last executing test programs: 2m1.426577343s ago: executing program 0 (id=319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x1c}}, 0x0) 2m0.98728153s ago: executing program 0 (id=323): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x54, 0x4, 0xf, 0x0, 0x18) 2m0.47341793s ago: executing program 0 (id=328): io_setup(0x3, &(0x7f0000000180)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(r0, 0x2, &(0x7f0000001700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x400, r1, &(0x7f0000000280)="4e1f90e10d250d3f8df750996246d3c8c2", 0x11, 0x4, 0x0, 0x2}]) 1m59.585270325s ago: executing program 0 (id=334): syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 1m58.918996449s ago: executing program 0 (id=337): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m55.904129294s ago: executing program 0 (id=351): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x4, 0xc, 0x2, @vifc_lcl_addr=@rand_addr=0x64010102, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 1m48.869545374s ago: executing program 4 (id=385): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) 1m48.79270684s ago: executing program 4 (id=386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1m48.635908867s ago: executing program 4 (id=387): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000680)={0x6, 0x83, 0x2, 0xff, 0x35, 0x1, 0xd, 0x9, 0x7, 0x2, 0x25, 0x8, 0xa2, 0x5}, 0xe) 1m48.481196539s ago: executing program 4 (id=388): r0 = epoll_create(0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002680)={0x2}) 1m48.267192103s ago: executing program 4 (id=389): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) 1m46.750578143s ago: executing program 4 (id=391): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xb7) 1m40.627515543s ago: executing program 32 (id=351): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x4, 0xc, 0x2, @vifc_lcl_addr=@rand_addr=0x64010102, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 1m40.427366982s ago: executing program 1 (id=414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000002280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1m40.268919162s ago: executing program 1 (id=415): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{0xb31}], 0x1, 0x1, 0x0, 0x2, 0x0, 0x2}) 1m40.096549318s ago: executing program 1 (id=416): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x7ffd, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "5e4d94cbbf90033c", "3d0c312c3ba7a89a1d97a244f9373052", "3e9b7724", "e31b36d37715e650"}, 0x28) 1m39.913803056s ago: executing program 1 (id=417): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000002000000f9"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m37.93366701s ago: executing program 1 (id=420): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2, 0x4) 1m37.35968105s ago: executing program 1 (id=423): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) read(r0, 0x0, 0x5d) 1m31.559403966s ago: executing program 33 (id=391): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xb7) 1m27.990591363s ago: executing program 3 (id=462): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0xa042) close_range(r0, 0xffffffffffffffff, 0x0) 1m27.386535369s ago: executing program 3 (id=466): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "4722eccb"}]}}, 0x0}, 0x0) 1m24.831881364s ago: executing program 3 (id=476): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x80000) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000000000)) 1m24.439661928s ago: executing program 3 (id=479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000fff8000002000005580004802c000180090001006d657461000000001c000280080002400000001f0800014000000008080001400000001028000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x0) 1m22.083181913s ago: executing program 34 (id=423): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) read(r0, 0x0, 0x5d) 1m20.941403181s ago: executing program 3 (id=488): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000240)='./file0\x00', 0x122) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) 1m20.619511974s ago: executing program 3 (id=490): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m19.733548429s ago: executing program 5 (id=495): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m19.616460628s ago: executing program 5 (id=496): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 1m19.200336468s ago: executing program 5 (id=498): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) 1m18.857598148s ago: executing program 5 (id=500): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ea7, 0x907, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xf, "4ba06b6e"}]}}, 0x0}, 0x0) 1m16.779094239s ago: executing program 5 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 1m16.33668228s ago: executing program 5 (id=509): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1m5.010748917s ago: executing program 35 (id=490): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m3.861990047s ago: executing program 2 (id=536): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd", 0x2) 1m3.513043181s ago: executing program 2 (id=538): unshare(0xc040400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpu.stat\x00', 0x275a, 0x0) fcntl$lock(r0, 0x2, 0x0) 1m3.144382713s ago: executing program 2 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006dc0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000006e00)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8841}, 0x8054) 1m2.656842251s ago: executing program 2 (id=540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000f65b00000002000000ffffffff00000000000040000d0001007564703a73"], 0x54}}, 0x0) 1m2.007773083s ago: executing program 2 (id=543): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="bf050000000000007112180000000000bc201000000200009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m1.227160531s ago: executing program 36 (id=509): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 59.124124817s ago: executing program 2 (id=554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 45.019289358s ago: executing program 6 (id=589): r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 44.726058523s ago: executing program 6 (id=592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz0\x00'}}}}, 0x34}}, 0x0) 44.242224698s ago: executing program 6 (id=594): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x19df, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4, @local}, 0x10) 43.714608636s ago: executing program 37 (id=554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 43.708356506s ago: executing program 6 (id=597): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfff, 0x40000000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e0001"], 0x4e}}, 0x44) 43.214415739s ago: executing program 6 (id=599): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r0, 0x1) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 42.71658179s ago: executing program 6 (id=601): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) 27.509902916s ago: executing program 38 (id=601): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) 23.629664025s ago: executing program 8 (id=664): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000940)={0x2, 0x4e21, @local}, 0x10) getpeername$inet(r0, 0x0, 0x0) 23.242345644s ago: executing program 8 (id=667): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r0, &(0x7f0000005140)={0x2020}, 0x2020) ppoll(&(0x7f0000000580)=[{r0, 0x1}], 0x1, &(0x7f00000006c0), 0x0, 0x0) 22.849705273s ago: executing program 8 (id=670): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 22.588752994s ago: executing program 9 (id=672): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) 22.250816543s ago: executing program 8 (id=673): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 22.230143245s ago: executing program 9 (id=674): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000005c0), &(0x7f0000000540)=0x8) 21.823188278s ago: executing program 9 (id=677): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000e01", 0x48, 0x3a, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xe0, {0x3, 0x6, "9fdf6e", 0x726, 0x3c, 0x1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@dstopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x6, 0x9}}]}]}}}}}}}, 0x0) 21.548268745s ago: executing program 9 (id=678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x860}, 0x20000000) 21.014760196s ago: executing program 9 (id=680): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) 20.645438877s ago: executing program 9 (id=682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000080)={0x1, 0x2, 0x3, 0x7, 0x8}) 19.925563163s ago: executing program 8 (id=684): unshare(0x600) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) 19.667004984s ago: executing program 8 (id=685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc048aec8, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0xfffffffe}) 16.793594742s ago: executing program 7 (id=698): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000280)=0x4, 0x4) 16.690156551s ago: executing program 7 (id=699): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip6gre0\x00', 0x0}) 16.511588793s ago: executing program 7 (id=700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xd0, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x9a, 0xa8, @random="516dcbb462a1efbdedbcfa9231b4bfa849ff387b7ff6176c733de694ba7da71bb827d0e9dae145bd433f6f72683d9e6ae880d516b4f23bc03e7da167a52136c8e532762740a44907cd0d83bf0a83f901b2ba4c603965bd57a712b460d12fde51e7bb2c21ee04168a44b4e96910398b1199f9bc99a5dfed8697878731a041fa10720387e54886cc566244c5af899ef6a80541a4c300cf"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) 16.352107343s ago: executing program 7 (id=701): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x6, 0x1, 0x4, 0x800, 0x7, {}, {0x2, 0xa, 0x7f, 0x5, 0x4, 0x2, "b3848769"}, 0x5, 0x1, {0x0}, 0x1}) 15.988476323s ago: executing program 7 (id=702): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.124240871s ago: executing program 7 (id=703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x8906}, @val={0x1, 0x0, 0x0, 0x0, 0x3d, 0xfffd}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x13, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x4, "d588"}]}}}}}}, 0x4a) 5.545493685s ago: executing program 39 (id=682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000080)={0x1, 0x2, 0x3, 0x7, 0x8}) 4.547299882s ago: executing program 40 (id=685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc048aec8, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0xfffffffe}) 0s ago: executing program 41 (id=703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x8906}, @val={0x1, 0x0, 0x0, 0x0, 0x3d, 0xfffd}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x13, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x4, "d588"}]}}}}}}, 0x4a) kernel console output (not intermixed with test programs): 84.301473][ T5917] usb 1-1: USB disconnect, device number 2 [ 84.331845][ T5921] usb 2-1: Product: syz [ 84.336067][ T5921] usb 2-1: Manufacturer: syz [ 84.370111][ T5921] usb 2-1: SerialNumber: syz [ 84.411197][ T5921] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 84.454916][ T5921] usb 2-1: No valid video chain found. [ 84.630384][ T5921] usb 2-1: USB disconnect, device number 2 [ 85.135878][ T6013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.157248][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.318705][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.346996][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.386551][ T43] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 85.409568][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.447998][ T43] usb 1-1: SerialNumber: syz [ 85.750236][ T43] usb 1-1: 0:2 : does not exist [ 85.819174][ T6032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.50'. [ 85.838327][ T43] usb 1-1: USB disconnect, device number 3 [ 85.906304][ T6028] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 85.938998][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.144595][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.53'. [ 86.247738][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.419863][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 86.455485][ T24] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.478883][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.495029][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 86.506950][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.527584][ T24] usb 2-1: config 0 descriptor?? [ 86.807478][ T43] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 86.841758][ T6054] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 86.851012][ T6054] [U] J"—E:ÀÆ" [ 86.886178][ T9] cfg80211: failed to load regulatory.db [ 86.975997][ T24] playstation 0003:054C:0BA0.0001: unknown main item tag 0x0 [ 87.006001][ T43] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 87.023861][ T24] playstation 0003:054C:0BA0.0001: hidraw0: USB HID v7d.d9 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 87.042821][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 87.050426][ T43] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 87.060159][ T978] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.067400][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.097820][ T43] usb 4-1: config 0 descriptor?? [ 87.105832][ T6046] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 87.160997][ T24] playstation 0003:054C:0BA0.0001: Failed to retrieve feature with reportID 18: -71 [ 87.192725][ T24] playstation 0003:054C:0BA0.0001: Failed to retrieve DualShock4 pairing info: -71 [ 87.215470][ T6004] syz.4.37 (6004): drop_caches: 1 [ 87.230230][ T24] playstation 0003:054C:0BA0.0001: Failed to get MAC address from DualShock4 [ 87.251899][ T24] playstation 0003:054C:0BA0.0001: Failed to create dualshock4. [ 87.254593][ T978] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.302890][ T24] playstation 0003:054C:0BA0.0001: probe with driver playstation failed with error -71 [ 87.316556][ T978] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.347516][ T978] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 87.348976][ T24] usb 2-1: USB disconnect, device number 3 [ 87.356732][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.366357][ T978] usb 1-1: config 0 descriptor?? [ 87.456760][ T6057] fido_id[6057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 87.571111][ T43] lenovo 0003:17EF:60B5.0002: hidraw0: USB HID vff.ff Device [HID 17ef:60b5] on usb-dummy_hcd.3-1/input0 [ 87.770680][ T24] usb 4-1: USB disconnect, device number 2 [ 87.852540][ T978] logitech 0003:046D:C623.0003: unknown main item tag 0x0 [ 87.884673][ T978] logitech 0003:046D:C623.0003: unknown main item tag 0x0 [ 87.908322][ T978] logitech 0003:046D:C623.0003: unknown main item tag 0x0 [ 87.916175][ T978] logitech 0003:046D:C623.0003: unknown main item tag 0x0 [ 87.969916][ T978] logitech 0003:046D:C623.0003: unknown main item tag 0x0 [ 88.000452][ T978] logitech 0003:046D:C623.0003: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.0-1/input0 [ 88.161372][ T978] usb 1-1: USB disconnect, device number 4 [ 88.727096][ T5921] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.928533][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 88.955652][ T5921] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.984341][ T5921] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.014922][ T5921] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 89.025759][ T5921] usb 3-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 89.046655][ T5921] usb 3-1: config 7 interface 0 has no altsetting 0 [ 89.053613][ T5921] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 89.090979][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.371905][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.530674][ T6136] netlink: 'syz.4.100': attribute type 1 has an invalid length. [ 89.561368][ T43] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 89.603355][ T43] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 89.625782][ T5921] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0004/input/input5 [ 89.643208][ T43] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 89.675121][ T43] usb 1-1: config 220 has no interface number 2 [ 89.689065][ T43] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 89.745071][ T5921] kye 0003:0458:5010.0004: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 89.763404][ T43] usb 1-1: config 220 interface 0 has no altsetting 0 [ 89.779520][ T43] usb 1-1: config 220 interface 76 has no altsetting 0 [ 89.791244][ T43] usb 1-1: config 220 interface 1 has no altsetting 0 [ 89.822979][ T43] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 89.848856][ T978] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 89.853177][ T5921] usb 3-1: USB disconnect, device number 2 [ 89.877920][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.914980][ T43] usb 1-1: Product: syz [ 89.922559][ T43] usb 1-1: Manufacturer: syz [ 89.936904][ T43] usb 1-1: SerialNumber: syz [ 90.015754][ T6145] fido_id[6145]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 90.040541][ T978] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 90.052992][ T978] usb 4-1: config 0 has no interface number 0 [ 90.066750][ T978] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 90.102351][ T978] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 90.121121][ T978] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 90.137266][ T978] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 90.148725][ T978] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 90.185859][ T978] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 90.213802][ T978] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 90.230011][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.238252][ T43] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 90.241533][ T978] usb 4-1: config 0 descriptor?? [ 90.252833][ T6140] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 90.268369][ T6140] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 90.278211][ T43] usb 1-1: No valid video chain found. [ 90.283781][ T43] usb 1-1: selecting invalid altsetting 0 [ 90.364466][ T978] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 90.406783][ T43] usb 1-1: selecting invalid altsetting 0 [ 90.434109][ T43] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 90.474955][ T43] usb 1-1: USB disconnect, device number 5 [ 90.580932][ T978] usb 4-1: USB disconnect, device number 3 [ 90.602049][ T978] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 90.779226][ T6172] capability: warning: `syz.1.116' uses 32-bit capabilities (legacy support in use) [ 90.975213][ T6179] netlink: 'syz.1.119': attribute type 27 has an invalid length. [ 91.236947][ T5921] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 91.256708][ T6191] process 'syz.3.124' launched '/dev/fd/3' with NULL argv: empty string added [ 91.401518][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 91.421597][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.461093][ T5921] usb 1-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 91.486207][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.518058][ T5921] usb 1-1: config 0 descriptor?? [ 91.965544][ T5921] apple 0003:05AC:026C.0005: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.0-1/input0 [ 92.067725][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.195857][ T5917] usb 1-1: USB disconnect, device number 6 [ 92.232062][ T43] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 92.259036][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.285256][ T43] usb 3-1: Product: syz [ 92.294423][ T43] usb 3-1: Manufacturer: syz [ 92.306971][ T43] usb 3-1: SerialNumber: syz [ 92.330946][ T43] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 92.385902][ T5921] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 92.413904][ T6229] netlink: 'syz.4.142': attribute type 2 has an invalid length. [ 92.427938][ T978] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.552248][ T6235] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 92.572309][ T6234] IPVS: stopping master sync thread 6235 ... [ 92.598685][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 92.628469][ T978] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 92.654203][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 92.666355][ T5917] usb 3-1: USB disconnect, device number 3 [ 92.684130][ T978] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 92.739483][ T978] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 92.769297][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.797280][ T978] usb 4-1: Product: syz [ 92.807719][ T978] usb 4-1: Manufacturer: syz [ 92.825471][ T978] usb 4-1: SerialNumber: syz [ 92.844094][ T978] usb 4-1: config 0 descriptor?? [ 92.860552][ T978] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 92.966824][ T6248] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.098845][ T978] scsi host1: usb-storage 4-1:0.0 [ 93.330856][ T43] usb 4-1: USB disconnect, device number 4 [ 93.420084][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 93.440411][ T5921] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 93.442237][ T5921] ath9k_htc: Failed to initialize the device [ 93.443798][ T5917] usb 3-1: ath9k_htc: USB layer deinitialized [ 93.595099][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 93.595152][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 93.595174][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 93.595193][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 93.595228][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 93.647572][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.674397][ T24] usb 1-1: config 0 descriptor?? [ 93.799803][ T6280] netlink: 'syz.2.164': attribute type 7 has an invalid length. [ 93.817160][ T6280] netlink: 'syz.2.164': attribute type 8 has an invalid length. [ 93.887018][ T24] hdpvr 1-1:0.0: firmware version 0x8 dated ¥)†#´–¶jnÛý [ 94.405843][ T24] hdpvr 1-1:0.0: Could not setup controls [ 94.423101][ T24] hdpvr 1-1:0.0: registering videodev failed [ 94.489397][ T24] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 94.551817][ T24] usb 1-1: USB disconnect, device number 7 [ 94.645170][ T30] audit: type=1326 audit(1750704109.899:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007938e929 code=0x7ffc0000 [ 94.747564][ T30] audit: type=1326 audit(1750704109.939:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f007938e929 code=0x7ffc0000 [ 94.811918][ T30] audit: type=1326 audit(1750704109.939:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007938e929 code=0x7ffc0000 [ 94.864255][ T30] audit: type=1326 audit(1750704109.939:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007938e929 code=0x7ffc0000 [ 94.893366][ T978] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.048702][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 95.059789][ T5910] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.069303][ T978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 95.079837][ T978] usb 3-1: config 4 interface 0 has no altsetting 0 [ 95.090917][ T978] usb 3-1: string descriptor 0 read error: -22 [ 95.097418][ T978] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 95.106665][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.107238][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.164629][ T978] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 95.218652][ T978] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 95.222716][ T6328] syz.1.187 (6328): drop_caches: 1 [ 95.240874][ T5910] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 95.244348][ T978] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 95.256905][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.259805][ T978] usb 3-1: media controller created [ 95.275097][ T5910] usb 4-1: config 0 descriptor?? [ 95.292636][ T5910] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 95.298903][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 95.304133][ T6328] syz.1.187 (6328): drop_caches: 1 [ 95.310617][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.331250][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.344157][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.357882][ T6311] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 95.363394][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.376341][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.387758][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 95.408156][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.420826][ T24] usb 5-1: config 0 descriptor?? [ 95.486337][ T978] zl10353_read_register: readreg error (reg=127, ret==0) [ 95.546611][ T978] usb 3-1: USB disconnect, device number 4 [ 95.558807][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.574041][ T9] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 95.584735][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.597320][ T9] usb 1-1: config 0 descriptor?? [ 95.796973][ T5921] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.861315][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 95.870947][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 95.878542][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 95.885837][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 95.893321][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 95.900747][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 95.908178][ T5910] gspca_cpia1: usb_control_msg 01, error -71 [ 95.914182][ T5910] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 95.922147][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 95.929733][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 95.941580][ T5910] usb 4-1: USB disconnect, device number 5 [ 95.948831][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 95.956101][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 95.974002][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 95.981746][ T5921] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 95.990714][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.002506][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 96.010132][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 96.017479][ T5921] usb 2-1: config 0 has no interface number 0 [ 96.023613][ T5921] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 96.034181][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 96.045281][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 96.054885][ T5921] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.089811][ T5921] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 96.110230][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.126291][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input6 [ 96.151740][ T5921] usb 2-1: Product: syz [ 96.155966][ T5921] usb 2-1: Manufacturer: syz [ 96.174173][ T5921] usb 2-1: SerialNumber: syz [ 96.204816][ T24] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 96.218329][ T5921] usb 2-1: config 0 descriptor?? [ 96.245950][ T9] razer 0003:1532:010E.0007: failed to enable macro keys: -71 [ 96.277909][ T24] usb 5-1: USB disconnect, device number 2 [ 96.297755][ T9] razer 0003:1532:010E.0007: hidraw1: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 96.372565][ T9] usb 1-1: USB disconnect, device number 8 [ 96.498527][ T6335] fido_id[6335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 96.524885][ T6336] fido_id[6336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 96.846775][ T5921] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 96.906949][ T5921] usb 2-1: USB disconnect, device number 4 [ 96.967597][ T6349] tipc: Started in network mode [ 97.007103][ T6349] tipc: Node identity 6, cluster identity 4711 [ 97.035729][ T6349] tipc: Node number set to 6 [ 97.041710][ T6349] tipc: Cannot configure node identity twice [ 97.668602][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 98.217017][ T5921] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.397098][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 98.404237][ T5921] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 98.432734][ T5921] usb 5-1: config 8 has no interface number 0 [ 98.453019][ T5921] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 98.489916][ T5921] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 98.505578][ T5921] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 98.546172][ T5921] usb 5-1: config 8 interface 39 has no altsetting 0 [ 98.578888][ T5921] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 98.617066][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.660673][ T5921] usb 5-1: Product: syz [ 98.665612][ T5921] usb 5-1: Manufacturer: syz [ 98.677915][ T5921] usb 5-1: SerialNumber: syz [ 99.302299][ T5921] ipheth 5-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 99.365682][ T5921] ipheth 5-1:8.39: Apple iPhone USB Ethernet device attached [ 99.391642][ T5921] usb 5-1: USB disconnect, device number 3 [ 99.417043][ T5917] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 99.538242][ T5921] ipheth 5-1:8.39: Apple iPhone USB Ethernet now disconnected [ 99.591245][ T5917] usb 1-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.617454][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.642046][ T5917] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 99.683206][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.690985][ T6455] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[6455] [ 99.709989][ T5917] usb 1-1: config 0 descriptor?? [ 99.966994][ T978] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 99.997384][ T6465] sctp: [Deprecated]: syz.2.252 (pid 6465) Use of int in maxseg socket option. [ 99.997384][ T6465] Use struct sctp_assoc_value instead [ 100.139849][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.141674][ T5917] a4tech 0003:09DA:001A.0008: unbalanced collection at end of report description [ 100.163662][ T978] usb 4-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 100.193774][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.246279][ T5917] a4tech 0003:09DA:001A.0008: parse failed [ 100.251703][ T978] usb 4-1: config 0 descriptor?? [ 100.649087][ T6479] netlink: 36 bytes leftover after parsing attributes in process `syz.1.259'. [ 100.807733][ T978] asus 0003:0B05:183D.0009: hidraw0: USB HID v0.00 Device [HID 0b05:183d] on usb-dummy_hcd.3-1/input0 [ 100.871609][ T978] asus 0003:0B05:183D.0009: Asus input not registered [ 100.950162][ T978] asus 0003:0B05:183D.0009: probe with driver asus failed with error -12 [ 101.061968][ T978] usb 4-1: USB disconnect, device number 6 [ 101.289235][ T5917] a4tech 0003:09DA:001A.0008: probe with driver a4tech failed with error -22 [ 101.455209][ T5917] usb 1-1: USB disconnect, device number 9 [ 101.619719][ T6491] fido_id[6491]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 102.338010][ T6507] usb usb8: usbfs: process 6507 (syz.2.271) did not claim interface 0 before use [ 102.677350][ T978] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 102.892613][ T978] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 102.935723][ T978] usb 4-1: config 0 interface 0 has no altsetting 0 [ 102.974171][ T978] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 103.021577][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.099812][ T978] usb 4-1: config 0 descriptor?? [ 103.145570][ T6508] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.408025][ T5895] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.619913][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 103.630744][ T978] konepure 0003:1E7D:2DBE.000A: unknown main item tag 0x0 [ 103.674549][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.711443][ T978] konepure 0003:1E7D:2DBE.000A: unknown main item tag 0x0 [ 103.739226][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.768054][ T978] konepure 0003:1E7D:2DBE.000A: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 103.789976][ T5895] usb 2-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 103.837291][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.865182][ T978] usb 4-1: USB disconnect, device number 7 [ 103.898011][ T5895] usb 2-1: config 0 descriptor?? [ 104.361537][ T5895] sony 0003:1430:474C.000B: unknown main item tag 0x0 [ 104.456998][ T5895] sony 0003:1430:474C.000B: unknown main item tag 0x0 [ 104.540172][ T6531] fido_id[6531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 104.565377][ T5895] sony 0003:1430:474C.000B: hidraw0: USB HID v0.00 Device [HID 1430:474c] on usb-dummy_hcd.1-1/input0 [ 104.672192][ T5895] sony 0003:1430:474C.000B: failed to claim input [ 104.717139][ T5895] usb 2-1: USB disconnect, device number 5 [ 105.513602][ T6544] fido_id[6544]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 106.497023][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 107.020724][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.256304][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.326987][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 107.415835][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.476388][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 107.476421][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 107.520598][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.520626][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.520652][ T9] usb 3-1: Product: syz [ 107.520666][ T9] usb 3-1: Manufacturer: syz [ 107.547276][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 107.547297][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 107.575327][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 107.575362][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 107.875921][ T9] usb 3-1: USB disconnect, device number 5 [ 108.161549][ T978] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 108.307097][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 108.310030][ T978] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 108.310061][ T978] usb 4-1: config 0 interface 0 has no altsetting 0 [ 108.310092][ T978] usb 4-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 108.310111][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.314983][ T978] usb 4-1: config 0 descriptor?? [ 108.815453][ T978] lenovo 0003:17EF:60FE.000C: hidraw0: USB HID v0.0b Device [HID 17ef:60fe] on usb-dummy_hcd.3-1/input0 [ 108.957445][ T978] usb 4-1: USB disconnect, device number 8 [ 109.365022][ T6604] fido_id[6604]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 109.459937][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.320'. [ 110.217006][ T978] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 110.431327][ T978] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.489179][ T978] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.572437][ T978] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.582535][ T30] audit: type=1326 audit(1750704125.829:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa84b8e929 code=0x7ffc0000 [ 110.630490][ T978] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 110.710964][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.784419][ T30] audit: type=1326 audit(1750704125.829:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa84b8e929 code=0x7ffc0000 [ 110.859174][ T978] usb 4-1: config 0 descriptor?? [ 111.030535][ T30] audit: type=1326 audit(1750704125.859:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa84b8e929 code=0x7ffc0000 [ 111.298503][ T30] audit: type=1326 audit(1750704125.859:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa84b8e929 code=0x7ffc0000 [ 111.523929][ T30] audit: type=1326 audit(1750704125.859:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa84b8e929 code=0x7ffc0000 [ 111.588584][ T6643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.335'. [ 111.611556][ T978] usb 4-1: string descriptor 0 read error: -71 [ 111.686427][ T978] uclogic 0003:5543:3031.000D: failed retrieving string descriptor #200: -71 [ 111.762821][ T978] uclogic 0003:5543:3031.000D: failed retrieving pen parameters: -71 [ 111.796471][ T30] audit: type=1326 audit(1750704125.859:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7faa84b8e929 code=0x7ffc0000 [ 111.877040][ T978] uclogic 0003:5543:3031.000D: failed probing pen v2 parameters: -71 [ 111.929942][ T978] uclogic 0003:5543:3031.000D: failed probing parameters: -71 [ 112.006469][ T978] uclogic 0003:5543:3031.000D: probe with driver uclogic failed with error -71 [ 112.018484][ T30] audit: type=1326 audit(1750704125.859:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa84b8e929 code=0x7ffc0000 [ 112.179065][ T978] usb 4-1: USB disconnect, device number 9 [ 112.258415][ T30] audit: type=1326 audit(1750704125.859:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa84b8e929 code=0x7ffc0000 [ 112.916867][ C1] sched: DL replenish lagged too much [ 113.013208][ T6659] bridge_slave_0: left allmulticast mode [ 113.077178][ T6659] bridge_slave_0: left promiscuous mode [ 113.106922][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.211855][ T6659] bridge_slave_1: left allmulticast mode [ 113.248452][ T6659] bridge_slave_1: left promiscuous mode [ 113.284418][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.428993][ T6659] bond0: (slave bond_slave_0): Releasing backup interface [ 113.510666][ T6659] bond0: (slave bond_slave_1): Releasing backup interface [ 113.702347][ T6659] team0: Port device team_slave_0 removed [ 113.952782][ T6659] team0: Port device team_slave_1 removed [ 113.985506][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.149320][ T6659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.255872][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.300339][ T6659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.821763][ T6680] trusted_key: encrypted_key: key trusted:‘8s‰X not found [ 114.851777][ T6681] pimreg: entered allmulticast mode [ 114.982281][ T6684] pimreg: left allmulticast mode [ 115.367305][ T978] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.557333][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 115.588958][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.636538][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.660929][ T978] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 115.720567][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.774099][ T978] usb 5-1: config 0 descriptor?? [ 116.270216][ T978] kye 0003:0458:5016.000E: control desc unexpectedly large [ 116.292509][ T978] kye 0003:0458:5016.000E: control desc unexpectedly large [ 116.334643][ T978] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.000E/input/input8 [ 116.449146][ T6706] netlink: 60 bytes leftover after parsing attributes in process `syz.3.362'. [ 116.529013][ T978] kye 0003:0458:5016.000E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 116.546742][ T6705] netlink: 60 bytes leftover after parsing attributes in process `syz.3.362'. [ 116.654093][ T978] usb 5-1: USB disconnect, device number 4 [ 116.974167][ T6709] fido_id[6709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 117.014220][ T6713] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 117.284820][ T30] audit: type=1400 audit(1750704132.539:14): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F261AA7A76BA8 pid=6714 comm="syz.3.366" [ 117.997420][ T5895] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.137138][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.167163][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 118.188467][ T5895] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 118.203114][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 118.215047][ T5895] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 118.229547][ T5895] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 118.242811][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.258287][ T5895] usb 3-1: config 0 descriptor?? [ 118.308585][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 118.322623][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.337692][ T9] usb 5-1: config 0 descriptor?? [ 118.360562][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 118.483804][ T5895] hdpvr 3-1:0.0: firmware version 0x69 dated Ì«SL’Ù¸Öi:¸hÏúŽ·Ý¤Dšjñu°íÿ7~½Ô?beÓlOˆz¬ [ 118.498469][ T5895] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 118.568055][ T9] gspca_spca508: reg_read err -32 [ 118.780328][ T9] gspca_spca508: reg_read err -71 [ 118.800780][ T9] gspca_spca508: reg_read err -71 [ 118.806458][ T9] gspca_spca508: reg_read err -71 [ 118.817081][ T9] gspca_spca508: reg write: error -71 [ 118.822625][ T9] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 118.845871][ T9] usb 5-1: USB disconnect, device number 5 [ 118.955858][ T5895] hdpvr 3-1:0.0: Could not setup controls [ 118.983839][ T5895] hdpvr 3-1:0.0: registering videodev failed [ 119.015127][ T5895] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 119.042799][ T5895] usb 3-1: USB disconnect, device number 6 [ 119.643730][ T6733] capability: warning: `syz.4.375' uses deprecated v2 capabilities in a way that may be insecure [ 120.337280][ T5895] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.517296][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 120.531732][ T5895] usb 5-1: config 0 has no interfaces? [ 120.551343][ T5895] usb 5-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=e6.d0 [ 120.574234][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.596500][ T5895] usb 5-1: Product: syz [ 120.610568][ T5895] usb 5-1: Manufacturer: syz [ 120.626569][ T5895] usb 5-1: SerialNumber: syz [ 120.651378][ T5895] usb 5-1: config 0 descriptor?? [ 120.979724][ T5895] usb 5-1: USB disconnect, device number 6 [ 121.135744][ T6748] netlink: 32 bytes leftover after parsing attributes in process `syz.1.381'. [ 122.407964][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 124.011335][ T6777] netlink: 32 bytes leftover after parsing attributes in process `syz.1.393'. [ 124.516206][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 126.537077][ T5895] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 126.700027][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.714921][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 126.729567][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 126.747620][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 126.764310][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 126.786499][ T5895] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 126.798344][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 126.806575][ T5895] usb 2-1: Product: syz [ 126.819958][ T5895] usb 2-1: Manufacturer: syz [ 126.824717][ T5895] usb 2-1: SerialNumber: syz [ 126.833338][ T5895] usb 2-1: config 0 descriptor?? [ 127.067180][ T5895] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 127.081471][ T5895] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 127.283912][ T5895] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 127.291856][ T5895] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 127.311239][ T5895] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 127.484659][ T5895] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 127.511699][ T5895] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 127.531732][ T5895] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 127.543337][ T5895] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 127.563392][ T5895] usb 2-1: USB disconnect, device number 6 [ 130.866781][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.876382][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.894363][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.904312][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.912877][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.957080][ T5895] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.130347][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 131.144831][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.169630][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.195921][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.236972][ T5895] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 131.256338][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.282986][ T5895] usb 2-1: config 0 descriptor?? [ 131.405962][ T6832] chnl_net:caif_netlink_parms(): no params data found [ 131.726062][ T5895] koneplus 0003:1E7D:2E22.000F: item fetching failed at offset 0/2 [ 131.741363][ T5895] koneplus 0003:1E7D:2E22.000F: parse failed [ 131.750935][ T5895] koneplus 0003:1E7D:2E22.000F: probe with driver koneplus failed with error -22 [ 131.766401][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.775485][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.806292][ T6832] bridge_slave_0: entered allmulticast mode [ 131.818972][ T6832] bridge_slave_0: entered promiscuous mode [ 131.828747][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.840309][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.856062][ T6832] bridge_slave_1: entered allmulticast mode [ 131.872742][ T6832] bridge_slave_1: entered promiscuous mode [ 131.936063][ T5895] usb 2-1: USB disconnect, device number 7 [ 132.062788][ T6832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.083102][ T6832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.288095][ T6832] team0: Port device team_slave_0 added [ 132.331129][ T6832] team0: Port device team_slave_1 added [ 132.937985][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.944982][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.997271][ T5153] Bluetooth: hci5: command tx timeout [ 133.004397][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.037857][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.294517][ T6832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.344567][ T30] audit: type=1326 audit(1750704148.589:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb900d8e929 code=0x7ffc0000 [ 133.409213][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.456919][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.530441][ T30] audit: type=1326 audit(1750704148.589:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb900d8e929 code=0x7ffc0000 [ 133.694454][ T6832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.741111][ T30] audit: type=1326 audit(1750704148.639:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb900d8e929 code=0x7ffc0000 [ 133.922895][ T30] audit: type=1326 audit(1750704148.639:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb900d8e929 code=0x7ffc0000 [ 134.082214][ T30] audit: type=1326 audit(1750704148.639:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb900d8e929 code=0x7ffc0000 [ 134.234044][ T30] audit: type=1326 audit(1750704148.649:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fb900d8e929 code=0x7ffc0000 [ 134.333656][ T30] audit: type=1326 audit(1750704148.649:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb900d8e929 code=0x7ffc0000 [ 134.666953][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.801262][ T6832] hsr_slave_0: entered promiscuous mode [ 134.828901][ T6832] hsr_slave_1: entered promiscuous mode [ 134.837120][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 134.871336][ T9] usb 3-1: config 0 has no interfaces? [ 134.878928][ T6832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.886523][ T6832] Cannot create hsr debugfs directory [ 134.899368][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.920678][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.950895][ T9] usb 3-1: config 0 descriptor?? [ 135.047428][ T5153] Bluetooth: hci5: command tx timeout [ 135.513288][ T5895] usb 3-1: USB disconnect, device number 7 [ 136.109474][ T6832] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.174129][ T6832] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.262500][ T6832] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.330846][ T6832] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.882920][ T6832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.014309][ T6832] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.067670][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.074912][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.127470][ T5153] Bluetooth: hci5: command tx timeout [ 137.154809][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.162027][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.376069][ T6832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.452980][ T6832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.708750][ T6832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.960427][ T6832] veth0_vlan: entered promiscuous mode [ 138.071768][ T6832] veth1_vlan: entered promiscuous mode [ 138.255566][ T6832] veth0_macvtap: entered promiscuous mode [ 138.285422][ T6832] veth1_macvtap: entered promiscuous mode [ 138.307310][ T978] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.365355][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.411200][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.455867][ T6832] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.473729][ T6832] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.501699][ T6832] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.517166][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 138.546005][ T6832] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.568735][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.610122][ T978] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 138.637284][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.721215][ T978] usb 4-1: config 0 descriptor?? [ 138.913651][ T6909] Invalid logical block size (-1) [ 139.058849][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.066755][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.197667][ T5153] Bluetooth: hci5: command tx timeout [ 139.259909][ T978] sony 0003:054C:024B.0010: bogus close delimiter [ 139.318937][ T978] sony 0003:054C:024B.0010: item 0 0 2 10 parsing failed [ 139.326806][ T978] sony 0003:054C:024B.0010: parse failed [ 139.370424][ T2941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.399761][ T978] sony 0003:054C:024B.0010: probe with driver sony failed with error -22 [ 139.436814][ T2941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.482912][ T978] usb 4-1: USB disconnect, device number 10 [ 140.007871][ T6916] sch_tbf: burst 3 is lower than device lo mtu (65550) ! [ 140.687305][ T978] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.784874][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.798543][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.808638][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.822210][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.836593][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.873418][ T5888] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 140.907247][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 140.931215][ T978] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 140.961848][ T978] usb 3-1: config 0 has no interface number 0 [ 141.023897][ T978] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 141.056593][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.127009][ T5888] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.135425][ T978] usb 3-1: Product: syz [ 141.152328][ T978] usb 3-1: Manufacturer: syz [ 141.164752][ T5888] usb 4-1: config 0 has no interface number 0 [ 141.182297][ T978] usb 3-1: SerialNumber: syz [ 141.201695][ T5888] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 141.231596][ T978] usb 3-1: config 0 descriptor?? [ 141.264753][ T978] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 141.283041][ T5888] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 141.334536][ T5888] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.386881][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.468052][ T5888] usb 4-1: config 0 descriptor?? [ 141.522858][ T978] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 141.568678][ T5888] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 141.640371][ T978] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 141.821110][ T978] usb 4-1: USB disconnect, device number 11 [ 141.832003][ T6926] iowarrior 4-1:0.1: Error -19 while submitting URB [ 141.982124][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 142.024509][ T5888] usb 3-1: USB disconnect, device number 8 [ 142.104170][ T5888] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 142.187724][ T5888] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 142.257968][ T5888] quatech2 3-1:0.51: device disconnected [ 142.592361][ T6930] chnl_net:caif_netlink_parms(): no params data found [ 142.878963][ T5153] Bluetooth: hci2: command tx timeout [ 143.545490][ T6930] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.617121][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.628991][ T5888] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 143.646386][ T6930] bridge_slave_0: entered allmulticast mode [ 143.673644][ T6930] bridge_slave_0: entered promiscuous mode [ 143.722614][ T6930] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.769370][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.817027][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 143.827572][ T6930] bridge_slave_1: entered allmulticast mode [ 143.897869][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.911218][ T6930] bridge_slave_1: entered promiscuous mode [ 143.967060][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.027001][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 144.092718][ T5888] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 144.180104][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.230314][ T5888] usb 4-1: config 0 descriptor?? [ 144.315511][ T6930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.404736][ T6930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.744069][ T5888] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 144.835483][ T6930] team0: Port device team_slave_0 added [ 144.914256][ T6930] team0: Port device team_slave_1 added [ 144.954654][ T5888] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 144.975405][ T5153] Bluetooth: hci2: command tx timeout [ 145.026162][ T6973] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.067722][ T5888] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 145.222672][ T5888] usb 4-1: USB disconnect, device number 12 [ 145.257802][ T5895] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 145.316729][ T5895] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 145.427158][ T5895] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 145.481849][ T5895] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 145.644232][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.668191][ T6977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.475'. [ 145.714809][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.932242][ T6930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.007174][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.056929][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.242295][ T6930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.049957][ T5153] Bluetooth: hci2: command tx timeout [ 148.892116][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.905275][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.923792][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.932619][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.941652][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.117422][ T5847] Bluetooth: hci2: command tx timeout [ 149.651293][ T6995] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.660300][ T6995] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.669101][ T6995] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.678259][ T6995] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.129468][ T6930] hsr_slave_0: entered promiscuous mode [ 150.174479][ T6930] hsr_slave_1: entered promiscuous mode [ 150.219261][ T6930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.281833][ T6930] Cannot create hsr debugfs directory [ 150.341367][ T7009] ipvlan2: entered promiscuous mode [ 150.376684][ T7009] bridge0: port 1(ipvlan2) entered blocking state [ 150.418818][ T7009] bridge0: port 1(ipvlan2) entered disabled state [ 150.440854][ T7009] ipvlan2: entered allmulticast mode [ 150.449915][ T7009] bridge0: entered allmulticast mode [ 150.472462][ T7009] ipvlan2: left allmulticast mode [ 150.496717][ T7009] bridge0: left allmulticast mode [ 151.037366][ T5847] Bluetooth: hci6: command tx timeout [ 151.998677][ T5888] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 152.188595][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 152.224545][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.268585][ T5888] usb 6-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 152.325244][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.387999][ T5888] usb 6-1: config 0 descriptor?? [ 152.453204][ T6930] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 152.613525][ T7002] chnl_net:caif_netlink_parms(): no params data found [ 152.681222][ T6930] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 152.773587][ T6930] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 152.864999][ T5888] semitek 0003:1EA7:0907.0012: item fetching failed at offset 0/2 [ 152.906561][ T5888] semitek 0003:1EA7:0907.0012: probe with driver semitek failed with error -22 [ 153.073766][ T5888] usb 6-1: USB disconnect, device number 2 [ 153.128689][ T5847] Bluetooth: hci6: command tx timeout [ 153.158411][ T6930] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 153.817581][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.824776][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.917260][ T7002] bridge_slave_0: entered allmulticast mode [ 153.972604][ T7002] bridge_slave_0: entered promiscuous mode [ 154.044051][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.127088][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.134415][ T7002] bridge_slave_1: entered allmulticast mode [ 154.234466][ T7002] bridge_slave_1: entered promiscuous mode [ 154.592440][ T7061] gretap0: entered promiscuous mode [ 154.618473][ T7061] vlan2: entered promiscuous mode [ 154.873538][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.164071][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.205692][ T5847] Bluetooth: hci6: command tx timeout [ 155.436574][ T7002] team0: Port device team_slave_0 added [ 155.465696][ T7002] team0: Port device team_slave_1 added [ 155.600306][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.613127][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.655988][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.666991][ T5950] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 155.717673][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.724660][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.771520][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.848217][ T5950] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 155.866298][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.895625][ T5950] usb 3-1: config 0 descriptor?? [ 156.060606][ T7002] hsr_slave_0: entered promiscuous mode [ 156.078886][ T7002] hsr_slave_1: entered promiscuous mode [ 156.085567][ T7002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.104047][ T7002] Cannot create hsr debugfs directory [ 156.270191][ T6930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.397137][ T5950] chicony 0003:04F2:1236.0013: hidraw0: USB HID v1.01 Device [HID 04f2:1236] on usb-dummy_hcd.2-1/input0 [ 156.519481][ T6930] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.610894][ T5950] usb 3-1: USB disconnect, device number 9 [ 156.622203][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.629455][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.712337][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.719584][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.251368][ T6930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.277324][ T5847] Bluetooth: hci6: command tx timeout [ 157.410928][ T7002] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 157.484638][ T7002] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 157.530612][ T7002] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 157.567881][ T7002] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 157.644913][ T6930] veth0_vlan: entered promiscuous mode [ 157.667201][ T5895] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 157.714189][ T6930] veth1_vlan: entered promiscuous mode [ 157.873572][ T6930] veth0_macvtap: entered promiscuous mode [ 157.886450][ T5895] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 157.905932][ T5895] usb 3-1: config 0 has no interface number 0 [ 157.942217][ T6930] veth1_macvtap: entered promiscuous mode [ 157.950958][ T5895] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.986346][ T5895] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 158.045946][ T5895] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 158.061446][ T6930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.082061][ T5895] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 158.111577][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.126354][ T5895] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 158.156098][ T6930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.174396][ T5895] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.235283][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.244825][ T5895] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 158.271673][ T6930] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.291205][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.312946][ T6930] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.325932][ T5895] usb 3-1: config 0 descriptor?? [ 158.349113][ T6930] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.364973][ T7075] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.374899][ T7075] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.382549][ T6930] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.418125][ T5895] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 158.439020][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.446247][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.544356][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.551591][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.658561][ T978] usb 3-1: USB disconnect, device number 10 [ 158.670189][ T978] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 159.981466][ T7086] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.517'. [ 160.060269][ T7085] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.517'. [ 160.436615][ T7002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.696482][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.752734][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.857239][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.009219][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.047102][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.180474][ T7002] veth0_vlan: entered promiscuous mode [ 161.236823][ T7002] veth1_vlan: entered promiscuous mode [ 161.434136][ T7002] veth0_macvtap: entered promiscuous mode [ 161.502291][ T7002] veth1_macvtap: entered promiscuous mode [ 161.551247][ T7097] VFS: Mount too revealing [ 161.669067][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.742050][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.824761][ T7002] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.881840][ T7002] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.903586][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.522'. [ 161.922990][ T7002] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.957983][ T7002] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.168964][ T7115] tipc: Failed to obtain node identity [ 165.175359][ T7115] tipc: Enabling of bearer rejected, failed to enable media [ 165.880318][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.951121][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.069006][ T7123] netlink: 10 bytes leftover after parsing attributes in process `syz.2.533'. [ 166.140664][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.170369][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.347395][ T5888] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 166.547295][ T5888] usb 7-1: Using ep0 maxpacket: 16 [ 166.606450][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.683065][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.764324][ T5888] usb 7-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 166.830944][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.898259][ T5888] usb 7-1: config 0 descriptor?? [ 167.420624][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.438537][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.447060][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.456939][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.464686][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.545252][ T5888] viewsonic 0003:0543:E621.0014: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.6-1/input0 [ 167.709640][ T5888] usb 7-1: USB disconnect, device number 2 [ 168.022621][ T7140] fido_id[7140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 168.161450][ T7142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.540'. [ 168.218695][ T7142] tipc: Invalid UDP bearer configuration [ 168.218758][ T7142] tipc: Enabling of bearer rejected, failed to enable media [ 168.754319][ T7148] vivid-000: disconnect [ 168.801709][ T7147] vivid-000: reconnect [ 169.432959][ T7139] chnl_net:caif_netlink_parms(): no params data found [ 169.517412][ T5153] Bluetooth: hci3: command tx timeout [ 169.543539][ T7158] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 170.532399][ T7139] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.603505][ T7139] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.665033][ T7139] bridge_slave_0: entered allmulticast mode [ 170.708980][ T7139] bridge_slave_0: entered promiscuous mode [ 170.778486][ T7139] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.837772][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.881072][ T7139] bridge_slave_1: entered allmulticast mode [ 170.931603][ T7139] bridge_slave_1: entered promiscuous mode [ 171.067377][ T978] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 171.250762][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 171.261436][ T5847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 171.270191][ T5847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 171.282944][ T978] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 171.293277][ T5847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 171.333844][ T5847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 171.394991][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.438748][ T7139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.494361][ T978] usb 7-1: config 0 descriptor?? [ 171.577700][ T978] cp210x 7-1:0.0: cp210x converter detected [ 171.597082][ T5153] Bluetooth: hci3: command tx timeout [ 171.636491][ T7139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.063827][ T978] usb 7-1: cp210x converter now attached to ttyUSB0 [ 172.166409][ T7139] team0: Port device team_slave_0 added [ 172.203357][ T5888] usb 7-1: USB disconnect, device number 3 [ 172.271432][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 172.295748][ T7139] team0: Port device team_slave_1 added [ 172.370313][ T5888] cp210x 7-1:0.0: device disconnected [ 172.735553][ T7139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.777119][ T7139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.916139][ T7139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.984933][ T7139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.022969][ T7139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.197049][ T7139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.367401][ T5153] Bluetooth: hci7: command tx timeout [ 173.530840][ T7197] netlink: 'syz.7.562': attribute type 16 has an invalid length. [ 173.577043][ T7197] netlink: 'syz.7.562': attribute type 17 has an invalid length. [ 173.677527][ T5153] Bluetooth: hci3: command tx timeout [ 173.856373][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.864268][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.437181][ T5153] Bluetooth: hci7: command tx timeout [ 175.757204][ T5153] Bluetooth: hci3: command tx timeout [ 177.220051][ T7197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.250201][ T7197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.517120][ T5153] Bluetooth: hci7: command tx timeout [ 177.549263][ T7197] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.570016][ T7197] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.583496][ T7197] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.608123][ T7197] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.967367][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.6.563'. [ 178.023330][ T7139] hsr_slave_0: entered promiscuous mode [ 178.091604][ T7139] hsr_slave_1: entered promiscuous mode [ 178.137674][ T7139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.145291][ T7139] Cannot create hsr debugfs directory [ 179.601186][ T5153] Bluetooth: hci7: command tx timeout [ 179.606752][ T7208] mmap: syz.6.565 (7208) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 179.801226][ T7178] chnl_net:caif_netlink_parms(): no params data found [ 180.278759][ T7139] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 180.384096][ T7139] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 180.501387][ T7139] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 180.593270][ T7139] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 180.611337][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.7.572'. [ 180.644052][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.7.572'. [ 180.694284][ T7234] netlink: 'syz.7.572': attribute type 15 has an invalid length. [ 180.957903][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.965325][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.983548][ T7178] bridge_slave_0: entered allmulticast mode [ 181.006460][ T7178] bridge_slave_0: entered promiscuous mode [ 182.850064][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.897315][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.904931][ T7178] bridge_slave_1: entered allmulticast mode [ 182.969065][ T7178] bridge_slave_1: entered promiscuous mode [ 183.300708][ T7178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.381972][ T7178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.752075][ T7256] netlink: 'syz.6.579': attribute type 11 has an invalid length. [ 184.355841][ T7178] team0: Port device team_slave_0 added [ 184.537875][ T7178] team0: Port device team_slave_1 added [ 184.878349][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.885357][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.054884][ T7178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.150525][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.194947][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.360015][ T7178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.836702][ T7178] hsr_slave_0: entered promiscuous mode [ 185.928282][ T7178] hsr_slave_1: entered promiscuous mode [ 185.958530][ T7178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.984287][ T7178] Cannot create hsr debugfs directory [ 186.023216][ T7284] tipc: Enabling of bearer rejected, failed to enable media [ 186.310795][ T7139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.006752][ T7139] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.521747][ T2215] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.529066][ T2215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.691404][ T2215] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.698629][ T2215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.636244][ T5847] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 188.664904][ T5847] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 188.673662][ T5847] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 188.695664][ T5847] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 188.705778][ T5847] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 188.750459][ T7311] binder: 7308:7311 ioctl c0306201 200000000100 returned -11 [ 190.943804][ T7302] pimreg: entered allmulticast mode [ 191.010830][ T7303] pimreg: left allmulticast mode [ 192.344990][ T7139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.424735][ T7178] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 192.535925][ T7178] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 192.615368][ T7178] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 192.718878][ T7178] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 192.804002][ T7312] chnl_net:caif_netlink_parms(): no params data found [ 192.958464][ T5847] Bluetooth: hci8: command tx timeout [ 193.348602][ T7312] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.363707][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.382924][ T7312] bridge_slave_0: entered allmulticast mode [ 193.402349][ T7312] bridge_slave_0: entered promiscuous mode [ 193.430933][ T7139] veth0_vlan: entered promiscuous mode [ 193.447298][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.463956][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.479493][ T7312] bridge_slave_1: entered allmulticast mode [ 193.498507][ T7312] bridge_slave_1: entered promiscuous mode [ 193.744422][ T7342] netlink: 'syz.7.611': attribute type 28 has an invalid length. [ 193.800456][ T7312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.878265][ T7312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.941071][ T7139] veth1_vlan: entered promiscuous mode [ 194.208703][ T7312] team0: Port device team_slave_0 added [ 194.231058][ T7312] team0: Port device team_slave_1 added [ 194.407140][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.413497][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.698114][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.720950][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.832954][ T7312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.880518][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.914451][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.031597][ T7312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.044991][ T5847] Bluetooth: hci8: command tx timeout [ 195.105925][ T7139] veth0_macvtap: entered promiscuous mode [ 195.221269][ T7139] veth1_macvtap: entered promiscuous mode [ 195.524793][ T7312] hsr_slave_0: entered promiscuous mode [ 195.555570][ T7312] hsr_slave_1: entered promiscuous mode [ 195.578043][ T7312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.585656][ T7312] Cannot create hsr debugfs directory [ 195.661977][ T7139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.856609][ T7178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.891881][ T7139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.971059][ T7139] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.014153][ T7139] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.057228][ T7139] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.065993][ T7139] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.300893][ T7178] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.601110][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.608349][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.780531][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.787830][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.120527][ T5847] Bluetooth: hci8: command tx timeout [ 197.176733][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.287396][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.570207][ T7312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.656717][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.681320][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.851586][ T7178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.163185][ T7178] veth0_vlan: entered promiscuous mode [ 198.270729][ T7178] veth1_vlan: entered promiscuous mode [ 198.488709][ T7178] veth0_macvtap: entered promiscuous mode [ 198.549275][ T7178] veth1_macvtap: entered promiscuous mode [ 198.674295][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.759543][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.840329][ T7178] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.926819][ T7178] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.977935][ T7178] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.010320][ T7178] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.198945][ T5847] Bluetooth: hci8: command tx timeout [ 199.580505][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.687335][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.856246][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.920265][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.177374][ T5895] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 201.362594][ T5895] usb 10-1: Using ep0 maxpacket: 16 [ 201.389918][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.455768][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.506575][ T5895] usb 10-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 201.545274][ T5895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.588218][ T5895] usb 10-1: config 0 descriptor?? [ 201.599534][ T5153] Bluetooth: hci4: command 0x0406 tx timeout [ 201.998382][ T5831] IPVS: starting estimator thread 0... [ 202.128961][ T7409] IPVS: using max 28 ests per chain, 67200 per kthread [ 202.147570][ T5895] zeroplus 0003:0C12:0030.0015: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.9-1/input0 [ 202.205545][ T5895] zeroplus 0003:0C12:0030.0015: no inputs found [ 202.351711][ T5895] usb 10-1: USB disconnect, device number 2 [ 202.497656][ T7411] fido_id[7411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 203.460288][ T5888] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 203.679604][ T5888] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 203.777401][ T5888] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 203.848366][ T5888] usb 10-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.960861][ T5888] usb 10-1: config 0 interface 0 has no altsetting 0 [ 204.023778][ T5888] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 204.054059][ T5888] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.115248][ T5888] usb 10-1: config 0 descriptor?? [ 204.144694][ T7420] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 204.597461][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.611622][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.628554][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.674270][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.695567][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.720534][ T5888] uclogic 0003:28BD:0094.0016: interface is invalid, ignoring [ 204.947071][ T5831] usb 10-1: USB disconnect, device number 3 [ 206.522364][ T7434] chnl_net:caif_netlink_parms(): no params data found [ 206.561157][ T7459] sctp: [Deprecated]: syz.8.660 (pid 7459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.561157][ T7459] Use struct sctp_sack_info instead [ 206.798160][ T5847] Bluetooth: hci0: command tx timeout [ 207.470695][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.534877][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.618402][ T7434] bridge_slave_0: entered allmulticast mode [ 207.665133][ T7434] bridge_slave_0: entered promiscuous mode [ 207.735978][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.810543][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.856121][ T7434] bridge_slave_1: entered allmulticast mode [ 207.909810][ T7434] bridge_slave_1: entered promiscuous mode [ 208.007691][ T7484] bridge0: entered promiscuous mode [ 208.028587][ T7484] macvlan2: entered promiscuous mode [ 208.453342][ T7434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.590550][ T7434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.889454][ T5847] Bluetooth: hci0: command tx timeout [ 209.072721][ T7434] team0: Port device team_slave_0 added [ 209.151824][ T7434] team0: Port device team_slave_1 added [ 209.605347][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.648199][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.850268][ T7434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.082592][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.142648][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.269091][ T7434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.701875][ T7434] hsr_slave_0: entered promiscuous mode [ 210.734253][ T7434] hsr_slave_1: entered promiscuous mode [ 210.768178][ T7434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.808739][ T7434] Cannot create hsr debugfs directory [ 210.957502][ T5847] Bluetooth: hci0: command tx timeout [ 211.639221][ T7518] tipc: Started in network mode [ 211.653481][ T7518] tipc: Node identity ac14140f, cluster identity 4711 [ 211.670099][ T7518] tipc: New replicast peer: 0.0.255.255 [ 211.676204][ T7518] tipc: Enabled bearer , priority 10 [ 212.006789][ T30] audit: type=1326 audit(1750704227.259:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.7.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328a98e929 code=0x7ffc0000 [ 212.081244][ T30] audit: type=1326 audit(1750704227.289:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.7.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f328a98e929 code=0x7ffc0000 [ 212.191167][ T30] audit: type=1326 audit(1750704227.289:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.7.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328a98e929 code=0x7ffc0000 [ 212.253860][ T30] audit: type=1326 audit(1750704227.289:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.7.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328a98e929 code=0x7ffc0000 [ 212.383147][ T30] audit: type=1326 audit(1750704227.289:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.7.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f328a98e929 code=0x7ffc0000 [ 212.471189][ T30] audit: type=1326 audit(1750704227.289:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.7.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328a98e929 code=0x7ffc0000 [ 212.563144][ T30] audit: type=1326 audit(1750704227.289:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.7.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328a98e929 code=0x7ffc0000 [ 212.662732][ T30] audit: type=1400 audit(1750704227.489:29): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A01 pid=7523 comm="syz.7.689" [ 212.694870][ T5831] tipc: Node number set to 2886997007 [ 213.038821][ T5847] Bluetooth: hci0: command tx timeout [ 213.419527][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.7.696'. [ 213.445667][ T7538] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 213.463491][ T7538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.977911][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.997763][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.006583][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.030086][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.038025][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.983295][ T7559] chnl_net:caif_netlink_parms(): no params data found [ 227.108863][ T5847] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 227.123414][ T5847] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 227.133845][ T5847] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 227.143128][ T5847] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 227.151347][ T5847] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 227.631697][ T7559] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.649632][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.664196][ T7559] bridge_slave_0: entered allmulticast mode [ 227.675577][ T7559] bridge_slave_0: entered promiscuous mode [ 227.721423][ T7559] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.757363][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.764794][ T7559] bridge_slave_1: entered allmulticast mode [ 227.785498][ T7559] bridge_slave_1: entered promiscuous mode [ 228.053879][ T7559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.086196][ T5847] Bluetooth: hci1: command tx timeout [ 228.109833][ T7559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.389833][ T7559] team0: Port device team_slave_0 added [ 228.441203][ T7559] team0: Port device team_slave_1 added [ 228.697092][ T7559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.704095][ T7559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.812340][ T7559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.857869][ T7566] chnl_net:caif_netlink_parms(): no params data found [ 228.919644][ T7559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.926730][ T7559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.972514][ T7559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.199955][ T5847] Bluetooth: hci9: command tx timeout [ 229.638915][ T7559] hsr_slave_0: entered promiscuous mode [ 229.645792][ T7559] hsr_slave_1: entered promiscuous mode [ 229.679301][ T7559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.696918][ T7559] Cannot create hsr debugfs directory [ 229.702721][ T7566] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.717841][ T7566] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.725275][ T7566] bridge_slave_0: entered allmulticast mode [ 229.743868][ T7566] bridge_slave_0: entered promiscuous mode [ 229.871741][ T7566] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.900521][ T7566] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.918021][ T7566] bridge_slave_1: entered allmulticast mode [ 229.937431][ T7566] bridge_slave_1: entered promiscuous mode [ 230.157583][ T5847] Bluetooth: hci1: command tx timeout [ 230.192779][ T7566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.454477][ T7566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.804320][ T7566] team0: Port device team_slave_0 added [ 230.854279][ T7566] team0: Port device team_slave_1 added [ 231.234536][ T7566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.263158][ T7566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.296940][ T5847] Bluetooth: hci9: command tx timeout [ 231.358325][ T7566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.468105][ T5153] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 231.485195][ T7566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.493902][ T5153] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 231.503323][ T5153] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 231.521643][ T5153] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 231.537187][ T5153] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 231.577366][ T7566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.676157][ T7566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.054937][ T7566] hsr_slave_0: entered promiscuous mode [ 232.075998][ T7566] hsr_slave_1: entered promiscuous mode [ 232.099204][ T7566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.106832][ T7566] Cannot create hsr debugfs directory [ 232.238008][ T5153] Bluetooth: hci1: command tx timeout [ 233.074463][ T7580] chnl_net:caif_netlink_parms(): no params data found [ 233.360041][ T5153] Bluetooth: hci9: command tx timeout [ 233.554918][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.578479][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.586075][ T7580] bridge_slave_0: entered allmulticast mode [ 233.597292][ T5153] Bluetooth: hci10: command tx timeout [ 233.609419][ T7580] bridge_slave_0: entered promiscuous mode [ 233.629975][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.653999][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.685436][ T7580] bridge_slave_1: entered allmulticast mode [ 233.698108][ T7580] bridge_slave_1: entered promiscuous mode [ 233.897951][ T7580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.921149][ T7580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.156779][ T7580] team0: Port device team_slave_0 added [ 234.171478][ T7580] team0: Port device team_slave_1 added [ 234.318278][ T5153] Bluetooth: hci1: command tx timeout [ 234.396327][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.417276][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.463897][ T7580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.505561][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.514307][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.567318][ T7580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.955581][ T7580] hsr_slave_0: entered promiscuous mode [ 234.966515][ T7580] hsr_slave_1: entered promiscuous mode [ 234.982524][ T7580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.001070][ T7580] Cannot create hsr debugfs directory [ 235.447970][ T5153] Bluetooth: hci9: command tx timeout [ 235.677552][ T5153] Bluetooth: hci10: command tx timeout [ 237.757467][ T5153] Bluetooth: hci10: command tx timeout [ 239.837850][ T5153] Bluetooth: hci10: command tx timeout [ 247.623891][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.633949][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.647863][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.656607][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.667450][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.324261][ T7598] chnl_net:caif_netlink_parms(): no params data found [ 248.738178][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.745387][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.767651][ T7598] bridge_slave_0: entered allmulticast mode [ 248.775600][ T7598] bridge_slave_0: entered promiscuous mode [ 248.830948][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.852189][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.867613][ T7598] bridge_slave_1: entered allmulticast mode [ 248.885998][ T7598] bridge_slave_1: entered promiscuous mode [ 249.081385][ T7598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.132738][ T7598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.380354][ T7598] team0: Port device team_slave_0 added [ 249.474604][ T7598] team0: Port device team_slave_1 added [ 249.660239][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.677138][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.728258][ T7598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.757685][ T5847] Bluetooth: hci4: command tx timeout [ 249.777555][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.784549][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.856176][ T7598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.081392][ T7598] hsr_slave_0: entered promiscuous mode [ 250.112368][ T7598] hsr_slave_1: entered promiscuous mode [ 250.130693][ T7598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.156453][ T7598] Cannot create hsr debugfs directory [ 251.848414][ T5847] Bluetooth: hci4: command tx timeout [ 253.919350][ T5847] Bluetooth: hci4: command tx timeout [ 255.865004][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.871550][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.997468][ T5847] Bluetooth: hci4: command tx timeout [ 263.038122][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 264.302773][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.313181][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.321741][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.330460][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.342136][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 264.990189][ T7611] chnl_net:caif_netlink_parms(): no params data found [ 265.387433][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.394615][ T7611] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.430149][ T7611] bridge_slave_0: entered allmulticast mode [ 265.468160][ T7611] bridge_slave_0: entered promiscuous mode [ 265.490682][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.507046][ T7611] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.537350][ T7611] bridge_slave_1: entered allmulticast mode [ 265.558379][ T7611] bridge_slave_1: entered promiscuous mode [ 265.764117][ T7611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.800662][ T7611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.067797][ T7611] team0: Port device team_slave_0 added [ 266.092262][ T7611] team0: Port device team_slave_1 added [ 266.286521][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.297945][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.352610][ T7611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.374913][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.389863][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.427186][ T5153] Bluetooth: hci5: command tx timeout [ 266.444443][ T7611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.705404][ T7611] hsr_slave_0: entered promiscuous mode [ 266.722412][ T7611] hsr_slave_1: entered promiscuous mode [ 266.737986][ T7611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.763284][ T7611] Cannot create hsr debugfs directory [ 268.477323][ T5153] Bluetooth: hci5: command tx timeout [ 270.567882][ T5153] Bluetooth: hci5: command tx timeout [ 272.637974][ T5153] Bluetooth: hci5: command tx timeout [ 273.285107][ T5153] Bluetooth: hci6: command 0x0406 tx timeout [ 286.857484][ T5153] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 286.866755][ T5153] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 286.880023][ T5153] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 286.890100][ T5153] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 286.899524][ T5153] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 287.680761][ T5847] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 287.690518][ T5847] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 287.699364][ T5847] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 287.709676][ T5847] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 287.728294][ T5847] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 287.915270][ T7623] chnl_net:caif_netlink_parms(): no params data found [ 288.484215][ T7623] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.507443][ T7623] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.514890][ T7623] bridge_slave_0: entered allmulticast mode [ 288.538371][ T7623] bridge_slave_0: entered promiscuous mode [ 288.564293][ T7623] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.583755][ T7623] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.605499][ T7623] bridge_slave_1: entered allmulticast mode [ 288.614489][ T7623] bridge_slave_1: entered promiscuous mode [ 288.969631][ T5847] Bluetooth: hci11: command tx timeout [ 288.979322][ T7623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.015513][ T7623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.295032][ T7623] team0: Port device team_slave_0 added [ 289.330717][ T7623] team0: Port device team_slave_1 added [ 289.467515][ T7631] chnl_net:caif_netlink_parms(): no params data found [ 289.622976][ T7623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.636917][ T7623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.692162][ T7623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.758414][ T5847] Bluetooth: hci12: command tx timeout [ 289.847123][ T7623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.854117][ T7623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.909868][ T7623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.378708][ T7631] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.385980][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.426583][ T7631] bridge_slave_0: entered allmulticast mode [ 290.444885][ T7631] bridge_slave_0: entered promiscuous mode [ 290.471251][ T7623] hsr_slave_0: entered promiscuous mode [ 290.505886][ T7623] hsr_slave_1: entered promiscuous mode [ 290.517949][ T7623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.525568][ T7623] Cannot create hsr debugfs directory [ 290.547783][ T7631] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.555019][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.572836][ T7631] bridge_slave_1: entered allmulticast mode [ 290.590781][ T7631] bridge_slave_1: entered promiscuous mode [ 290.871968][ T7631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.047690][ T5153] Bluetooth: hci11: command tx timeout [ 291.138022][ T7631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.579724][ T7631] team0: Port device team_slave_0 added [ 291.663868][ T7631] team0: Port device team_slave_1 added [ 291.847604][ T5844] Bluetooth: hci12: command tx timeout [ 291.941741][ T5839] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 291.969303][ T5839] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 291.978605][ T5839] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 291.987981][ T5839] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 291.996060][ T5839] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 292.168150][ T7631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.175163][ T7631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.225320][ T7631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.321009][ T7631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.344983][ T7631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.396054][ T7631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.773691][ T7631] hsr_slave_0: entered promiscuous mode [ 292.788390][ T7631] hsr_slave_1: entered promiscuous mode [ 292.807145][ T7631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.814762][ T7631] Cannot create hsr debugfs directory [ 293.128266][ T5839] Bluetooth: hci11: command tx timeout [ 293.760381][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 293.766472][ T5839] Bluetooth: hci7: command 0x0406 tx timeout [ 293.799806][ T7645] chnl_net:caif_netlink_parms(): no params data found [ 293.928472][ T5847] Bluetooth: hci12: command tx timeout [ 294.087846][ T5847] Bluetooth: hci13: command tx timeout [ 294.211473][ T7645] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.234567][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.253915][ T7645] bridge_slave_0: entered allmulticast mode [ 294.275428][ T7645] bridge_slave_0: entered promiscuous mode [ 294.311177][ T7645] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.338755][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.346386][ T7645] bridge_slave_1: entered allmulticast mode [ 294.372262][ T7645] bridge_slave_1: entered promiscuous mode [ 294.603802][ T7645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.642338][ T7645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.999310][ T7645] team0: Port device team_slave_0 added [ 295.020002][ T7645] team0: Port device team_slave_1 added [ 295.186122][ T7645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.204606][ T7645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.247237][ T5847] Bluetooth: hci11: command tx timeout [ 295.264733][ T7645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.306304][ T7645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.325530][ T7645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.370427][ T7645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.614950][ T7645] hsr_slave_0: entered promiscuous mode [ 295.648474][ T7645] hsr_slave_1: entered promiscuous mode [ 295.667411][ T7645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.675021][ T7645] Cannot create hsr debugfs directory [ 295.998052][ T5847] Bluetooth: hci12: command tx timeout [ 296.157575][ T5847] Bluetooth: hci13: command tx timeout [ 298.247816][ T5847] Bluetooth: hci13: command tx timeout [ 300.317424][ T5847] Bluetooth: hci13: command tx timeout [ 308.196425][ T5153] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 308.206665][ T5153] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 308.222419][ T5153] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 308.234364][ T5153] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 308.253785][ T5153] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 308.905374][ T7662] chnl_net:caif_netlink_parms(): no params data found [ 310.317818][ T5153] Bluetooth: hci14: command tx timeout [ 312.418346][ T5847] Bluetooth: hci14: command tx timeout [ 312.536754][ T7662] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.557652][ T7662] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.565030][ T7662] bridge_slave_0: entered allmulticast mode [ 312.589475][ T7662] bridge_slave_0: entered promiscuous mode [ 312.609294][ T7662] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.629490][ T7662] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.658276][ T7662] bridge_slave_1: entered allmulticast mode [ 312.677568][ T7662] bridge_slave_1: entered promiscuous mode [ 312.855735][ T7662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.899599][ T7662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.136555][ T7662] team0: Port device team_slave_0 added [ 313.162717][ T7662] team0: Port device team_slave_1 added [ 313.369457][ T7662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.376460][ T7662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.425070][ T7662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.590387][ T7662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.611481][ T7662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.663722][ T7662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.938439][ T7662] hsr_slave_0: entered promiscuous mode [ 313.958198][ T7662] hsr_slave_1: entered promiscuous mode [ 313.975423][ T7662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.990563][ T7662] Cannot create hsr debugfs directory [ 314.238581][ T5847] Bluetooth: hci8: command 0x0406 tx timeout [ 314.488178][ T5153] Bluetooth: hci14: command tx timeout [ 316.557582][ T5153] Bluetooth: hci14: command tx timeout [ 317.293126][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.299915][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.288205][ T5847] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 325.304292][ T5847] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 325.324805][ T5847] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 325.333265][ T5847] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 325.345386][ T5847] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 326.023403][ T7675] chnl_net:caif_netlink_parms(): no params data found [ 327.431049][ T7312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.443345][ T5153] Bluetooth: hci15: command tx timeout [ 329.527653][ T5847] Bluetooth: hci15: command tx timeout [ 329.599594][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 330.244616][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.267393][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.274785][ T7675] bridge_slave_0: entered allmulticast mode [ 330.302724][ T7675] bridge_slave_0: entered promiscuous mode [ 330.328358][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.347129][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.354509][ T7675] bridge_slave_1: entered allmulticast mode [ 330.389878][ T7675] bridge_slave_1: entered promiscuous mode [ 330.590380][ T7675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.628520][ T7675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.861967][ T7675] team0: Port device team_slave_0 added [ 330.888469][ T7675] team0: Port device team_slave_1 added [ 331.215851][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.237461][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.304380][ T7675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.328718][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.335725][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.406415][ T7675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.604310][ T5153] Bluetooth: hci15: command tx timeout [ 331.689342][ T7675] hsr_slave_0: entered promiscuous mode [ 331.719847][ T7675] hsr_slave_1: entered promiscuous mode [ 331.737447][ T7675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.746121][ T7675] Cannot create hsr debugfs directory [ 333.677568][ T5153] Bluetooth: hci15: command tx timeout [ 347.965746][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.021982][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.038581][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.050149][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.059387][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.199420][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.219817][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.229658][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.239708][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.260923][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.105217][ T7687] chnl_net:caif_netlink_parms(): no params data found [ 349.420337][ T7689] chnl_net:caif_netlink_parms(): no params data found [ 349.723785][ T7687] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.737078][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.744463][ T7687] bridge_slave_0: entered allmulticast mode [ 349.779285][ T7687] bridge_slave_0: entered promiscuous mode [ 349.814097][ T7687] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.827239][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.834646][ T7687] bridge_slave_1: entered allmulticast mode [ 349.873597][ T7687] bridge_slave_1: entered promiscuous mode [ 350.100138][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 350.106305][ T5153] Bluetooth: hci9: command 0x0406 tx timeout [ 350.157338][ T5153] Bluetooth: hci2: command tx timeout [ 350.317172][ T5839] Bluetooth: hci3: command tx timeout [ 351.740084][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.777141][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.784529][ T7689] bridge_slave_0: entered allmulticast mode [ 351.830225][ T7689] bridge_slave_0: entered promiscuous mode [ 351.875813][ T7687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.930228][ T7687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.963069][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.979894][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.988598][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 352.001279][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 352.016686][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 352.077662][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.084858][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.114760][ T7689] bridge_slave_1: entered allmulticast mode [ 352.139152][ T7689] bridge_slave_1: entered promiscuous mode [ 352.237871][ T5839] Bluetooth: hci2: command tx timeout [ 352.397330][ T5839] Bluetooth: hci3: command tx timeout [ 352.469353][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.618389][ T7687] team0: Port device team_slave_0 added [ 352.672566][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.810334][ T7687] team0: Port device team_slave_1 added [ 353.353633][ T7689] team0: Port device team_slave_0 added [ 353.398303][ T7689] team0: Port device team_slave_1 added [ 353.405388][ T7687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.427136][ T7687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.497214][ T7687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.533103][ T7687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.547031][ T7687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.617379][ T7687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.050975][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.067077][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.117136][ T5847] Bluetooth: hci6: command tx timeout [ 354.155549][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.214049][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.241468][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.296739][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.321389][ T5847] Bluetooth: hci2: command tx timeout [ 354.477418][ T5847] Bluetooth: hci3: command tx timeout [ 354.548359][ T7687] hsr_slave_0: entered promiscuous mode [ 354.567751][ T7687] hsr_slave_1: entered promiscuous mode [ 354.586000][ T7687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.604943][ T7687] Cannot create hsr debugfs directory [ 354.939889][ T7689] hsr_slave_0: entered promiscuous mode [ 354.958068][ T7689] hsr_slave_1: entered promiscuous mode [ 354.967913][ T7689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.987081][ T7689] Cannot create hsr debugfs directory [ 355.206355][ T5847] Bluetooth: hci10: command 0x0406 tx timeout [ 356.028244][ T7704] chnl_net:caif_netlink_parms(): no params data found [ 356.157658][ T5839] Bluetooth: hci6: command tx timeout [ 356.398274][ T5839] Bluetooth: hci2: command tx timeout [ 356.567255][ T5839] Bluetooth: hci3: command tx timeout [ 356.671162][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.696311][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.705221][ T7704] bridge_slave_0: entered allmulticast mode [ 356.726744][ T7704] bridge_slave_0: entered promiscuous mode [ 356.759178][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.780278][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.792072][ T7704] bridge_slave_1: entered allmulticast mode [ 356.809262][ T7704] bridge_slave_1: entered promiscuous mode [ 356.974197][ T31] INFO: task syz-executor:7434 blocked for more than 143 seconds. [ 356.989788][ T31] Not tainted 6.16.0-rc3-syzkaller #0 [ 356.995735][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 357.027137][ T31] task:syz-executor state:D stack:22440 pid:7434 tgid:7434 ppid:1 task_flags:0x400140 flags:0x00004004 [ 357.094455][ T31] Call Trace: [ 357.098495][ T31] [ 357.101461][ T31] __schedule+0x16f5/0x4d00 [ 357.106021][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 357.247173][ T31] ? __lock_acquire+0xab9/0xd20 [ 357.252108][ T31] ? schedule+0x165/0x360 [ 357.256480][ T31] ? __pfx___schedule+0x10/0x10 [ 357.317057][ T31] ? schedule+0x91/0x360 [ 357.321554][ T31] schedule+0x165/0x360 [ 357.325828][ T31] schedule_preempt_disabled+0x13/0x30 [ 357.369271][ T31] __mutex_lock+0x724/0xe80 [ 357.373858][ T31] ? __mutex_lock+0x51b/0xe80 [ 357.387059][ T31] ? del_device_store+0xd1/0x360 [ 357.392124][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 357.418160][ T31] ? __lock_acquire+0xab9/0xd20 [ 357.423087][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 357.438229][ T31] del_device_store+0xd1/0x360 [ 357.443068][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 357.471352][ T31] ? __pfx_del_device_store+0x10/0x10 [ 357.476800][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 357.497117][ T31] ? sysfs_kf_write+0x166/0x260 [ 357.502054][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 357.517611][ T31] kernfs_fop_write_iter+0x375/0x4f0 [ 357.523074][ T31] vfs_write+0x548/0xa90 [ 357.539773][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 357.545648][ T31] ? __pfx_vfs_write+0x10/0x10 [ 357.567122][ T31] ? do_sys_openat2+0x154/0x1c0 [ 357.587846][ T31] ? kmem_cache_free+0x18f/0x400 [ 357.592866][ T31] ksys_write+0x145/0x250 [ 357.607391][ T31] ? __pfx_ksys_write+0x10/0x10 [ 357.612388][ T31] ? rcu_is_watching+0x15/0xb0 [ 357.634118][ T31] ? do_syscall_64+0xbe/0x3b0 [ 357.647217][ T31] do_syscall_64+0xfa/0x3b0 [ 357.651780][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.675879][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.697445][ T31] ? clear_bhb_loop+0x60/0xb0 [ 357.702210][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.716986][ T31] RIP: 0033:0x7f024918d3df [ 357.721482][ T31] RSP: 002b:00007f02494df220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 357.748192][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f024918d3df [ 357.756230][ T31] RDX: 0000000000000001 RSI: 00007f02494df270 RDI: 0000000000000005 [ 357.797127][ T31] RBP: 00007f0249211d8d R08: 0000000000000000 R09: 00007f02494df077 [ 357.805167][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 357.827744][ T31] R13: 00007f02494df270 R14: 00007f0249ee4620 R15: 0000000000000003 [ 357.835806][ T31] [ 357.859327][ T31] [ 357.859327][ T31] Showing all locks held in the system: [ 357.874406][ T31] 3 locks held by kworker/u8:0/12: [ 357.913701][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 357.971963][ T31] #1: ffffc90000117bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.017204][ T31] #2: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.037148][ T31] 1 lock held by khungtaskd/31: [ 358.042080][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 358.067944][ T31] 3 locks held by kworker/1:1/43: [ 358.073037][ T31] 2 locks held by kworker/1:2/55: [ 358.097109][ T31] 1 lock held by kworker/u8:8/2958: [ 358.102579][ T31] 2 locks held by getty/5600: [ 358.127609][ T31] #0: ffff88803569a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 358.147319][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 358.170961][ T31] 2 locks held by kworker/1:3/5910: [ 358.176321][ T31] 3 locks held by kworker/1:5/5920: [ 358.207252][ T31] 2 locks held by kworker/1:6/5921: [ 358.212514][ T31] 3 locks held by kworker/0:7/5950: [ 358.228843][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.247290][ T5839] Bluetooth: hci6: command tx timeout [ 358.291437][ T31] #1: ffffc90004e1fbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.338924][ T31] #2: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.358111][ T31] 1 lock held by syz.5.509/7061: [ 358.363166][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.396612][ T31] 2 locks held by kworker/1:7/7177: [ 358.417136][ T31] 1 lock held by syz.2.554/7179: [ 358.422132][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.449064][ T31] 3 locks held by kworker/1:8/7211: [ 358.454410][ T31] 2 locks held by kworker/1:9/7226: [ 358.477426][ T31] 1 lock held by syz.6.601/7303: [ 358.483418][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.517771][ T31] 7 locks held by syz-executor/7312: [ 358.524358][ T31] #0: ffff888034c20428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 358.539478][ T31] #1: ffff88804cf76888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 358.567182][ T31] #2: ffff8880276ff878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 358.587069][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 358.628747][ T31] #4: ffff8880590140e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 358.646990][ T31] #5: ffff888059015250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 358.677264][ T31] #6: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.700073][ T31] 4 locks held by syz-executor/7434: [ 358.705426][ T31] #0: ffff888034c20428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 358.733908][ T31] #1: ffff8880534e6888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 358.757543][ T31] #2: ffff8880276ff878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 358.777164][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 358.808305][ T31] 3 locks held by kworker/1:10/7478: [ 358.813642][ T31] 1 lock held by syz.9.682/7508: [ 358.835837][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.859039][ T31] 1 lock held by syz.8.685/7515: [ 358.864036][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.899150][ T31] 1 lock held by syz.7.703/7553: [ 358.917014][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.936943][ T31] 4 locks held by syz-executor/7559: [ 358.942292][ T31] #0: ffff888034c20428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 358.971866][ T31] #1: ffff888056ec5088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 358.998163][ T31] #2: ffff8880276ff878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 359.027885][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 359.057351][ T31] 4 locks held by syz-executor/7566: [ 359.062696][ T31] #0: ffff888034c20428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 359.097257][ T31] #1: ffff888042af5c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 359.127415][ T31] #2: ffff8880276ff878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 359.147317][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 359.175234][ T31] 4 locks held by syz-executor/7580: [ 359.183486][ T31] #0: ffff888034c20428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 359.218955][ T31] #1: ffff88803748dc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 359.247242][ T31] #2: ffff8880276ff878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 359.267079][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 359.287009][ T31] 2 locks held by kworker/1:11/7581: [ 359.292346][ T31] 4 locks held by syz-executor/7598: [ 359.314541][ T31] #0: ffff888034c20428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 359.339320][ T31] #1: ffff888037d0f488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 359.358486][ T31] #2: ffff8880276ff878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 359.387285][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 359.409901][ T31] 4 locks held by syz-executor/7611: [ 359.428260][ T31] #0: ffff888034c20428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 359.451886][ T31] #1: ffff8880625b4088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 359.477220][ T31] #2: ffff8880276ff878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 359.496999][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 359.525511][ T31] 2 locks held by kworker/1:12/7619: [ 359.548172][ T31] 4 locks held by syz-executor/7623: [ 359.553517][ T31] #0: ffff888034c20428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 359.577024][ T31] #1: ffff888086fca888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 359.597323][ T31] #2: ffff8880276ff878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 359.621718][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 359.650903][ T31] 4 locks held by syz-executor/7631: [ 359.656243][ T31] #0: ffff888034c20428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 359.687264][ T31] #1: ffff888087b30888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 359.708594][ T31] #2: ffff8880276ff878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 359.740083][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 359.766909][ T31] 4 locks held by syz-executor/7645: [ 359.772258][ T31] #0: ffff888034c20428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 359.797235][ T31] #1: ffff88805f39d488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 359.817321][ T31] #2: ffff8880276ff878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 359.858706][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 359.877114][ T31] 4 locks held by syz-executor/7662: [ 359.882457][ T31] #0: ffff888034c20428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 359.917409][ T31] #1: ffff888092f05c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 359.947142][ T31] #2: ffff8880276ff878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 359.969611][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 359.999133][ T31] 4 locks held by syz-executor/7675: [ 360.004476][ T31] #0: ffff888034c20428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 360.037318][ T31] #1: ffff888096376c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 360.057201][ T31] #2: ffff8880276ff878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 360.088888][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 360.118763][ T31] 4 locks held by syz-executor/7687: [ 360.124101][ T31] #0: ffff888034c20428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 360.156772][ T31] #1: ffff888090047888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 360.187211][ T31] #2: ffff8880276ff878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 360.218313][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 360.248148][ T31] 4 locks held by syz-executor/7689: [ 360.253497][ T31] #0: ffff888034c20428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 360.277207][ T31] #1: ffff88804ead6888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 360.305497][ T31] #2: ffff8880276ff878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 360.329312][ T5839] Bluetooth: hci6: command tx timeout [ 360.341330][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 360.367117][ T31] 1 lock held by syz-executor/7704: [ 360.372372][ T31] #0: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 360.400608][ T31] [ 360.403075][ T31] ============================================= [ 360.403075][ T31] [ 360.457118][ T31] NMI backtrace for cpu 0 [ 360.457148][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 360.457169][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.457179][ T31] Call Trace: [ 360.457186][ T31] [ 360.457193][ T31] dump_stack_lvl+0x189/0x250 [ 360.457220][ T31] ? __wake_up_klogd+0xd9/0x110 [ 360.457241][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.457264][ T31] ? __pfx__printk+0x10/0x10 [ 360.457294][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 360.457318][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 360.457334][ T31] ? _printk+0xcf/0x120 [ 360.457355][ T31] ? __pfx__printk+0x10/0x10 [ 360.457375][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 360.457398][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 360.457421][ T31] watchdog+0xfee/0x1030 [ 360.457444][ T31] ? watchdog+0x1de/0x1030 [ 360.457472][ T31] kthread+0x70e/0x8a0 [ 360.457493][ T31] ? __pfx_watchdog+0x10/0x10 [ 360.457513][ T31] ? __pfx_kthread+0x10/0x10 [ 360.457533][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.457554][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.457574][ T31] ? __pfx_kthread+0x10/0x10 [ 360.457593][ T31] ret_from_fork+0x3fc/0x770 [ 360.457617][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 360.457644][ T31] ? __switch_to_asm+0x39/0x70 [ 360.457659][ T31] ? __switch_to_asm+0x33/0x70 [ 360.457683][ T31] ? __pfx_kthread+0x10/0x10 [ 360.457700][ T31] ret_from_fork_asm+0x1a/0x30 [ 360.457729][ T31] [ 360.457736][ T31] Sending NMI from CPU 0 to CPUs 1: [ 360.619402][ C1] NMI backtrace for cpu 1 [ 360.619418][ C1] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 360.619438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.619449][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 360.619478][ C1] RIP: 0010:rcu_is_watching+0x70/0xb0 [ 360.619503][ C1] Code: c3 58 1f 9e 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d a9 dc f5 10 74 11 83 e0 04 c1 e8 02 5b <41> 5e 41 5f e9 c7 1e c2 09 cc e8 11 83 8c ff eb e8 48 c7 c7 c0 4b [ 360.619517][ C1] RSP: 0018:ffffc90000a07c18 EFLAGS: 00000202 [ 360.619530][ C1] RAX: 0000000000000001 RBX: ffffffff903d7b01 RCX: 475df98d31711700 [ 360.619541][ C1] RDX: ffffc90000a07d01 RSI: ffffffff8be28ba0 RDI: ffffffff8be28b60 [ 360.619553][ C1] RBP: dffffc0000000000 R08: ffffc90000a080d8 R09: 0000000000000000 [ 360.619564][ C1] R10: ffffc90000a07db8 R11: fffff52000140fb9 R12: ffffc90000a080e8 [ 360.619576][ C1] R13: ffffffff81728af5 R14: ffffffff8dba7c68 R15: dffffc0000000000 [ 360.619588][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 360.619601][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.619612][ C1] CR2: 00007faa858e56c0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 360.619626][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.619635][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.619645][ C1] Call Trace: [ 360.619651][ C1] [ 360.619657][ C1] ? unwind_next_frame+0xa5/0x2390 [ 360.619680][ C1] lock_release+0x4b/0x3e0 [ 360.619701][ C1] ? deref_stack_reg+0x19f/0x230 [ 360.619725][ C1] ? unwind_next_frame+0xa5/0x2390 [ 360.619746][ C1] unwind_next_frame+0x19a9/0x2390 [ 360.619770][ C1] ? unwind_next_frame+0xa5/0x2390 [ 360.619791][ C1] ? kasan_save_stack+0x3e/0x60 [ 360.619815][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.619833][ C1] arch_stack_walk+0x11c/0x150 [ 360.619850][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 360.619871][ C1] stack_trace_save+0x9c/0xe0 [ 360.619887][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 360.620024][ C1] ? __asan_memset+0x22/0x50 [ 360.620048][ C1] ? __pfx_ipv4_synproxy_hook+0x10/0x10 [ 360.620069][ C1] kasan_save_stack+0x3e/0x60 [ 360.620091][ C1] ? kasan_save_stack+0x3e/0x60 [ 360.620136][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 360.620156][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 360.620176][ C1] call_rcu+0x157/0x9c0 [ 360.620195][ C1] ? rcuref_put+0x1b7/0x210 [ 360.620214][ C1] ? __pfx_call_rcu+0x10/0x10 [ 360.620229][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 360.620249][ C1] ? dst_release+0x126/0x1b0 [ 360.620270][ C1] skb_release_head_state+0x71/0x250 [ 360.620290][ C1] consume_skb+0x60/0xf0 [ 360.620307][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 360.620331][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 360.620351][ C1] ? nf_conntrack_in+0xa24/0x1600 [ 360.620383][ C1] ? nf_ip_checksum+0x13c/0x510 [ 360.620403][ C1] nft_synproxy_do_eval+0x345/0x570 [ 360.620423][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 360.620445][ C1] ? worker_thread+0x8a0/0xda0 [ 360.620468][ C1] ? kthread+0x70e/0x8a0 [ 360.620486][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 360.620514][ C1] nft_do_chain+0x40c/0x1920 [ 360.620535][ C1] ? call_rcu+0x6ff/0x9c0 [ 360.620549][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.620575][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 360.620613][ C1] nft_do_chain_inet+0x25d/0x340 [ 360.620633][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 360.620654][ C1] ? ipt_do_table+0x2a3/0x1640 [ 360.620671][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 360.620692][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 360.620709][ C1] nf_hook_slow+0xc2/0x220 [ 360.620727][ C1] NF_HOOK+0x206/0x3a0 [ 360.620744][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 360.620762][ C1] ? NF_HOOK+0x9a/0x3a0 [ 360.620777][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 360.620791][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 360.620810][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 360.620828][ C1] ? skb_dst+0x4f/0xd0 [ 360.620844][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 360.620863][ C1] NF_HOOK+0x30c/0x3a0 [ 360.620880][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 360.620897][ C1] ? NF_HOOK+0x9a/0x3a0 [ 360.620919][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 360.620934][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 360.620952][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 360.620974][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 360.620990][ C1] __netif_receive_skb+0x143/0x380 [ 360.621017][ C1] ? process_backlog+0x2d5/0x14f0 [ 360.621034][ C1] process_backlog+0x60e/0x14f0 [ 360.621057][ C1] ? __pfx_process_backlog+0x10/0x10 [ 360.621072][ C1] ? invoke_rcu_core+0xb6/0x200 [ 360.621086][ C1] ? __pfx_invoke_rcu_core+0x10/0x10 [ 360.621104][ C1] __napi_poll+0xc4/0x480 [ 360.621118][ C1] ? net_rx_action+0x46d/0xe30 [ 360.621135][ C1] net_rx_action+0x707/0xe30 [ 360.621151][ C1] ? __lock_acquire+0xab9/0xd20 [ 360.621180][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 360.621198][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 360.621224][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 360.621254][ C1] handle_softirqs+0x286/0x870 [ 360.621280][ C1] ? do_softirq+0xec/0x180 [ 360.621304][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 360.621328][ C1] ? kernel_fpu_end+0xc8/0x120 [ 360.621347][ C1] do_softirq+0xec/0x180 [ 360.621368][ C1] [ 360.621374][ C1] [ 360.621380][ C1] ? __pfx_do_softirq+0x10/0x10 [ 360.621403][ C1] ? __local_bh_disable_ip+0xf1/0x190 [ 360.621424][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 360.621448][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 360.621469][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 360.621492][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 360.621516][ C1] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 360.621536][ C1] kernel_fpu_end+0xd2/0x120 [ 360.621552][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 360.621574][ C1] blake2s_compress+0x5f/0xd0 [ 360.621591][ C1] blake2s_final+0x116/0x260 [ 360.621618][ C1] message_ephemeral+0x17d/0x280 [ 360.621640][ C1] ? __pfx_message_ephemeral+0x10/0x10 [ 360.621672][ C1] ? __crypto_memneq+0x2fe/0x470 [ 360.621696][ C1] wg_noise_handshake_create_response+0x2ab/0x970 [ 360.621716][ C1] ? ktime_get_coarse_with_offset+0x83/0x140 [ 360.621737][ C1] ? __pfx_wg_noise_handshake_create_response+0x10/0x10 [ 360.621756][ C1] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 360.621773][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.621794][ C1] ? ktime_get_coarse_with_offset+0x83/0x140 [ 360.621817][ C1] ? __pfx___up_read+0x10/0x10 [ 360.621837][ C1] ? wg_noise_handshake_consume_initiation+0x7d0/0x900 [ 360.621867][ C1] ? __lock_acquire+0xab9/0xd20 [ 360.621893][ C1] ? ktime_get_coarse_with_offset+0x83/0x140 [ 360.621928][ C1] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 360.621945][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.621966][ C1] ? ktime_get_coarse_with_offset+0x83/0x140 [ 360.621983][ C1] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 360.621999][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 360.622022][ C1] ? wg_socket_endpoint_from_skb+0x28b/0x7a0 [ 360.622046][ C1] ? ktime_get_coarse_with_offset+0xfb/0x140 [ 360.622065][ C1] wg_packet_send_handshake_response+0xf6/0x2d0 [ 360.622089][ C1] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 360.622110][ C1] ? wg_socket_set_peer_endpoint_from_skb+0xc8/0x120 [ 360.622143][ C1] wg_packet_handshake_receive_worker+0x627/0xfb0 [ 360.622173][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 360.622196][ C1] ? register_lock_class+0x51/0x320 [ 360.622219][ C1] ? __lock_acquire+0xab9/0xd20 [ 360.622244][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 360.622269][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.622289][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 360.622311][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 360.622334][ C1] process_scheduled_works+0xae1/0x17b0 [ 360.622368][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 360.622398][ C1] worker_thread+0x8a0/0xda0 [ 360.622421][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 360.622446][ C1] ? __kthread_parkme+0x7b/0x200 [ 360.622465][ C1] kthread+0x70e/0x8a0 [ 360.622483][ C1] ? __pfx_worker_thread+0x10/0x10 [ 360.622505][ C1] ? __pfx_kthread+0x10/0x10 [ 360.622522][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.622542][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.622562][ C1] ? __pfx_kthread+0x10/0x10 [ 360.622578][ C1] ret_from_fork+0x3fc/0x770 [ 360.622600][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 360.622639][ C1] ? __switch_to_asm+0x39/0x70 [ 360.622654][ C1] ? __switch_to_asm+0x33/0x70 [ 360.622667][ C1] ? __pfx_kthread+0x10/0x10 [ 360.622684][ C1] ret_from_fork_asm+0x1a/0x30 [ 360.622707][ C1] [ 362.047262][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 362.054164][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 362.064252][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.074770][ T31] Call Trace: [ 362.078069][ T31] [ 362.081012][ T31] dump_stack_lvl+0x99/0x250 [ 362.085626][ T31] ? __asan_memcpy+0x40/0x70 [ 362.090234][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.095449][ T31] ? __pfx__printk+0x10/0x10 [ 362.100062][ T31] panic+0x2db/0x790 [ 362.103980][ T31] ? __pfx_panic+0x10/0x10 [ 362.108421][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 362.114253][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 362.119657][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 362.125848][ T31] watchdog+0x102d/0x1030 [ 362.130209][ T31] ? watchdog+0x1de/0x1030 [ 362.134654][ T31] kthread+0x70e/0x8a0 [ 362.138747][ T31] ? __pfx_watchdog+0x10/0x10 [ 362.143444][ T31] ? __pfx_kthread+0x10/0x10 [ 362.148054][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 362.153272][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.158486][ T31] ? __pfx_kthread+0x10/0x10 [ 362.163094][ T31] ret_from_fork+0x3fc/0x770 [ 362.167703][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 362.172845][ T31] ? __switch_to_asm+0x39/0x70 [ 362.177620][ T31] ? __switch_to_asm+0x33/0x70 [ 362.182400][ T31] ? __pfx_kthread+0x10/0x10 [ 362.187005][ T31] ret_from_fork_asm+0x1a/0x30 [ 362.191795][ T31] [ 362.195097][ T31] Kernel Offset: disabled [ 362.199421][ T31] Rebooting in 86400 seconds..