last executing test programs: 2m0.344481612s ago: executing program 3 (id=7813): pwritev2(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000002c0)="ef78fc9da471b88e8661374cf35824881d0a5284de8ccd2b0d683e8c89214cb11a05696d2ba9aaa1927a68c701f6fc3cf72f9b28f5c4a958b78fc210c1de717e762838956b0da2b2af0fdd62c99acf26ba5da45d979545ec32a5140ad476bdefe5fecff81eadffd8fa67d39ed2a220b70ce6661420465def876fd62eb01c8da5140402b53ad960d378a8accdb8a905fc86e94c9b1969a818082fddaed2034b365a70ea65ed7ea1d70e1af85f2cbbe5ec8f91033654afaf29e38188a3d8e7f338a1308dd7", 0xc4}], 0x1, 0x6e45, 0x80, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000380)=""/72) 2m0.076310116s ago: executing program 3 (id=7814): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000eb40)=ANY=[@ANYBLOB="380000001a00010000000000000000000200000000000000000000001400050020010000000000000000000000000000080004"], 0x38}}, 0x0) 1m59.822935295s ago: executing program 1 (id=7816): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x68000080) 1m59.623358396s ago: executing program 3 (id=7817): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m59.507722029s ago: executing program 1 (id=7818): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000002ac0)=[0x0], 0x1}) 1m59.298175107s ago: executing program 3 (id=7820): mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x103843, 0x0) 1m59.075343012s ago: executing program 1 (id=7821): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r0, 0x1) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 1m58.922077907s ago: executing program 1 (id=7822): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0xa0, &(0x7f0000000480)={0x2, 0x17, 0x6, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0}) 1m58.690236468s ago: executing program 1 (id=7824): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xfffffff9}) ioctl(r0, 0x8b27, &(0x7f0000000040)) 1m58.444810633s ago: executing program 1 (id=7827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xa280000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m58.233346216s ago: executing program 3 (id=7828): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'pimreg0\x00'}}) 1m58.09626832s ago: executing program 3 (id=7829): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) 1m45.764677352s ago: executing program 2 (id=7927): r0 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000240)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) 1m45.603427078s ago: executing program 2 (id=7928): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048081) 1m44.159142287s ago: executing program 2 (id=7937): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fchdir(r0) 1m44.057850904s ago: executing program 2 (id=7938): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003300)=""/70, 0x46}], 0x1, &(0x7f0000000dc0)=""/4096, 0x1000}, 0x10}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/25, 0x19}], 0x1}, 0x4}, {{0x0, 0x0, 0x0}, 0x7027}], 0x3, 0x2, 0x0) 1m43.958627307s ago: executing program 2 (id=7939): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r1 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 1m43.815467731s ago: executing program 2 (id=7940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000002c0)={0x2, 0x8, 0x5, 0x580, 0x6}) 1m43.049784537s ago: executing program 32 (id=7827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xa280000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m42.667139452s ago: executing program 33 (id=7829): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) 1m38.553885969s ago: executing program 4 (id=7952): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) accept4(r0, 0x0, 0x0, 0x0) 1m38.232053578s ago: executing program 4 (id=7953): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0xfe, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x2, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m36.060727176s ago: executing program 4 (id=7955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/125) 1m35.799447943s ago: executing program 4 (id=7957): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x3f, &(0x7f0000000280)=0x3, 0x4) 1m35.639399469s ago: executing program 4 (id=7958): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000003c0)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x16, 0x4, 0x300, 0x0, 0x10, 0x0}) 1m35.538201694s ago: executing program 4 (id=7959): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 1m33.751367936s ago: executing program 0 (id=7963): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a300000000028000480"], 0x9c}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',no']) 1m33.60803174s ago: executing program 0 (id=7964): r0 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 1m33.469393651s ago: executing program 0 (id=7965): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m30.18479129s ago: executing program 0 (id=7966): madvise(&(0x7f0000459000/0x4000)=nil, 0x4000, 0x16) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 1m29.909503343s ago: executing program 0 (id=7967): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 1m28.617842432s ago: executing program 34 (id=7940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000002c0)={0x2, 0x8, 0x5, 0x580, 0x6}) 1m26.383472334s ago: executing program 0 (id=7972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x33) 1m24.795792649s ago: executing program 5 (id=7976): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x8, 0x0, r0, 0x0, 0x2a, 0x446, 0x0, 0x2}]) 1m24.152708407s ago: executing program 5 (id=7977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002001000440000000900000001"], 0x50) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x90002012}) 1m23.795458108s ago: executing program 5 (id=7978): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1m23.390536429s ago: executing program 5 (id=7980): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) 1m22.898146211s ago: executing program 5 (id=7982): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) 1m22.48915455s ago: executing program 5 (id=7984): syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x4c}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x2, &(0x7f0000000000)=[{0x9c, 0x38}, {0x6, 0x0, 0x2}]}) 1m20.033818764s ago: executing program 35 (id=7959): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 1m11.111038194s ago: executing program 36 (id=7972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x33) 1m7.303387214s ago: executing program 37 (id=7984): syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x4c}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x2, &(0x7f0000000000)=[{0x9c, 0x38}, {0x6, 0x0, 0x2}]}) 1m6.168217299s ago: executing program 6 (id=8010): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001a00010026bd700000000000020020000014"], 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 1m5.779685906s ago: executing program 6 (id=8011): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) 1m4.299143838s ago: executing program 6 (id=8013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b04000000000000000c020000006c000480680001800a000100696e6e6572000000580002800800024000000084080003400000000708000440000000400800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b908000140000000f307000240000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 1m3.942147321s ago: executing program 6 (id=8014): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x7ece, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0) 1m2.833089905s ago: executing program 6 (id=8015): r0 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x28, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa8}, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1m2.497647449s ago: executing program 6 (id=8016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x2}) 56.815468118s ago: executing program 8 (id=8033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}}, 0x0) 56.434929669s ago: executing program 8 (id=8034): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{&(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000480)=')', 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000040)='9E', 0x2}], 0x1}}], 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 55.958630493s ago: executing program 8 (id=8036): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x30, 0x1, 0x0, 0x0, r1, 0x2be5}) 55.625763503s ago: executing program 8 (id=8038): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000140)) 55.301899205s ago: executing program 8 (id=8039): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x3, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 52.824093785s ago: executing program 8 (id=8044): unshare(0xa020480) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 51.884900305s ago: executing program 7 (id=8047): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x1f, r0, 0x7, 0x4) 51.314563723s ago: executing program 7 (id=8048): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='stack :'], 0x11) lsm_get_self_attr(0x65, 0x0, &(0x7f00000002c0), 0x0) 50.886850618s ago: executing program 7 (id=8049): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf"}) 50.584650994s ago: executing program 7 (id=8050): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0x9}) 50.302684721s ago: executing program 7 (id=8051): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) 49.997247648s ago: executing program 7 (id=8052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) 47.039706111s ago: executing program 38 (id=8016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x2}) 37.535587603s ago: executing program 39 (id=8044): unshare(0xa020480) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 34.538285083s ago: executing program 40 (id=8052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) 18.873855221s ago: executing program 9 (id=8059): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 18.083070383s ago: executing program 9 (id=8060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "b0657eec4b"}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x88}}, 0x0) 17.731870715s ago: executing program 9 (id=8061): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0xfffffffd, @empty, 0x3f01}}, 0xfffd}, 0x90) 17.430227745s ago: executing program 9 (id=8062): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) unshare(0x24060400) 15.603434518s ago: executing program 9 (id=8063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 15.203818s ago: executing program 9 (id=8064): timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000180)) 0s ago: executing program 41 (id=8064): timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000180)) kernel console output (not intermixed with test programs): [ 549.439534][T30791] usb 2-1: config 0 descriptor?? [ 549.527763][ T5893] playstation 0003:054C:05C4.0051: invalid report_count 1553694380 [ 549.545635][ T5885] usb 4-1: USB disconnect, device number 56 [ 549.549260][ T5893] playstation 0003:054C:05C4.0051: item 0 4 1 9 parsing failed [ 549.587960][ T5893] playstation 0003:054C:05C4.0051: Parse failed [ 549.609400][ T5893] playstation 0003:054C:05C4.0051: probe with driver playstation failed with error -22 [ 549.758141][ T5885] usb 1-1: USB disconnect, device number 50 [ 549.884544][T30791] uclogic 0003:5543:0042.0052: No inputs registered, leaving [ 549.913901][T30791] uclogic 0003:5543:0042.0052: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 550.049965][ T1667] [U] [ 550.053035][ T1667] [U] [ 550.055773][ T1667] [U] [ 550.058510][ T1667] [U] [ 550.059978][T30791] usb 2-1: USB disconnect, device number 56 [ 550.072904][ T1667] [U] [ 550.075681][ T1667] [U] [ 550.078462][ T1667] [U] [ 550.081232][ T1667] [U] [ 550.106266][ T1666] [U] [ 550.590653][ T5893] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 550.765839][ T5893] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.788643][ T5893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 550.796334][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 550.806095][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.819206][ T5893] usb 4-1: config 0 descriptor?? [ 551.150654][T30791] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 551.200049][ T1741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7265'. [ 551.220849][ T1741] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 551.235598][ T1741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.255263][ T5893] logitech 0003:046D:C623.0053: unknown main item tag 0x0 [ 551.273041][ T5893] logitech 0003:046D:C623.0053: unknown main item tag 0x0 [ 551.290530][ T5893] logitech 0003:046D:C623.0053: unknown main item tag 0x0 [ 551.308051][ T5893] logitech 0003:046D:C623.0053: unknown main item tag 0x0 [ 551.312777][T30791] usb 3-1: Using ep0 maxpacket: 16 [ 551.328323][ T5893] logitech 0003:046D:C623.0053: unknown main item tag 0x0 [ 551.349908][ T5893] logitech 0003:046D:C623.0053: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0 [ 551.359785][T30791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.397979][T30791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.426193][T30791] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 551.452762][T30791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.456172][ T978] usb 4-1: USB disconnect, device number 57 [ 551.494421][T30791] usb 3-1: config 0 descriptor?? [ 551.572915][ T1744] fido_id[1744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 551.661982][ T5893] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 551.849159][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.879405][ T5893] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 551.900392][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 551.909217][ T5893] usb 2-1: Product: syz [ 551.935249][ T5893] usb 2-1: Manufacturer: syz [ 551.940047][ T5893] usb 2-1: SerialNumber: syz [ 551.948480][T30791] samsung 0003:0419:0001.0054: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 551.958115][ T5893] usb 2-1: config 0 descriptor?? [ 552.058235][ T5893] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 552.140330][T25807] udevd[25807]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.143453][T30791] usb 3-1: USB disconnect, device number 58 [ 552.236553][ T5885] usb 2-1: USB disconnect, device number 57 [ 552.690625][T30791] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 552.859378][T30791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.879810][T30791] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.906851][T30791] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 552.930590][T30791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.959935][T30791] usb 5-1: config 0 descriptor?? [ 552.987197][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 552.987215][ T30] audit: type=1326 audit(1750422881.319:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1848 comm="syz.0.7288" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc2a18e929 code=0x0 [ 553.416228][T30791] kye 0003:0458:501A.0055: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 553.444474][T30791] kye 0003:0458:501A.0055: hidraw0: USB HID v0.04 Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0 [ 553.472347][T30791] kye 0003:0458:501A.0055: tablet-enabling feature report not found [ 553.493298][T30791] kye 0003:0458:501A.0055: tablet enabling failed [ 553.646386][ T5893] usb 5-1: USB disconnect, device number 50 [ 553.720606][T30823] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 553.767948][ T1895] support for cryptoloop has been removed. Use dm-crypt instead. [ 553.882198][T30823] usb 3-1: Using ep0 maxpacket: 16 [ 553.900057][T30823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.928418][T30823] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 553.944922][T30823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.965737][T30823] usb 3-1: config 0 descriptor?? [ 554.426232][T30823] apple 0003:05AC:024B.0056: unknown main item tag 0x6 [ 554.452737][T30823] apple 0003:05AC:024B.0056: invalid report_size 24312 [ 554.466220][T30823] apple 0003:05AC:024B.0056: item 0 2 1 7 parsing failed [ 554.484923][T30823] apple 0003:05AC:024B.0056: parse failed [ 554.500267][T30823] apple 0003:05AC:024B.0056: probe with driver apple failed with error -22 [ 554.544859][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.571580][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.602140][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.618130][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.631752][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.646398][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.659906][T30823] usb 3-1: USB disconnect, device number 59 [ 554.677653][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.713434][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.731151][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.742098][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.770101][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.787662][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.795962][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.805827][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.825249][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.838015][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.855030][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.864478][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.872480][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.880286][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.908784][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.929357][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.970808][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 554.977353][ T1967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7325'. [ 554.978377][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.026934][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.047196][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.073894][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.096197][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.110896][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.125244][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.149909][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.160556][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.177848][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.190535][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.208334][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.250636][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.258395][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.273959][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.282291][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.310353][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.325919][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.354496][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.370753][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.388460][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.398595][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.417150][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.430609][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.448397][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.474524][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.482828][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.491089][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.505846][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.522125][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.550699][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.558364][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.581585][ T9] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 555.602694][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.619855][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.637755][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.658062][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.673217][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.707619][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.720535][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.728060][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.746723][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.757489][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.770642][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 555.781700][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.789242][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.800914][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 555.817393][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.826613][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.840694][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.848339][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.860298][ T9] usb 3-1: config 0 descriptor?? [ 555.877428][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 555.890687][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 555.899455][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.921571][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.934175][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 555.951115][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.962840][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 555.970374][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.978243][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 555.989441][ T9] usb 3-1: media controller created [ 555.998877][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.008041][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 556.022410][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 556.045427][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 556.060779][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 556.068606][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 556.095970][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 556.122779][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 556.136198][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input48 [ 556.220898][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 556.228510][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 556.252987][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 556.270608][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 556.278101][ T5893] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 556.286550][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 556.319288][ T9] usb 3-1: USB disconnect, device number 60 [ 556.336110][ T5893] hid-generic 0000:0000:0000.0057: hidraw0: HID v0.00 Device [syz0] on syz0 [ 556.481921][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 556.624323][ T2037] fido_id[2037]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 557.207986][ T30] audit: type=1326 audit(1750422885.539:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2088 comm="syz.3.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675f98e929 code=0x7ffc0000 [ 557.230540][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.246530][ T30] audit: type=1326 audit(1750422885.539:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2088 comm="syz.3.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675f98e929 code=0x7ffc0000 [ 557.275015][ T30] audit: type=1326 audit(1750422885.569:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2088 comm="syz.3.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f675f98d290 code=0x7ffc0000 [ 557.297581][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.311076][ T30] audit: type=1326 audit(1750422885.569:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2088 comm="syz.3.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f675f98d290 code=0x7ffc0000 [ 557.334006][ T5885] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 557.342116][ T30] audit: type=1326 audit(1750422885.579:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2088 comm="syz.3.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675f98e929 code=0x7ffc0000 [ 557.364979][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.395738][ T30] audit: type=1326 audit(1750422885.579:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2088 comm="syz.3.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675f98e929 code=0x7ffc0000 [ 557.440508][ T30] audit: type=1326 audit(1750422885.579:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2088 comm="syz.3.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f675f98e929 code=0x7ffc0000 [ 557.463811][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.488720][ T30] audit: type=1326 audit(1750422885.579:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2088 comm="syz.3.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675f98e929 code=0x7ffc0000 [ 557.511346][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.560532][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 557.571929][ T5885] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.586524][ T5885] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.599588][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 557.617288][ T5885] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 557.629106][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.647572][ T5885] usb 5-1: config 0 descriptor?? [ 557.757286][ T2110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7372'. [ 557.769301][ T2110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7372'. [ 558.091816][ T5885] corsair 0003:1B1C:1B3E.0058: unknown main item tag 0x0 [ 558.099499][ T5885] corsair 0003:1B1C:1B3E.0058: unknown main item tag 0x0 [ 558.113268][ T5885] corsair 0003:1B1C:1B3E.0058: unknown main item tag 0x0 [ 558.121288][ T5885] corsair 0003:1B1C:1B3E.0058: unknown main item tag 0x0 [ 558.129602][ T5885] corsair 0003:1B1C:1B3E.0058: failed to start in urb: -90 [ 558.142450][ T5885] corsair 0003:1B1C:1B3E.0058: hidraw0: USB HID v0.7f Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 558.251795][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 558.291914][ T5885] usb 5-1: USB disconnect, device number 51 [ 558.392962][ T2155] netlink: 'syz.2.7383': attribute type 1 has an invalid length. [ 558.401856][ T2155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.420550][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 558.438269][ T9] usb 2-1: config index 0 descriptor too short (expected 42, got 18) [ 558.447213][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 558.471534][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 558.503536][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 558.513810][ T9] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 558.527414][ T9] usb 2-1: Product: syz [ 558.531980][ T9] usb 2-1: SerialNumber: syz [ 558.544882][ T2159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7385'. [ 558.556439][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 558.563147][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 558.569859][ T2159] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 558.581448][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 558.587568][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 558.595777][ T2159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.978491][ T30] audit: type=1326 audit(1750422887.309:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.2.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 559.047378][ T30] audit: type=1326 audit(1750422887.309:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.2.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 559.076762][ T30] audit: type=1326 audit(1750422887.349:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.2.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 559.108807][ T30] audit: type=1326 audit(1750422887.349:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.2.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 559.109488][ T9] r8152-cfgselector 2-1: reset high-speed USB device number 58 using dummy_hcd [ 559.131284][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.149045][ T30] audit: type=1326 audit(1750422887.349:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.2.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 559.178255][ T30] audit: type=1326 audit(1750422887.349:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.2.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 559.178306][ T30] audit: type=1326 audit(1750422887.349:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.2.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 559.178352][ T30] audit: type=1326 audit(1750422887.349:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.2.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 559.327976][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.463825][ T2211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7403'. [ 559.691565][ T9] r8152-cfgselector 2-1: USB disconnect, device number 58 [ 560.468675][ T2269] netlink: 'syz.4.7425': attribute type 2 has an invalid length. [ 560.518230][ T9] hid-generic 0101:0009:007F.0059: item fetching failed at offset 0/2 [ 560.536196][ T9] hid-generic 0101:0009:007F.0059: probe with driver hid-generic failed with error -22 [ 560.692843][ T2283] macvlan2: entered promiscuous mode [ 560.692869][ T2283] macvlan2: entered allmulticast mode [ 560.860912][ T2291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7433'. [ 560.981042][ T2298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7434'. [ 561.193166][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 561.363126][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 561.377662][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 561.409214][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 561.410596][ T30] audit: type=1326 audit(1750422889.739:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2323 comm="syz.2.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 561.440306][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 561.444980][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.493777][ T30] audit: type=1326 audit(1750422889.739:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2323 comm="syz.2.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 561.502823][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.575632][ T9] usb 5-1: config 0 descriptor?? [ 562.022297][ T9] kovaplus 0003:1E7D:2D50.005A: unknown main item tag 0x0 [ 562.039223][ T9] kovaplus 0003:1E7D:2D50.005A: unknown main item tag 0x0 [ 562.061215][ T9] kovaplus 0003:1E7D:2D50.005A: unknown main item tag 0x0 [ 562.082172][ T9] kovaplus 0003:1E7D:2D50.005A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 562.180738][ T5885] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 562.217191][ T9] kovaplus 0003:1E7D:2D50.005A: couldn't init struct kovaplus_device [ 562.235264][ T9] kovaplus 0003:1E7D:2D50.005A: couldn't install mouse [ 562.265104][ T9] kovaplus 0003:1E7D:2D50.005A: probe with driver kovaplus failed with error -71 [ 562.299903][ T9] usb 5-1: USB disconnect, device number 52 [ 562.341007][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 562.356307][ T5885] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.378325][ T2377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.380553][ T5885] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 562.417057][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 562.424859][ T5885] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 562.439831][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.464231][ T5885] usb 2-1: config 0 descriptor?? [ 562.541428][ T2384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7464'. [ 562.576937][ T2384] veth5: entered promiscuous mode [ 562.905412][ T5885] vrc2 0003:07C0:1125.005B: fixing up VRC-2 report descriptor [ 562.956144][ T5885] input: HID 07c0:1125 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:07C0:1125.005B/input/input49 [ 563.017273][ T2427] netlink: 'syz.3.7473': attribute type 6 has an invalid length. [ 563.026389][ T2427] netlink: 'syz.3.7473': attribute type 1 has an invalid length. [ 563.037771][ T2427] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7473'. [ 563.077906][ T5885] vrc2 0003:07C0:1125.005B: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.1-1/input0 [ 563.134607][ T5885] usb 2-1: USB disconnect, device number 59 [ 563.246517][ T2438] fido_id[2438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 563.306011][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.312473][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.232868][ T2522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7495'. [ 564.660641][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 564.747239][ T2565] usb usb8: usbfs: process 2565 (syz.0.7507) did not claim interface 7 before use [ 564.810532][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 564.827850][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 564.849961][ T9] usb 5-1: config 0 has no interface number 0 [ 564.860206][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 564.883194][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 564.894827][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.908763][ T9] usb 5-1: Product: syz [ 564.921002][ T9] usb 5-1: Manufacturer: syz [ 564.925667][ T9] usb 5-1: SerialNumber: syz [ 564.962201][ T9] usb 5-1: config 0 descriptor?? [ 564.977778][ T2577] : entered promiscuous mode [ 564.982409][ T9] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 565.217995][ T5893] usb 5-1: USB disconnect, device number 53 [ 565.440751][T30823] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 565.600580][T30823] usb 4-1: Using ep0 maxpacket: 32 [ 565.608471][T30823] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 565.630508][T30823] usb 4-1: config 0 has no interface number 0 [ 565.650023][T30823] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 565.678597][T30823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.689355][T30823] usb 4-1: Product: syz [ 565.694882][T30823] usb 4-1: Manufacturer: syz [ 565.700280][T30823] usb 4-1: SerialNumber: syz [ 565.710386][T30823] usb 4-1: config 0 descriptor?? [ 565.733650][T30823] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 566.065840][ T2650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7530'. [ 566.321336][T30823] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 566.398233][T30823] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 566.519560][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 566.520096][ T9] usb 4-1: USB disconnect, device number 58 [ 566.532128][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 566.634273][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 566.635520][ T9] quatech2 4-1:0.51: device disconnected [ 567.713263][ T2772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7562'. [ 567.794068][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 567.794089][ T30] audit: type=1326 audit(1750422896.119:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2775 comm="syz.2.7565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d5638e929 code=0x0 [ 567.890613][T30823] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 568.040635][T30823] usb 2-1: Using ep0 maxpacket: 16 [ 568.056741][T30823] usb 2-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 568.074691][T30823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.085885][T30823] usb 2-1: Product: syz [ 568.090236][T30823] usb 2-1: Manufacturer: syz [ 568.095578][T30823] usb 2-1: SerialNumber: syz [ 568.107219][T30823] usb 2-1: config 0 descriptor?? [ 568.124026][T30823] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 568.256731][ T2807] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7575'. [ 568.430725][ T5885] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 568.529861][T30823] gspca_sn9c20x: Write register 1001 failed -71 [ 568.548654][T30823] gspca_sn9c20x: Device initialization failed [ 568.555759][T30823] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 568.572965][T30823] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 568.592771][T30823] usb 2-1: USB disconnect, device number 60 [ 568.607097][ T5885] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 568.645339][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.672284][ T5885] usb 5-1: Product: syz [ 568.676760][ T5885] usb 5-1: Manufacturer: syz [ 568.685782][ T5885] usb 5-1: SerialNumber: syz [ 568.710954][ T5885] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 568.737924][T30791] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 569.411123][ T5885] usb 5-1: USB disconnect, device number 54 [ 570.029626][T30791] usb 5-1: Service connection timeout for: 256 [ 570.060553][T30791] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 570.082699][ T2874] netlink: 'syz.2.7587': attribute type 1 has an invalid length. [ 570.093606][T30791] ath9k_htc: Failed to initialize the device [ 570.102452][ T5885] usb 5-1: ath9k_htc: USB layer deinitialized [ 570.137685][ T2878] x_tables: ip_tables: udp match: only valid for protocol 17 [ 570.488032][ T2890] ptrace attach of "./syz-executor exec"[5846] was attempted by ""[2890] [ 571.660741][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 571.820771][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 571.830782][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.845789][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 571.870227][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 571.870261][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.870282][ T9] usb 3-1: Product: syz [ 571.870297][ T9] usb 3-1: Manufacturer: syz [ 571.870314][ T9] usb 3-1: SerialNumber: syz [ 572.315084][ T9] usb 3-1: cannot find UAC_HEADER [ 572.378001][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 572.460092][T15790] udevd[15790]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.537073][ T9] usb 3-1: USB disconnect, device number 61 [ 572.910366][ T3004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7636'. [ 572.934457][ T3004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7636'. [ 572.949099][ T3004] netlink: 'syz.4.7636': attribute type 14 has an invalid length. [ 572.957809][ T3004] netlink: 'syz.4.7636': attribute type 12 has an invalid length. [ 573.113157][ T3015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7639'. [ 573.481335][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 573.584778][ T3049] loop8: detected capacity change from 0 to 7 [ 573.605945][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 573.615553][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.626670][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 573.636026][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.647633][ T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 573.647992][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 573.666168][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.669256][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.689102][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 573.698837][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.707785][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 573.709973][ T9] usb 4-1: Product: syz [ 573.717136][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.731347][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 573.740718][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.750915][ T9] usb 4-1: Manufacturer: syz [ 573.756343][ T9] usb 4-1: SerialNumber: syz [ 573.761069][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 573.761107][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.780017][ T3049] ldm_validate_partition_table(): Disk read failed. [ 573.787786][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 573.797051][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.810458][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 573.812737][ T9] usb 4-1: config 0 descriptor?? [ 573.819817][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.839290][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 573.848948][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 573.858634][ T3049] Dev loop8: unable to read RDB block 0 [ 573.876573][ T3049] loop8: unable to read partition table [ 573.896855][ T3049] loop8: partition table beyond EOD, truncated [ 573.910785][ T3049] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 573.946251][ T9] ch341 4-1:0.0: ch341-uart converter detected [ 574.360939][ T5893] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 574.440856][T30791] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 574.530680][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 574.537677][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 574.551819][ T5893] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 574.561333][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.570755][ T9] usb 4-1: failed to send control message: -71 [ 574.577316][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 574.590535][T30791] usb 2-1: Using ep0 maxpacket: 16 [ 574.595316][ T9] usb 4-1: USB disconnect, device number 59 [ 574.603667][ T5893] usb 5-1: config 0 descriptor?? [ 574.613193][T30791] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 574.618912][ T9] ch341 4-1:0.0: device disconnected [ 574.637425][T30791] usb 2-1: config 0 has no interface number 0 [ 574.647758][T30791] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.663741][T30791] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.674906][T30791] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 574.684654][T30791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.698252][T30791] usb 2-1: config 0 descriptor?? [ 575.029603][ T5893] corsair 0003:1B1C:1B09.005C: unbalanced delimiter at end of report description [ 575.045056][ T5893] corsair 0003:1B1C:1B09.005C: parse failed [ 575.051349][ T5893] corsair 0003:1B1C:1B09.005C: probe with driver corsair failed with error -22 [ 575.266000][T30791] usb 5-1: USB disconnect, device number 55 [ 575.338165][ T5885] usb 2-1: USB disconnect, device number 61 [ 575.615067][ T3160] netlink: 'syz.3.7674': attribute type 63 has an invalid length. [ 575.629004][ T3160] netlink: 'syz.3.7674': attribute type 63 has an invalid length. [ 575.630701][T30823] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 575.793054][T30823] usb 3-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.805064][T30823] usb 3-1: config 0 interface 0 has no altsetting 0 [ 575.812133][T30823] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 575.823848][T30823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.837096][T30823] usb 3-1: config 0 descriptor?? [ 575.916781][ T3175] netlink: 'syz.4.7679': attribute type 5 has an invalid length. [ 576.284123][T30823] a4tech 0003:09DA:001A.005E: unbalanced collection at end of report description [ 576.321155][T30823] a4tech 0003:09DA:001A.005E: parse failed [ 576.337572][T30823] a4tech 0003:09DA:001A.005E: probe with driver a4tech failed with error -22 [ 576.523700][ T5893] usb 3-1: USB disconnect, device number 62 [ 577.071516][ T3223] syz.4.7696 (3223) used obsolete PPPIOCDETACH ioctl [ 577.556509][ T30] audit: type=1326 audit(1750422905.869:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3254 comm="syz.0.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2a18e929 code=0x7ffc0000 [ 577.639041][ T30] audit: type=1326 audit(1750422905.869:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3254 comm="syz.0.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2a18e929 code=0x7ffc0000 [ 577.675299][ T3261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.689242][ T3263] netlink: 'syz.4.7711': attribute type 11 has an invalid length. [ 577.712825][ T30] audit: type=1326 audit(1750422905.949:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3254 comm="syz.0.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc2a18e929 code=0x7ffc0000 [ 577.779145][ T30] audit: type=1326 audit(1750422905.949:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3254 comm="syz.0.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2a18e929 code=0x7ffc0000 [ 577.845388][ T30] audit: type=1326 audit(1750422905.949:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3254 comm="syz.0.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2a18e929 code=0x7ffc0000 [ 577.878180][ T3271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7717'. [ 577.918970][ T30] audit: type=1326 audit(1750422905.949:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3254 comm="syz.0.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbc2a18e929 code=0x7ffc0000 [ 577.990665][ T30] audit: type=1326 audit(1750422905.949:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3254 comm="syz.0.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2a18e929 code=0x7ffc0000 [ 578.080892][ T30] audit: type=1326 audit(1750422905.949:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3254 comm="syz.0.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2a18e929 code=0x7ffc0000 [ 578.142505][ T3284] input: syz1 as /devices/virtual/input/input50 [ 578.467374][ T3305] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 578.712925][ T3316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7736'. [ 578.772849][ T3316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7736'. [ 579.020626][T30823] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 579.172620][T30823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.205997][T30823] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 579.230673][T30823] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 579.238834][T30823] usb 4-1: Manufacturer: syz [ 579.263981][T30823] usb 4-1: SerialNumber: syz [ 579.295811][T30823] usb 4-1: config 0 descriptor?? [ 579.538800][T30823] usb 4-1: USB disconnect, device number 60 [ 579.671126][ T3358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7749'. [ 580.562698][ T3398] pimreg: entered allmulticast mode [ 580.576437][ T3398] pimreg: left allmulticast mode [ 581.754983][ T3423] netlink: 'syz.2.7772': attribute type 3 has an invalid length. [ 581.773492][ T3423] netlink: 'syz.2.7772': attribute type 1 has an invalid length. [ 581.820758][ T3423] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.7772'. [ 582.612508][ T5893] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 582.711688][ T3440] geneve0: entered allmulticast mode [ 582.773982][ T5893] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.783871][ T5893] usb 3-1: config 0 has no interface number 0 [ 582.810139][ T5893] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 582.884588][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.971305][ T5893] usb 3-1: config 0 descriptor?? [ 582.982004][ T3442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7780'. [ 583.033383][ T5893] usb 3-1: selecting invalid altsetting 1 [ 583.076583][ T5893] dvb_ttusb_budget: ttusb_init_controller: error [ 583.127702][ T5893] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 583.364444][ T30] audit: type=1326 audit(1750422911.699:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.3.7783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675f98e929 code=0x7ffc0000 [ 583.495829][ T30] audit: type=1326 audit(1750422911.699:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.3.7783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675f98e929 code=0x7ffc0000 [ 583.605632][ T5893] DVB: Unable to find symbol cx22700_attach() [ 583.620161][ T30] audit: type=1326 audit(1750422911.699:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.3.7783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f675f98e929 code=0x7ffc0000 [ 583.741219][ T30] audit: type=1326 audit(1750422911.699:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.3.7783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675f98e929 code=0x7ffc0000 [ 583.900529][ T30] audit: type=1326 audit(1750422911.699:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3463 comm="syz.3.7783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675f98e929 code=0x7ffc0000 [ 583.961814][ T5893] DVB: Unable to find symbol tda10046_attach() [ 583.968065][ T5893] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 584.041094][ T5893] usb 3-1: USB disconnect, device number 63 [ 584.159742][ T3478] netlink: 'syz.2.7786': attribute type 61 has an invalid length. [ 585.177303][ T3506] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7795'. [ 585.590711][ T5893] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 585.742928][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.776815][ T5893] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 585.800502][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.854229][ T5893] usb 3-1: config 0 descriptor?? [ 586.330765][ T5893] aquacomputer_d5next 0003:0C70:F00B.005F: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.2-1/input0 [ 586.375087][ T3371] syz.4.7755 (3371): drop_caches: 1 [ 586.406441][ T3534] binder: 3531:3534 ioctl c018620b 200000000000 returned -14 [ 586.545163][ T5893] usb 3-1: USB disconnect, device number 64 [ 587.304817][ T3563] netlink: 408 bytes leftover after parsing attributes in process `syz.3.7811'. [ 587.349178][ T3563] tipc: Enabled bearer , priority 10 [ 587.983132][ T3573] netlink: 'syz.3.7814': attribute type 5 has an invalid length. [ 587.991562][ T3532] fido_id[3532]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 589.374906][ T3598] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.431776][ T3598] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.689970][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.697376][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.767759][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.775262][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.845726][ T3599] vlan0: left promiscuous mode [ 589.855248][ T3599] macvlan0: left allmulticast mode [ 589.869908][ T3599] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 589.883382][ T3599] ip6tnl1: left promiscuous mode [ 589.891710][ T3599] macsec0: left promiscuous mode [ 589.896903][ T3599] vlan1: left promiscuous mode [ 592.571011][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 592.730672][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 592.738661][ T9] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.756187][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 592.763522][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 592.781299][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.798875][ T9] usb 5-1: config 0 descriptor?? [ 593.252947][ T9] microsoft 0003:045E:009D.0060: hidraw0: USB HID v0.07 Device [HID 045e:009d] on usb-dummy_hcd.4-1/input0 [ 593.279952][ T9] microsoft 0003:045E:009D.0060: no inputs found [ 593.294211][ T9] microsoft 0003:045E:009D.0060: could not initialize ff, continuing anyway [ 593.461031][ T9] usb 5-1: USB disconnect, device number 56 [ 593.635808][ T3682] fido_id[3682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 595.236108][ T30] audit: type=1326 audit(1750422923.569:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.2.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 595.338539][ T30] audit: type=1326 audit(1750422923.569:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.2.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 595.414230][ T30] audit: type=1326 audit(1750422923.609:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.2.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 595.455873][ T30] audit: type=1326 audit(1750422923.609:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.2.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 595.488728][ T30] audit: type=1326 audit(1750422923.609:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.2.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 595.516814][ T30] audit: type=1326 audit(1750422923.609:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.2.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 595.553645][ T30] audit: type=1326 audit(1750422923.609:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.2.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 595.581422][ T30] audit: type=1326 audit(1750422923.609:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.2.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5638e929 code=0x7ffc0000 [ 598.171009][ T3787] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7896'. [ 598.191091][ T3787] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7896'. [ 599.091139][ T3812] xt_CT: You must specify a L4 protocol and not use inversions on it [ 601.010310][ T3852] netlink: 26 bytes leftover after parsing attributes in process `syz.4.7914'. [ 601.056328][ T3852] netlink: 26 bytes leftover after parsing attributes in process `syz.4.7914'. [ 601.519620][ T3864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7921'. [ 601.558501][ T3864] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 601.579292][ T3862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7920'. [ 601.613274][ T3862] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7920'. [ 602.384380][ T3885] tipc: Started in network mode [ 602.389339][ T3885] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 602.407559][ T3885] tipc: Enabled bearer , priority 17 [ 602.480778][ T9] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 602.644316][ T9] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 602.667424][ T9] usb 3-1: config 0 has no interface number 0 [ 602.687546][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 602.710085][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.741860][ T9] usb 3-1: Product: syz [ 602.746130][ T9] usb 3-1: Manufacturer: syz [ 602.761565][ T9] usb 3-1: SerialNumber: syz [ 602.802518][ T9] usb 3-1: config 0 descriptor?? [ 603.039438][ T9] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 603.082397][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 603.120708][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 603.148345][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 603.175025][ T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 603.224205][ T9] usb 3-1: USB disconnect, device number 65 [ 603.277018][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 603.319907][ T9] keyspan 3-1:0.133: device disconnected [ 603.520620][ T5893] tipc: Node number set to 10463914 [ 603.944418][ T5893] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 604.110907][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 604.123482][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.139630][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.153413][ T5893] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 604.168237][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.199396][ T5893] usb 5-1: config 0 descriptor?? [ 604.658089][ T5893] lua 0003:1E7D:2C2E.0061: item fetching failed at offset 1/5 [ 604.669000][ T5893] lua 0003:1E7D:2C2E.0061: parse failed [ 604.677868][ T5893] lua 0003:1E7D:2C2E.0061: probe with driver lua failed with error -22 [ 604.864620][ T5893] usb 5-1: USB disconnect, device number 57 [ 605.493079][ T3951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7943'. [ 606.470951][ T3955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7945'. [ 606.577485][ T3962] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 606.588542][ T3962] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 606.602291][ T3962] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 606.612003][ T3962] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 606.625598][ T3962] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 606.633805][ T3962] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 606.683112][ T3962] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 606.692996][ T3962] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 606.704806][ T3962] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 606.714061][ T3962] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 608.740944][ T3962] Bluetooth: hci5: command tx timeout [ 608.830613][ T3962] Bluetooth: hci6: command tx timeout [ 609.569599][ T3970] chnl_net:caif_netlink_parms(): no params data found [ 609.722251][ T3969] chnl_net:caif_netlink_parms(): no params data found [ 610.031286][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 610.226761][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 610.249606][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.300739][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 610.360446][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.400111][ T9] usb 5-1: config 0 descriptor?? [ 610.831367][ T3962] Bluetooth: hci5: command tx timeout [ 610.908354][ T3962] Bluetooth: hci6: command tx timeout [ 610.928745][ T9] uclogic 0003:5543:0005.0062: unknown main item tag 0x0 [ 610.970642][ T9] uclogic 0003:5543:0005.0062: unknown main item tag 0x0 [ 610.999330][ T9] uclogic 0003:5543:0005.0062: unknown main item tag 0x0 [ 611.022735][ T9] uclogic 0003:5543:0005.0062: No inputs registered, leaving [ 611.045294][ T3970] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.061475][ T3970] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.081222][ T9] uclogic 0003:5543:0005.0062: hidraw0: USB HID v0.05 Device [HID 5543:0005] on usb-dummy_hcd.4-1/input0 [ 611.125926][ T3970] bridge_slave_0: entered allmulticast mode [ 611.158861][ T3970] bridge_slave_0: entered promiscuous mode [ 611.180103][ T9] usb 5-1: USB disconnect, device number 58 [ 611.200209][ T3970] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.264286][ T3970] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.306484][ T3970] bridge_slave_1: entered allmulticast mode [ 611.354037][ T3970] bridge_slave_1: entered promiscuous mode [ 611.397121][ T3969] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.420703][ T3969] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.459305][ T3969] bridge_slave_0: entered allmulticast mode [ 611.478236][ T4316] fido_id[4316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 611.515794][ T3969] bridge_slave_0: entered promiscuous mode [ 611.686341][ T3969] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.715158][ T3969] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.744271][ T3969] bridge_slave_1: entered allmulticast mode [ 611.768982][ T3969] bridge_slave_1: entered promiscuous mode [ 611.984122][ T3970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.270034][ T3970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.482649][ T3969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.539561][ T4394] pim6reg: entered allmulticast mode [ 612.670350][ T4398] pim6reg: left allmulticast mode [ 612.781818][ T3969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.904619][ T3970] team0: Port device team_slave_0 added [ 612.911290][ T3962] Bluetooth: hci5: command tx timeout [ 612.987878][ T3962] Bluetooth: hci6: command tx timeout [ 613.122267][ T3969] team0: Port device team_slave_0 added [ 613.140299][ T3970] team0: Port device team_slave_1 added [ 613.156646][ T3969] team0: Port device team_slave_1 added [ 613.527392][ T3970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.543004][ T3970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.581218][ T3970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.680062][ T3969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.697378][ T3969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.765056][ T3969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.806525][ T3969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.814941][ T3969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.880130][ T3969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.910274][ T3970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.923859][ T3970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.956937][ T4495] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7962'. [ 613.969829][ T3970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.182037][ T4513] fuse: Unknown parameter 'no€' [ 614.550257][ T3970] hsr_slave_0: entered promiscuous mode [ 614.558122][ T3970] hsr_slave_1: entered promiscuous mode [ 614.572545][ T3970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.585671][ T3970] Cannot create hsr debugfs directory [ 614.615791][ T3969] hsr_slave_0: entered promiscuous mode [ 614.628495][ T3969] hsr_slave_1: entered promiscuous mode [ 614.638180][ T3969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.656115][ T3969] Cannot create hsr debugfs directory [ 614.980924][ T3962] Bluetooth: hci5: command tx timeout [ 615.067445][ T3962] Bluetooth: hci6: command tx timeout [ 615.745298][ T3970] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 615.792283][ T3970] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 615.906400][ T3970] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 615.955437][ T3970] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 616.046376][ T3969] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 616.079056][ T3969] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 616.121537][ T3969] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 616.183031][ T3969] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 616.513991][ T3970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.607190][ T3970] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.707993][ T3969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.734082][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.741527][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.773898][T14112] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.781316][T14112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.837419][ T3969] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.995573][ T3970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.065846][T14112] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.073135][T14112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.096778][T14112] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.104054][T14112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.419150][ T3970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.596654][ T3969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.769131][ T3970] veth0_vlan: entered promiscuous mode [ 617.894378][ T3970] veth1_vlan: entered promiscuous mode [ 617.929849][ T3969] veth0_vlan: entered promiscuous mode [ 618.004324][ T3969] veth1_vlan: entered promiscuous mode [ 618.175819][ T3970] veth0_macvtap: entered promiscuous mode [ 618.221987][ T3970] veth1_macvtap: entered promiscuous mode [ 618.282993][ T3970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.310205][ T3970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.338259][ T3970] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.359809][ T3970] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.377447][ T3970] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.390357][ T3970] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.534417][ T3969] veth0_macvtap: entered promiscuous mode [ 618.597548][ T3969] veth1_macvtap: entered promiscuous mode [ 618.905211][ T3969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.919472][ T2140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.946560][ T2140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.979744][ T3969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.047924][ T3969] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.069852][ T3969] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.084976][ T3969] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.099943][ T3969] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.276181][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.303449][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.851397][T14112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.859293][T14112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.135233][ T4741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.190693][ T4741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.498402][ T4768] netlink: 'syz.6.7969': attribute type 2 has an invalid length. [ 621.120932][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 621.232024][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 621.253444][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 621.262443][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 621.278936][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 621.287992][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 621.388122][ T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 621.471164][ T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.530074][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 621.599233][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.685991][ T9] hub 6-1:4.0: USB hub found [ 621.898508][ T9] hub 6-1:4.0: 13 ports detected [ 621.911003][ T9] usb 6-1: selecting invalid altsetting 1 [ 621.929872][ T9] hub 6-1:4.0: Using single TT (err -22) [ 621.958549][ T9] hub 6-1:4.0: insufficient power available to use all downstream ports [ 622.387076][ T9] usb 6-1: USB disconnect, device number 2 [ 623.374034][ T4792] chnl_net:caif_netlink_parms(): no params data found [ 623.383116][ T3962] Bluetooth: hci2: command tx timeout [ 624.042598][ T4792] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.094499][ T4792] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.153979][ T4792] bridge_slave_0: entered allmulticast mode [ 624.207501][ T4792] bridge_slave_0: entered promiscuous mode [ 624.256759][ T4792] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.294675][ T4792] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.343157][ T4792] bridge_slave_1: entered allmulticast mode [ 624.373318][ T4792] bridge_slave_1: entered promiscuous mode [ 624.748333][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.756341][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.919332][ T4792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.975488][ T4792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.428513][ T4792] team0: Port device team_slave_0 added [ 625.474334][ T3962] Bluetooth: hci2: command tx timeout [ 625.524803][ T4792] team0: Port device team_slave_1 added [ 625.991035][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7985'. [ 626.020089][ T4792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.045685][ T4792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.171496][ T4792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.293507][ T4792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.317613][ T4792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.415533][ T4792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.994217][ T4792] hsr_slave_0: entered promiscuous mode [ 627.013769][ T4792] hsr_slave_1: entered promiscuous mode [ 627.027543][ T4792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.040729][ T4792] Cannot create hsr debugfs directory [ 627.551365][ T3962] Bluetooth: hci2: command tx timeout [ 628.994617][ T4792] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 629.033547][ T4792] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 629.074956][ T4792] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 629.133551][ T4792] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 629.455363][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 629.490803][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 629.499669][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 629.512368][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 629.521485][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 629.627347][ T5839] Bluetooth: hci2: command tx timeout [ 629.850110][ T4792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.159694][ T4792] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.232128][ T2140] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.239407][ T2140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.255588][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7992'. [ 630.282128][ T5280] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7992'. [ 630.339952][ T2140] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.347413][ T2140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.381249][ T4792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.622044][ T5839] Bluetooth: hci4: command tx timeout [ 631.701415][ T5262] chnl_net:caif_netlink_parms(): no params data found [ 631.773745][ T4792] veth0_vlan: entered promiscuous mode [ 632.161686][ T4792] veth1_vlan: entered promiscuous mode [ 632.983829][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.033684][ T5262] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.058284][ T5262] bridge_slave_0: entered allmulticast mode [ 633.118185][ T5262] bridge_slave_0: entered promiscuous mode [ 633.175874][ T4792] veth0_macvtap: entered promiscuous mode [ 633.205477][ T5262] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.241019][ T5262] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.248483][ T5262] bridge_slave_1: entered allmulticast mode [ 633.319160][ T5262] bridge_slave_1: entered promiscuous mode [ 633.527165][ T4792] veth1_macvtap: entered promiscuous mode [ 633.705113][ T5839] Bluetooth: hci4: command tx timeout [ 633.807125][ T5262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.928421][ T5262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.587402][ T4792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.628841][ T5262] team0: Port device team_slave_0 added [ 634.760228][ T5262] team0: Port device team_slave_1 added [ 634.932881][ T4792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.056974][ T4792] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.081331][ T4792] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.097866][ T4792] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.108439][ T4792] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.130340][ T5262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.138292][ T5262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.186933][ T5262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.276669][ T5262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.303154][ T5262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.338781][ T5262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.783542][ T5839] Bluetooth: hci4: command tx timeout [ 635.884702][ T5354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.923613][ T5262] hsr_slave_0: entered promiscuous mode [ 635.938538][ T5354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.950277][ T5262] hsr_slave_1: entered promiscuous mode [ 635.975689][ T5262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.995367][ T5262] Cannot create hsr debugfs directory [ 636.419405][ T4741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.449068][ T4741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.588676][ T5262] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 637.670203][ T5262] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 637.707378][ T5651] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8000'. [ 637.763957][ T5262] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 637.846964][ T5262] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 637.880621][ T5839] Bluetooth: hci4: command tx timeout [ 638.496429][ T3962] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 638.509465][ T3962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 638.524016][ T3962] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 638.535500][ T3962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 638.552316][ T3962] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 638.726015][ T5262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.873370][ T5262] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.034540][T14380] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.041922][T14380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.146090][T14380] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.153360][T14380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.234766][ T5262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.640431][ T5262] veth0_vlan: entered promiscuous mode [ 640.670807][ T3962] Bluetooth: hci3: command tx timeout [ 640.795189][ T5262] veth1_vlan: entered promiscuous mode [ 640.932231][ T5674] chnl_net:caif_netlink_parms(): no params data found [ 641.489898][ T5262] veth0_macvtap: entered promiscuous mode [ 641.594758][ T5262] veth1_macvtap: entered promiscuous mode [ 642.285042][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.351899][ T5674] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.389792][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.440295][ T5674] bridge_slave_0: entered allmulticast mode [ 642.485126][ T5674] bridge_slave_0: entered promiscuous mode [ 642.524697][ T5674] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.586946][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.623785][ T5674] bridge_slave_1: entered allmulticast mode [ 642.687008][ T5674] bridge_slave_1: entered promiscuous mode [ 642.741088][ T3962] Bluetooth: hci3: command tx timeout [ 642.852853][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 642.868409][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 642.877422][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 642.886702][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 642.907530][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 643.385766][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.452485][ T5674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.522228][ T5674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.747370][ T5965] netlink: 'syz.6.8013': attribute type 2 has an invalid length. [ 643.983428][ T5262] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.026639][ T5262] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.061128][ T5262] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.069985][ T5262] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.172449][ T5674] team0: Port device team_slave_0 added [ 644.256848][ T5674] team0: Port device team_slave_1 added [ 644.766187][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.779268][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.819584][ T5674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.835633][ T5839] Bluetooth: hci3: command tx timeout [ 644.901452][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.922056][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.992185][ T5839] Bluetooth: hci7: command tx timeout [ 645.015243][ T5674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.669627][ T5674] hsr_slave_0: entered promiscuous mode [ 645.699564][ T5674] hsr_slave_1: entered promiscuous mode [ 645.728693][ T5674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.745951][ T5674] Cannot create hsr debugfs directory [ 646.274545][T14380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.345257][T14380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.901951][ T5839] Bluetooth: hci3: command tx timeout [ 647.035582][T14380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.047875][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 647.061436][ T5839] Bluetooth: hci7: command tx timeout [ 647.082257][T14380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.451565][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.489956][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.549635][ T5926] bridge_slave_0: entered allmulticast mode [ 648.585109][ T30] audit: type=1400 audit(1750422976.909:373): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A01 pid=6290 comm="syz.8.8022" [ 648.633605][ T5926] bridge_slave_0: entered promiscuous mode [ 648.666425][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.710950][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.770873][ T5926] bridge_slave_1: entered allmulticast mode [ 648.842269][ T5926] bridge_slave_1: entered promiscuous mode [ 649.152099][ T5839] Bluetooth: hci7: command tx timeout [ 649.454805][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.527821][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.241930][ T5926] team0: Port device team_slave_0 added [ 650.329858][ T5926] team0: Port device team_slave_1 added [ 650.625705][ T5674] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 650.846943][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.879990][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.979788][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.159239][ T5674] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 651.206593][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.223078][ T5839] Bluetooth: hci7: command tx timeout [ 651.239936][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.291358][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.351107][ T5674] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 651.472887][ T5674] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 652.098795][ T5926] hsr_slave_0: entered promiscuous mode [ 652.152168][ T5926] hsr_slave_1: entered promiscuous mode [ 652.158783][ T5926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 652.247295][ T5926] Cannot create hsr debugfs directory [ 653.066643][ T5893] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 653.286210][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.360526][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.414187][ T5893] usb 9-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 653.444285][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.487907][ T5893] usb 9-1: config 0 descriptor?? [ 653.552737][ T6517] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48423) [ 653.583100][ T6517] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 654.064146][ T5893] waterforce 0003:1044:7A4D.0063: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.8-1/input0 [ 654.189357][ T5893] waterforce 0003:1044:7A4D.0063: fw version request failed with -38 [ 654.296011][ T5893] usb 9-1: USB disconnect, device number 2 [ 654.485373][ T6537] fido_id[6537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 654.514990][ T5674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.613663][ T5674] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.706022][ T4741] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.713408][ T4741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.865809][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.873195][ T4741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.486738][ T5674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.768202][ T5674] veth0_vlan: entered promiscuous mode [ 655.837466][ T5674] veth1_vlan: entered promiscuous mode [ 656.033306][ T5674] veth0_macvtap: entered promiscuous mode [ 656.165909][ T5674] veth1_macvtap: entered promiscuous mode [ 656.282666][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.354777][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.421821][ T5674] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.470502][ T5674] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.479831][ T5674] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.540345][ T5674] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.972008][ T3962] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 661.982384][ T3962] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 661.991560][ T3962] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 662.003771][ T3962] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 662.032926][ T3962] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 664.100983][ T3962] Bluetooth: hci8: command tx timeout [ 666.180990][ T3962] Bluetooth: hci8: command tx timeout [ 668.265088][ T3962] Bluetooth: hci8: command tx timeout [ 670.351385][ T3962] Bluetooth: hci8: command tx timeout [ 671.227595][ T5839] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 671.239423][ T5839] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 671.248797][ T5839] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 671.259666][ T5839] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 671.269315][ T5839] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 673.395770][ T3962] Bluetooth: hci9: command tx timeout [ 674.124730][ T3962] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 674.136533][ T3962] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 674.146489][ T3962] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 674.156708][ T3962] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 674.166500][ T3962] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 675.462255][ T3962] Bluetooth: hci9: command tx timeout [ 676.261455][ T3962] Bluetooth: hci10: command tx timeout [ 677.552589][ T3962] Bluetooth: hci9: command tx timeout [ 678.341552][ T3962] Bluetooth: hci10: command tx timeout [ 679.628946][ T3962] Bluetooth: hci9: command tx timeout [ 680.433017][ T3962] Bluetooth: hci10: command tx timeout [ 682.500817][ T3962] Bluetooth: hci10: command tx timeout [ 685.761178][ T2140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.769273][ T2140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.216057][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.230471][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.041213][ T5354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.071609][ T5354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.353336][ T6613] chnl_net:caif_netlink_parms(): no params data found [ 688.945753][ T6606] chnl_net:caif_netlink_parms(): no params data found [ 688.986274][ T6596] chnl_net:caif_netlink_parms(): no params data found [ 690.021919][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.066158][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.091313][ T6613] bridge_slave_0: entered allmulticast mode [ 690.125463][ T6613] bridge_slave_0: entered promiscuous mode [ 690.154389][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.197696][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.220934][ T6613] bridge_slave_1: entered allmulticast mode [ 690.247239][ T6613] bridge_slave_1: entered promiscuous mode [ 690.907524][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.941047][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.948530][ T6606] bridge_slave_0: entered allmulticast mode [ 691.003538][ T6606] bridge_slave_0: entered promiscuous mode [ 691.029151][ T6606] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.068987][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.109318][ T6606] bridge_slave_1: entered allmulticast mode [ 691.135389][ T6606] bridge_slave_1: entered promiscuous mode [ 691.469751][ T6613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.706324][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.734027][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.761621][ T6596] bridge_slave_0: entered allmulticast mode [ 691.798456][ T6596] bridge_slave_0: entered promiscuous mode [ 691.836286][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.861577][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.869048][ T6596] bridge_slave_1: entered allmulticast mode [ 691.923320][ T6596] bridge_slave_1: entered promiscuous mode [ 691.976242][ T6613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.157419][ T6606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.387582][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8063'. [ 692.438111][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8063'. [ 692.655852][ T6606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.859657][ T6596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.267135][ T6596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.426573][ T6613] team0: Port device team_slave_0 added [ 693.472897][ T6606] team0: Port device team_slave_0 added [ 693.661775][ T6613] team0: Port device team_slave_1 added [ 693.838293][ T6606] team0: Port device team_slave_1 added [ 694.007732][ T6596] team0: Port device team_slave_0 added [ 694.193295][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.212260][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.258880][ T6613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.499949][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.539287][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.593494][ T6606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.627695][ T6596] team0: Port device team_slave_1 added [ 699.405605][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.422590][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.471177][ T6613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.519536][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.537006][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.593330][ T6606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.795409][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.828015][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.879961][ T6596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.152989][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.160134][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.225670][ T6596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.389581][ T6606] hsr_slave_0: entered promiscuous mode [ 700.436110][ T6606] hsr_slave_1: entered promiscuous mode [ 700.459967][ T6606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.470399][ T6606] Cannot create hsr debugfs directory [ 700.598116][ T6613] hsr_slave_0: entered promiscuous mode [ 700.626083][ T6613] hsr_slave_1: entered promiscuous mode [ 700.649698][ T6613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.662257][ T6613] Cannot create hsr debugfs directory [ 701.796388][ T6596] hsr_slave_0: entered promiscuous mode [ 701.847764][ T6596] hsr_slave_1: entered promiscuous mode [ 701.896515][ T6596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 701.941773][ T6596] Cannot create hsr debugfs directory [ 702.311691][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 702.328639][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 702.339287][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 702.355765][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 702.370672][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 704.424270][ T5839] Bluetooth: hci0: command tx timeout [ 704.774448][ T7530] chnl_net:caif_netlink_parms(): no params data found [ 705.367168][ T7530] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.390954][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.410476][ T7530] bridge_slave_0: entered allmulticast mode [ 705.437325][ T7530] bridge_slave_0: entered promiscuous mode [ 705.462392][ T7530] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.469901][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.490708][ T7530] bridge_slave_1: entered allmulticast mode [ 705.510782][ T7530] bridge_slave_1: entered promiscuous mode [ 705.815138][ T7530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.863217][ T7530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.259475][ T7530] team0: Port device team_slave_0 added [ 706.287723][ T7530] team0: Port device team_slave_1 added [ 706.501071][ T5839] Bluetooth: hci0: command tx timeout [ 706.637979][ T7530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.668919][ T7530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.717410][ T7530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.752977][ T7530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.760199][ T7530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.808490][ T7530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.190234][ T7530] hsr_slave_0: entered promiscuous mode [ 707.212985][ T7530] hsr_slave_1: entered promiscuous mode [ 707.230638][ T7530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 707.238266][ T7530] Cannot create hsr debugfs directory [ 708.581519][ T5839] Bluetooth: hci0: command tx timeout [ 708.834010][ T3962] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 708.849724][ T3962] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 708.874055][ T3962] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 708.891422][ T3962] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 708.903711][ T3962] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 709.866089][ T7962] chnl_net:caif_netlink_parms(): no params data found [ 710.512426][ T7962] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.519946][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.550799][ T7962] bridge_slave_0: entered allmulticast mode [ 710.571462][ T7962] bridge_slave_0: entered promiscuous mode [ 710.593987][ T7962] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.610808][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.618320][ T7962] bridge_slave_1: entered allmulticast mode [ 710.661343][ T3962] Bluetooth: hci0: command tx timeout [ 710.671369][ T7962] bridge_slave_1: entered promiscuous mode [ 710.949985][ T7962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.985531][ T7962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.996842][ T3962] Bluetooth: hci1: command tx timeout [ 711.283030][ T7962] team0: Port device team_slave_0 added [ 711.306031][ T7962] team0: Port device team_slave_1 added [ 711.601251][ T7962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.608504][ T7962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.680517][ T7962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.721640][ T7962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.729569][ T7962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.795421][ T7962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.254446][ T7962] hsr_slave_0: entered promiscuous mode [ 712.269834][ T7962] hsr_slave_1: entered promiscuous mode [ 712.313647][ T7962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 712.331245][ T7962] Cannot create hsr debugfs directory [ 713.067113][ T3962] Bluetooth: hci1: command tx timeout [ 715.151794][ T3962] Bluetooth: hci1: command tx timeout [ 717.221689][ T3962] Bluetooth: hci1: command tx timeout [ 722.399629][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 722.417319][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 722.431373][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 722.442598][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 722.473687][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 723.430282][ T8285] chnl_net:caif_netlink_parms(): no params data found [ 724.006376][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.029766][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.045145][ T8285] bridge_slave_0: entered allmulticast mode [ 724.080144][ T8285] bridge_slave_0: entered promiscuous mode [ 724.099156][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.124260][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.142792][ T8285] bridge_slave_1: entered allmulticast mode [ 724.162693][ T8285] bridge_slave_1: entered promiscuous mode [ 724.452981][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.503668][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.593177][ T5839] Bluetooth: hci4: command tx timeout [ 724.787826][ T8285] team0: Port device team_slave_0 added [ 724.825991][ T8285] team0: Port device team_slave_1 added [ 725.085428][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.111537][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.157297][ T8285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.203385][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.224274][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.269837][ T8285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.762735][ T8285] hsr_slave_0: entered promiscuous mode [ 725.769873][ T8285] hsr_slave_1: entered promiscuous mode [ 725.811893][ T8285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.819817][ T8285] Cannot create hsr debugfs directory [ 726.661603][ T5839] Bluetooth: hci4: command tx timeout [ 728.741456][ T5839] Bluetooth: hci4: command tx timeout [ 729.233471][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 729.239874][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 730.821598][ T3962] Bluetooth: hci4: command tx timeout [ 731.762777][ T5835] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 731.774253][ T5835] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 731.783992][ T5835] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 731.795916][ T5835] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 731.809928][ T5835] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 732.808880][ T8610] chnl_net:caif_netlink_parms(): no params data found [ 733.418919][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.436636][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.457278][ T8610] bridge_slave_0: entered allmulticast mode [ 733.494099][ T8610] bridge_slave_0: entered promiscuous mode [ 733.511902][ T8610] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.519328][ T8610] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.543515][ T8610] bridge_slave_1: entered allmulticast mode [ 733.570883][ T8610] bridge_slave_1: entered promiscuous mode [ 733.886896][ T5835] Bluetooth: hci11: command tx timeout [ 733.901822][ T8610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.953956][ T8610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.336703][ T8610] team0: Port device team_slave_0 added [ 734.372423][ T8610] team0: Port device team_slave_1 added [ 734.726893][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.770392][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.852417][ T8610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.921705][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.928909][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.081088][ T8610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.157274][ T3962] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 735.168109][ T3962] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 735.178451][ T3962] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 735.200227][ T3962] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 735.225579][ T3962] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 735.687865][ T8610] hsr_slave_0: entered promiscuous mode [ 735.702281][ T8610] hsr_slave_1: entered promiscuous mode [ 735.720875][ T8610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 735.741533][ T8610] Cannot create hsr debugfs directory [ 735.941422][ T3962] Bluetooth: hci11: command tx timeout [ 737.173390][ T8844] chnl_net:caif_netlink_parms(): no params data found [ 737.302034][ T3962] Bluetooth: hci12: command tx timeout [ 737.806829][ T8844] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.830192][ T8844] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.841229][ T8844] bridge_slave_0: entered allmulticast mode [ 737.870260][ T8844] bridge_slave_0: entered promiscuous mode [ 737.904436][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.921246][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.928676][ T8844] bridge_slave_1: entered allmulticast mode [ 737.954425][ T8844] bridge_slave_1: entered promiscuous mode [ 738.021855][ T3962] Bluetooth: hci11: command tx timeout [ 738.305377][ T8844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.349625][ T8844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.668959][ T8844] team0: Port device team_slave_0 added [ 738.733494][ T8844] team0: Port device team_slave_1 added [ 739.032618][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.039728][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.089962][ T8844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.138518][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.161287][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.220509][ T8844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.381637][ T3962] Bluetooth: hci12: command tx timeout [ 739.654639][ T8844] hsr_slave_0: entered promiscuous mode [ 739.672454][ T8844] hsr_slave_1: entered promiscuous mode [ 739.702266][ T8844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.710096][ T8844] Cannot create hsr debugfs directory [ 740.101554][ T3962] Bluetooth: hci11: command tx timeout [ 741.461085][ T3962] Bluetooth: hci12: command tx timeout [ 743.541458][ T3962] Bluetooth: hci12: command tx timeout [ 744.597928][ T3962] Bluetooth: hci2: command 0x0406 tx timeout [ 747.638828][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.645479][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.821652][ T3962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 761.833105][ T3962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 761.843856][ T3962] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 761.859047][ T3962] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 761.868220][ T3962] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 762.853748][ T9281] chnl_net:caif_netlink_parms(): no params data found [ 763.629924][ T9281] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.672704][ T9281] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.712726][ T9281] bridge_slave_0: entered allmulticast mode [ 763.750582][ T9281] bridge_slave_0: entered promiscuous mode [ 763.795256][ T9281] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.821121][ T9281] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.828794][ T9281] bridge_slave_1: entered allmulticast mode [ 763.875786][ T9281] bridge_slave_1: entered promiscuous mode [ 763.943507][ T3964] Bluetooth: hci2: command tx timeout [ 764.249036][ T9281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.303168][ T9281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.642021][ T9281] team0: Port device team_slave_0 added [ 764.675708][ T9281] team0: Port device team_slave_1 added [ 764.952174][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.959386][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.058142][ T9281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.073768][ T3964] Bluetooth: hci3: command 0x0406 tx timeout [ 765.081402][ T5839] Bluetooth: hci7: command 0x0406 tx timeout [ 765.296847][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.322642][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.400774][ T9281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.756772][ T9281] hsr_slave_0: entered promiscuous mode [ 765.772117][ T9281] hsr_slave_1: entered promiscuous mode [ 765.790677][ T9281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 765.798422][ T9281] Cannot create hsr debugfs directory [ 766.025435][ T5835] Bluetooth: hci2: command tx timeout [ 768.107787][ T5835] Bluetooth: hci2: command tx timeout [ 769.274798][ T3962] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 769.285949][ T3962] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 769.302588][ T3962] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 769.322270][ T3962] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 769.331853][ T3962] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 770.191267][ T3962] Bluetooth: hci2: command tx timeout [ 770.374165][ T9606] chnl_net:caif_netlink_parms(): no params data found [ 770.974022][ T9606] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.000923][ T9606] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.008762][ T9606] bridge_slave_0: entered allmulticast mode [ 771.040627][ T9606] bridge_slave_0: entered promiscuous mode [ 771.074064][ T9606] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.082237][ T9606] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.089643][ T9606] bridge_slave_1: entered allmulticast mode [ 771.122958][ T9606] bridge_slave_1: entered promiscuous mode [ 771.382054][ T3962] Bluetooth: hci6: command tx timeout [ 771.435314][ T9606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.484575][ T9606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.782656][ T9606] team0: Port device team_slave_0 added [ 771.816512][ T9606] team0: Port device team_slave_1 added [ 772.118941][ T9606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.143603][ T9606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.206157][ T9606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.374520][ T9606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.401906][ T9606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.455803][ T9606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.877444][ T9606] hsr_slave_0: entered promiscuous mode [ 772.908796][ T9606] hsr_slave_1: entered promiscuous mode [ 772.936233][ T9606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.950396][ T9606] Cannot create hsr debugfs directory [ 773.471341][ T3962] Bluetooth: hci6: command tx timeout [ 775.551134][ T3962] Bluetooth: hci6: command tx timeout [ 777.631550][ T3962] Bluetooth: hci6: command tx timeout [ 783.111277][ T5835] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 783.123491][ T5835] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 783.132870][ T5835] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 783.151206][ T5835] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 783.162082][ T5835] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 784.083335][ T9929] chnl_net:caif_netlink_parms(): no params data found [ 784.694944][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.720273][ T9929] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.728749][ T9929] bridge_slave_0: entered allmulticast mode [ 784.771740][ T9929] bridge_slave_0: entered promiscuous mode [ 784.788586][ T9929] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.811200][ T9929] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.832684][ T9929] bridge_slave_1: entered allmulticast mode [ 784.854725][ T9929] bridge_slave_1: entered promiscuous mode [ 785.177396][ T9929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.231809][ T3962] Bluetooth: hci13: command tx timeout [ 785.240213][ T9929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.558469][ T3962] Bluetooth: hci8: command 0x0406 tx timeout [ 785.567633][ T9929] team0: Port device team_slave_0 added [ 785.604687][ T9929] team0: Port device team_slave_1 added [ 785.922763][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.929974][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.981647][ T9929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.187657][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.200351][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.260093][ T9929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.603162][ T9929] hsr_slave_0: entered promiscuous mode [ 786.622269][ T9929] hsr_slave_1: entered promiscuous mode [ 786.641063][ T9929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 786.648868][ T9929] Cannot create hsr debugfs directory [ 787.304936][ T5835] Bluetooth: hci13: command tx timeout [ 789.381452][ T5835] Bluetooth: hci13: command tx timeout [ 791.473418][ T5835] Bluetooth: hci13: command tx timeout [ 792.326622][ T3962] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 792.337358][ T3962] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 792.346817][ T3962] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 792.363715][ T3962] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 792.372885][ T3962] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 793.345233][T10250] chnl_net:caif_netlink_parms(): no params data found [ 793.977163][T10250] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.001414][T10250] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.008861][T10250] bridge_slave_0: entered allmulticast mode [ 794.043833][T10250] bridge_slave_0: entered promiscuous mode [ 794.066747][T10250] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.080457][T10250] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.087992][T10250] bridge_slave_1: entered allmulticast mode [ 794.132158][T10250] bridge_slave_1: entered promiscuous mode [ 794.431198][ T3962] Bluetooth: hci14: command tx timeout [ 794.443794][T10250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.475278][T10250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.902432][T10250] team0: Port device team_slave_0 added [ 794.952601][T10250] team0: Port device team_slave_1 added [ 795.283622][T10250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.324816][T10250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.427003][T10250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.477120][T10250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.500816][T10250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.640525][T10250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.759058][ T3964] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 795.792352][ T5839] Bluetooth: hci9: command 0x0406 tx timeout [ 795.799903][ T3964] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 795.817870][ T3964] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 795.827708][ T3964] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 795.839062][ T3964] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 796.274068][T10250] hsr_slave_0: entered promiscuous mode [ 796.301779][T10250] hsr_slave_1: entered promiscuous mode [ 796.308907][T10250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 796.340371][T10250] Cannot create hsr debugfs directory [ 796.512041][ T5835] Bluetooth: hci14: command tx timeout [ 797.773749][T10493] chnl_net:caif_netlink_parms(): no params data found [ 797.862050][ T5835] Bluetooth: hci15: command tx timeout [ 798.340733][T10493] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.355241][T10493] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.370666][T10493] bridge_slave_0: entered allmulticast mode [ 798.391091][T10493] bridge_slave_0: entered promiscuous mode [ 798.426780][T10493] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.451820][T10493] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.459295][T10493] bridge_slave_1: entered allmulticast mode [ 798.490635][T10493] bridge_slave_1: entered promiscuous mode [ 798.591850][ T5835] Bluetooth: hci14: command tx timeout [ 798.810035][T10493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.855821][T10493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.245278][T10493] team0: Port device team_slave_0 added [ 799.294249][T10493] team0: Port device team_slave_1 added [ 799.638011][T10493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.650363][T10493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.720539][T10493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.764749][T10493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.796592][T10493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.861742][T10493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.954259][ T3964] Bluetooth: hci15: command tx timeout [ 800.288331][T10493] hsr_slave_0: entered promiscuous mode [ 800.302097][T10493] hsr_slave_1: entered promiscuous mode [ 800.321127][T10493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 800.328835][T10493] Cannot create hsr debugfs directory [ 800.674627][ T3964] Bluetooth: hci14: command tx timeout [ 800.904552][ T3964] Bluetooth: hci10: command 0x0406 tx timeout [ 802.021281][ T3964] Bluetooth: hci15: command tx timeout [ 804.111582][ T5835] Bluetooth: hci15: command tx timeout [ 809.104065][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.111203][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 822.439557][ T3964] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 822.471364][ T3964] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 822.482592][ T3964] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 822.493450][ T3964] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 822.508584][ T3964] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 823.469661][T10896] chnl_net:caif_netlink_parms(): no params data found [ 824.076947][T10896] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.099073][T10896] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.121303][T10896] bridge_slave_0: entered allmulticast mode [ 824.141979][T10896] bridge_slave_0: entered promiscuous mode [ 824.175295][T10896] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.203699][T10896] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.220737][T10896] bridge_slave_1: entered allmulticast mode [ 824.240671][T10896] bridge_slave_1: entered promiscuous mode [ 824.555085][T10896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.581128][ T3964] Bluetooth: hci16: command tx timeout [ 824.616704][T10896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.953365][T10896] team0: Port device team_slave_0 added [ 825.002687][T10896] team0: Port device team_slave_1 added [ 825.360689][T10896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.367712][T10896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.479423][T10896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.626873][T10896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.671285][T10896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.800513][T10896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.235202][T10896] hsr_slave_0: entered promiscuous mode [ 826.265826][T10896] hsr_slave_1: entered promiscuous mode [ 826.274004][T10896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 826.290613][T10896] Cannot create hsr debugfs directory [ 826.504832][ T3964] Bluetooth: hci0: command 0x0406 tx timeout [ 826.671589][ T5835] Bluetooth: hci16: command tx timeout [ 828.741476][ T5835] Bluetooth: hci16: command tx timeout [ 829.439964][ T3964] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 829.452090][ T3964] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 829.468226][ T3964] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 829.477035][ T3964] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 829.485122][ T3964] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 830.428159][T11220] chnl_net:caif_netlink_parms(): no params data found [ 830.832231][ T3964] Bluetooth: hci16: command tx timeout [ 831.029196][T11220] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.050948][T11220] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.078895][T11220] bridge_slave_0: entered allmulticast mode [ 831.099574][T11220] bridge_slave_0: entered promiscuous mode [ 831.134340][T11220] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.166033][T11220] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.176033][T11220] bridge_slave_1: entered allmulticast mode [ 831.208267][T11220] bridge_slave_1: entered promiscuous mode [ 831.523357][T11220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.551673][ T3964] Bluetooth: hci17: command tx timeout [ 831.580190][T11220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.624201][ T3964] Bluetooth: hci1: command 0x0406 tx timeout [ 831.933476][T11220] team0: Port device team_slave_0 added [ 831.970529][T11220] team0: Port device team_slave_1 added [ 832.232445][T11220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.239996][T11220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.319575][T11220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.354031][T11220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.370342][T11220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.453329][T11220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.874803][T11220] hsr_slave_0: entered promiscuous mode [ 832.924342][T11220] hsr_slave_1: entered promiscuous mode [ 832.942045][T11220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 832.949713][T11220] Cannot create hsr debugfs directory [ 833.631884][ T5835] Bluetooth: hci17: command tx timeout [ 835.711939][ T5835] Bluetooth: hci17: command tx timeout [ 836.593156][ T31] INFO: task syz.4.7959:4398 blocked for more than 143 seconds. [ 836.601998][ T31] Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 [ 836.609857][ T31] Blocked by coredump. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 836.641838][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 836.698258][ T31] task:syz.4.7959 state:D stack:25456 pid:4398 tgid:4391 ppid:5846 task_flags:0x40054c flags:0x00004002 [ 836.751603][ T31] Call Trace: [ 836.755058][ T31] [ 836.758120][ T31] __schedule+0x16f5/0x4d00 [ 836.861089][ T31] ? __lock_acquire+0xab9/0xd20 [ 836.866177][ T31] ? schedule+0x165/0x360 [ 836.940351][ T31] ? __pfx___schedule+0x10/0x10 [ 836.960776][ T31] ? schedule+0x91/0x360 [ 836.965200][ T31] schedule+0x165/0x360 [ 836.969405][ T31] schedule_preempt_disabled+0x13/0x30 [ 837.020347][ T31] __mutex_lock+0x724/0xe80 [ 837.025051][ T31] ? __mutex_lock+0x51b/0xe80 [ 837.051181][ T31] ? rcu_barrier+0x4c/0x570 [ 837.055792][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 837.081012][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 837.086753][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 837.111105][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 837.116320][ T31] rcu_barrier+0x4c/0x570 [ 837.133302][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 837.138975][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 837.160934][ T31] netdev_run_todo+0x327/0xea0 [ 837.165792][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 837.193294][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 837.198808][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 837.229064][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 837.251118][ T31] ? netdev_state_change+0x1ca/0x220 [ 837.256609][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 837.270341][ T31] tun_chr_close+0x13c/0x1c0 [ 837.275029][ T31] __fput+0x44c/0xa70 [ 837.279078][ T31] task_work_run+0x1d1/0x260 [ 837.302794][ T31] ? __pfx_task_work_run+0x10/0x10 [ 837.321346][ T31] ? kmem_cache_free+0x18f/0x400 [ 837.326647][ T31] do_exit+0x6ad/0x22e0 [ 837.354510][ T31] ? do_raw_spin_lock+0x121/0x290 [ 837.359721][ T31] ? __pfx_do_exit+0x10/0x10 [ 837.370361][ T31] do_group_exit+0x21c/0x2d0 [ 837.375024][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 837.390338][ T31] get_signal+0x1286/0x1340 [ 837.394966][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 837.430379][ T31] ? do_sock_setsockopt+0x267/0x3e0 [ 837.435693][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 837.464748][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 837.474312][ T31] exit_to_user_mode_loop+0x75/0x110 [ 837.479708][ T31] do_syscall_64+0x2bd/0x3b0 [ 837.501529][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 837.507389][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.533236][ T31] ? clear_bhb_loop+0x60/0xb0 [ 837.538047][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.561077][ T31] RIP: 0033:0x7f58d318e929 [ 837.565580][ T31] RSP: 002b:00007f58d4040038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 837.591528][ T31] RAX: 0000000000000000 RBX: 00007f58d33b6080 RCX: 00007f58d318e929 [ 837.599706][ T31] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000003 [ 837.630364][ T31] RBP: 00007f58d3210b39 R08: 0000000000000004 R09: 0000000000000000 [ 837.638777][ T31] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 837.670361][ T31] R13: 0000000000000001 R14: 00007f58d33b6080 R15: 00007f58d34dfa28 [ 837.678814][ T31] [ 837.703068][ T31] INFO: task syz.0.7972:4794 blocked for more than 144 seconds. [ 837.711860][ T31] Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 [ 837.740414][ T31] Blocked by coredump. [ 837.745370][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 837.772132][ T31] task:syz.0.7972 state:D stack:25160 pid:4794 tgid:4794 ppid:5841 task_flags:0x40044c flags:0x00004006 [ 837.785371][ T5835] Bluetooth: hci17: command tx timeout [ 837.811109][ T31] Call Trace: [ 837.814746][ T31] [ 837.831223][ T31] __schedule+0x16f5/0x4d00 [ 837.835938][ T31] ? __lock_acquire+0xab9/0xd20 [ 837.862817][ T31] ? schedule+0x165/0x360 [ 837.867353][ T31] ? __pfx___schedule+0x10/0x10 [ 837.879807][ T31] ? schedule+0x91/0x360 [ 837.901295][ T31] schedule+0x165/0x360 [ 837.905582][ T31] schedule_preempt_disabled+0x13/0x30 [ 837.915597][ T31] __mutex_lock+0x724/0xe80 [ 837.933684][ T31] ? __mutex_lock+0x51b/0xe80 [ 837.938491][ T31] ? rcu_barrier+0x4c/0x570 [ 837.964825][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 837.970028][ T31] ? __mutex_unlock_slowpath+0x6ed/0x700 [ 837.994517][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 838.001423][ T31] ? free_one_page+0xfa/0x360 [ 838.006188][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 838.035897][ T31] rcu_barrier+0x4c/0x570 [ 838.050347][ T31] ? __free_pages_ok+0x535/0xc20 [ 838.055454][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 838.070340][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 838.075568][ T31] netdev_run_todo+0x327/0xea0 [ 838.091864][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 838.097623][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 838.120807][ T31] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 838.145331][ T31] ? netdev_state_change+0x1ca/0x220 [ 838.160348][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 838.165565][ T31] tun_chr_close+0x13c/0x1c0 [ 838.170271][ T31] __fput+0x44c/0xa70 [ 838.184491][ T31] task_work_run+0x1d1/0x260 [ 838.189135][ T31] ? __pfx_task_work_run+0x10/0x10 [ 838.216417][ T31] ? kmem_cache_free+0x18f/0x400 [ 838.231416][ T31] do_exit+0x6ad/0x22e0 [ 838.235709][ T31] ? do_raw_spin_lock+0x121/0x290 [ 838.250346][ T31] ? __pfx_do_exit+0x10/0x10 [ 838.255048][ T31] do_group_exit+0x21c/0x2d0 [ 838.259703][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 838.303890][ T31] get_signal+0x1286/0x1340 [ 838.308874][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 838.336183][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 838.350335][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 838.355632][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 838.370371][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 838.375925][ T31] exit_to_user_mode_loop+0x75/0x110 [ 838.401214][ T31] do_syscall_64+0x2bd/0x3b0 [ 838.405900][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.431854][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 838.438467][ T31] ? clear_bhb_loop+0x60/0xb0 [ 838.460682][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.466845][ T31] RIP: 0033:0x7fbc2a18e929 [ 838.495033][ T31] RSP: 002b:00007fbc2a4dfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 838.510647][ T31] RAX: 0000000000000000 RBX: 0000000000097c0a RCX: 00007fbc2a18e929 [ 838.518793][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 838.550339][ T31] RBP: 00007fbc2a3b7ba0 R08: 0000000000000001 R09: 000000032a4dfe7f [ 838.558394][ T31] R10: 00007fbc2a000000 R11: 0000000000000246 R12: 00007fbc2a3b5fac [ 838.590337][ T31] R13: 00007fbc2a3b5fa0 R14: ffffffffffffffff R15: 00007fbc2a4dfca0 [ 838.598534][ T31] [ 838.621548][ T31] INFO: task syz-executor:5262 blocked for more than 145 seconds. [ 838.629635][ T31] Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 [ 838.702328][ T31] Blocked by coredump. [ 838.707006][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 838.731310][ T31] task:syz-executor state:D stack:21736 pid:5262 tgid:5262 ppid:1 task_flags:0x40054c flags:0x00004006 [ 838.770340][ T31] Call Trace: [ 838.773708][ T31] [ 838.776971][ T31] __schedule+0x16f5/0x4d00 [ 838.803280][ T31] ? __lock_acquire+0xab9/0xd20 [ 838.808242][ T31] ? schedule+0x165/0x360 [ 838.821980][ T31] ? __pfx___schedule+0x10/0x10 [ 838.827066][ T31] ? schedule+0x91/0x360 [ 838.850345][ T31] schedule+0x165/0x360 [ 838.854608][ T31] schedule_preempt_disabled+0x13/0x30 [ 838.860135][ T31] __mutex_lock+0x724/0xe80 [ 838.880948][ T31] ? __mutex_lock+0x51b/0xe80 [ 838.885719][ T31] ? rcu_barrier+0x4c/0x570 [ 838.913923][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 838.919132][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 838.949416][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 838.960338][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 838.965584][ T31] rcu_barrier+0x4c/0x570 [ 838.970100][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 838.991787][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 838.996993][ T31] netdev_run_todo+0x327/0xea0 [ 839.023196][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 839.028857][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 839.050257][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 839.070346][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 839.076095][ T31] ? netdev_state_change+0x1ca/0x220 [ 839.090986][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 839.096662][ T31] tun_chr_close+0x13c/0x1c0 [ 839.123938][ T31] __fput+0x44c/0xa70 [ 839.128055][ T31] task_work_run+0x1d1/0x260 [ 839.140369][ T31] ? __pfx_task_work_run+0x10/0x10 [ 839.145659][ T31] ? kmem_cache_free+0x18f/0x400 [ 839.180343][ T31] do_exit+0x6ad/0x22e0 [ 839.184591][ T31] ? do_raw_spin_lock+0x121/0x290 [ 839.189659][ T31] ? __pfx_do_exit+0x10/0x10 [ 839.210784][ T31] do_group_exit+0x21c/0x2d0 [ 839.215477][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 839.245242][ T31] get_signal+0x1286/0x1340 [ 839.258816][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 839.270337][ T31] ? __pfx___x64_sys_wait4+0x10/0x10 [ 839.275719][ T31] ? fput_close_sync+0x119/0x200 [ 839.309503][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 839.316726][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 839.329715][ T31] exit_to_user_mode_loop+0x75/0x110 [ 839.340370][ T31] do_syscall_64+0x2bd/0x3b0 [ 839.345045][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 839.380337][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.386507][ T31] ? clear_bhb_loop+0x60/0xb0 [ 839.411589][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.417659][ T31] RIP: 0033:0x7ff693b84b97 [ 839.430332][ T31] RSP: 002b:00007ff693edfd80 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 839.438819][ T31] RAX: fffffffffffffe00 RBX: 0000000000000019 RCX: 00007ff693b84b97 [ 839.470344][ T31] RDX: 0000000040000000 RSI: 00007ff693edfdec RDI: 00000000ffffffff [ 839.478509][ T31] RBP: 00007ff693edfdec R08: 0000000000000000 R09: 0000000000000000 [ 839.510334][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 839.518498][ T31] R13: 0000555565f1e590 R14: 000000000009ffae R15: 00007ff693edfe40 [ 839.550361][ T31] [ 839.553614][ T31] [ 839.553614][ T31] Showing all locks held in the system: [ 839.584950][ T31] 3 locks held by kworker/u8:1/13: [ 839.590138][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 839.624569][ T31] #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 839.663937][ T31] #2: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 839.691271][ T31] 2 locks held by kworker/1:0/24: [ 839.696398][ T31] 1 lock held by khungtaskd/31: [ 839.710335][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 839.730625][ T31] 2 locks held by kworker/1:1/43: [ 839.735743][ T31] 3 locks held by kworker/0:2/978: [ 839.761322][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 839.810337][ T31] #1: ffffc90003947bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 839.842323][ T31] #2: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 839.868618][ T31] 2 locks held by getty/5595: [ 839.880337][ T31] #0: ffff88814dc500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 839.911154][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 839.930340][ T31] 2 locks held by kworker/1:4/5885: [ 839.935613][ T31] 2 locks held by kworker/1:5/5900: [ 839.965891][ T31] 4 locks held by kworker/u8:9/14112: [ 839.991019][ T31] 6 locks held by kworker/1:2/30791: [ 839.996479][ T31] 2 locks held by kworker/1:6/30802: [ 840.010332][ T31] 3 locks held by kworker/1:7/30823: [ 840.015688][ T31] 1 lock held by syz.4.7959/4398: [ 840.030330][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 840.050616][ T31] 1 lock held by syz.0.7972/4794: [ 840.055716][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 840.101959][ T31] 2 locks held by syz.5.7984/5052: [ 840.107230][ T31] #0: ffffffff8f503750 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 840.131289][ T31] #1: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 840.150615][ T31] 1 lock held by syz-executor/5262: [ 840.155966][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 840.206197][ T31] 3 locks held by kworker/1:8/5783: [ 840.212061][ T31] 7 locks held by syz-executor/5926: [ 840.217396][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 840.241564][ T31] #1: ffff88803752e088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 840.260621][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 840.296597][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 840.325746][ T31] #4: ffff88807af120e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 840.358110][ T31] #5: ffff88807af13250 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 840.381593][ T31] #6: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 840.415368][ T31] 3 locks held by kworker/1:9/6024: [ 840.427144][ T31] 1 lock held by syz.6.8016/6056: [ 840.440362][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 840.471236][ T31] 2 locks held by kworker/1:11/6407: [ 840.476622][ T31] 1 lock held by syz.7.8052/6584: [ 840.501045][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 840.520343][ T31] 4 locks held by syz-executor/6596: [ 840.525708][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 840.558408][ T31] #1: ffff888086eb6888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 840.586465][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 840.611724][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 840.630337][ T31] 4 locks held by syz-executor/6606: [ 840.635713][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 840.670341][ T31] #1: ffff888062cfd888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 840.680229][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 840.720334][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 840.740364][ T31] 4 locks held by syz-executor/6613: [ 840.745814][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 840.791590][ T31] #1: ffff888042879488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 840.810339][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 840.840933][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 840.860669][ T31] 2 locks held by syz.9.8064/7219: [ 840.865862][ T31] #0: ffffffff8f503750 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 840.910341][ T31] #1: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 840.930595][ T31] 4 locks held by syz-executor/7530: [ 840.936037][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 840.961201][ T31] #1: ffff88803e0b6c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 840.991934][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 841.019533][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 841.051118][ T31] 3 locks held by kworker/1:12/7874: [ 841.056490][ T31] 4 locks held by syz-executor/7962: [ 841.074347][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 841.090325][ T31] #1: ffff888064c83088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 841.130144][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 841.161263][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 841.180343][ T31] 2 locks held by kworker/1:14/8276: [ 841.185692][ T31] 4 locks held by syz-executor/8285: [ 841.211297][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 841.230337][ T31] #1: ffff88804235c888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 841.261286][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 841.280344][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 841.312230][ T31] 4 locks held by syz-executor/8610: [ 841.317592][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 841.341166][ T31] #1: ffff88807ee54488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 841.373865][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 841.407301][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 841.431430][ T31] 4 locks held by syz-executor/8844: [ 841.436802][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 841.469681][ T31] #1: ffff88808b3a8888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 841.501451][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 841.520326][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 841.551602][ T31] 4 locks held by syz-executor/9281: [ 841.557054][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 841.588625][ T31] #1: ffff88808e4ee088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 841.621218][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 841.640368][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 841.660347][ T31] 4 locks held by syz-executor/9606: [ 841.665707][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 841.698864][ T31] #1: ffff888067150088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 841.730334][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 841.761032][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 841.782284][ T31] 4 locks held by syz-executor/9929: [ 841.787736][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 841.823281][ T31] #1: ffff888037ffd888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 841.851387][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 841.881328][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 841.900641][ T31] 4 locks held by syz-executor/10250: [ 841.906075][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 841.953591][ T31] #1: ffff88805bd89888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 841.970330][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 841.990623][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 842.018962][ T31] 4 locks held by syz-executor/10493: [ 842.049139][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 842.070357][ T31] #1: ffff88809a4a5088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 842.090331][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 842.110643][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 842.140862][ T31] 4 locks held by syz-executor/10896: [ 842.146342][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 842.188341][ T31] #1: ffff88802fa5d088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 842.210648][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 842.241467][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 842.260670][ T31] 4 locks held by syz-executor/11220: [ 842.266300][ T31] #0: ffff888030164428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 842.310338][ T31] #1: ffff8880997dcc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 842.341909][ T31] #2: ffff888027951788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 842.360327][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 842.380411][ T31] [ 842.382809][ T31] ============================================= [ 842.382809][ T31] [ 842.415958][ T31] NMI backtrace for cpu 0 [ 842.415980][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 842.416004][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 842.416016][ T31] Call Trace: [ 842.416025][ T31] [ 842.416034][ T31] dump_stack_lvl+0x189/0x250 [ 842.416067][ T31] ? __wake_up_klogd+0xd9/0x110 [ 842.416094][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.416123][ T31] ? __pfx__printk+0x10/0x10 [ 842.416157][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 842.416186][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 842.416207][ T31] ? _printk+0xcf/0x120 [ 842.416233][ T31] ? __pfx__printk+0x10/0x10 [ 842.416256][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 842.416284][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 842.416311][ T31] watchdog+0xfee/0x1030 [ 842.416339][ T31] ? watchdog+0x1de/0x1030 [ 842.416373][ T31] kthread+0x70e/0x8a0 [ 842.416400][ T31] ? __pfx_watchdog+0x10/0x10 [ 842.416424][ T31] ? __pfx_kthread+0x10/0x10 [ 842.416448][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 842.416475][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 842.416499][ T31] ? __pfx_kthread+0x10/0x10 [ 842.416521][ T31] ret_from_fork+0x3f9/0x770 [ 842.416551][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 842.416583][ T31] ? __switch_to_asm+0x39/0x70 [ 842.416602][ T31] ? __switch_to_asm+0x33/0x70 [ 842.416620][ T31] ? __pfx_kthread+0x10/0x10 [ 842.416643][ T31] ret_from_fork_asm+0x1a/0x30 [ 842.416679][ T31] [ 842.416687][ T31] Sending NMI from CPU 0 to CPUs 1: [ 842.589378][ C1] NMI backtrace for cpu 1 [ 842.589398][ C1] CPU: 1 UID: 0 PID: 5783 Comm: kworker/1:8 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 842.589419][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 842.589429][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 842.589458][ C1] RIP: 0010:unwind_next_frame+0x351/0x2390 [ 842.589484][ C1] Code: 48 11 00 00 48 c7 c0 78 f3 ae 8f 49 29 c5 48 c7 c6 9c 6c 27 90 49 c1 fd 02 4a 8d 14 6d 00 00 00 00 4c 01 ea 48 01 d2 48 01 f2 <48> bd 00 00 00 00 00 fc ff df 0f 84 37 01 00 00 4c 8d 62 04 4c 8d [ 842.589498][ C1] RSP: 0018:ffffc90000a077f8 EFLAGS: 00000286 [ 842.589511][ C1] RAX: ffffffff90134314 RBX: ffffffff90134318 RCX: ffffffff9013431c [ 842.589523][ C1] RDX: ffffffff90bde40c RSI: ffffffff90bde406 RDI: ffffffff8be28b20 [ 842.589534][ C1] RBP: ffffffff9013431c R08: 000000000000000c R09: ffffffff81729af5 [ 842.589545][ C1] R10: ffffc90000a07918 R11: ffffffff81acf690 R12: ffffffff89d770ba [ 842.589556][ C1] R13: 0000000000000001 R14: ffffc90000a078c8 R15: ffffffff90134318 [ 842.589568][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 842.589581][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 842.589592][ C1] CR2: 0000001b30419ff8 CR3: 00000000331bc000 CR4: 00000000003526f0 [ 842.589609][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 842.589619][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 842.589629][ C1] Call Trace: [ 842.589635][ C1] [ 842.589647][ C1] ? unwind_next_frame+0xa5/0x2390 [ 842.589668][ C1] ? __ip_local_out+0x4db/0x600 [ 842.589697][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 842.589715][ C1] arch_stack_walk+0x11c/0x150 [ 842.589733][ C1] ? __ip_local_out+0x4db/0x600 [ 842.589753][ C1] stack_trace_save+0x9c/0xe0 [ 842.589769][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 842.589786][ C1] ? rcu_is_watching+0x15/0xb0 [ 842.589809][ C1] kasan_save_track+0x3e/0x80 [ 842.589829][ C1] ? kasan_save_track+0x3e/0x80 [ 842.589848][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 842.589861][ C1] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 842.589876][ C1] ? kmem_cache_free+0x166/0x400 [ 842.589889][ C1] ? nf_conntrack_free+0x2f7/0x380 [ 842.589906][ C1] ? nf_conntrack_in+0xa24/0x1600 [ 842.589923][ C1] ? nf_hook_slow+0xc5/0x220 [ 842.589938][ C1] ? nf_hook+0x217/0x380 [ 842.589955][ C1] ? __ip_local_out+0x4db/0x600 [ 842.589991][ C1] ? kmem_cache_free+0x166/0x400 [ 842.590006][ C1] __kasan_kmalloc+0x93/0xb0 [ 842.590021][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 842.590036][ C1] ? kmem_cache_free+0x166/0x400 [ 842.590051][ C1] ? nf_conntrack_free+0x2f7/0x380 [ 842.590068][ C1] kmem_cache_free+0x166/0x400 [ 842.590082][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 842.590105][ C1] nf_conntrack_free+0x2f7/0x380 [ 842.590124][ C1] nf_conntrack_in+0xa24/0x1600 [ 842.590151][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 842.590174][ C1] ? ipt_do_table+0x2a3/0x1640 [ 842.590193][ C1] ? nf_hook+0x9d/0x380 [ 842.590211][ C1] ? nf_hook+0x9d/0x380 [ 842.590228][ C1] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 842.590242][ C1] ? ipv4_conntrack_local+0x126/0x210 [ 842.590258][ C1] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 842.590282][ C1] nf_hook_slow+0xc5/0x220 [ 842.590301][ C1] nf_hook+0x217/0x380 [ 842.590322][ C1] ? nf_hook+0x9d/0x380 [ 842.590339][ C1] ? __pfx_nf_hook+0x10/0x10 [ 842.590359][ C1] ? __pfx_dst_output+0x10/0x10 [ 842.590380][ C1] ? ip_fast_csum+0x1ee/0x2b0 [ 842.590396][ C1] __ip_local_out+0x4db/0x600 [ 842.590414][ C1] ? __pfx_dst_output+0x10/0x10 [ 842.590434][ C1] ip_local_out+0x26/0x70 [ 842.590453][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 842.590478][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 842.590495][ C1] ? __pfx_audit_ip6+0x8/0x10 [ 842.590512][ C1] ? synproxy_pernet+0x45/0x270 [ 842.590534][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 842.590556][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 842.590575][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 842.590594][ C1] ? nf_ip_checksum+0x13c/0x510 [ 842.590615][ C1] nft_synproxy_do_eval+0x345/0x570 [ 842.590634][ C1] ? hmac+0x288/0x330 [ 842.590649][ C1] ? kdf+0x182/0x270 [ 842.590664][ C1] ? wg_noise_handshake_consume_initiation+0x242/0x900 [ 842.590701][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 842.590729][ C1] nft_do_chain+0x409/0x1920 [ 842.590754][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 842.590789][ C1] nft_do_chain_inet+0x25d/0x340 [ 842.590809][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 842.590829][ C1] ? ipt_do_table+0x2a3/0x1640 [ 842.590846][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 842.590863][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 842.590884][ C1] nf_hook_slow+0xc5/0x220 [ 842.590902][ C1] NF_HOOK+0x206/0x3a0 [ 842.590919][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 842.590936][ C1] ? NF_HOOK+0x9a/0x3a0 [ 842.590951][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 842.590966][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 842.590985][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 842.591002][ C1] ? skb_dst+0x4f/0xd0 [ 842.591018][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 842.591036][ C1] NF_HOOK+0x309/0x3a0 [ 842.591053][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 842.591069][ C1] ? NF_HOOK+0x9a/0x3a0 [ 842.591084][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 842.591099][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 842.591116][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 842.591136][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 842.591152][ C1] __netif_receive_skb+0x143/0x380 [ 842.591169][ C1] ? process_backlog+0x2d5/0x14f0 [ 842.591186][ C1] process_backlog+0x60e/0x14f0 [ 842.591201][ C1] ? __lock_acquire+0xab9/0xd20 [ 842.591226][ C1] ? __pfx_process_backlog+0x10/0x10 [ 842.591247][ C1] __napi_poll+0xc7/0x480 [ 842.591260][ C1] ? net_rx_action+0x46d/0xe30 [ 842.591277][ C1] net_rx_action+0x707/0xe30 [ 842.591292][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 842.591319][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 842.591349][ C1] handle_softirqs+0x286/0x870 [ 842.591371][ C1] ? do_softirq+0xec/0x180 [ 842.591393][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 842.591416][ C1] ? kernel_fpu_end+0xc8/0x120 [ 842.591432][ C1] do_softirq+0xec/0x180 [ 842.591451][ C1] [ 842.591457][ C1] [ 842.591464][ C1] ? __pfx_do_softirq+0x10/0x10 [ 842.591483][ C1] ? __pfx_do_softirq+0x10/0x10 [ 842.591505][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 842.591525][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 842.591545][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 842.591564][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 842.591586][ C1] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 842.591604][ C1] kernel_fpu_end+0xd2/0x120 [ 842.591619][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 842.591633][ C1] ? kernel_fpu_end+0xd2/0x120 [ 842.591648][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 842.591667][ C1] blake2s_compress+0x5f/0xd0 [ 842.591689][ C1] blake2s_update+0x14b/0x450 [ 842.591713][ C1] hmac+0x288/0x330 [ 842.591731][ C1] ? __pfx_hmac+0x10/0x10 [ 842.591759][ C1] ? kdf+0x115/0x270 [ 842.591777][ C1] kdf+0x182/0x270 [ 842.591794][ C1] ? __pfx_kdf+0x10/0x10 [ 842.591816][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 842.591840][ C1] wg_noise_handshake_consume_initiation+0x242/0x900 [ 842.591861][ C1] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 842.591880][ C1] ? kernel_fpu_end+0xd2/0x120 [ 842.591895][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 842.591911][ C1] ? preempt_schedule_common+0x83/0xd0 [ 842.591934][ C1] ? __asan_memset+0x22/0x50 [ 842.591953][ C1] ? blake2s_final+0x14c/0x260 [ 842.591975][ C1] ? compute_mac1+0x152/0x1a0 [ 842.591990][ C1] ? unwind_next_frame+0xa5/0x2390 [ 842.592011][ C1] ? __pfx_compute_mac1+0x10/0x10 [ 842.592031][ C1] ? preempt_schedule+0xae/0xc0 [ 842.592055][ C1] ? wg_cookie_validate_packet+0x208/0x320 [ 842.592075][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 842.592100][ C1] wg_packet_handshake_receive_worker+0x5f2/0xfb0 [ 842.592128][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 842.592150][ C1] ? register_lock_class+0x51/0x320 [ 842.592171][ C1] ? __lock_acquire+0xab9/0xd20 [ 842.592194][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 842.592218][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 842.592236][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 842.592256][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 842.592277][ C1] process_scheduled_works+0xae1/0x17b0 [ 842.592309][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 842.592336][ C1] worker_thread+0x8a0/0xda0 [ 842.592361][ C1] kthread+0x70e/0x8a0 [ 842.592379][ C1] ? __pfx_worker_thread+0x10/0x10 [ 842.592400][ C1] ? __pfx_kthread+0x10/0x10 [ 842.592417][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 842.592435][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 842.592455][ C1] ? __pfx_kthread+0x10/0x10 [ 842.592471][ C1] ret_from_fork+0x3f9/0x770 [ 842.592492][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 842.592514][ C1] ? __switch_to_asm+0x39/0x70 [ 842.592530][ C1] ? __switch_to_asm+0x33/0x70 [ 842.592544][ C1] ? __pfx_kthread+0x10/0x10 [ 842.592560][ C1] ret_from_fork_asm+0x1a/0x30 [ 842.592583][ C1] [ 843.710354][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 843.717309][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 843.729327][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 843.739786][ T31] Call Trace: [ 843.743210][ T31] [ 843.746283][ T31] dump_stack_lvl+0x99/0x250 [ 843.750942][ T31] ? __asan_memcpy+0x40/0x70 [ 843.755577][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 843.760923][ T31] ? __pfx__printk+0x10/0x10 [ 843.765567][ T31] panic+0x2db/0x790 [ 843.769509][ T31] ? __pfx_panic+0x10/0x10 [ 843.773996][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 843.778922][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 843.784790][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 843.790206][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 843.796564][ T31] watchdog+0x102d/0x1030 [ 843.800991][ T31] ? watchdog+0x1de/0x1030 [ 843.805574][ T31] kthread+0x70e/0x8a0 [ 843.809701][ T31] ? __pfx_watchdog+0x10/0x10 [ 843.814435][ T31] ? __pfx_kthread+0x10/0x10 [ 843.819158][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 843.824416][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 843.829789][ T31] ? __pfx_kthread+0x10/0x10 [ 843.834453][ T31] ret_from_fork+0x3f9/0x770 [ 843.839208][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 843.844436][ T31] ? __switch_to_asm+0x39/0x70 [ 843.849672][ T31] ? __switch_to_asm+0x33/0x70 [ 843.854472][ T31] ? __pfx_kthread+0x10/0x10 [ 843.859103][ T31] ret_from_fork_asm+0x1a/0x30 [ 843.863922][ T31] [ 843.867359][ T31] Kernel Offset: disabled [ 843.871704][ T31] Rebooting in 86400 seconds..