last executing test programs: 1m50.689550453s ago: executing program 0 (id=1547): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) 1m50.689251523s ago: executing program 0 (id=1548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1f8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x1c8, 0x8, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @private0, 0x157}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x6, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{}, {0x0, 0x2, @private1}, {0x0, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{}, {0x0, 0x2, @loopback}, {0x0, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}, {0x4}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 1m50.620083924s ago: executing program 0 (id=1549): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, &(0x7f0000000640)=[@rights={{0x10}}], 0x10}, 0x120) 1m50.24412186s ago: executing program 0 (id=1553): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r0, &(0x7f0000001fc0)=""/4086, 0xff6) 1m49.875243204s ago: executing program 0 (id=1556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x4, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x24000004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m49.50238779s ago: executing program 0 (id=1559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0x0, 0x0, 0x2000000, 0x6}, {0x0, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x8, 0x5, 0x110, 0x3}]}) 1m46.450997875s ago: executing program 1 (id=1568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x108, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd8, 0x2, {{0x4, 0x10000, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x9c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8001, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x6, 0x5, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x409, 0xa4, 0x3, 0xc11a, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfff, 0xd2b0, 0x80000000, 0x200}}, @NETEM_LOSS_GI={0x2c, 0x1, {0x2, 0x30, 0xffffffff, 0x200, 0xfffffffa}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ffd, 0x4, 0x3, 0x8, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x40000000, 0x1, 0x3, 0x2}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x108}}, 0x0) 1m46.377927757s ago: executing program 3 (id=1569): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) 1m46.117284494s ago: executing program 1 (id=1571): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 1m46.094922593s ago: executing program 3 (id=1572): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0xfffffffffffffebd}}, 0x1006) 1m45.779526522s ago: executing program 1 (id=1575): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000300)=',', 0x1}], 0x1) 1m45.500290659s ago: executing program 1 (id=1576): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0), 0x8) 1m45.2914181s ago: executing program 3 (id=1578): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)=@generic={&(0x7f00000018c0)='./file0\x00'}, 0x14) 1m45.18200364s ago: executing program 1 (id=1579): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e23, 0x1, @private1, 0x80000000}], 0x2c) 1m44.945561183s ago: executing program 3 (id=1581): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000001b00)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 1m44.904687998s ago: executing program 1 (id=1582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000020000040"]) 1m43.985243773s ago: executing program 3 (id=1585): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/197, 0xc5}], 0x1, 0x0, 0x0) 1m42.724500364s ago: executing program 4 (id=1589): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x17, @time={0x65757100, 0x1000000}}) 1m42.406674416s ago: executing program 4 (id=1590): r0 = syz_open_dev$swradio(&(0x7f0000000480), 0x1, 0x2) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/186, 0xba}], 0x1) r1 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r1, 0x0, 0x0, 0x5) 1m42.332622588s ago: executing program 3 (id=1591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) 1m42.161644595s ago: executing program 4 (id=1592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 1m42.020297681s ago: executing program 4 (id=1593): r0 = syz_io_uring_setup(0x5284, &(0x7f0000000200)={0x0, 0x3416, 0x13100, 0x2, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 1m41.879103298s ago: executing program 4 (id=1594): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="228292", 0xfff6}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000080)={0x4, 0x2, 'client0\x00', 0x80000002, "dd2b197d497d45b4", "b733f0b7bb7bdb28e0055276c60a9a6e492d3d0b0d3dbae5e8a359b92facf7e7", 0x6, 0x9}) 1m41.705313421s ago: executing program 4 (id=1595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x59a35420, 0x20003, 0xfffffff9, 0x0, [{0x0, 0xa}, {}, {0x7f, 0x0, 0x7}, {0x0, 0x35, 0x1}, {0x34, 0x6}, {0x0, 0x0, 0x9, '\x00', 0xfc}, {0x0, 0xfe}, {0x2, 0x6}, {}, {0x73, 0x1, 0x2}, {0x0, 0x0, 0xfe}, {}, {0x0, 0x8}, {}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x1, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x1}, {0x3, 0x5, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x9}]}}) 1m34.221788022s ago: executing program 32 (id=1559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0x0, 0x0, 0x2000000, 0x6}, {0x0, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x8, 0x5, 0x110, 0x3}]}) 1m30.313582852s ago: executing program 2 (id=1602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd, {0xfffffffd, 0x1}}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x6c}}, 0x0) 1m30.052476411s ago: executing program 2 (id=1603): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a99000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff8000/0x2000)=nil) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1m29.91614992s ago: executing program 2 (id=1604): syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x2cab, 0x0, 0x2, 0x1f7}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x82, &(0x7f00000000c0)={0x7, 0xfff, 0x8003, 0x0, 0x3, 0xb3, 0x7, 0x3}, &(0x7f0000000180)=0x20) 1m29.800688584s ago: executing program 33 (id=1582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000020000040"]) 1m29.609201132s ago: executing program 2 (id=1606): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000064c0)='./file0\x00', 0x0, 0x800, 0x0) 1m28.495954059s ago: executing program 2 (id=1607): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r0, r1, 0x0, 0x8000fb00) 1m28.052268505s ago: executing program 2 (id=1608): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x48, 0x7, 0xfe, 0xffff}, {0x6, 0x0, 0xc}]}) write$ppp(r0, &(0x7f00000003c0)="138f", 0x2) 1m27.165882266s ago: executing program 34 (id=1591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) 1m26.14329766s ago: executing program 35 (id=1595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x59a35420, 0x20003, 0xfffffff9, 0x0, [{0x0, 0xa}, {}, {0x7f, 0x0, 0x7}, {0x0, 0x35, 0x1}, {0x34, 0x6}, {0x0, 0x0, 0x9, '\x00', 0xfc}, {0x0, 0xfe}, {0x2, 0x6}, {}, {0x73, 0x1, 0x2}, {0x0, 0x0, 0xfe}, {}, {0x0, 0x8}, {}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x1, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x1}, {0x3, 0x5, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x9}]}}) 1m15.724905476s ago: executing program 5 (id=1599): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x5b76f000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 1m13.430328873s ago: executing program 5 (id=1611): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x600}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000ac0)="c0", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x895c, @loopback, 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000180)="14", 0x1}], 0x1}}], 0x2, 0x4000004) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480), 0x8) 1m12.862228054s ago: executing program 5 (id=1612): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000240)={0xa, 0x4e22, 0x3, @remote, 0x1}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)="ce", 0x1}], 0x1}, 0x44044) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000140)=@assoc_value, &(0x7f0000000300)=0x8) 1m12.764762123s ago: executing program 36 (id=1608): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x48, 0x7, 0xfe, 0xffff}, {0x6, 0x0, 0xc}]}) write$ppp(r0, &(0x7f00000003c0)="138f", 0x2) 1m12.319963189s ago: executing program 5 (id=1614): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0xecb6bcbdeffb5fd9, 0x17, 0x50, {0x50, 0x3b, "fc8c51a84c6fab6a95b70dac52e6631d6ee1d0296234ebdf023d2c738d4e39af11dcc3a9dc84ab97594baf578b849875b152fedf8eff0884f435fc06a41c6c3c75a67bdce35b76c28f07aafdd710"}}, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) 1m9.625214277s ago: executing program 5 (id=1615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS(r2, 0xc048aeca, &(0x7f0000000200)) 1m8.776101163s ago: executing program 7 (id=1609): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m8.346074574s ago: executing program 8 (id=1610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000f9054d564b"]) 1m8.235100797s ago: executing program 7 (id=1617): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4a20, 0x6, @empty, 0x4}}, 0x0, 0x5, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80000000}}, 0x0, 0x0, 0x300, 0x0, 0xcd, 0x7fffffff}, 0x9c) 1m7.495067671s ago: executing program 7 (id=1619): r0 = syz_io_uring_setup(0x1249, &(0x7f00000004c0)={0x0, 0x2170, 0x400, 0x1, 0x300}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m6.380177202s ago: executing program 7 (id=1620): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 1m5.720593906s ago: executing program 7 (id=1621): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10, 0x581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0) 1m5.252583754s ago: executing program 7 (id=1622): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000340)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000002540)=0x1) 59.950342598s ago: executing program 6 (id=1632): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 58.936672465s ago: executing program 6 (id=1633): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x40000) fanotify_mark(r1, 0x1, 0x48000003, r0, 0x0) vmsplice(r0, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) 54.638281906s ago: executing program 37 (id=1615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS(r2, 0xc048aeca, &(0x7f0000000200)) 53.035079788s ago: executing program 38 (id=1610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000f9054d564b"]) 50.082140404s ago: executing program 39 (id=1622): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000340)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000002540)=0x1) 49.58582545s ago: executing program 6 (id=1648): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffdc6, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10}]}}]}, 0xa4}}, 0x0) 48.496738955s ago: executing program 6 (id=1651): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lstat(0x0, 0x0) 45.606877886s ago: executing program 6 (id=1658): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4623, 0xfffffffd, @local, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000001780)="9c435a7de4c0ff7c4563074aa91bee4f6e90607e890a47d0be6a17fdc0c6a1796db4fe7dd11538645e1058e812536c926690b1b24c7efd5c00ecfb64781df49eab06e8d9c153ad38a9b439a4db81dc1e36f1e6f032183ebd46c2fd9827fc48c8cdb4f07e93b48410a25fdeded74f2bc99f878a19012e6b7b623763f2b4a717576faa2825abf02e2090bb34084a971ec99e558675a54179a2c8eec2cde79ad3c2f6dd3131a464f396a63c07a34b7e7016b5af1b7d7417c22a72fc036ac41b0ade14bf538417a6", 0xc6}], 0x1}}], 0x1, 0x4001c00) 45.188756728s ago: executing program 6 (id=1659): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x68040200) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) 30.072043563s ago: executing program 40 (id=1659): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x68040200) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) 17.959906929s ago: executing program 9 (id=1704): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.743101238s ago: executing program 9 (id=1705): r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x1d0}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) 17.043675193s ago: executing program 9 (id=1706): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 16.174563029s ago: executing program 9 (id=1707): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xffffffdffffffff8]}}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 15.68693767s ago: executing program 9 (id=1708): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000181003700080045"], 0x0) 15.437435124s ago: executing program 9 (id=1709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000000c0)={0x2, 0x0, [{0xc3b8, 0x0, 0x7}, {0x0, 0x0, 0x2}]}) 0s ago: executing program 41 (id=1709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000000c0)={0x2, 0x0, [{0xc3b8, 0x0, 0x7}, {0x0, 0x0, 0x2}]}) kernel console output (not intermixed with test programs): an unexpected descriptor of type 0x2, skipping [ 165.463538][ T5895] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 165.474456][ T5895] usb 5-1: config 220 has no interface number 2 [ 165.484236][ T5895] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 165.499122][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.505393][ T5895] usb 5-1: config 220 interface 0 has no altsetting 0 [ 165.506386][ T8052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.526637][ T5895] usb 5-1: config 220 interface 76 has no altsetting 0 [ 165.541770][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.549772][ T8052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.686949][ T5895] usb 5-1: config 220 interface 1 has no altsetting 0 [ 165.698299][ T5895] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 165.724173][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.732243][ T5895] usb 5-1: Product: syz [ 165.760699][ T5895] usb 5-1: Manufacturer: syz [ 165.770899][ T5895] usb 5-1: SerialNumber: syz [ 166.033455][ T5895] usb 5-1: selecting invalid altsetting 0 [ 166.076335][ T5895] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 166.118667][ T5895] usb 5-1: No valid video chain found. [ 166.182426][ T5895] usb 5-1: selecting invalid altsetting 0 [ 166.190770][ T5895] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 166.204679][ T5895] usb 5-1: USB disconnect, device number 17 [ 166.214244][ T5902] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 166.393874][ T5902] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.411104][ T5902] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 166.436749][ T5902] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.451766][ T5902] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 166.470352][ T5902] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 166.506370][ T5902] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.524669][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.552803][ T5902] usb 3-1: Product: syz [ 166.564217][ T5902] usb 3-1: Manufacturer: syz [ 166.592151][ T5902] cdc_wdm 3-1:1.0: skipping garbage [ 166.599668][ T5902] cdc_wdm 3-1:1.0: skipping garbage [ 166.617662][ T5902] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 166.633972][ T5902] cdc_wdm 3-1:1.0: Unknown control protocol [ 166.825686][ T92] usb 3-1: USB disconnect, device number 11 [ 167.156729][ T8105] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 167.163513][ T8105] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.196899][ T8105] vhci_hcd vhci_hcd.0: Device attached [ 167.205748][ T8109] vhci_hcd: connection closed [ 167.215266][ T1170] vhci_hcd: stop threads [ 167.225319][ T1170] vhci_hcd: release socket [ 167.234019][ T1170] vhci_hcd: disconnect device [ 167.376809][ T30] audit: type=1326 audit(1750627531.464:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe57f8e929 code=0x7ffc0000 [ 167.429697][ T30] audit: type=1326 audit(1750627531.464:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe57f8e929 code=0x7ffc0000 [ 167.503640][ T30] audit: type=1326 audit(1750627531.494:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efe57f8e929 code=0x7ffc0000 [ 167.579700][ T30] audit: type=1326 audit(1750627531.494:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe57f8e929 code=0x7ffc0000 [ 167.624700][ T30] audit: type=1326 audit(1750627531.494:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.3.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe57f8e929 code=0x7ffc0000 [ 168.406669][ T5902] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 168.586621][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 168.621720][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 168.647531][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 168.690246][ T5902] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 168.701789][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.722855][ T5902] usb 4-1: Product: syz [ 168.730483][ T5902] usb 4-1: Manufacturer: syz [ 168.739827][ T5902] usb 4-1: SerialNumber: syz [ 168.765434][ T5902] usb 4-1: config 0 descriptor?? [ 168.771366][ T8144] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 168.785315][ T8144] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 168.807246][ T5902] usb 4-1: ucan: probing device on interface #0 [ 168.915562][ T981] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 169.087718][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.101991][ T981] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 169.114841][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.129754][ T981] usb 2-1: config 0 descriptor?? [ 169.213777][ T5902] usb 4-1: ucan: device reported invalid device info [ 169.230367][ T5902] usb 4-1: ucan: probe failed; try to update the device firmware [ 169.441720][ T5829] usb 4-1: USB disconnect, device number 11 [ 169.571494][ T981] logitech 0003:046D:C50C.0020: unbalanced collection at end of report description [ 169.581967][ T981] logitech 0003:046D:C50C.0020: parse failed [ 169.592922][ T981] logitech 0003:046D:C50C.0020: probe with driver logitech failed with error -22 [ 169.770829][ T5829] usb 2-1: USB disconnect, device number 13 [ 170.096368][ T30] audit: type=1800 audit(1750627534.174:29): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.976" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 170.116692][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.149307][ T8207] program syz.4.977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.794837][ T5922] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 170.969524][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.984273][ T92] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 171.011811][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.032840][ T5922] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 171.071653][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.095110][ T5922] usb 4-1: config 0 descriptor?? [ 171.144262][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 171.147377][ T92] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.147407][ T92] usb 2-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.147457][ T92] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.147482][ T92] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 171.147501][ T92] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 171.147525][ T92] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.147558][ T92] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 171.147604][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.151294][ T92] usb 2-1: config 0 descriptor?? [ 171.518821][ T5922] elo 0003:04E7:0030.0021: item fetching failed at offset 5/7 [ 171.553725][ T5922] elo 0003:04E7:0030.0021: parse failed [ 171.571482][ T5922] elo 0003:04E7:0030.0021: probe with driver elo failed with error -22 [ 171.593189][ T92] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 171.619177][ T92] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 171.639126][ T92] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 171.660395][ T8258] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 171.661364][ T8257] IPVS: stopping master sync thread 8258 ... [ 171.684215][ T92] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 171.702424][ T92] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 171.732869][ T5895] usb 4-1: USB disconnect, device number 12 [ 171.743820][ T92] hid-thrustmaster 0003:044F:B65D.0022: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 171.761597][ T92] hid-thrustmaster 0003:044F:B65D.0022: setup data couldn't be sent [ 171.777868][ C1] hid-thrustmaster 0003:044F:B65D.0022: URB to get model id failed with error -71 [ 171.812495][ T92] usb 2-1: USB disconnect, device number 14 [ 171.949465][ T8261] fido_id[8261]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 172.527758][ T8289] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 172.527758][ T8289] The task syz.3.1010 (8289) triggered the difference, watch for misbehavior. [ 173.202642][ T8313] x_tables: ip_tables: udp match: only valid for protocol 17 [ 174.584175][ T5922] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 174.661809][ T30] audit: type=1326 audit(1750627538.744:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b52b8e929 code=0x7ffc0000 [ 174.684072][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.713865][ T30] audit: type=1326 audit(1750627538.744:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3b52b8e929 code=0x7ffc0000 [ 174.736079][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.784174][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 174.799605][ T5922] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 174.814214][ T5922] usb 4-1: config 0 has no interface number 0 [ 174.828392][ T30] audit: type=1326 audit(1750627538.744:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b52b8e929 code=0x7ffc0000 [ 174.850584][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.865607][ T5922] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 174.887427][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.910231][ T5922] usb 4-1: Product: syz [ 174.924432][ T30] audit: type=1326 audit(1750627538.744:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b52b8e929 code=0x7ffc0000 [ 174.950525][ T5922] usb 4-1: Manufacturer: syz [ 174.963147][ T5922] usb 4-1: SerialNumber: syz [ 174.984383][ T5922] usb 4-1: config 0 descriptor?? [ 175.004876][ T5922] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 175.042474][ T30] audit: type=1326 audit(1750627538.744:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f3b52b8e929 code=0x7ffc0000 [ 175.078675][ T30] audit: type=1326 audit(1750627538.744:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b52b8e929 code=0x7ffc0000 [ 175.101180][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.137436][ T30] audit: type=1326 audit(1750627538.744:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b52b8e929 code=0x7ffc0000 [ 175.222230][ T5922] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 175.275303][ T5922] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 175.674486][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 175.689660][ T5829] usb 4-1: USB disconnect, device number 13 [ 175.715147][ T5829] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 175.763513][ T5829] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 175.784504][ T5895] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 175.807027][ T5829] quatech2 4-1:0.51: device disconnected [ 175.976359][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 176.001023][ T5895] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 176.028288][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 176.048782][ T5895] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 176.074116][ T5895] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 176.101286][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.130762][ T5895] usb 1-1: config 0 descriptor?? [ 176.352147][ T5895] hdpvr 1-1:0.0: firmware version 0x69 dated Ì«SL’Ù¸Öi:¸hÏúŽ·Ý¤Dšjñu°íÿ7~½Ô?beÓlOˆz¬ [ 176.374184][ T5895] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 176.464239][ T978] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 176.636591][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.657721][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.681303][ T978] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 176.711016][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.732352][ T978] usb 3-1: config 0 descriptor?? [ 176.818295][ T5895] hdpvr 1-1:0.0: Could not setup controls [ 176.834904][ T5895] hdpvr 1-1:0.0: registering videodev failed [ 176.859877][ T5895] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 176.888862][ T5895] usb 1-1: USB disconnect, device number 12 [ 177.103287][ T8438] futex_wake_op: syz.4.1082 tries to shift op by 32; fix this program [ 177.158894][ T978] arvo 0003:1E7D:30D4.0023: item fetching failed at offset 5/7 [ 177.175671][ T978] arvo 0003:1E7D:30D4.0023: parse failed [ 177.191850][ T978] arvo 0003:1E7D:30D4.0023: probe with driver arvo failed with error -22 [ 177.292436][ T8442] netlink: 'syz.4.1084': attribute type 2 has an invalid length. [ 177.396666][ T978] usb 3-1: USB disconnect, device number 12 [ 177.857040][ T8466] netlink: 'syz.3.1095': attribute type 4 has an invalid length. [ 177.857066][ T8466] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1095'. [ 178.064155][ T5829] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 178.235964][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.254902][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.306189][ T8480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1103'. [ 178.310566][ T5829] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 178.350623][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.381834][ T5829] usb 2-1: config 0 descriptor?? [ 178.662669][ T8497] vivid-004: disconnect [ 178.669378][ T8495] vivid-004: reconnect [ 178.745250][ T5922] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 178.814150][ T981] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 178.827101][ T5829] hid (null): report_id 1688554005 is invalid [ 178.840865][ T5829] megaworld 0003:07B5:0312.0024: report_id 1688554005 is invalid [ 178.870352][ T5829] megaworld 0003:07B5:0312.0024: item 0 4 1 8 parsing failed [ 178.885021][ T5829] megaworld 0003:07B5:0312.0024: parse failed [ 178.901407][ T5829] megaworld 0003:07B5:0312.0024: probe with driver megaworld failed with error -22 [ 178.927704][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.944354][ T5922] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 178.959593][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.974480][ T981] usb 1-1: Using ep0 maxpacket: 16 [ 178.978972][ T5922] usb 3-1: config 0 descriptor?? [ 178.983877][ T981] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.999857][ T981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 179.011492][ T981] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 179.025708][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.064259][ T981] usb 1-1: config 0 descriptor?? [ 179.075092][ T5829] usb 2-1: USB disconnect, device number 15 [ 179.371524][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1114'. [ 179.415565][ T5922] nintendo 0003:057E:200E.0025: unbalanced delimiter at end of report description [ 179.445312][ T5922] nintendo 0003:057E:200E.0025: HID parse failed [ 179.468046][ T5922] nintendo 0003:057E:200E.0025: probe - fail = -22 [ 179.481507][ T5922] nintendo 0003:057E:200E.0025: probe with driver nintendo failed with error -22 [ 179.502279][ T981] playstation 0003:054C:0BA0.0026: unknown main item tag 0x0 [ 179.521604][ T981] playstation 0003:054C:0BA0.0026: hidraw0: USB HID v7d.d9 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 179.637880][ T5895] usb 3-1: USB disconnect, device number 13 [ 179.697952][ T981] playstation 0003:054C:0BA0.0026: Failed to retrieve feature with reportID 18: -71 [ 179.719430][ T981] playstation 0003:054C:0BA0.0026: Failed to retrieve DualShock4 pairing info: -71 [ 179.762791][ T981] playstation 0003:054C:0BA0.0026: Failed to get MAC address from DualShock4 [ 179.778317][ T981] playstation 0003:054C:0BA0.0026: Failed to create dualshock4. [ 179.808172][ T981] playstation 0003:054C:0BA0.0026: probe with driver playstation failed with error -71 [ 179.838929][ T981] usb 1-1: USB disconnect, device number 13 [ 180.073281][ T8521] ucma_write: process 442 (syz.4.1121) changed security contexts after opening file descriptor, this is not allowed. [ 180.716519][ T981] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 180.894266][ T981] usb 1-1: Using ep0 maxpacket: 16 [ 180.937704][ T981] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.959425][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.014104][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 181.044703][ T981] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 181.063679][ T981] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.095099][ T981] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 181.144170][ T981] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 181.152233][ T981] usb 1-1: Manufacturer: syz [ 181.207582][ T981] usb 1-1: config 0 descriptor?? [ 181.249819][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1138'. [ 181.284846][ T5922] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 181.296547][ T8559] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1139'. [ 181.454446][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 181.471967][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.497376][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.528844][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 181.558112][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 181.571636][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.594720][ T981] rc_core: IR keymap rc-hauppauge not found [ 181.609002][ T5922] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 181.630248][ T981] Registered IR keymap rc-empty [ 181.644283][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 181.653969][ T5922] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 181.668167][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 181.694218][ T5922] usb 2-1: Manufacturer: syz [ 181.717963][ T981] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 181.720474][ T5922] usb 2-1: config 0 descriptor?? [ 181.749901][ T981] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 181.822199][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 181.895033][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 181.922784][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 181.954760][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 181.974308][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.014729][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.064989][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.134197][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.144219][ T5922] rc_core: IR keymap rc-hauppauge not found [ 182.158539][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.161644][ T5922] Registered IR keymap rc-empty [ 182.187763][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.204312][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.217410][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.237942][ T981] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 182.246772][ T5922] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 182.264156][ T981] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 182.288301][ T5922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input11 [ 182.292652][ T981] usb 1-1: USB disconnect, device number 14 [ 182.341147][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.374865][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.424316][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.455319][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.505540][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.537997][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.564288][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.604243][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.654675][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.655745][ T8602] loop8: detected capacity change from 0 to 7 [ 182.683409][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.692931][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 182.704291][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.713567][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 182.723076][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.732325][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 182.741060][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.750341][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 182.762405][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.764562][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.771605][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 182.775528][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.796054][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 182.796950][ T5922] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 182.817884][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.826427][ T5922] mceusb 2-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 182.827108][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 182.847371][ T5995] ldm_validate_partition_table(): Disk read failed. [ 182.858265][ T8606] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 182.884817][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.894079][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 182.906738][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.915985][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 182.927100][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.936395][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 182.958552][ T5922] usb 2-1: USB disconnect, device number 16 [ 182.966725][ T5995] Dev loop8: unable to read RDB block 0 [ 183.001078][ T5995] loop8: unable to read partition table [ 183.016187][ T5995] loop8: partition table beyond EOD, truncated [ 183.082036][ T8602] ldm_validate_partition_table(): Disk read failed. [ 183.084733][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'. [ 183.135246][ T8602] Dev loop8: unable to read RDB block 0 [ 183.137967][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'. [ 183.168180][ T8602] loop8: unable to read partition table [ 183.174764][ T8602] loop8: partition table beyond EOD, truncated [ 183.181351][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 183.181643][ T8602] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.937056][ T8642] netlink: 'syz.2.1176': attribute type 1 has an invalid length. [ 184.258235][ T8658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1184'. [ 184.264707][ T5922] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 184.317713][ T8658] vxcan5: entered promiscuous mode [ 184.437365][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 184.458794][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.489429][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.528800][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.577716][ T5922] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.597746][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.645623][ T5922] usb 2-1: config 0 descriptor?? [ 185.073215][ T5922] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 185.103197][ T5922] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 185.132218][ T5922] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 185.159250][ T5922] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 185.197953][ T5922] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 185.337110][ T5922] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0027/input/input12 [ 185.428920][ T5922] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 185.512642][ T5922] usb 2-1: USB disconnect, device number 17 [ 185.722831][ T8708] fido_id[8708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 186.084588][ T24] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 186.284292][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 186.314215][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 186.347358][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.369348][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.381562][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.405851][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.442877][ T24] usb 5-1: Product: syz [ 186.447554][ T24] usb 5-1: Manufacturer: syz [ 186.452198][ T24] usb 5-1: SerialNumber: syz [ 186.603715][ T8745] netlink: 'syz.3.1224': attribute type 11 has an invalid length. [ 186.749393][ T24] usb 5-1: 0:2 : does not exist [ 186.779850][ T24] usb 5-1: USB disconnect, device number 18 [ 186.829066][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.855076][ T5902] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 186.870533][ T8755] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1228'. [ 186.887502][ T8755] netlink: zone id is out of range [ 186.892714][ T8755] netlink: get zone limit has 8 unknown bytes [ 187.036155][ T5902] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 187.057802][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.069483][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.080243][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 187.101297][ T5902] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 187.111089][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.128497][ T5902] usb 2-1: config 0 descriptor?? [ 187.154522][ T5829] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 187.314661][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 187.335019][ T5829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.353791][ T8769] tipc: Started in network mode [ 187.378339][ T5829] usb 1-1: config 4 interface 0 has no altsetting 0 [ 187.380005][ T8769] tipc: Node identity 0000000000000000000000625f953d01, cluster identity 4711 [ 187.403955][ T8769] tipc: Enabling of bearer rejected, failed to enable media [ 187.428330][ T5829] usb 1-1: string descriptor 0 read error: -22 [ 187.441578][ T5829] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 187.487824][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.528385][ T5829] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 187.612688][ T5829] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 187.655827][ T5829] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 187.688119][ T5829] usb 1-1: media controller created [ 187.708754][ T5902] hid-picolcd 0003:04D8:C002.0028: No report with id 0x11 found [ 187.750321][ T8757] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 187.788673][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.824766][ T5902] usb 2-1: USB disconnect, device number 18 [ 187.881673][ T8782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.913639][ T5829] zl10353_read_register: readreg error (reg=127, ret==0) [ 188.087066][ T5829] usb 1-1: USB disconnect, device number 15 [ 188.277733][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 188.601875][ T8810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1254'. [ 188.771457][ T92] hid-generic 0000:0005:0009.0029: unknown main item tag 0x0 [ 188.817596][ T92] hid-generic 0000:0005:0009.0029: unknown main item tag 0x0 [ 188.837867][ T92] hid-generic 0000:0005:0009.0029: unknown main item tag 0x0 [ 188.895874][ T92] hid-generic 0000:0005:0009.0029: hidraw0: HID v0.02 Device [syz0] on syz1 [ 189.080872][ T8823] fido_id[8823]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 189.114944][ T8828] bridge0: entered promiscuous mode [ 189.156456][ T8828] bridge0: port 3(macvlan2) entered blocking state [ 189.181467][ T8828] bridge0: port 3(macvlan2) entered disabled state [ 189.197499][ T8828] macvlan2: entered allmulticast mode [ 189.209342][ T8828] bridge0: entered allmulticast mode [ 189.222970][ T8828] macvlan2: left allmulticast mode [ 189.261337][ T8828] bridge0: left allmulticast mode [ 189.278069][ T8828] bridge0: left promiscuous mode [ 189.864166][ T978] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 190.034587][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 190.061391][ T978] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.086709][ T978] usb 1-1: config 0 has no interface number 0 [ 190.098220][ T978] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 190.120093][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.141266][ T978] usb 1-1: Product: syz [ 190.165420][ T978] usb 1-1: Manufacturer: syz [ 190.171975][ T978] usb 1-1: SerialNumber: syz [ 190.194719][ T978] usb 1-1: config 0 descriptor?? [ 190.207579][ T978] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 190.251670][ T978] usb 1-1: selecting invalid altsetting 1 [ 190.262119][ T978] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 190.280459][ T978] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 190.301305][ T978] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 190.313684][ T978] usb 1-1: media controller created [ 190.400463][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.448590][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'. [ 190.501056][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 190.546913][ T8868] netlink: 'syz.1.1281': attribute type 14 has an invalid length. [ 190.568064][ T8868] netlink: 'syz.1.1281': attribute type 13 has an invalid length. [ 190.604348][ T92] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 190.784259][ T92] usb 4-1: Using ep0 maxpacket: 32 [ 190.796749][ T92] usb 4-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 190.826420][ T92] usb 4-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.843799][ T92] usb 4-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.857744][ T92] usb 4-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 190.871375][ T92] usb 4-1: config 64 interface 0 has no altsetting 0 [ 190.881819][ T92] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 190.891183][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.004718][ T5902] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 191.174207][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 191.195861][ T5902] usb 3-1: config index 0 descriptor too short (expected 42, got 18) [ 191.213190][ T5902] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 191.229989][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 191.249061][ T5902] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 191.269465][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 191.298610][ T5902] usb 3-1: Product: syz [ 191.323297][ T5902] usb 3-1: SerialNumber: syz [ 191.348909][ T92] hid-rmi 0003:17EF:6085.002A: unknown main item tag 0x0 [ 191.356804][ T92] hid-rmi 0003:17EF:6085.002A: unknown main item tag 0x0 [ 191.363970][ T92] hid-rmi 0003:17EF:6085.002A: unknown main item tag 0x0 [ 191.382881][ T5902] r8152-cfgselector 3-1: Unknown version 0x0000 [ 191.391432][ T92] hid-rmi 0003:17EF:6085.002A: unknown main item tag 0x0 [ 191.400128][ T5902] r8152-cfgselector 3-1: config 0 descriptor?? [ 191.422495][ T5902] hub 3-1:0.0: bad descriptor, ignoring hub [ 191.425827][ T92] hid-rmi 0003:17EF:6085.002A: unknown main item tag 0x0 [ 191.434156][ T5902] hub 3-1:0.0: probe with driver hub failed with error -5 [ 191.465712][ T92] hid-rmi 0003:17EF:6085.002A: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.3-1/input0 [ 191.484476][ T8846] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 191.532311][ T978] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 191.546001][ T978] zl10353_read_register: readreg error (reg=127, ret==-71) [ 191.567407][ T978] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 191.569417][ T92] usb 4-1: USB disconnect, device number 14 [ 191.703359][ T978] usb 1-1: USB disconnect, device number 16 [ 191.934709][ T5902] r8152-cfgselector 3-1: reset high-speed USB device number 14 using dummy_hcd [ 192.426435][ T5902] r8152-cfgselector 3-1: USB disconnect, device number 14 [ 192.982723][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1317'. [ 194.199105][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.205894][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.526445][ T9015] bridge1: entered promiscuous mode [ 194.546407][ T9015] bridge1: entered allmulticast mode [ 194.603688][ T9015] team0: Port device bridge1 added [ 194.888468][ T9028] tipc: Started in network mode [ 194.915946][ T9028] tipc: Node identity 5f00000000000000faffffffffffffff, cluster identity 4711 [ 195.134958][ T92] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 195.200701][ T30] audit: type=1326 audit(1750627559.284:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d578e929 code=0x7ffc0000 [ 195.254128][ T30] audit: type=1326 audit(1750627559.324:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d578e929 code=0x7ffc0000 [ 195.254210][ T30] audit: type=1326 audit(1750627559.324:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25d578d290 code=0x7ffc0000 [ 195.254256][ T30] audit: type=1326 audit(1750627559.324:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25d578d290 code=0x7ffc0000 [ 195.254319][ T30] audit: type=1326 audit(1750627559.324:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d578e929 code=0x7ffc0000 [ 195.254362][ T30] audit: type=1326 audit(1750627559.324:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d578e929 code=0x7ffc0000 [ 195.254406][ T30] audit: type=1326 audit(1750627559.324:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f25d578e929 code=0x7ffc0000 [ 195.254452][ T30] audit: type=1326 audit(1750627559.324:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d578e929 code=0x7ffc0000 [ 195.254496][ T30] audit: type=1326 audit(1750627559.324:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d578e929 code=0x7ffc0000 [ 195.324411][ T92] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 195.324446][ T92] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 195.324467][ T92] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 195.324488][ T92] usb 1-1: config 220 has no interface number 2 [ 195.324551][ T92] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 195.324580][ T92] usb 1-1: config 220 interface 0 has no altsetting 0 [ 195.324599][ T92] usb 1-1: config 220 interface 76 has no altsetting 0 [ 195.324619][ T92] usb 1-1: config 220 interface 1 has no altsetting 0 [ 195.337385][ T92] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 195.337414][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.337435][ T92] usb 1-1: Product: syz [ 195.337450][ T92] usb 1-1: Manufacturer: syz [ 195.337491][ T92] usb 1-1: SerialNumber: syz [ 195.463901][ T9051] dlm: plock device version mismatch: kernel (1.2.0), user (1.4.8) [ 195.490225][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.557999][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.604379][ T30] audit: type=1326 audit(1750627559.674:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9053 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe57f8e929 code=0x7ffc0000 [ 195.647543][ T92] usb 1-1: selecting invalid altsetting 0 [ 195.726593][ T92] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 195.726629][ T92] usb 1-1: No valid video chain found. [ 195.738081][ T92] usb 1-1: selecting invalid altsetting 0 [ 195.738107][ T92] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 195.743904][ T92] usb 1-1: USB disconnect, device number 17 [ 196.003012][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.046487][ T9059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.123120][ T9063] syz.2.1369 uses obsolete (PF_INET,SOCK_PACKET) [ 196.143472][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.174834][ T9059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.425324][ T9075] netlink: 'syz.4.1374': attribute type 6 has an invalid length. [ 196.703675][ T9087] netlink: 'syz.0.1380': attribute type 30 has an invalid length. [ 197.246923][ T5902] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 197.311019][ T9110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1391'. [ 197.334483][ T978] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 197.410650][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.432955][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.435557][ T9112] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 197.466408][ T5902] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 197.489925][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.508173][ T5902] usb 1-1: config 0 descriptor?? [ 197.527612][ T978] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.539392][ T978] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 197.571723][ T978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.616772][ T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 197.644573][ T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 197.664916][ T978] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 197.684122][ T978] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 197.702681][ T978] usb 2-1: Product: syz [ 197.712714][ T978] usb 2-1: Manufacturer: syz [ 197.765586][ T978] cdc_wdm 2-1:1.0: skipping garbage [ 197.772239][ T978] cdc_wdm 2-1:1.0: skipping garbage [ 197.785608][ T978] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 197.798571][ T978] cdc_wdm 2-1:1.0: Unknown control protocol [ 197.952390][ T5902] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 197.998348][ T5902] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 198.003232][ T9130] vti0: entered promiscuous mode [ 198.011212][ T9130] vti0: entered allmulticast mode [ 198.012897][ T5902] pyra 0003:1E7D:2CF6.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 198.168190][ T5902] pyra 0003:1E7D:2CF6.002B: couldn't init struct pyra_device [ 198.199322][ T5902] pyra 0003:1E7D:2CF6.002B: couldn't install mouse [ 198.218112][ T5895] usb 2-1: USB disconnect, device number 19 [ 198.247457][ T5902] pyra 0003:1E7D:2CF6.002B: probe with driver pyra failed with error -71 [ 198.286124][ T5902] usb 1-1: USB disconnect, device number 18 [ 199.440616][ T9168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.533737][ T9195] tipc: Started in network mode [ 201.554665][ T9195] tipc: Node identity 6, cluster identity 4711 [ 201.618198][ T9195] tipc: Node number set to 6 [ 201.648446][ T9195] tipc: Cannot configure node identity twice [ 202.493393][ T9209] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1438'. [ 204.255888][ T9234] tipc: Enabling of bearer rejected, failed to enable media [ 205.242311][ T9260] gretap0: entered promiscuous mode [ 205.319928][ T9260] vlan2: entered promiscuous mode [ 206.284316][ T9280] tipc: Started in network mode [ 206.314613][ T9280] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 206.344682][ T9280] tipc: Enabling of bearer rejected, failed to enable media [ 208.601902][ T9320] binder: 9319:9320 ioctl 400c620e 0 returned -14 [ 209.691908][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 209.735459][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 209.978417][ T9342] ALSA: mixer_oss: invalid OSS volume 'üZ­yMö/ôj¼´íbÑ-àÁÃ)ªÀ)ˆâWÃu' [ 209.984074][ C0] sched: DL replenish lagged too much [ 210.089741][ T9342] ALSA: mixer_oss: invalid OSS volume '?Թ痈†åÉY¢¤{õ›´žÜÿ¬¤Uøü°ŽD' [ 210.123342][ T9342] ALSA: mixer_oss: invalid OSS volume 'ߧ«4cÑTÆÒÈ󯆩"¦m!lŠT.îšÎ œ¾®ì' [ 210.164351][ T9342] ALSA: mixer_oss: invalid OSS volume 'lg§' [ 210.178793][ T9342] ALSA: mixer_oss: invalid OSS volume 'í)nÃäÃkëKi†·,r‚¾WY\ñZV‰Óå¼÷?J`G' [ 210.215468][ T9342] ALSA: mixer_oss: invalid OSS volume 'kûO0ÍÇòª$ÛÒgÀ¾{ƒpl{ˆúy;_A¸RW§€' [ 210.265867][ T9342] ALSA: mixer_oss: invalid OSS volume 'ò' [ 210.294697][ T9342] ALSA: mixer_oss: invalid OSS volume 'sv«ˆ Fu{Qby>áñh%w¾áõ]' [ 210.330683][ T9342] ALSA: mixer_oss: invalid OSS volume 'ŽEÙ“•= Øv?ïÌ@4Åä8î¶@»híüÉÆL' [ 210.368107][ T9342] ALSA: mixer_oss: invalid OSS volume 'î+­³?>3Iq¡»0:i¸Ýq½|û—UëDœÅ™¯û' [ 210.414908][ T9342] ALSA: mixer_oss: invalid OSS volume 'vÓ·*xrµýN0¡Ü—ƒácŒ†Až‚€åìdâhû' [ 210.445761][ T9342] ALSA: mixer_oss: invalid OSS volume '±äJMÊïé œ%HœJ[~S' [ 210.501862][ T9342] ALSA: mixer_oss: invalid OSS volume '¢ƒ‹èåœSQFº¦?­¸ü`ï*æ‹Éúù¹]ÙÔ5S' [ 210.539538][ T9342] ALSA: mixer_oss: invalid OSS volume 'x¶\EÞ7Ô9‘½@ùaöžr4bé2¸À]½jG' [ 211.638563][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 211.644817][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 211.652285][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 211.659123][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 215.704668][ T92] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 215.894649][ T92] usb 1-1: Using ep0 maxpacket: 16 [ 215.905233][ T92] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 215.938075][ T92] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.995934][ T92] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.033646][ T92] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.052651][ T92] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 216.086937][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.117045][ T92] usb 1-1: config 0 descriptor?? [ 216.597293][ T92] hid-alps 0003:044E:120B.002C: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.0-1/input0 [ 216.636325][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 216.813624][ T92] usb 1-1: USB disconnect, device number 19 [ 216.821863][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.880807][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 216.902585][ T24] usb 5-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=43.58 [ 216.916371][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.936977][ T24] usb 5-1: config 0 descriptor?? [ 217.161978][ T92] usb 5-1: USB disconnect, device number 19 [ 218.814580][ T92] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 218.995674][ T92] usb 4-1: Using ep0 maxpacket: 32 [ 219.028146][ T92] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 219.068195][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.119801][ T92] usb 4-1: config 0 descriptor?? [ 219.344379][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 219.373216][ T92] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 219.413607][ T92] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.453474][ T92] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 219.471418][ T92] usb 4-1: media controller created [ 219.536041][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 219.567973][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.587857][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.650628][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.694612][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 219.731786][ T92] az6027: usb out operation failed. (-71) [ 219.752655][ T92] az6027: usb out operation failed. (-71) [ 219.762423][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 219.772841][ T92] stb0899_attach: Driver disabled by Kconfig [ 219.781114][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.790377][ T92] az6027: no front-end attached [ 219.790377][ T92] [ 219.835060][ T24] usb 2-1: config 0 descriptor?? [ 219.850385][ T92] az6027: usb out operation failed. (-71) [ 219.863522][ T92] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 219.912950][ T92] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 219.947976][ T92] dvb-usb: schedule remote query interval to 400 msecs. [ 219.962814][ T5829] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 219.990609][ T92] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 220.023965][ T92] usb 4-1: USB disconnect, device number 15 [ 220.133848][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 220.156261][ T5829] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 220.203536][ T5829] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 220.250702][ T5829] usb 5-1: config 135 has no interface number 0 [ 220.299510][ T5829] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.350055][ T24] logitech 0003:046D:C293.002D: bogus close delimiter [ 220.376677][ T92] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 220.414647][ T24] logitech 0003:046D:C293.002D: item 0 1 2 10 parsing failed [ 220.424649][ T5829] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 220.433729][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.461688][ T24] logitech 0003:046D:C293.002D: parse failed [ 220.480658][ T5829] usb 5-1: Product: syz [ 220.487717][ T24] logitech 0003:046D:C293.002D: probe with driver logitech failed with error -22 [ 220.501943][ T5829] usb 5-1: Manufacturer: syz [ 220.518507][ T5829] usb 5-1: SerialNumber: syz [ 220.552046][ T24] usb 2-1: USB disconnect, device number 20 [ 220.589565][ T5829] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 220.619246][ T5829] usb 5-1: No valid video chain found. [ 220.793016][ T5829] usb 5-1: USB disconnect, device number 20 [ 221.858537][ T9499] netem: unknown loss type 0 [ 221.901928][ T9499] netem: change failed [ 224.865567][ T9539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.401797][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.412060][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.421960][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.445403][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.458479][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.514812][ T5831] Bluetooth: hci5: command tx timeout [ 237.789910][ T9576] chnl_net:caif_netlink_parms(): no params data found [ 238.319758][ T9576] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.360237][ T9576] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.404008][ T9576] bridge_slave_0: entered allmulticast mode [ 238.412146][ T9576] bridge_slave_0: entered promiscuous mode [ 238.496133][ T9576] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.503337][ T9576] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.594622][ T5831] Bluetooth: hci5: command tx timeout [ 238.607655][ T9576] bridge_slave_1: entered allmulticast mode [ 238.657979][ T9576] bridge_slave_1: entered promiscuous mode [ 238.909262][ T9576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.942010][ T9576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.188156][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.206166][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.223586][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.232522][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.243157][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.276926][ T9576] team0: Port device team_slave_0 added [ 239.301287][ T9576] team0: Port device team_slave_1 added [ 239.496419][ T9576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.530916][ T9576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.579665][ T9576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.597727][ T9576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.607411][ T9576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.644965][ T9576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.161450][ T9576] hsr_slave_0: entered promiscuous mode [ 240.172803][ T9576] hsr_slave_1: entered promiscuous mode [ 240.183005][ T9576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.201324][ T9576] Cannot create hsr debugfs directory [ 240.675036][ T51] Bluetooth: hci5: command tx timeout [ 241.065490][ T9600] chnl_net:caif_netlink_parms(): no params data found [ 241.314506][ T51] Bluetooth: hci6: command tx timeout [ 241.362787][ T9576] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.457334][ T9576] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.725507][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.740413][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.754438][ T9576] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.765243][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.776037][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.786728][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.843419][ T9576] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.927981][ T9600] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.946575][ T9600] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.953866][ T9600] bridge_slave_0: entered allmulticast mode [ 242.035067][ T9600] bridge_slave_0: entered promiscuous mode [ 242.114594][ T9600] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.121801][ T9600] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.160182][ T9600] bridge_slave_1: entered allmulticast mode [ 242.187242][ T9600] bridge_slave_1: entered promiscuous mode [ 242.499786][ T9600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.548048][ T9600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.737983][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 242.755045][ T51] Bluetooth: hci5: command tx timeout [ 242.761250][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 242.771483][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 242.780061][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 242.788559][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 242.927061][ T9600] team0: Port device team_slave_0 added [ 243.017531][ T9600] team0: Port device team_slave_1 added [ 243.349955][ T9600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.365449][ T9600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.408463][ T5831] Bluetooth: hci6: command tx timeout [ 243.415364][ T9600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.458440][ T9600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.473932][ T9600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.513660][ T9600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.874440][ T5831] Bluetooth: hci7: command tx timeout [ 243.917414][ T9600] hsr_slave_0: entered promiscuous mode [ 243.928859][ T9600] hsr_slave_1: entered promiscuous mode [ 243.935475][ T9600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.943101][ T9600] Cannot create hsr debugfs directory [ 244.251801][ T9614] chnl_net:caif_netlink_parms(): no params data found [ 244.430240][ T9576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.788776][ T9576] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.840264][ T5831] Bluetooth: hci8: command tx timeout [ 245.101734][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.109069][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.123880][ T9624] chnl_net:caif_netlink_parms(): no params data found [ 245.151316][ T9614] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.172506][ T9614] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.190627][ T9614] bridge_slave_0: entered allmulticast mode [ 245.203821][ T9614] bridge_slave_0: entered promiscuous mode [ 245.232828][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.240074][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.311678][ T9614] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.338024][ T9614] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.363363][ T9614] bridge_slave_1: entered allmulticast mode [ 245.385953][ T9614] bridge_slave_1: entered promiscuous mode [ 245.474373][ T5831] Bluetooth: hci6: command tx timeout [ 245.788271][ T9614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.885927][ T9614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.955770][ T5831] Bluetooth: hci7: command tx timeout [ 246.396180][ T9614] team0: Port device team_slave_0 added [ 246.427903][ T9624] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.443167][ T9624] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.452104][ T9624] bridge_slave_0: entered allmulticast mode [ 246.468517][ T9624] bridge_slave_0: entered promiscuous mode [ 246.480503][ T9600] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 246.532259][ T9614] team0: Port device team_slave_1 added [ 246.550140][ T9624] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.559486][ T9624] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.575226][ T9624] bridge_slave_1: entered allmulticast mode [ 246.590321][ T9624] bridge_slave_1: entered promiscuous mode [ 246.681916][ T9600] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 246.914378][ T5831] Bluetooth: hci8: command tx timeout [ 246.929036][ T9600] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 247.053565][ T9624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.082282][ T9624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.098438][ T9600] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 247.132162][ T9614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.146073][ T9614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.193866][ T9614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.378826][ T9614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.392582][ T9614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.435774][ T9614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.471579][ T9624] team0: Port device team_slave_0 added [ 247.555842][ T5831] Bluetooth: hci6: command tx timeout [ 247.597796][ T9624] team0: Port device team_slave_1 added [ 247.618581][ T9576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.969086][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.992208][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.034861][ T5831] Bluetooth: hci7: command tx timeout [ 248.064210][ T9624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.116710][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.123712][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.179582][ T9624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.233387][ T9614] hsr_slave_0: entered promiscuous mode [ 248.250044][ T9614] hsr_slave_1: entered promiscuous mode [ 248.262207][ T9614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.272141][ T9614] Cannot create hsr debugfs directory [ 248.862369][ T9576] veth0_vlan: entered promiscuous mode [ 248.926611][ T9624] hsr_slave_0: entered promiscuous mode [ 248.933365][ T9624] hsr_slave_1: entered promiscuous mode [ 248.946332][ T9624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.953930][ T9624] Cannot create hsr debugfs directory [ 248.994522][ T5831] Bluetooth: hci8: command tx timeout [ 249.192145][ T9576] veth1_vlan: entered promiscuous mode [ 249.579924][ T9600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.718254][ T9576] veth0_macvtap: entered promiscuous mode [ 249.817133][ T9576] veth1_macvtap: entered promiscuous mode [ 249.961608][ T9600] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.048284][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.055549][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.114714][ T5831] Bluetooth: hci7: command tx timeout [ 250.146646][ T9576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.165589][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.172767][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.249151][ T9576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.365324][ T9576] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.401921][ T9576] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.437990][ T9576] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.457630][ T9576] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.537245][ T9614] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 250.665076][ T9614] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 250.759898][ T9614] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 250.880305][ T9614] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 251.079400][ T5831] Bluetooth: hci8: command tx timeout [ 251.382312][ T9600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.412480][ T9624] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 251.502258][ T9624] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 251.520071][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.536967][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.622044][ T9624] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 251.927366][ T9624] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 252.141260][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.192576][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.218010][ T9600] veth0_vlan: entered promiscuous mode [ 252.396177][ T9600] veth1_vlan: entered promiscuous mode [ 252.612370][ T9614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.800375][ T9600] veth0_macvtap: entered promiscuous mode [ 252.839928][ T9614] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.895171][ T9600] veth1_macvtap: entered promiscuous mode [ 252.991328][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.998556][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.053567][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.060799][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.159194][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.188509][ T9624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.248912][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.333515][ T9600] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.370653][ T9600] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.416406][ T9600] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.450609][ T9600] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.559434][ T9624] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.675698][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.682983][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.837029][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.844285][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.297270][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.334598][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.472015][ T9614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.575467][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.616346][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.783945][ T9624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.963708][ T9614] veth0_vlan: entered promiscuous mode [ 255.193123][ T9614] veth1_vlan: entered promiscuous mode [ 255.503421][ T9624] veth0_vlan: entered promiscuous mode [ 255.631884][ T9614] veth0_macvtap: entered promiscuous mode [ 255.646228][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.655209][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.760156][ T9624] veth1_vlan: entered promiscuous mode [ 255.855617][ T9614] veth1_macvtap: entered promiscuous mode [ 256.098638][ T9614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.169167][ T9624] veth0_macvtap: entered promiscuous mode [ 256.269678][ T9614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.331384][ T9624] veth1_macvtap: entered promiscuous mode [ 256.384597][ T5923] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 256.398032][ T9614] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.455277][ T9614] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.504548][ T9614] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.552180][ T9614] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.574211][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 256.603056][ T5923] usb 6-1: unable to get BOS descriptor or descriptor too short [ 256.695907][ T5923] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 256.741560][ T5923] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 256.822199][ T5923] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 256.910890][ T9624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.920609][ T5923] usb 6-1: config 128 has no interface number 0 [ 256.951172][ T5923] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 257.029578][ T9624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.047671][ T5923] usb 6-1: config 128 interface 127 has no altsetting 0 [ 257.144658][ T5923] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 257.177717][ T9624] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.200439][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.240521][ T5923] usb 6-1: Product: syz [ 257.263746][ T9624] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.277727][ T5923] usb 6-1: Manufacturer: syz [ 257.282370][ T5923] usb 6-1: SerialNumber: syz [ 257.310540][ T9624] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.351742][ T9675] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 257.386592][ T9624] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.471852][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.485048][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.497088][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.506350][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.525281][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.735495][ T5923] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 257.973682][ T9623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.064617][ T5923] usb 6-1: USB disconnect, device number 2 [ 258.101813][ T9623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.665374][ T9682] udevd[9682]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.737486][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.816731][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.973779][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.030097][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.303059][ T9623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.362162][ T9623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.643673][ T51] Bluetooth: hci3: command tx timeout [ 259.906404][ T9692] hub 9-0:1.0: USB hub found [ 259.962027][ T9692] hub 9-0:1.0: 1 port detected [ 260.694669][ T9681] chnl_net:caif_netlink_parms(): no params data found [ 261.427557][ T9681] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.468436][ T9681] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.506626][ T9681] bridge_slave_0: entered allmulticast mode [ 261.543911][ T9681] bridge_slave_0: entered promiscuous mode [ 261.573140][ T9681] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.621362][ T9681] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.655912][ T9681] bridge_slave_1: entered allmulticast mode [ 261.700924][ T9681] bridge_slave_1: entered promiscuous mode [ 261.720929][ T5831] Bluetooth: hci3: command tx timeout [ 262.190052][ T9681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.318984][ T9681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.836802][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 262.848677][ T9681] team0: Port device team_slave_0 added [ 263.077385][ T9681] team0: Port device team_slave_1 added [ 263.481896][ T9681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.549117][ T9681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.690377][ T9681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.803462][ T51] Bluetooth: hci3: command tx timeout [ 265.423232][ T9681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.438280][ T9681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.472895][ T9681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.905005][ T51] Bluetooth: hci3: command tx timeout [ 265.963836][ T9681] hsr_slave_0: entered promiscuous mode [ 266.005288][ T9681] hsr_slave_1: entered promiscuous mode [ 266.023560][ T9681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.057443][ T9681] Cannot create hsr debugfs directory [ 267.111280][ T9733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.567705][ T9681] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 267.621087][ T9681] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 267.703037][ T9681] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 267.816104][ T9681] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 268.231701][ T9681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.341184][ T9681] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.459184][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.466474][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.503377][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.510628][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.932311][ T9681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.211012][ T9681] veth0_vlan: entered promiscuous mode [ 269.291486][ T5819] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 269.299653][ T9754] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 269.307801][ T9681] veth1_vlan: entered promiscuous mode [ 269.406395][ T9681] veth0_macvtap: entered promiscuous mode [ 269.430529][ T9681] veth1_macvtap: entered promiscuous mode [ 269.488680][ T9681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.532531][ T9681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.566020][ T9681] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.593210][ T9681] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.618018][ T9681] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.632613][ T9681] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.931753][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.974969][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.078546][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.102275][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.380595][ T5831] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 275.401488][ T5831] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 275.422926][ T5831] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 275.440257][ T5831] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 275.448453][ T5831] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 276.996290][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 277.013040][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 277.021090][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 277.035907][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 277.054564][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 277.111311][ T9784] chnl_net:caif_netlink_parms(): no params data found [ 277.554861][ T51] Bluetooth: hci9: command tx timeout [ 277.934985][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.942195][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.015023][ T9784] bridge_slave_0: entered allmulticast mode [ 278.076403][ T9784] bridge_slave_0: entered promiscuous mode [ 278.169838][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.221702][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.264949][ T9784] bridge_slave_1: entered allmulticast mode [ 278.316331][ T9784] bridge_slave_1: entered promiscuous mode [ 278.832659][ T9784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.074559][ T51] Bluetooth: hci10: command tx timeout [ 279.570071][ T9784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.635805][ T51] Bluetooth: hci9: command tx timeout [ 279.783245][ T5831] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 279.800946][ T5831] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 279.812145][ T5831] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 279.839191][ T5831] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 279.847887][ T5831] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 280.110683][ T9784] team0: Port device team_slave_0 added [ 280.158852][ T9784] team0: Port device team_slave_1 added [ 280.672145][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.704845][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.834673][ T9784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.154376][ T51] Bluetooth: hci10: command tx timeout [ 281.222027][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.284836][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.410471][ T9817] loop4: detected capacity change from 0 to 524255232 [ 281.429100][ T9784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.714622][ T51] Bluetooth: hci9: command tx timeout [ 281.954758][ T51] Bluetooth: hci11: command tx timeout [ 282.227322][ T9784] hsr_slave_0: entered promiscuous mode [ 282.285689][ T9784] hsr_slave_1: entered promiscuous mode [ 282.334455][ T9784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.342090][ T9784] Cannot create hsr debugfs directory [ 282.462774][ T9792] chnl_net:caif_netlink_parms(): no params data found [ 283.235997][ T51] Bluetooth: hci10: command tx timeout [ 283.800845][ T51] Bluetooth: hci9: command tx timeout [ 284.040372][ T51] Bluetooth: hci11: command tx timeout [ 284.063851][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.095692][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.110359][ T9792] bridge_slave_0: entered allmulticast mode [ 284.141616][ T9792] bridge_slave_0: entered promiscuous mode [ 284.350696][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.384652][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.406945][ T9792] bridge_slave_1: entered allmulticast mode [ 284.466966][ T9792] bridge_slave_1: entered promiscuous mode [ 284.892398][ T9792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.961778][ T9792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.314544][ T51] Bluetooth: hci10: command tx timeout [ 285.403631][ T9792] team0: Port device team_slave_0 added [ 285.617599][ T9792] team0: Port device team_slave_1 added [ 286.011201][ T9784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.114497][ T51] Bluetooth: hci11: command tx timeout [ 286.631407][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.661255][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.782158][ T9792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.840467][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.858045][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.908405][ T9792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.928970][ T9807] chnl_net:caif_netlink_parms(): no params data found [ 287.386646][ T9792] hsr_slave_0: entered promiscuous mode [ 287.432777][ T9792] hsr_slave_1: entered promiscuous mode [ 287.459276][ T9792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.505116][ T9792] Cannot create hsr debugfs directory [ 288.194577][ T51] Bluetooth: hci11: command tx timeout [ 288.233766][ T9807] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.256282][ T9807] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.281041][ T9807] bridge_slave_0: entered allmulticast mode [ 288.308390][ T9807] bridge_slave_0: entered promiscuous mode [ 288.441239][ T9807] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.467037][ T9807] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.490495][ T9807] bridge_slave_1: entered allmulticast mode [ 288.549564][ T9807] bridge_slave_1: entered promiscuous mode [ 288.869346][ T9807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.959443][ T9807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.413830][ T9807] team0: Port device team_slave_0 added [ 289.461228][ T9807] team0: Port device team_slave_1 added [ 289.682776][ T9807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.705100][ T9807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.742054][ T9807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.780981][ T9807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.800024][ T9807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.842999][ T9807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.210955][ T9807] hsr_slave_0: entered promiscuous mode [ 290.252248][ T9807] hsr_slave_1: entered promiscuous mode [ 290.293112][ T9807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.321811][ T9807] Cannot create hsr debugfs directory [ 297.084356][ T44] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 297.244536][ T44] usb 10-1: Using ep0 maxpacket: 8 [ 297.255482][ T44] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 297.274480][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.298600][ T44] pvrusb2: Hardware description: Terratec Grabster AV400 [ 297.333159][ T44] pvrusb2: ********** [ 297.346406][ T44] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 297.368785][ T44] pvrusb2: Important functionality might not be entirely working. [ 297.389353][ T44] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 297.413896][ T44] pvrusb2: ********** [ 297.520533][ T2346] pvrusb2: Invalid write control endpoint [ 297.706317][ T2346] pvrusb2: Invalid write control endpoint [ 297.712260][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 297.770406][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 297.789027][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 297.819047][ T2346] pvrusb2: Device being rendered inoperable [ 297.843152][ T24] usb 10-1: USB disconnect, device number 2 [ 297.873227][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 297.901754][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 297.934902][ T2346] pvrusb2: Attached sub-driver cx25840 [ 297.978353][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 298.029272][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 299.203714][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.213315][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.222331][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.242707][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.253966][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.286407][ T9906] chnl_net:caif_netlink_parms(): no params data found [ 300.844479][ T44] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 300.897056][ T9906] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.923791][ T9906] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.958439][ T9906] bridge_slave_0: entered allmulticast mode [ 300.976183][ T9906] bridge_slave_0: entered promiscuous mode [ 301.002255][ T9906] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.029298][ T9906] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.044808][ T44] usb 10-1: Using ep0 maxpacket: 16 [ 301.062011][ T44] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.079268][ T9906] bridge_slave_1: entered allmulticast mode [ 301.094148][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.118942][ T9906] bridge_slave_1: entered promiscuous mode [ 301.134114][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 301.177407][ T44] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 301.203927][ T44] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.252842][ T44] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 301.293035][ T44] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 301.326875][ T51] Bluetooth: hci0: command tx timeout [ 301.341394][ T44] usb 10-1: Manufacturer: syz [ 301.368727][ T44] usb 10-1: config 0 descriptor?? [ 301.468023][ T9906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.518268][ T9906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.774774][ T44] rc_core: IR keymap rc-hauppauge not found [ 301.780740][ T44] Registered IR keymap rc-empty [ 301.804658][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 301.835043][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 301.860825][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 301.877060][ T9906] team0: Port device team_slave_0 added [ 301.897599][ T9906] team0: Port device team_slave_1 added [ 301.918621][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input14 [ 301.976341][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 302.029794][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 302.088169][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 302.131328][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 302.151523][ T9906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.172335][ T9906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.214694][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 302.266314][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 302.283906][ T9906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.313572][ T9906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.321774][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 302.339561][ T9906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.397222][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 302.419444][ T9906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.433311][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 302.474444][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 302.515546][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 302.566861][ T44] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 302.596924][ T44] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 302.662249][ T44] usb 10-1: USB disconnect, device number 3 [ 302.876480][ T9906] hsr_slave_0: entered promiscuous mode [ 302.899602][ T9906] hsr_slave_1: entered promiscuous mode [ 302.911895][ T9906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.944419][ T9906] Cannot create hsr debugfs directory [ 303.401771][ T51] Bluetooth: hci0: command tx timeout [ 305.074406][ T44] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 305.234678][ T44] usb 10-1: Using ep0 maxpacket: 32 [ 305.251347][ T44] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.278315][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 305.302944][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 305.338769][ T44] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 305.360398][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.406633][ T44] usb 10-1: config 0 descriptor?? [ 305.434144][ T9933] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 305.471765][ T44] hub 10-1:0.0: USB hub found [ 305.480684][ T51] Bluetooth: hci0: command tx timeout [ 305.680265][ T44] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 305.915195][ T44] usbhid 10-1:0.0: can't add hid device: -71 [ 305.921379][ T44] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 305.991445][ T44] usb 10-1: USB disconnect, device number 4 [ 306.658033][ T9936] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1695'. [ 306.983131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2ca!!! [ 307.135349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 307.418713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 307.554727][ T51] Bluetooth: hci0: command tx timeout [ 312.055982][ T9968] loop2: detected capacity change from 0 to 7 [ 312.094622][ T9647] Dev loop2: unable to read RDB block 7 [ 312.108056][ T9647] loop2: unable to read partition table [ 312.123732][ T9647] loop2: partition table beyond EOD, truncated [ 312.195909][ T9968] Dev loop2: unable to read RDB block 7 [ 312.212649][ T9968] loop2: unable to read partition table [ 312.222121][ T9968] loop2: partition table beyond EOD, truncated [ 312.239061][ T9968] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 317.115749][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.122127][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.891080][ T5831] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 328.900749][ T5831] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 328.909980][ T5831] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 328.921608][ T5831] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 328.930258][ T5831] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 329.702356][ T9983] chnl_net:caif_netlink_parms(): no params data found [ 330.994462][ T5831] Bluetooth: hci12: command tx timeout [ 333.075195][ T5831] Bluetooth: hci12: command tx timeout [ 334.768290][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 334.777805][ T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 334.787894][ T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 334.797394][ T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 334.814560][ T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 335.154478][ T5831] Bluetooth: hci12: command tx timeout [ 336.299135][ T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 336.308917][ T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 336.327460][ T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 336.342947][ T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 336.351279][ T51] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 336.834701][ T51] Bluetooth: hci13: command tx timeout [ 337.234349][ T51] Bluetooth: hci12: command tx timeout [ 338.434588][ T51] Bluetooth: hci14: command tx timeout [ 338.914568][ T51] Bluetooth: hci13: command tx timeout [ 339.290348][ T5831] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 339.316092][ T5831] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 339.328845][ T5831] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 339.338859][ T5831] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 339.349792][ T5831] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 340.515132][ T5831] Bluetooth: hci14: command tx timeout [ 340.695909][ T9983] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.703111][ T9983] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.725384][ T9983] bridge_slave_0: entered allmulticast mode [ 340.733472][ T9983] bridge_slave_0: entered promiscuous mode [ 340.827033][ T9983] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.864693][ T9983] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.872041][ T9983] bridge_slave_1: entered allmulticast mode [ 340.898607][ T9983] bridge_slave_1: entered promiscuous mode [ 340.995160][ T5831] Bluetooth: hci13: command tx timeout [ 341.173804][ T9983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.239593][ T9983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.396331][ T5831] Bluetooth: hci15: command tx timeout [ 341.620298][ T9983] team0: Port device team_slave_0 added [ 341.651865][ T9983] team0: Port device team_slave_1 added [ 341.984611][ T9983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.991636][ T9983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.041036][ T9983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.202886][ T9983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.216342][ T9983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.261905][ T9983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.594711][ T51] Bluetooth: hci14: command tx timeout [ 342.843755][ T9983] hsr_slave_0: entered promiscuous mode [ 342.851255][ T9983] hsr_slave_1: entered promiscuous mode [ 342.877120][ T9983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.901514][ T9983] Cannot create hsr debugfs directory [ 342.979692][ T9993] chnl_net:caif_netlink_parms(): no params data found [ 343.078976][ T51] Bluetooth: hci13: command tx timeout [ 343.472657][ T9996] chnl_net:caif_netlink_parms(): no params data found [ 343.480656][ T51] Bluetooth: hci15: command tx timeout [ 343.640447][ T9999] chnl_net:caif_netlink_parms(): no params data found [ 344.230581][ T9993] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.254828][ T9993] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.262221][ T9993] bridge_slave_0: entered allmulticast mode [ 344.286459][ T9993] bridge_slave_0: entered promiscuous mode [ 344.449186][ T9993] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.474743][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.482112][ T9993] bridge_slave_1: entered allmulticast mode [ 344.511277][ T9993] bridge_slave_1: entered promiscuous mode [ 344.675195][ T51] Bluetooth: hci14: command tx timeout [ 345.187780][ T9993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.397197][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.414570][ T9996] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.421945][ T9996] bridge_slave_0: entered allmulticast mode [ 345.447754][ T9996] bridge_slave_0: entered promiscuous mode [ 345.500684][ T9993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.517604][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.535559][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.543048][ T9999] bridge_slave_0: entered allmulticast mode [ 345.558330][ T51] Bluetooth: hci15: command tx timeout [ 345.595942][ T9999] bridge_slave_0: entered promiscuous mode [ 345.615367][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.622603][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.654995][ T9996] bridge_slave_1: entered allmulticast mode [ 345.677791][ T9996] bridge_slave_1: entered promiscuous mode [ 345.783359][ T9999] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.800042][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.825190][ T9999] bridge_slave_1: entered allmulticast mode [ 345.848525][ T9999] bridge_slave_1: entered promiscuous mode [ 346.092529][ T9993] team0: Port device team_slave_0 added [ 346.397802][ T9996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.417666][ T9993] team0: Port device team_slave_1 added [ 346.523438][ T9999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.558441][ T9996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.702197][ T9999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.891993][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.907916][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.952857][ T9993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.185475][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.214317][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.258856][ T9993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.419990][ T9996] team0: Port device team_slave_0 added [ 347.438629][ T9996] team0: Port device team_slave_1 added [ 347.499069][ T9999] team0: Port device team_slave_0 added [ 347.528435][ T9999] team0: Port device team_slave_1 added [ 347.634875][ T51] Bluetooth: hci15: command tx timeout [ 348.127278][ T9996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.144346][ T9996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.199763][ T9996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.347046][ T9993] hsr_slave_0: entered promiscuous mode [ 348.374720][ T9993] hsr_slave_1: entered promiscuous mode [ 348.381317][ T9993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.404501][ T9993] Cannot create hsr debugfs directory [ 348.411179][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.436181][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.483408][ T9999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.510298][ T9996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.535658][ T9996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.583785][ T9996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.722336][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.744089][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.804729][ T9999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.323939][ T9999] hsr_slave_0: entered promiscuous mode [ 349.356833][ T9999] hsr_slave_1: entered promiscuous mode [ 349.363336][ T9999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.388838][ T9999] Cannot create hsr debugfs directory [ 349.738226][ T9996] hsr_slave_0: entered promiscuous mode [ 349.759482][ T9996] hsr_slave_1: entered promiscuous mode [ 349.776260][ T9996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.795403][ T9996] Cannot create hsr debugfs directory [ 359.354238][ T5838] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 359.363907][ T5838] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 359.372943][ T5838] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 359.406911][ T5838] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 359.421386][ T5838] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 360.116963][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 360.170981][T10026] chnl_net:caif_netlink_parms(): no params data found [ 360.643669][T10026] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.664651][T10026] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.672030][T10026] bridge_slave_0: entered allmulticast mode [ 360.695742][T10026] bridge_slave_0: entered promiscuous mode [ 360.727627][T10026] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.748493][T10026] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.771146][T10026] bridge_slave_1: entered allmulticast mode [ 360.788040][T10026] bridge_slave_1: entered promiscuous mode [ 361.030006][T10026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.063184][T10026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.387351][T10026] team0: Port device team_slave_0 added [ 361.416451][T10026] team0: Port device team_slave_1 added [ 361.476141][ T51] Bluetooth: hci16: command tx timeout [ 361.654255][T10026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.661276][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.711994][T10026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.759563][T10026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.780569][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.824671][T10026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.130775][T10026] hsr_slave_0: entered promiscuous mode [ 362.165406][T10026] hsr_slave_1: entered promiscuous mode [ 362.171924][T10026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.200945][T10026] Cannot create hsr debugfs directory [ 363.554643][ T51] Bluetooth: hci16: command tx timeout [ 365.251835][ T51] Bluetooth: hci8: command 0x0406 tx timeout [ 365.258333][ T5836] Bluetooth: hci6: command 0x0406 tx timeout [ 365.265133][ T5835] Bluetooth: hci7: command 0x0406 tx timeout [ 365.644638][ T51] Bluetooth: hci16: command tx timeout [ 367.714626][ T51] Bluetooth: hci16: command tx timeout [ 368.889449][ T9784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.554048][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.563387][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.595604][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 389.404990][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 389.424466][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.433768][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.443924][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.456461][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 390.193100][T10046] chnl_net:caif_netlink_parms(): no params data found [ 390.690497][T10046] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.723783][T10046] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.744375][T10046] bridge_slave_0: entered allmulticast mode [ 390.764230][T10046] bridge_slave_0: entered promiscuous mode [ 390.789205][T10046] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.804169][T10046] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.811533][T10046] bridge_slave_1: entered allmulticast mode [ 390.852991][T10046] bridge_slave_1: entered promiscuous mode [ 391.138555][T10046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.180241][T10046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.438665][T10046] team0: Port device team_slave_0 added [ 391.465688][T10046] team0: Port device team_slave_1 added [ 391.558042][ T5831] Bluetooth: hci1: command tx timeout [ 391.684389][T10046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.691407][T10046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.764293][T10046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.797860][T10046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.814444][T10046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.872427][T10046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.181124][T10046] hsr_slave_0: entered promiscuous mode [ 392.207508][T10046] hsr_slave_1: entered promiscuous mode [ 392.222104][T10046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.244532][T10046] Cannot create hsr debugfs directory [ 393.634455][ T5831] Bluetooth: hci1: command tx timeout [ 395.348396][ T9373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 395.358673][ T9373] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 395.367583][ T9373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 395.376243][ T9373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 395.385158][ T9373] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 395.716772][ T9373] Bluetooth: hci1: command tx timeout [ 396.177017][T10059] chnl_net:caif_netlink_parms(): no params data found [ 396.750181][T10059] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.804586][T10059] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.811987][T10059] bridge_slave_0: entered allmulticast mode [ 396.887491][T10059] bridge_slave_0: entered promiscuous mode [ 396.919567][T10059] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.944593][T10059] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.951968][T10059] bridge_slave_1: entered allmulticast mode [ 396.999636][T10059] bridge_slave_1: entered promiscuous mode [ 397.211643][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.225726][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.233798][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.251642][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 397.261346][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 397.347426][T10059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.398173][T10059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.475305][ T9373] Bluetooth: hci2: command tx timeout [ 397.726786][T10059] team0: Port device team_slave_0 added [ 397.796434][ T9373] Bluetooth: hci1: command tx timeout [ 397.805209][T10059] team0: Port device team_slave_1 added [ 398.180575][T10059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.215109][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.270623][T10059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.317188][T10059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.334419][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.407390][T10059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.767228][T10059] hsr_slave_0: entered promiscuous mode [ 398.796677][T10059] hsr_slave_1: entered promiscuous mode [ 398.835977][T10059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.843601][T10059] Cannot create hsr debugfs directory [ 399.322321][ T51] Bluetooth: hci4: command tx timeout [ 399.556790][ T51] Bluetooth: hci2: command tx timeout [ 399.855962][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.867070][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.875150][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.883889][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.898336][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 400.119899][T10068] chnl_net:caif_netlink_parms(): no params data found [ 400.699687][T10068] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.723866][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.746755][T10068] bridge_slave_0: entered allmulticast mode [ 400.774466][T10068] bridge_slave_0: entered promiscuous mode [ 400.801765][T10068] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.827952][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.844726][T10068] bridge_slave_1: entered allmulticast mode [ 400.876823][T10068] bridge_slave_1: entered promiscuous mode [ 401.079096][ T5838] Bluetooth: hci9: command 0x0406 tx timeout [ 401.086129][ T51] Bluetooth: hci10: command 0x0406 tx timeout [ 401.139227][T10068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.218140][T10068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.396040][ T5831] Bluetooth: hci4: command tx timeout [ 401.587248][T10068] team0: Port device team_slave_0 added [ 401.634543][ T5831] Bluetooth: hci2: command tx timeout [ 401.697314][T10068] team0: Port device team_slave_1 added [ 401.964609][ T5831] Bluetooth: hci5: command tx timeout [ 401.973896][T10068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.997443][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.061506][T10068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.115531][T10068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.122545][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.244573][T10068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.602022][T10074] chnl_net:caif_netlink_parms(): no params data found [ 402.646376][T10068] hsr_slave_0: entered promiscuous mode [ 402.665438][T10068] hsr_slave_1: entered promiscuous mode [ 402.675017][T10068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.682636][T10068] Cannot create hsr debugfs directory [ 403.478970][ T5831] Bluetooth: hci4: command tx timeout [ 403.623286][T10074] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.644632][T10074] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.652308][T10074] bridge_slave_0: entered allmulticast mode [ 403.689125][T10074] bridge_slave_0: entered promiscuous mode [ 403.707487][T10074] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.716504][ T5831] Bluetooth: hci2: command tx timeout [ 403.744545][T10074] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.752023][T10074] bridge_slave_1: entered allmulticast mode [ 403.776937][T10074] bridge_slave_1: entered promiscuous mode [ 404.034410][ T5831] Bluetooth: hci5: command tx timeout [ 404.060165][T10074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.099209][T10074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.387827][T10074] team0: Port device team_slave_0 added [ 404.418221][T10074] team0: Port device team_slave_1 added [ 404.647443][T10074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.664390][T10074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.733355][T10074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.787262][T10074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.807749][T10074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.867823][T10074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.279958][T10074] hsr_slave_0: entered promiscuous mode [ 405.295982][T10074] hsr_slave_1: entered promiscuous mode [ 405.318106][T10074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.335048][T10074] Cannot create hsr debugfs directory [ 405.555767][ T9373] Bluetooth: hci4: command tx timeout [ 406.115048][ T9373] Bluetooth: hci5: command tx timeout [ 406.197286][ T9373] Bluetooth: hci11: command 0x0406 tx timeout [ 408.194644][ T5831] Bluetooth: hci5: command tx timeout [ 419.931379][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 419.943431][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 419.952112][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 419.974555][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 419.989239][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 420.726847][T10091] chnl_net:caif_netlink_parms(): no params data found [ 421.555895][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 422.034692][ T5838] Bluetooth: hci7: command tx timeout [ 424.114391][ T5838] Bluetooth: hci7: command tx timeout [ 426.194736][ T5838] Bluetooth: hci7: command tx timeout [ 428.276842][ T5838] Bluetooth: hci7: command tx timeout [ 431.376832][T10091] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.395589][T10091] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.402970][T10091] bridge_slave_0: entered allmulticast mode [ 431.428864][T10091] bridge_slave_0: entered promiscuous mode [ 431.448728][T10091] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.473143][T10091] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.494504][T10091] bridge_slave_1: entered allmulticast mode [ 431.514721][T10091] bridge_slave_1: entered promiscuous mode [ 431.755594][T10091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.801416][T10091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.046998][T10091] team0: Port device team_slave_0 added [ 432.068409][T10091] team0: Port device team_slave_1 added [ 432.313657][T10091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.336038][T10091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.404345][T10091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.437803][T10091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.454419][T10091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.521198][T10091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.056536][T10091] hsr_slave_0: entered promiscuous mode [ 434.078224][T10091] hsr_slave_1: entered promiscuous mode [ 434.095504][T10091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.103149][T10091] Cannot create hsr debugfs directory [ 439.977429][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.983823][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.552397][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 449.563837][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 449.578454][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 449.588504][ T5838] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 449.617385][ T5838] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 450.378407][T10109] chnl_net:caif_netlink_parms(): no params data found [ 450.835532][ T31] INFO: task syz-executor:9792 blocked for more than 143 seconds. [ 450.843531][ T31] Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 [ 450.874443][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 450.883178][ T31] task:syz-executor state:D stack:22184 pid:9792 tgid:9792 ppid:1 task_flags:0x400140 flags:0x00004004 [ 450.934731][ T31] Call Trace: [ 450.938084][ T31] [ 450.941051][ T31] __schedule+0x16f5/0x4d00 [ 450.974636][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 450.979939][ T31] ? __lock_acquire+0xab9/0xd20 [ 451.005519][ T31] ? schedule+0x165/0x360 [ 451.009937][ T31] ? __pfx___schedule+0x10/0x10 [ 451.144175][ T31] ? schedule+0x91/0x360 [ 451.148515][ T31] schedule+0x165/0x360 [ 451.152717][ T31] schedule_preempt_disabled+0x13/0x30 [ 451.238061][ T31] __mutex_lock+0x724/0xe80 [ 451.242659][ T31] ? __mutex_lock+0x51b/0xe80 [ 451.275806][ T31] ? del_device_store+0xd1/0x360 [ 451.280840][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 451.305650][ T31] ? __lock_acquire+0xab9/0xd20 [ 451.310612][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 451.328929][ T31] del_device_store+0xd1/0x360 [ 451.358230][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 451.363167][ T31] ? __pfx_del_device_store+0x10/0x10 [ 451.374447][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 451.379454][ T31] ? sysfs_kf_write+0x166/0x260 [ 451.400603][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 451.424266][ T31] kernfs_fop_write_iter+0x375/0x4f0 [ 451.429662][ T31] vfs_write+0x548/0xa90 [ 451.454768][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 451.460666][ T31] ? __pfx_vfs_write+0x10/0x10 [ 451.479538][ T31] ? do_sys_openat2+0x154/0x1c0 [ 451.494360][ T31] ? kmem_cache_free+0x18f/0x400 [ 451.499377][ T31] ksys_write+0x145/0x250 [ 451.503743][ T31] ? __pfx_ksys_write+0x10/0x10 [ 451.529858][ T31] ? rcu_is_watching+0x15/0xb0 [ 451.543851][ T31] ? do_syscall_64+0xbe/0x3b0 [ 451.556738][ T31] do_syscall_64+0xfa/0x3b0 [ 451.561308][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.584404][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 451.590641][ T31] ? clear_bhb_loop+0x60/0xb0 [ 451.604625][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.610609][ T31] RIP: 0033:0x7f2fc098d3df [ 451.635460][ T31] RSP: 002b:00007f2fc0cdf220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 451.665267][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f2fc098d3df [ 451.673323][ T31] RDX: 0000000000000001 RSI: 00007f2fc0cdf270 RDI: 0000000000000005 [ 451.704328][ T31] RBP: 00007f2fc0a11d8d R08: 0000000000000000 R09: 00007f2fc0cdf077 [ 451.712464][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 451.721579][ T5831] Bluetooth: hci8: command tx timeout [ 451.764560][ T31] R13: 00007f2fc0cdf270 R14: 00007f2fc16e4620 R15: 0000000000000003 [ 451.772642][ T31] [ 451.784602][ T31] INFO: task syz-executor:9807 blocked for more than 144 seconds. [ 451.792489][ T31] Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 [ 451.825118][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.833876][ T31] task:syz-executor state:D stack:22584 pid:9807 tgid:9807 ppid:1 task_flags:0x400140 flags:0x00004004 [ 451.894731][ T31] Call Trace: [ 451.898093][ T31] [ 451.901065][ T31] __schedule+0x16f5/0x4d00 [ 451.916543][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 451.921846][ T31] ? __lock_acquire+0xab9/0xd20 [ 451.934434][ T31] ? schedule+0x165/0x360 [ 451.938849][ T31] ? __pfx___schedule+0x10/0x10 [ 451.943760][ T31] ? schedule+0x91/0x360 [ 451.984349][ T31] schedule+0x165/0x360 [ 451.988601][ T31] schedule_preempt_disabled+0x13/0x30 [ 452.004508][ T31] __mutex_lock+0x724/0xe80 [ 452.009094][ T31] ? __mutex_lock+0x51b/0xe80 [ 452.013829][ T31] ? del_device_store+0xd1/0x360 [ 452.056823][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 452.061944][ T31] ? __lock_acquire+0xab9/0xd20 [ 452.084218][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 452.089174][ T31] del_device_store+0xd1/0x360 [ 452.105730][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 452.110660][ T31] ? __pfx_del_device_store+0x10/0x10 [ 452.135972][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 452.140989][ T31] ? sysfs_kf_write+0x166/0x260 [ 452.164364][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 452.169730][ T31] kernfs_fop_write_iter+0x375/0x4f0 [ 452.198298][ T31] vfs_write+0x548/0xa90 [ 452.202655][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 452.224367][ T31] ? __pfx_vfs_write+0x10/0x10 [ 452.229218][ T31] ? do_sys_openat2+0x154/0x1c0 [ 452.245774][ T31] ? kmem_cache_free+0x18f/0x400 [ 452.250804][ T31] ksys_write+0x145/0x250 [ 452.274960][ T5831] Bluetooth: hci12: command 0x0406 tx timeout [ 452.282584][ T31] ? __pfx_ksys_write+0x10/0x10 [ 452.305554][ T31] ? rcu_is_watching+0x15/0xb0 [ 452.310415][ T31] ? do_syscall_64+0xbe/0x3b0 [ 452.325532][ T31] do_syscall_64+0xfa/0x3b0 [ 452.330094][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.366177][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.372332][ T31] ? clear_bhb_loop+0x60/0xb0 [ 452.394949][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.400927][ T31] RIP: 0033:0x7fe60d98d3df [ 452.414395][ T31] RSP: 002b:00007fe60dcdf220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 452.422880][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fe60d98d3df [ 452.458120][ T31] RDX: 0000000000000001 RSI: 00007fe60dcdf270 RDI: 0000000000000005 [ 452.494619][ T31] RBP: 00007fe60da11d8d R08: 0000000000000000 R09: 00007fe60dcdf077 [ 452.502665][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 452.534639][ T31] R13: 00007fe60dcdf270 R14: 00007fe60e6e4620 R15: 0000000000000003 [ 452.542713][ T31] [ 452.554837][ T31] INFO: task syz-executor:9906 blocked for more than 145 seconds. [ 452.584233][ T31] Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 [ 452.591936][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.623748][ T31] task:syz-executor state:D stack:21896 pid:9906 tgid:9906 ppid:1 task_flags:0x400140 flags:0x00004004 [ 452.655594][ T31] Call Trace: [ 452.658949][ T31] [ 452.661927][ T31] __schedule+0x16f5/0x4d00 [ 452.694788][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 452.700097][ T31] ? __lock_acquire+0xab9/0xd20 [ 452.714940][ T31] ? schedule+0x165/0x360 [ 452.719364][ T31] ? __pfx___schedule+0x10/0x10 [ 452.734608][ T31] ? schedule+0x91/0x360 [ 452.738932][ T31] schedule+0x165/0x360 [ 452.743127][ T31] schedule_preempt_disabled+0x13/0x30 [ 452.815110][ T31] __mutex_lock+0x724/0xe80 [ 452.819909][ T31] ? __mutex_lock+0x51b/0xe80 [ 452.846298][ T31] ? del_device_store+0xd1/0x360 [ 452.851326][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 452.894659][ T31] ? __lock_acquire+0xab9/0xd20 [ 452.899609][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 452.914627][ T31] del_device_store+0xd1/0x360 [ 452.919476][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 452.934846][ T31] ? __pfx_del_device_store+0x10/0x10 [ 452.940296][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 452.968325][ T31] ? sysfs_kf_write+0x166/0x260 [ 452.981198][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 452.998050][ T31] kernfs_fop_write_iter+0x375/0x4f0 [ 453.003447][ T31] vfs_write+0x548/0xa90 [ 453.024361][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 453.030267][ T31] ? __pfx_vfs_write+0x10/0x10 [ 453.054611][ T31] ? do_sys_openat2+0x154/0x1c0 [ 453.059552][ T31] ? kmem_cache_free+0x18f/0x400 [ 453.065774][ T31] ksys_write+0x145/0x250 [ 453.070171][ T31] ? __pfx_ksys_write+0x10/0x10 [ 453.105371][ T31] ? rcu_is_watching+0x15/0xb0 [ 453.110236][ T31] ? do_syscall_64+0xbe/0x3b0 [ 453.127951][ T31] do_syscall_64+0xfa/0x3b0 [ 453.132537][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.155001][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 453.162328][ T31] ? clear_bhb_loop+0x60/0xb0 [ 453.174496][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.198360][ T31] RIP: 0033:0x7f6b0358d3df [ 453.202863][ T31] RSP: 002b:00007f6b038df220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 453.232690][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f6b0358d3df [ 453.254660][ T31] RDX: 0000000000000001 RSI: 00007f6b038df270 RDI: 0000000000000005 [ 453.262717][ T31] RBP: 00007f6b03611d8d R08: 0000000000000000 R09: 00007f6b038df077 [ 453.296669][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 453.316780][ T31] R13: 00007f6b038df270 R14: 00007f6b042e4620 R15: 0000000000000003 [ 453.334470][ T31] [ 453.337611][ T31] [ 453.337611][ T31] Showing all locks held in the system: [ 453.364595][ T31] 4 locks held by kworker/u8:1/13: [ 453.374871][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.415711][ T31] #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.436418][ T31] #2: ffffffff8f503290 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 453.457292][ T31] #3: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 453.504382][ T31] 1 lock held by khungtaskd/31: [ 453.509314][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 453.536784][ T31] 3 locks held by kworker/u8:4/66: [ 453.541976][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.584527][ T31] #1: ffffc9000210fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.617639][ T31] #2: ffffffff8f50fe88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 453.646617][ T31] 2 locks held by kworker/0:2/978: [ 453.651922][ T31] 3 locks held by kworker/u8:8/1170: [ 453.675730][ T31] 2 locks held by getty/5589: [ 453.680469][ T31] #0: ffff888030a550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 453.715474][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 453.745334][ T31] 7 locks held by kworker/u9:5/5838: [ 453.750695][ T31] #0: ffff888068032948 ((wq_completion)hci12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.785370][ T31] #1: ffffc900040bfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.808591][ T5831] Bluetooth: hci8: command tx timeout [ 453.833069][ T31] #2: ffff888042cfcd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 453.855739][ T31] #3: ffff888042cfc078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0 [ 453.879360][ T31] #4: ffffffff8f677ee8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 453.911563][ T31] #5: ffff88806f1cb338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 453.934992][ T31] #6: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 453.965575][ T31] 3 locks held by kworker/0:5/5902: [ 453.970857][ T31] 3 locks held by kworker/0:6/5909: [ 453.985756][ T31] 1 lock held by syz.1.1582/9525: [ 453.990851][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 454.039878][ T31] 1 lock held by syz.3.1591/9551: [ 454.054411][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 454.078848][ T31] 1 lock held by syz.4.1595/9561: [ 454.095550][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 454.136259][ T31] 3 locks held by kworker/0:7/9562: [ 454.141590][ T31] 1 lock held by syz.2.1608/9603: [ 454.156048][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 454.176775][ T31] 1 lock held by syz.5.1615/9684: [ 454.181863][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 454.214523][ T31] 1 lock held by syz.8.1610/9694: [ 454.219654][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 454.256658][ T31] 1 lock held by syz.7.1622/9714: [ 454.261755][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 454.286735][ T31] 2 locks held by kworker/0:8/9734: [ 454.292015][ T31] 2 locks held by kworker/0:9/9778: [ 454.324436][ T31] 7 locks held by syz-executor/9784: [ 454.329786][ T31] #0: ffff8880317ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 454.356676][ T31] #1: ffff888037109888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 454.384352][ T31] #2: ffff888143f6dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 454.415566][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 454.446528][ T31] #4: ffff88805dece0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 454.475845][ T31] #5: ffff88805decf250 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 454.494410][ T31] #6: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 454.535559][ T31] 4 locks held by syz-executor/9792: [ 454.540932][ T31] #0: ffff8880317ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 454.575947][ T31] #1: ffff888051a57888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 454.594910][ T31] #2: ffff888143f6dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 454.625676][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 454.654540][ T31] 4 locks held by syz-executor/9807: [ 454.659915][ T31] #0: ffff8880317ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 454.686024][ T31] #1: ffff88803d026c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 454.714225][ T31] #2: ffff888143f6dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 454.745474][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 454.776299][ T31] 2 locks held by syz.6.1659/9827: [ 454.781591][ T31] #0: ffffffff8f503290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 454.805901][ T31] #1: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 454.836321][ T31] 2 locks held by kworker/0:12/9896: [ 454.841787][ T31] 4 locks held by syz-executor/9906: [ 454.865740][ T31] #0: ffff8880317ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 454.891863][ T31] #1: ffff88803d721488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 454.915674][ T31] #2: ffff888143f6dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 454.955528][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 454.977058][ T31] 7 locks held by kworker/0:14/9934: [ 454.982431][ T31] 1 lock held by syz.9.1709/9975: [ 455.004653][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 455.034233][ T31] 4 locks held by syz-executor/9983: [ 455.039594][ T31] #0: ffff8880317ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 455.075981][ T31] #1: ffff8880431bd488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 455.094154][ T31] #2: ffff888143f6dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 455.129490][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 455.154786][ T31] 4 locks held by syz-executor/9993: [ 455.160146][ T31] #0: ffff8880317ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 455.185695][ T31] #1: ffff88808cbcd488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 455.216366][ T31] #2: ffff888143f6dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 455.254231][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 455.276170][ T31] 4 locks held by syz-executor/9996: [ 455.281611][ T31] #0: ffff8880317ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 455.318416][ T31] #1: ffff888039d6d088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 455.355736][ T31] #2: ffff888143f6dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 455.374238][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 455.397858][ T31] 4 locks held by syz-executor/9999: [ 455.403211][ T31] #0: ffff8880317ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 455.436715][ T31] #1: ffff88808f57ec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 455.465817][ T31] #2: ffff888143f6dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 455.496455][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 455.527861][ T31] 4 locks held by syz-executor/10026: [ 455.544619][ T31] #0: ffff8880317ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 455.553629][ T31] #1: ffff888047b49088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 455.594340][ T31] #2: ffff888143f6dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 455.615216][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 455.648280][ T31] 4 locks held by syz-executor/10046: [ 455.653733][ T31] #0: ffff8880317ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 455.686354][ T31] #1: ffff88805e914088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 455.717716][ T31] #2: ffff888143f6dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 455.734146][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 455.774225][ T31] 4 locks held by syz-executor/10059: [ 455.779679][ T31] #0: ffff8880317ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 455.808916][ T31] #1: ffff888049c99488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 455.835438][ T31] #2: ffff888143f6dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 455.874503][ T51] Bluetooth: hci8: command tx timeout [ 455.880058][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 455.905959][ T31] 4 locks held by syz-executor/10068: [ 455.911421][ T31] #0: ffff8880317ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 455.936893][ T31] #1: ffff888050e06088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 455.974307][ T31] #2: ffff888143f6dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 456.007687][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 456.026468][ T31] 4 locks held by syz-executor/10074: [ 456.052032][ T31] #0: ffff8880317ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 456.076337][ T31] #1: ffff888052a1a888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 456.094123][ T31] #2: ffff888143f6dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 456.119025][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 456.144814][ T31] 4 locks held by syz-executor/10091: [ 456.174308][ T31] #0: ffff8880317ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 456.183328][ T31] #1: ffff888073cf2088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 456.214740][ T31] #2: ffff888143f6dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 456.236373][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 456.276586][ T31] 3 locks held by syz-executor/10109: [ 456.282039][ T31] #0: ffffffff8eca47c0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 456.311191][ T31] #1: ffffffff8f50fe88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 456.337641][ T31] #2: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 456.366868][ T31] [ 456.369256][ T31] ============================================= [ 456.369256][ T31] [ 456.394659][ T31] NMI backtrace for cpu 1 [ 456.394687][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 456.394712][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.394725][ T31] Call Trace: [ 456.394733][ T31] [ 456.394741][ T31] dump_stack_lvl+0x189/0x250 [ 456.394776][ T31] ? __wake_up_klogd+0xd9/0x110 [ 456.394802][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.394832][ T31] ? __pfx__printk+0x10/0x10 [ 456.394868][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 456.394897][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 456.394919][ T31] ? _printk+0xcf/0x120 [ 456.394945][ T31] ? __pfx__printk+0x10/0x10 [ 456.394969][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 456.394998][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 456.395027][ T31] watchdog+0xfee/0x1030 [ 456.395056][ T31] ? watchdog+0x1de/0x1030 [ 456.395091][ T31] kthread+0x70e/0x8a0 [ 456.395117][ T31] ? __pfx_watchdog+0x10/0x10 [ 456.395143][ T31] ? __pfx_kthread+0x10/0x10 [ 456.395167][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.395193][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.395220][ T31] ? __pfx_kthread+0x10/0x10 [ 456.395243][ T31] ret_from_fork+0x3fc/0x770 [ 456.395274][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 456.395309][ T31] ? __switch_to_asm+0x39/0x70 [ 456.395328][ T31] ? __switch_to_asm+0x33/0x70 [ 456.395347][ T31] ? __pfx_kthread+0x10/0x10 [ 456.395371][ T31] ret_from_fork_asm+0x1a/0x30 [ 456.395408][ T31] [ 456.395415][ T31] Sending NMI from CPU 1 to CPUs 0: [ 456.568221][ C0] NMI backtrace for cpu 0 [ 456.568238][ C0] CPU: 0 UID: 0 PID: 9934 Comm: kworker/0:14 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 456.568259][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.568270][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 456.568301][ C0] RIP: 0010:unwind_next_frame+0x17cc/0x2390 [ 456.568329][ C0] Code: c1 e8 03 0f b6 04 28 84 c0 0f 85 0e 0b 00 00 49 0f bf 04 24 48 01 c6 4c 89 f7 48 89 da e8 4c 0e 00 00 84 c0 0f 84 47 01 00 00 <48> bd 00 00 00 00 00 fc ff df 48 8b 44 24 20 0f b6 04 28 84 c0 0f [ 456.568344][ C0] RSP: 0018:ffffc90000006558 EFLAGS: 00000202 [ 456.568357][ C0] RAX: 1ffff92000000c01 RBX: ffffffff90683b52 RCX: 0000000000000001 [ 456.568370][ C0] RDX: ffffc90000006668 RSI: dffffc0000000000 RDI: ffffc90000006b70 [ 456.568383][ C0] RBP: dffffc0000000000 R08: ffffc90000006b70 R09: 0000000000000000 [ 456.568394][ C0] R10: ffffc90000006678 R11: fffff52000000cd1 R12: ffffc90000006b70 [ 456.568406][ C0] R13: ffffc90000006678 R14: ffffc90000006628 R15: 1ffffffff20d076a [ 456.568419][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 456.568433][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.568444][ C0] CR2: 00007efe55df5f98 CR3: 000000000df38000 CR4: 00000000003526f0 [ 456.568459][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 456.568469][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 456.568479][ C0] Call Trace: [ 456.568485][ C0] [ 456.568496][ C0] ? unwind_next_frame+0xa5/0x2390 [ 456.568520][ C0] ? debug_object_activate+0x383/0x420 [ 456.568541][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 456.568560][ C0] arch_stack_walk+0x11c/0x150 [ 456.568578][ C0] ? call_rcu+0xaa/0x9c0 [ 456.568595][ C0] stack_trace_save+0x9c/0xe0 [ 456.568617][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 456.568639][ C0] kasan_save_track+0x3e/0x80 [ 456.568663][ C0] ? kasan_save_track+0x3e/0x80 [ 456.568685][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 456.568698][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 456.568723][ C0] ? fill_pool+0x100/0x570 [ 456.568738][ C0] ? debug_object_activate+0x383/0x420 [ 456.568781][ C0] __kasan_slab_alloc+0x6c/0x80 [ 456.568796][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 456.568821][ C0] ? fill_pool+0x100/0x570 [ 456.568839][ C0] fill_pool+0x100/0x570 [ 456.568855][ C0] ? debug_object_activate+0x35a/0x420 [ 456.568873][ C0] ? debug_object_activate+0x35a/0x420 [ 456.568891][ C0] ? __pfx_fill_pool+0x10/0x10 [ 456.568906][ C0] ? nf_conntrack_free+0x2f7/0x380 [ 456.568926][ C0] ? nf_hook_slow+0xc2/0x220 [ 456.568942][ C0] ? __ip_local_out+0x4db/0x600 [ 456.568965][ C0] ? debug_object_activate+0x35a/0x420 [ 456.568982][ C0] debug_object_activate+0x383/0x420 [ 456.568998][ C0] ? net_rx_action+0x707/0xe30 [ 456.569013][ C0] ? handle_softirqs+0x286/0x870 [ 456.569054][ C0] ? do_softirq+0xec/0x180 [ 456.569080][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 456.569102][ C0] ? nf_conntrack_free+0x2f7/0x380 [ 456.569121][ C0] call_rcu+0xaa/0x9c0 [ 456.569135][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 456.569159][ C0] ? __pfx_call_rcu+0x10/0x10 [ 456.569180][ C0] ? nf_conntrack_free+0x2f7/0x380 [ 456.569199][ C0] kmem_cache_free+0x309/0x400 [ 456.569214][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 456.569240][ C0] nf_conntrack_free+0x2f7/0x380 [ 456.569261][ C0] nf_conntrack_in+0xa24/0x1600 [ 456.569294][ C0] ? __pfx_nf_conntrack_in+0x10/0x10 [ 456.569321][ C0] ? ipt_do_table+0x2a3/0x1640 [ 456.569341][ C0] ? nf_hook+0x9d/0x380 [ 456.569362][ C0] ? nf_hook+0x9d/0x380 [ 456.569387][ C0] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 456.569411][ C0] ? ipv4_conntrack_local+0x126/0x210 [ 456.569430][ C0] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 456.569450][ C0] nf_hook_slow+0xc2/0x220 [ 456.569470][ C0] nf_hook+0x217/0x380 [ 456.569493][ C0] ? nf_hook+0x9d/0x380 [ 456.569513][ C0] ? __pfx_nf_hook+0x10/0x10 [ 456.569535][ C0] ? __pfx_dst_output+0x10/0x10 [ 456.569559][ C0] ? ip_fast_csum+0x1ee/0x2b0 [ 456.569586][ C0] __ip_local_out+0x4db/0x600 [ 456.569606][ C0] ? __pfx_dst_output+0x10/0x10 [ 456.569646][ C0] ip_local_out+0x26/0x70 [ 456.569667][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 456.569694][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 456.569712][ C0] ? nft_redir_eval+0x28/0x480 [ 456.569729][ C0] ? synproxy_pernet+0x45/0x270 [ 456.569754][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 456.569779][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 456.569800][ C0] ? nf_conntrack_in+0xa24/0x1600 [ 456.569822][ C0] ? nf_ip_checksum+0x13c/0x510 [ 456.569845][ C0] nft_synproxy_do_eval+0x345/0x570 [ 456.569866][ C0] ? wg_packet_handshake_receive_worker+0x627/0xfb0 [ 456.569890][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 456.569914][ C0] ? worker_thread+0x8a0/0xda0 [ 456.569939][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 456.569970][ C0] nft_do_chain+0x40c/0x1920 [ 456.569993][ C0] ? call_rcu+0x6ff/0x9c0 [ 456.570006][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.570033][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 456.570073][ C0] nft_do_chain_inet+0x25d/0x340 [ 456.570094][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 456.570134][ C0] ? ipt_do_table+0x2a3/0x1640 [ 456.570153][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 456.570183][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 456.570205][ C0] nf_hook_slow+0xc2/0x220 [ 456.570239][ C0] NF_HOOK+0x206/0x3a0 [ 456.570256][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 456.570274][ C0] ? NF_HOOK+0x9a/0x3a0 [ 456.570290][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 456.570323][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 456.570344][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 456.570363][ C0] ? skb_dst+0x4f/0xd0 [ 456.570381][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 456.570401][ C0] NF_HOOK+0x30c/0x3a0 [ 456.570419][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 456.570447][ C0] ? NF_HOOK+0x9a/0x3a0 [ 456.570463][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 456.570478][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 456.570496][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 456.570518][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 456.570534][ C0] __netif_receive_skb+0x143/0x380 [ 456.570560][ C0] ? process_backlog+0x2d5/0x14f0 [ 456.570577][ C0] process_backlog+0x60e/0x14f0 [ 456.570601][ C0] ? __pfx_process_backlog+0x10/0x10 [ 456.570622][ C0] ? do_raw_spin_lock+0x121/0x290 [ 456.570644][ C0] __napi_poll+0xc4/0x480 [ 456.570656][ C0] ? net_rx_action+0x46d/0xe30 [ 456.570674][ C0] net_rx_action+0x707/0xe30 [ 456.570699][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 456.570733][ C0] handle_softirqs+0x286/0x870 [ 456.570759][ C0] ? do_softirq+0xec/0x180 [ 456.570785][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 456.570811][ C0] ? kernel_fpu_end+0xc8/0x120 [ 456.570830][ C0] do_softirq+0xec/0x180 [ 456.570852][ C0] [ 456.570857][ C0] [ 456.570864][ C0] ? __pfx_do_softirq+0x10/0x10 [ 456.570887][ C0] ? __pfx_do_softirq+0x10/0x10 [ 456.570912][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 456.570935][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 456.570959][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 456.570982][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 456.571007][ C0] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 456.571026][ C0] kernel_fpu_end+0xd2/0x120 [ 456.571043][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 456.571059][ C0] ? kernel_fpu_end+0xd2/0x120 [ 456.571075][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 456.571095][ C0] blake2s_compress+0x5f/0xd0 [ 456.571112][ C0] blake2s_update+0x14b/0x450 [ 456.571138][ C0] hmac+0x288/0x330 [ 456.571157][ C0] ? __pfx_hmac+0x10/0x10 [ 456.571173][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 456.571203][ C0] ? kernel_fpu_end+0xd2/0x120 [ 456.571226][ C0] ? __asan_memset+0x22/0x50 [ 456.571270][ C0] message_ephemeral+0x1e2/0x280 [ 456.571290][ C0] ? __pfx_message_ephemeral+0x10/0x10 [ 456.571327][ C0] ? __crypto_memneq+0x2fe/0x470 [ 456.571351][ C0] wg_noise_handshake_create_response+0x2ab/0x970 [ 456.571373][ C0] ? ktime_get_coarse_with_offset+0x83/0x140 [ 456.571396][ C0] ? __pfx_wg_noise_handshake_create_response+0x10/0x10 [ 456.571416][ C0] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 456.571435][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.571458][ C0] ? ktime_get_coarse_with_offset+0x83/0x140 [ 456.571482][ C0] ? __pfx___up_read+0x10/0x10 [ 456.571504][ C0] ? wg_noise_handshake_consume_initiation+0x7d0/0x900 [ 456.571529][ C0] ? __lock_acquire+0xab9/0xd20 [ 456.571556][ C0] ? ktime_get_coarse_with_offset+0x83/0x140 [ 456.571578][ C0] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 456.571597][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.571628][ C0] ? ktime_get_coarse_with_offset+0x83/0x140 [ 456.571646][ C0] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 456.571664][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 456.571682][ C0] ? trace_sched_exit_tp+0x38/0x120 [ 456.571708][ C0] ? wg_socket_endpoint_from_skb+0x28b/0x7a0 [ 456.571735][ C0] ? ktime_get_coarse_with_offset+0xfb/0x140 [ 456.571755][ C0] wg_packet_send_handshake_response+0xf6/0x2d0 [ 456.571782][ C0] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 456.571806][ C0] ? wg_socket_set_peer_endpoint_from_skb+0xc8/0x120 [ 456.571843][ C0] wg_packet_handshake_receive_worker+0x627/0xfb0 [ 456.571878][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 456.571904][ C0] ? register_lock_class+0x51/0x320 [ 456.571930][ C0] ? __lock_acquire+0xab9/0xd20 [ 456.571957][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 456.571985][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.572007][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 456.572031][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 456.572057][ C0] process_scheduled_works+0xae1/0x17b0 [ 456.572096][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 456.572130][ C0] worker_thread+0x8a0/0xda0 [ 456.572169][ C0] kthread+0x70e/0x8a0 [ 456.572188][ C0] ? __pfx_worker_thread+0x10/0x10 [ 456.572214][ C0] ? __pfx_kthread+0x10/0x10 [ 456.572232][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.572254][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.572277][ C0] ? __pfx_kthread+0x10/0x10 [ 456.572295][ C0] ret_from_fork+0x3fc/0x770 [ 456.572320][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 456.572346][ C0] ? __switch_to_asm+0x39/0x70 [ 456.572363][ C0] ? __switch_to_asm+0x33/0x70 [ 456.572379][ C0] ? __pfx_kthread+0x10/0x10 [ 456.572397][ C0] ret_from_fork_asm+0x1a/0x30 [ 456.572423][ C0] [ 457.665202][ T51] Bluetooth: hci13: command 0x0406 tx timeout [ 457.671538][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 457.678425][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 457.690280][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 457.700377][ T31] Call Trace: [ 457.703698][ T31] [ 457.706656][ T31] dump_stack_lvl+0x99/0x250 [ 457.711308][ T31] ? __asan_memcpy+0x40/0x70 [ 457.715942][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.721184][ T31] ? __pfx__printk+0x10/0x10 [ 457.725869][ T31] panic+0x2db/0x790 [ 457.729819][ T31] ? __pfx_panic+0x10/0x10 [ 457.734276][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 457.740134][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 457.745553][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 457.751764][ T31] watchdog+0x102d/0x1030 [ 457.756140][ T31] ? watchdog+0x1de/0x1030 [ 457.760607][ T31] kthread+0x70e/0x8a0 [ 457.764720][ T31] ? __pfx_watchdog+0x10/0x10 [ 457.769439][ T31] ? __pfx_kthread+0x10/0x10 [ 457.774068][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.779305][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.784544][ T31] ? __pfx_kthread+0x10/0x10 [ 457.789169][ T31] ret_from_fork+0x3fc/0x770 [ 457.793809][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 457.798972][ T31] ? __switch_to_asm+0x39/0x70 [ 457.803771][ T31] ? __switch_to_asm+0x33/0x70 [ 457.808562][ T31] ? __pfx_kthread+0x10/0x10 [ 457.813187][ T31] ret_from_fork_asm+0x1a/0x30 [ 457.818011][ T31] [ 457.821389][ T31] Kernel Offset: disabled [ 457.825730][ T31] Rebooting in 86400 seconds..