411][T12115] bridge_slave_1: entered allmulticast mode [ 381.668995][T12115] bridge_slave_1: entered promiscuous mode [ 381.672615][T12118] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.672782][T12118] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.673013][T12118] bridge_slave_1: entered allmulticast mode [ 381.716504][T12118] bridge_slave_1: entered promiscuous mode [ 382.634661][ T5818] Bluetooth: hci0: command tx timeout [ 383.594189][ T5818] Bluetooth: hci6: command tx timeout [ 384.163455][T12115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.545114][T12118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.550674][T12115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.780435][T12118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.256602][ T5817] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 387.273756][ T5817] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 387.293613][ T5817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 387.308086][ T5817] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 387.308772][ T5817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 388.373739][T12115] team0: Port device team_slave_0 added [ 388.386146][T12118] team0: Port device team_slave_0 added [ 388.392333][T12115] team0: Port device team_slave_1 added [ 388.410199][T12118] team0: Port device team_slave_1 added [ 389.356685][ T5818] Bluetooth: hci7: command tx timeout [ 390.747323][T12115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.747341][T12115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.747369][T12115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.810224][T12115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.810241][T12115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.810267][T12115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.845272][T12118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.845288][T12118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.845314][T12118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.909955][T12118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.909967][T12118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.909982][T12118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.434452][ T5818] Bluetooth: hci7: command tx timeout [ 393.514633][ T5818] Bluetooth: hci7: command tx timeout [ 395.594653][ T5818] Bluetooth: hci7: command tx timeout [ 396.137348][T12115] hsr_slave_0: entered promiscuous mode [ 396.138837][T12115] hsr_slave_1: entered promiscuous mode [ 396.139857][T12115] debugfs: 'hsr0' already exists in 'hsr' [ 396.139881][T12115] Cannot create hsr debugfs directory [ 396.343695][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.585870][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.533796][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.871124][T12009] bond0: (slave syz_tun): Releasing backup interface [ 397.987638][T12009] syz_tun (unregistering): left promiscuous mode [ 399.073199][T12118] hsr_slave_0: entered promiscuous mode [ 399.080520][T12118] hsr_slave_1: entered promiscuous mode [ 399.081528][T12118] debugfs: 'hsr0' already exists in 'hsr' [ 399.081552][T12118] Cannot create hsr debugfs directory [ 402.768902][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 402.793021][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 402.815526][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 402.816777][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 402.817979][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 403.634457][T12249] chnl_net:caif_netlink_parms(): no params data found [ 404.874995][ T5818] Bluetooth: hci3: command tx timeout [ 405.030434][T12249] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.030570][T12249] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.030805][T12249] bridge_slave_0: entered allmulticast mode [ 405.058589][T12249] bridge_slave_0: entered promiscuous mode [ 405.082690][T12249] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.083271][T12249] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.083508][T12249] bridge_slave_1: entered allmulticast mode [ 405.125120][T12249] bridge_slave_1: entered promiscuous mode [ 405.779963][T12249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.803214][T12249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.957977][ T5818] Bluetooth: hci3: command tx timeout [ 407.916502][T12249] team0: Port device team_slave_0 added [ 407.957066][T12249] team0: Port device team_slave_1 added [ 409.034373][ T5818] Bluetooth: hci3: command tx timeout [ 409.279596][T12249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.279613][T12249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.279639][T12249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.282396][T12249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.282409][T12249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.282435][T12249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.283427][T12255] chnl_net:caif_netlink_parms(): no params data found [ 410.330526][T12249] hsr_slave_0: entered promiscuous mode [ 410.332024][T12249] hsr_slave_1: entered promiscuous mode [ 410.333100][T12249] debugfs: 'hsr0' already exists in 'hsr' [ 410.333133][T12249] Cannot create hsr debugfs directory [ 411.114426][ T5818] Bluetooth: hci3: command tx timeout [ 412.379474][T12255] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.379610][T12255] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.379830][T12255] bridge_slave_0: entered allmulticast mode [ 412.382684][T12255] bridge_slave_0: entered promiscuous mode [ 412.427395][T12255] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.427544][T12255] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.427750][T12255] bridge_slave_1: entered allmulticast mode [ 412.431363][T12255] bridge_slave_1: entered promiscuous mode [ 413.669681][T12255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.699127][T12255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.058499][T12255] team0: Port device team_slave_0 added [ 415.063313][T12255] team0: Port device team_slave_1 added [ 416.128550][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.299726][T11657] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.299763][T11657] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.533160][T12248] bond0: (slave syz_tun): Releasing backup interface [ 418.643788][T12248] syz_tun (unregistering): left promiscuous mode [ 418.643818][T12248] syz_tun (unregistering): left allmulticast mode [ 418.905366][T12255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.905383][T12255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.905410][T12255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.969046][T12255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.969062][T12255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.969090][T12255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.747059][T12255] hsr_slave_0: entered promiscuous mode [ 420.748685][T12255] hsr_slave_1: entered promiscuous mode [ 420.749799][T12255] debugfs: 'hsr0' already exists in 'hsr' [ 420.749823][T12255] Cannot create hsr debugfs directory [ 423.778176][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 423.802381][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 423.812269][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 423.823157][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 423.832005][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.275941][T12267] chnl_net:caif_netlink_parms(): no params data found [ 425.748615][T12267] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.748756][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.749002][T12267] bridge_slave_0: entered allmulticast mode [ 425.753444][T12267] bridge_slave_0: entered promiscuous mode [ 425.797846][T12267] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.798049][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.798293][T12267] bridge_slave_1: entered allmulticast mode [ 425.801275][T12267] bridge_slave_1: entered promiscuous mode [ 425.914614][ T5818] Bluetooth: hci4: command tx timeout [ 426.373370][T12267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.388731][T12267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.529707][T12267] team0: Port device team_slave_0 added [ 427.533582][T12267] team0: Port device team_slave_1 added [ 427.994430][ T5817] Bluetooth: hci4: command tx timeout [ 428.818109][T12267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.818126][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.818153][T12267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.820680][T12267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.820693][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.820720][T12267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.074975][ T5817] Bluetooth: hci4: command tx timeout [ 430.338148][T12267] hsr_slave_0: entered promiscuous mode [ 430.339626][T12267] hsr_slave_1: entered promiscuous mode [ 430.340644][T12267] debugfs: 'hsr0' already exists in 'hsr' [ 430.340668][T12267] Cannot create hsr debugfs directory [ 432.154518][ T5817] Bluetooth: hci4: command tx timeout [ 434.377198][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 434.401349][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 434.415859][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 434.418541][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 434.419922][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 434.930385][T12276] chnl_net:caif_netlink_parms(): no params data found [ 435.423540][ T5818] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 435.446793][ T5818] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 435.453031][ T5818] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 435.461648][ T5818] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 435.487011][ T5818] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 436.474694][ T5818] Bluetooth: hci5: command tx timeout [ 437.099921][T12276] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.100168][T12276] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.100423][T12276] bridge_slave_0: entered allmulticast mode [ 437.103373][T12276] bridge_slave_0: entered promiscuous mode [ 437.150172][T12276] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.150305][T12276] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.150568][T12276] bridge_slave_1: entered allmulticast mode [ 437.153560][T12276] bridge_slave_1: entered promiscuous mode [ 437.514647][ T5818] Bluetooth: hci8: command tx timeout [ 437.867184][T12276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.871931][T12276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.554455][ T5818] Bluetooth: hci5: command tx timeout [ 439.283438][T12276] team0: Port device team_slave_0 added [ 439.309380][T12276] team0: Port device team_slave_1 added [ 439.594398][ T5818] Bluetooth: hci8: command tx timeout [ 440.001312][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.001401][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.377477][T12276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.377495][T12276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.377521][T12276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.430290][T12276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.430307][T12276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.430334][T12276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.634771][ T5818] Bluetooth: hci5: command tx timeout [ 441.427540][T12276] hsr_slave_0: entered promiscuous mode [ 441.429134][T12276] hsr_slave_1: entered promiscuous mode [ 441.430212][T12276] debugfs: 'hsr0' already exists in 'hsr' [ 441.430236][T12276] Cannot create hsr debugfs directory [ 441.674695][ T5818] Bluetooth: hci8: command tx timeout [ 442.672286][T12282] chnl_net:caif_netlink_parms(): no params data found [ 442.717531][ T5818] Bluetooth: hci5: command tx timeout [ 443.754802][ T5818] Bluetooth: hci8: command tx timeout [ 444.920245][T12282] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.920448][T12282] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.920668][T12282] bridge_slave_0: entered allmulticast mode [ 444.949067][T12282] bridge_slave_0: entered promiscuous mode [ 444.986610][T12282] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.986755][T12282] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.987015][T12282] bridge_slave_1: entered allmulticast mode [ 444.990239][T12282] bridge_slave_1: entered promiscuous mode [ 445.821040][T12282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.846990][T12282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.199652][T12282] team0: Port device team_slave_0 added [ 447.203755][T12282] team0: Port device team_slave_1 added [ 447.805623][ T5817] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 447.820648][ T5817] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 447.822967][ T5817] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 447.824484][ T5817] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 447.834971][ T5817] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 448.741248][T12282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.741265][T12282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.741291][T12282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.795671][T12282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.795688][T12282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.795716][T12282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.914629][ T5817] Bluetooth: hci9: command tx timeout [ 449.968975][T12282] hsr_slave_0: entered promiscuous mode [ 449.970559][T12282] hsr_slave_1: entered promiscuous mode [ 449.971718][T12282] debugfs: 'hsr0' already exists in 'hsr' [ 449.971742][T12282] Cannot create hsr debugfs directory [ 451.994467][ T5817] Bluetooth: hci9: command tx timeout [ 452.195002][T12298] chnl_net:caif_netlink_parms(): no params data found [ 453.950258][T12298] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.950487][T12298] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.950740][T12298] bridge_slave_0: entered allmulticast mode [ 453.953736][T12298] bridge_slave_0: entered promiscuous mode [ 453.984524][T12298] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.984780][T12298] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.985026][T12298] bridge_slave_1: entered allmulticast mode [ 453.987952][T12298] bridge_slave_1: entered promiscuous mode [ 454.074441][ T5817] Bluetooth: hci9: command tx timeout [ 454.775086][T12298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.780119][T12298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.307815][T12298] team0: Port device team_slave_0 added [ 455.322150][T12298] team0: Port device team_slave_1 added [ 456.154457][ T5818] Bluetooth: hci9: command tx timeout [ 456.713832][T12298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.713850][T12298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.713877][T12298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.765231][T12298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.765247][T12298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.765274][T12298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.268227][T12298] hsr_slave_0: entered promiscuous mode [ 458.269874][T12298] hsr_slave_1: entered promiscuous mode [ 458.270994][T12298] debugfs: 'hsr0' already exists in 'hsr' [ 458.271017][T12298] Cannot create hsr debugfs directory [ 463.366852][ T5817] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 463.391896][ T5817] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 463.399205][ T5817] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 463.416272][ T5817] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 463.417044][ T5817] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 463.881196][T12307] chnl_net:caif_netlink_parms(): no params data found [ 465.514786][ T5817] Bluetooth: hci10: command tx timeout [ 465.611714][T12307] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.611930][T12307] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.612285][T12307] bridge_slave_0: entered allmulticast mode [ 465.635916][T12307] bridge_slave_0: entered promiscuous mode [ 465.639886][T12307] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.640094][T12307] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.640331][T12307] bridge_slave_1: entered allmulticast mode [ 465.643294][T12307] bridge_slave_1: entered promiscuous mode [ 466.261839][T12307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.276947][T12307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.083502][T12307] team0: Port device team_slave_0 added [ 467.093895][T12307] team0: Port device team_slave_1 added [ 467.594384][ T5817] Bluetooth: hci10: command tx timeout [ 468.062557][T12307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.062574][T12307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.062601][T12307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.109184][T12307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.109200][T12307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.109228][T12307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.741535][T12307] hsr_slave_0: entered promiscuous mode [ 468.743189][T12307] hsr_slave_1: entered promiscuous mode [ 468.757751][T12307] debugfs: 'hsr0' already exists in 'hsr' [ 468.757780][T12307] Cannot create hsr debugfs directory [ 469.644271][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.674628][ T5817] Bluetooth: hci10: command tx timeout [ 469.768785][T11657] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.768822][T11657] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.754937][ T5817] Bluetooth: hci10: command tx timeout [ 483.034236][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 484.445590][ T61] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 484.471050][ T61] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 484.484234][ T61] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 484.485373][ T61] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 484.488310][ T61] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 484.884874][T12316] chnl_net:caif_netlink_parms(): no params data found [ 486.074195][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.486402][T12316] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.486589][T12316] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.486853][T12316] bridge_slave_0: entered allmulticast mode [ 486.489832][T12316] bridge_slave_0: entered promiscuous mode [ 486.535774][T12316] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.535983][T12316] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.536282][T12316] bridge_slave_1: entered allmulticast mode [ 486.539505][T12316] bridge_slave_1: entered promiscuous mode [ 486.555405][ T5818] Bluetooth: hci11: command tx timeout [ 487.410371][T12316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.432392][T12316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.166212][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 488.468713][T12316] team0: Port device team_slave_0 added [ 488.473021][T12316] team0: Port device team_slave_1 added [ 488.634784][ T5817] Bluetooth: hci11: command tx timeout [ 490.714161][ T5817] Bluetooth: hci11: command tx timeout [ 491.071631][T12316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.071649][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.071676][T12316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.123369][T12316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.123388][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.123415][T12316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.726601][T12316] hsr_slave_0: entered promiscuous mode [ 491.728213][T12316] hsr_slave_1: entered promiscuous mode [ 491.729404][T12316] debugfs: 'hsr0' already exists in 'hsr' [ 491.729428][T12316] Cannot create hsr debugfs directory [ 492.794648][ T5817] Bluetooth: hci11: command tx timeout [ 494.916603][ T5818] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 494.939520][ T5818] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 494.940979][ T5818] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 494.942590][ T5818] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 494.943390][ T5818] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 495.444707][T12325] chnl_net:caif_netlink_parms(): no params data found [ 495.999049][ T5817] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 496.031783][ T5817] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 496.042279][ T5817] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 496.055056][ T5817] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 496.056520][ T5817] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 497.035199][ T61] Bluetooth: hci12: command tx timeout [ 497.666501][T12325] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.666636][T12325] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.666929][T12325] bridge_slave_0: entered allmulticast mode [ 497.670446][T12325] bridge_slave_0: entered promiscuous mode [ 497.723651][T12325] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.723788][T12325] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.738800][T12325] bridge_slave_1: entered allmulticast mode [ 497.741909][T12325] bridge_slave_1: entered promiscuous mode [ 498.074702][ T61] Bluetooth: hci13: command tx timeout [ 498.394683][ T61] Bluetooth: hci6: command 0x0406 tx timeout [ 498.394815][ T5119] Bluetooth: hci0: command 0x0406 tx timeout [ 499.057874][T12325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.062805][T12325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.117618][ T5817] Bluetooth: hci12: command tx timeout [ 500.155383][ T5817] Bluetooth: hci13: command tx timeout [ 500.583398][T12325] team0: Port device team_slave_0 added [ 500.602364][T12325] team0: Port device team_slave_1 added [ 501.194408][ T5817] Bluetooth: hci12: command tx timeout [ 501.440966][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.441046][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.022100][T12325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.022117][T12325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.022144][T12325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.081132][T12325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.081145][T12325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.081160][T12325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.234405][ T5817] Bluetooth: hci13: command tx timeout [ 502.814589][T12325] hsr_slave_0: entered promiscuous mode [ 502.816321][T12325] hsr_slave_1: entered promiscuous mode [ 502.817476][T12325] debugfs: 'hsr0' already exists in 'hsr' [ 502.817500][T12325] Cannot create hsr debugfs directory [ 502.818045][T12331] chnl_net:caif_netlink_parms(): no params data found [ 503.274140][ T5817] Bluetooth: hci12: command tx timeout [ 504.314303][ T5817] Bluetooth: hci13: command tx timeout [ 505.072294][ T1278] bridge_slave_1: left allmulticast mode [ 505.072326][ T1278] bridge_slave_1: left promiscuous mode [ 505.072592][ T1278] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.054838][ T1278] bridge_slave_0: left allmulticast mode [ 506.054868][ T1278] bridge_slave_0: left promiscuous mode [ 506.055124][ T1278] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.111977][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.408529][ C1] vkms_vblank_simulate: vblank timer overrun [ 508.257743][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 508.260218][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 508.297940][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 508.300116][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 508.300886][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.451320][ T5817] Bluetooth: hci0: command tx timeout [ 510.557273][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.441381][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.474515][ T5817] Bluetooth: hci0: command tx timeout [ 513.529722][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.862131][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.975614][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.378205][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.554538][ T5817] Bluetooth: hci0: command tx timeout [ 515.136436][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.278409][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.007876][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.147479][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.638011][ T5817] Bluetooth: hci0: command tx timeout [ 516.919258][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.130028][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.987765][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 523.991584][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 523.993051][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 524.016081][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 524.016923][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 526.074231][ T5817] Bluetooth: hci1: command tx timeout [ 528.154163][ T5817] Bluetooth: hci1: command tx timeout [ 529.125869][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 530.234655][ T5818] Bluetooth: hci1: command tx timeout [ 532.314310][ T5818] Bluetooth: hci1: command tx timeout [ 544.965115][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 544.971652][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 544.996079][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 544.997525][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 544.998886][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 547.114434][ T5817] Bluetooth: hci2: command tx timeout [ 549.194835][ T5817] Bluetooth: hci2: command tx timeout [ 549.602075][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 551.274844][ T5818] Bluetooth: hci2: command tx timeout [ 553.354586][ T5818] Bluetooth: hci2: command tx timeout [ 555.155969][ T5817] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 555.159524][ T5817] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 555.160907][ T5817] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 555.162072][ T5817] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 555.162849][ T5817] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 556.453863][ T5817] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 556.481488][ T5817] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 556.483185][ T5817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 556.502993][ T5817] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 556.503767][ T5817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 557.275766][ T5818] Bluetooth: hci6: command tx timeout [ 558.554662][T12361] Bluetooth: hci7: command tx timeout [ 559.354307][T12361] Bluetooth: hci6: command tx timeout [ 559.852298][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 559.852354][T12361] Bluetooth: hci8: command 0x0406 tx timeout [ 560.634212][ T5818] Bluetooth: hci7: command tx timeout [ 561.435031][ T5818] Bluetooth: hci6: command tx timeout [ 562.472734][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.689978][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.715068][ T5818] Bluetooth: hci7: command tx timeout [ 562.883648][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.883720][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.116681][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.510087][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.526330][ T5818] Bluetooth: hci6: command tx timeout [ 564.355074][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.425201][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.686264][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.794492][ T5818] Bluetooth: hci7: command tx timeout [ 565.503929][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.700882][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.584565][ T1278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.533437][ T1278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.761792][ T1278] bond0 (unregistering): Released all slaves [ 567.800947][ T1278] bond1 (unregistering): Released all slaves [ 568.916844][T12361] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 568.946178][T12361] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 568.947704][T12361] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 568.948847][T12361] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 568.949718][T12361] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 570.084087][ T5817] Bluetooth: hci9: command 0x0406 tx timeout [ 570.484243][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.034292][ T5817] Bluetooth: hci14: command tx timeout [ 571.462087][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.618025][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.071104][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.115330][ T5818] Bluetooth: hci14: command tx timeout [ 574.660471][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.194562][ T5817] Bluetooth: hci14: command tx timeout [ 576.153382][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.279759][ T5817] Bluetooth: hci14: command tx timeout [ 577.874544][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.083144][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.356157][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.634222][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.256270][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.574773][T12367] chnl_net:caif_netlink_parms(): no params data found [ 585.820819][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 585.859029][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 585.881520][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 585.958456][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 585.959288][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 586.006177][T12359] chnl_net:caif_netlink_parms(): no params data found [ 588.074420][ T5818] Bluetooth: hci0: command tx timeout [ 588.333625][T12353] chnl_net:caif_netlink_parms(): no params data found [ 588.349660][T12356] chnl_net:caif_netlink_parms(): no params data found [ 590.155235][ T5817] Bluetooth: hci0: command tx timeout [ 590.563849][ T5817] Bluetooth: hci10: command 0x0406 tx timeout [ 592.190028][T12367] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.190166][T12367] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.190452][T12367] bridge_slave_0: entered allmulticast mode [ 592.218788][T12367] bridge_slave_0: entered promiscuous mode [ 592.235382][ T5818] Bluetooth: hci0: command tx timeout [ 592.659175][T12367] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.660565][T12367] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.660864][T12367] bridge_slave_1: entered allmulticast mode [ 592.684570][T12367] bridge_slave_1: entered promiscuous mode [ 592.749821][T12359] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.749974][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.750282][T12359] bridge_slave_0: entered allmulticast mode [ 592.753453][T12359] bridge_slave_0: entered promiscuous mode [ 592.954678][ T38] INFO: task syz-executor:12267 blocked for more than 143 seconds. [ 592.954717][ T38] Not tainted syzkaller #0 [ 592.954728][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.954738][ T38] task:syz-executor state:D stack:22072 pid:12267 tgid:12267 ppid:1 task_flags:0x400140 flags:0x00080002 [ 592.954797][ T38] Call Trace: [ 592.954807][ T38] [ 592.954823][ T38] __schedule+0x16f3/0x4c20 [ 592.954867][ T38] ? __lock_acquire+0xab9/0xd20 [ 592.954905][ T38] ? __pfx___schedule+0x10/0x10 [ 592.954949][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 592.954980][ T38] rt_mutex_schedule+0x77/0xf0 [ 592.954999][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 592.955021][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 592.955073][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 592.955098][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 592.955120][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 592.955139][ T38] ? __lock_acquire+0xab9/0xd20 [ 592.955175][ T38] ? del_device_store+0xd1/0x360 [ 592.955201][ T38] ? __pfx_sscanf+0x10/0x10 [ 592.955228][ T38] ? del_device_store+0xd1/0x360 [ 592.955244][ T38] mutex_lock_nested+0x16a/0x1d0 [ 592.955272][ T38] del_device_store+0xd1/0x360 [ 592.955289][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 592.955319][ T38] ? __pfx_del_device_store+0x10/0x10 [ 592.955338][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 592.955364][ T38] ? sysfs_kf_write+0x166/0x260 [ 592.955386][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 592.955402][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 592.955436][ T38] vfs_write+0x5d5/0xb40 [ 592.955465][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 592.955492][ T38] ? __pfx_vfs_write+0x10/0x10 [ 592.955526][ T38] ? do_sys_openat2+0x154/0x1c0 [ 592.955556][ T38] ksys_write+0x14b/0x260 [ 592.955582][ T38] ? __pfx_ksys_write+0x10/0x10 [ 592.955609][ T38] ? do_syscall_64+0xbe/0xfa0 [ 592.955640][ T38] do_syscall_64+0xfa/0xfa0 [ 592.955664][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.955690][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.955709][ T38] ? clear_bhb_loop+0x60/0xb0 [ 592.955738][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.955757][ T38] RIP: 0033:0x7f22366de17f [ 592.955783][ T38] RSP: 002b:00007fff2d93e960 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 592.955803][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f22366de17f [ 592.955817][ T38] RDX: 0000000000000001 RSI: 00007fff2d93e9b0 RDI: 0000000000000005 [ 592.955829][ T38] RBP: 00007f22367632cb R08: 0000000000000000 R09: 00007fff2d93e7b7 [ 592.955842][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 592.955854][ T38] R13: 00007fff2d93e9b0 R14: 00007f2237464620 R15: 0000000000000003 [ 592.955888][ T38] [ 592.955898][ T38] INFO: task syz-executor:12276 blocked for more than 143 seconds. [ 592.955911][ T38] Not tainted syzkaller #0 [ 592.955921][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.955929][ T38] task:syz-executor state:D stack:22264 pid:12276 tgid:12276 ppid:1 task_flags:0x400140 flags:0x00080002 [ 592.955977][ T38] Call Trace: [ 592.955983][ T38] [ 592.955995][ T38] __schedule+0x16f3/0x4c20 [ 592.956057][ T38] ? __pfx___schedule+0x10/0x10 [ 592.956102][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 592.956131][ T38] rt_mutex_schedule+0x77/0xf0 [ 592.956150][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 592.956172][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 592.956213][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 592.956237][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 592.956261][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 592.956281][ T38] ? __lock_acquire+0xab9/0xd20 [ 592.956315][ T38] ? del_device_store+0xd1/0x360 [ 592.956340][ T38] ? __pfx_sscanf+0x10/0x10 [ 592.956366][ T38] ? del_device_store+0xd1/0x360 [ 592.956382][ T38] mutex_lock_nested+0x16a/0x1d0 [ 592.956410][ T38] del_device_store+0xd1/0x360 [ 592.956427][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 592.956455][ T38] ? __pfx_del_device_store+0x10/0x10 [ 592.956473][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 592.956501][ T38] ? sysfs_kf_write+0x166/0x260 [ 592.956524][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 592.956539][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 592.956573][ T38] vfs_write+0x5d5/0xb40 [ 592.956601][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 592.956627][ T38] ? __pfx_vfs_write+0x10/0x10 [ 592.956661][ T38] ? do_sys_openat2+0x154/0x1c0 [ 592.956691][ T38] ksys_write+0x14b/0x260 [ 592.956717][ T38] ? __pfx_ksys_write+0x10/0x10 [ 592.956744][ T38] ? do_syscall_64+0xbe/0xfa0 [ 592.956774][ T38] do_syscall_64+0xfa/0xfa0 [ 592.956799][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.956823][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.956842][ T38] ? clear_bhb_loop+0x60/0xb0 [ 592.956866][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.956884][ T38] RIP: 0033:0x7fbe4e33e17f [ 592.956900][ T38] RSP: 002b:00007ffeed4843e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 592.956919][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fbe4e33e17f [ 592.956932][ T38] RDX: 0000000000000001 RSI: 00007ffeed484430 RDI: 0000000000000005 [ 592.956945][ T38] RBP: 00007fbe4e3c32cb R08: 0000000000000000 R09: 00007ffeed484237 [ 592.956958][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 592.956970][ T38] R13: 00007ffeed484430 R14: 00007fbe4f0c4620 R15: 0000000000000003 [ 592.957003][ T38] [ 592.957054][ T38] [ 592.957054][ T38] Showing all locks held in the system: [ 592.957067][ T38] 3 locks held by rcuc/0/20: [ 592.957080][ T38] 1 lock held by khungtaskd/38: [ 592.957091][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 592.957150][ T38] 4 locks held by kworker/u8:8/1278: [ 592.957161][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 592.957209][ T38] #1: ffffc9000532fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 592.957256][ T38] #2: ffffffff8e8566a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 592.957298][ T38] #3: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 592.957355][ T38] 2 locks held by getty/5561: [ 592.957365][ T38] #0: ffff88823bf328a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 592.957412][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 592.957464][ T38] 3 locks held by kworker/1:3/5821: [ 592.957475][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 592.957521][ T38] #1: ffffc90004b3fba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 592.957567][ T38] #2: ffffffff8e8635b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 592.957629][ T38] 1 lock held by syz-executor/11657: [ 592.957640][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 592.957684][ T38] 1 lock held by syz-executor/12040: [ 592.957695][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 592.957739][ T38] 1 lock held by syz-executor/12115: [ 592.957750][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 592.957793][ T38] 1 lock held by syz-executor/12118: [ 592.957804][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 592.957852][ T38] 1 lock held by syz-executor/12249: [ 592.957863][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 592.957907][ T38] 7 locks held by syz-executor/12255: [ 592.957918][ T38] #0: ffff888034aa4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 592.957973][ T38] #1: ffff88804c086078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 592.958021][ T38] #2: ffff888144724e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 592.958079][ T38] #3: ffffffff8e0f4238 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 592.958122][ T38] #4: ffff88805c72b0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 592.958173][ T38] #5: ffff88805c832300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 592.958219][ T38] #6: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 592.958263][ T38] 4 locks held by syz-executor/12267: [ 592.958274][ T38] #0: ffff888034aa4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 592.958323][ T38] #1: ffff888038363878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 592.958371][ T38] #2: ffff888144724e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 592.958423][ T38] #3: ffffffff8e0f4238 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 592.958466][ T38] 4 locks held by syz-executor/12276: [ 592.958476][ T38] #0: ffff888034aa4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 592.958526][ T38] #1: ffff888074327478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 592.958574][ T38] #2: ffff888144724e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 592.958626][ T38] #3: ffffffff8e0f4238 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 592.958670][ T38] 4 locks held by syz-executor/12282: [ 592.958681][ T38] #0: ffff888034aa4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 592.958730][ T38] #1: ffff88807b156c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 592.958778][ T38] #2: ffff888144724e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 592.958830][ T38] #3: ffffffff8e0f4238 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 592.958873][ T38] 4 locks held by syz-executor/12298: [ 592.958884][ T38] #0: ffff888034aa4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 592.958933][ T38] #1: ffff888055c78478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 592.958981][ T38] #2: ffff888144724e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 592.959034][ T38] #3: ffffffff8e0f4238 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 592.959083][ T38] 4 locks held by syz-executor/12307: [ 592.959094][ T38] #0: ffff888034aa4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 592.959143][ T38] #1: ffff8880339e4c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 592.959191][ T38] #2: ffff888144724e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 592.959249][ T38] #3: ffffffff8e0f4238 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 592.959292][ T38] 4 locks held by syz-executor/12316: [ 592.959303][ T38] #0: ffff888034aa4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 592.959352][ T38] #1: ffff888065fc8078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 592.959400][ T38] #2: ffff888144724e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 592.959452][ T38] #3: ffffffff8e0f4238 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 592.959496][ T38] 1 lock held by syz-executor/12325: [ 592.959506][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 592.959551][ T38] 1 lock held by syz-executor/12331: [ 592.959562][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 592.959606][ T38] 1 lock held by syz-executor/12350: [ 592.959617][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 592.959661][ T38] 2 locks held by syz-executor/12353: [ 592.959672][ T38] #0: ffffffff8ed65710 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 592.959721][ T38] #1: ffffffff8e8635b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 592.959762][ T38] 2 locks held by syz-executor/12356: [ 592.959773][ T38] #0: ffffffff8ed65710 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 592.959821][ T38] #1: ffffffff8e8635b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 592.959864][ T38] 1 lock held by syz-executor/12359: [ 592.959874][ T38] #0: ffffffff8e8635b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 592.959917][ T38] 2 locks held by syz-executor/12367: [ 592.959928][ T38] #0: ffffffff8dfed500 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 592.959976][ T38] #1: ffffffff8e8635b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 592.960019][ T38] 2 locks held by syz-executor/12410: [ 592.960029][ T38] #0: ffffffff8e8566a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 592.960076][ T38] #1: ffffffff8e8635b8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 592.960130][ T38] [ 592.960135][ T38] ============================================= [ 592.960135][ T38] [ 592.960144][ T38] NMI backtrace for cpu 1 [ 592.960175][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 592.960224][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.960249][ T38] Call Trace: [ 592.960265][ T38] [ 592.960282][ T38] dump_stack_lvl+0x189/0x250 [ 592.960319][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.960346][ T38] ? __pfx__printk+0x10/0x10 [ 592.960381][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 592.960406][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 592.960430][ T38] ? __pfx__printk+0x10/0x10 [ 592.960456][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 592.960479][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 592.960503][ T38] watchdog+0xf60/0xfa0 [ 592.960534][ T38] ? watchdog+0x1e2/0xfa0 [ 592.960565][ T38] kthread+0x711/0x8a0 [ 592.960595][ T38] ? __pfx_watchdog+0x10/0x10 [ 592.960618][ T38] ? __pfx_kthread+0x10/0x10 [ 592.960641][ T38] ? rt_spin_unlock+0x150/0x200 [ 592.960667][ T38] ? rt_spin_unlock+0x161/0x200 [ 592.960686][ T38] ? __pfx_kthread+0x10/0x10 [ 592.960712][ T38] ret_from_fork+0x4bc/0x870 [ 592.960737][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 592.960766][ T38] ? __switch_to_asm+0x39/0x70 [ 592.960783][ T38] ? __switch_to_asm+0x33/0x70 [ 592.960800][ T38] ? __pfx_kthread+0x10/0x10 [ 592.960826][ T38] ret_from_fork_asm+0x1a/0x30 [ 592.960862][ T38] [ 592.960870][ T38] Sending NMI from CPU 1 to CPUs 0: [ 592.960895][ C0] NMI backtrace for cpu 0 [ 592.960914][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 592.960932][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.960942][ C0] RIP: 0010:trace_hardirqs_on+0xb/0x40 [ 592.960966][ C0] Code: 00 ff ff ff 90 0f 0b 90 e9 77 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 c5 2f dd 0f <85> c0 74 14 48 8b 3c 24 e8 c8 fe ff ff 65 c7 05 ad 2f dd 0f 00 00 [ 592.960980][ C0] RSP: 0018:ffffc90000196578 EFLAGS: 00000006 [ 592.960994][ C0] RAX: 0000000000000001 RBX: 0000000000000286 RCX: 382f65971dbd2700 [ 592.961006][ C0] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000200 [ 592.961017][ C0] RBP: ffffc90000196670 R08: ffffffff8ed63e77 R09: 1ffffffff1dac7ce [ 592.961029][ C0] R10: dffffc0000000000 R11: fffffbfff1dac7cf R12: 1ffff92000032cb4 [ 592.961041][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: dffffc0000000000 [ 592.961052][ C0] FS: 0000000000000000(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 592.961066][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.961077][ C0] CR2: 00005612d3f1e008 CR3: 000000000d3a6000 CR4: 00000000003526f0 [ 592.961092][ C0] Call Trace: [ 592.961098][ C0] [ 592.961104][ C0] __local_bh_enable_ip+0x1c0/0x2e0 [ 592.961127][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 592.961146][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 592.961170][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 592.961188][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 592.961209][ C0] __dev_queue_xmit+0x1d3d/0x3b70 [ 592.961234][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 592.961258][ C0] ? synproxy_pernet+0x23/0x240 [ 592.961279][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 592.961310][ C0] ? synproxy_pernet+0x23/0x240 [ 592.961326][ C0] ? synproxy_pernet+0x23/0x240 [ 592.961345][ C0] ? __asan_memset+0x22/0x50 [ 592.961365][ C0] ? __lock_acquire+0xab9/0xd20 [ 592.961391][ C0] ? ip_output+0x29f/0x450 [ 592.961413][ C0] ? ip_finish_output2+0xbae/0x11d0 [ 592.961436][ C0] ip_finish_output2+0xd5a/0x11d0 [ 592.961458][ C0] ? ip_finish_output2+0x452/0x11d0 [ 592.961482][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 592.961505][ C0] ? ip_skb_dst_mtu+0x917/0xb70 [ 592.961526][ C0] ? ip_finish_output+0x33a/0x3f0 [ 592.961546][ C0] ip_output+0x29f/0x450 [ 592.961566][ C0] ? ip_output+0x5b/0x450 [ 592.961585][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 592.961612][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 592.961629][ C0] ? nft_fib_reduce+0x348/0x640 [ 592.961649][ C0] ? synproxy_pernet+0x45/0x270 [ 592.961673][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 592.961698][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 592.961721][ C0] ? nf_ip_checksum+0x13c/0x510 [ 592.961744][ C0] nft_synproxy_do_eval+0x345/0x570 [ 592.961769][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 592.961791][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 592.961819][ C0] nft_do_chain+0x40c/0x1920 [ 592.961847][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 592.961884][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 592.961902][ C0] nft_do_chain_inet+0x25d/0x340 [ 592.961923][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 592.961951][ C0] ? NF_HOOK+0x9a/0x3a0 [ 592.961966][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 592.961988][ C0] nf_hook_slow+0xc5/0x220 [ 592.962008][ C0] NF_HOOK+0x206/0x3a0 [ 592.962024][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 592.962040][ C0] ? NF_HOOK+0x9a/0x3a0 [ 592.962054][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 592.962068][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 592.962086][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 592.962103][ C0] ? skb_dst+0x4f/0xd0 [ 592.962118][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 592.962136][ C0] NF_HOOK+0x30c/0x3a0 [ 592.962152][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 592.962167][ C0] ? NF_HOOK+0x9a/0x3a0 [ 592.962181][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 592.962197][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 592.962218][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 592.962233][ C0] __netif_receive_skb+0x143/0x380 [ 592.962258][ C0] ? process_backlog+0x27b/0x900 [ 592.962272][ C0] process_backlog+0x31e/0x900 [ 592.962298][ C0] __napi_poll+0xb6/0x540 [ 592.962323][ C0] net_rx_action+0x5f7/0xda0 [ 592.962347][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 592.962365][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 592.962391][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 592.962405][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 592.962430][ C0] handle_softirqs+0x22f/0x710 [ 592.962454][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 592.962478][ C0] __local_bh_enable_ip+0x1a0/0x2e0 [ 592.962498][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 592.962522][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 592.962544][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 592.962565][ C0] rcu_cpu_kthread+0xc3d/0x1b50 [ 592.962590][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 592.962618][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 592.962640][ C0] ? preempt_schedule_irq+0xde/0x150 [ 592.962661][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 592.962681][ C0] ? __pfx___schedule+0x10/0x10 [ 592.962703][ C0] ? irqentry_exit+0x74/0x90 [ 592.962723][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.962746][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 592.962766][ C0] ? __pfx_rcu_cpu_kthread_should_run+0x10/0x10 [ 592.962788][ C0] ? smpboot_thread_fn+0x501/0xa60 [ 592.962810][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 592.962828][ C0] smpboot_thread_fn+0x542/0xa60 [ 592.962848][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 592.962871][ C0] kthread+0x711/0x8a0 [ 592.962895][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 592.962913][ C0] ? __pfx_kthread+0x10/0x10 [ 592.962933][ C0] ? rt_spin_unlock+0x150/0x200 [ 592.962953][ C0] ? rt_spin_unlock+0x161/0x200 [ 592.962970][ C0] ? __pfx_kthread+0x10/0x10 [ 592.962991][ C0] ret_from_fork+0x4bc/0x870 [ 592.963011][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 592.963032][ C0] ? __switch_to_asm+0x39/0x70 [ 592.963060][ C0] ? __switch_to_asm+0x33/0x70 [ 592.963074][ C0] ? __pfx_kthread+0x10/0x10 [ 592.963096][ C0] ret_from_fork_asm+0x1a/0x30 [ 592.963121][ C0] [ 594.314634][ T5818] Bluetooth: hci0: command tx timeout [ 595.209374][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.209536][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.209878][T12359] bridge_slave_1: entered allmulticast mode [ 595.237055][T12359] bridge_slave_1: entered promiscuous mode [ 596.728755][T12367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.713757][T12367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.723845][T12353] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.731754][T12353] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.732226][T12353] bridge_slave_0: entered allmulticast mode [ 597.748788][T12353] bridge_slave_0: entered promiscuous mode [ 597.775876][T12356] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.776010][T12356] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.776427][T12356] bridge_slave_0: entered allmulticast mode [ 597.779772][T12356] bridge_slave_0: entered promiscuous mode [ 597.828029][T12359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.031472][T12353] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.031619][T12353] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.031946][T12353] bridge_slave_1: entered allmulticast mode [ 598.056267][T12353] bridge_slave_1: entered promiscuous mode [ 598.076932][T12356] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.077081][T12356] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.077427][T12356] bridge_slave_1: entered allmulticast mode [ 598.081025][T12356] bridge_slave_1: entered promiscuous mode [ 598.115492][T12359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.482005][T12367] team0: Port device team_slave_0 added [ 600.282686][T12367] team0: Port device team_slave_1 added [ 600.302416][T12353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.338437][T12356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.360057][T12359] team0: Port device team_slave_0 added [ 600.659870][T12353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.676635][T12359] team0: Port device team_slave_1 added [ 600.682556][T12356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.915604][T12367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.915622][T12367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.915648][T12367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active