last executing test programs: 1m21.790877076s ago: executing program 4 (id=593): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) 1m21.478578681s ago: executing program 4 (id=598): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000240)={0x1, 0x1}, 0x2) 1m21.085869028s ago: executing program 4 (id=602): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f00000026c0), 0xf, 0x40) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 1m20.780859771s ago: executing program 4 (id=605): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x11) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) 1m19.274887519s ago: executing program 4 (id=612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000680)='sys_exit\x00', r0, 0x0, 0x5}, 0x18) get_robust_list(0x0, &(0x7f0000000280)=0x0, &(0x7f0000000400)) 1m18.512758529s ago: executing program 4 (id=615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x24}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x10) 1m3.20567526s ago: executing program 32 (id=615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x24}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x10) 56.921259279s ago: executing program 3 (id=663): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x41}}], 0x88}, 0x0) 55.328655567s ago: executing program 3 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000800000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 55.325399959s ago: executing program 3 (id=669): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 55.272053724s ago: executing program 3 (id=671): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0xfad3, 0x1, 0x0, 0x0, "f6a6756c9832488c"}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="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", 0x215}], 0x1) 54.64439265s ago: executing program 3 (id=673): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000400000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000080b3e00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000758f45ef8500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) 54.091379539s ago: executing program 3 (id=676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 49.529433888s ago: executing program 2 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250d000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 45.770018798s ago: executing program 1 (id=705): ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000080)={0x104, 0x2, {0xffffffffffffffff, 0x3, 0x4, 0x3, 0xffffffff}, 0x4}) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 38.76034663s ago: executing program 33 (id=676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 38.661059624s ago: executing program 1 (id=699): r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x5) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"], 0x18}}], 0x2, 0x844) 37.18157468s ago: executing program 2 (id=700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0104000000000000000002000000300004802c0001800c00010062697477697365001c00028008000340000000f6080001400000000008000240000000000900010073797a30000000000900020073797a3200000000050007"], 0x8c}}, 0x0) 37.143952817s ago: executing program 1 (id=701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x3ffff, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 27.884077981s ago: executing program 2 (id=702): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4) 27.747500103s ago: executing program 0 (id=703): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0) 27.687764987s ago: executing program 1 (id=706): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, 0x0, 0xcbfb, 0x1, 0x60, 0x0, 0x5c}) 27.274276963s ago: executing program 1 (id=707): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') rt_sigaction(0x40, &(0x7f00000000c0)={0x0, 0x8000000, 0x0, {[0x9]}}, 0x0, 0x8, &(0x7f0000000200)) read$FUSE(r0, &(0x7f0000006980)={0x2020}, 0x2020) 26.955769721s ago: executing program 1 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_setup(0x10000, &(0x7f0000000800)) io_setup(0x7a, &(0x7f0000002080)) 26.596245027s ago: executing program 2 (id=709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x5}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 26.112897352s ago: executing program 2 (id=710): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 15.860581138s ago: executing program 0 (id=711): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 15.842866422s ago: executing program 2 (id=712): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 15.823667368s ago: executing program 0 (id=713): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x9, 0xfc, 0x3, 0x0, 0x3, 0x2800}, [@RTA_IIF={0x8, 0x3, r1}, @RTA_SRC={0x8, 0x2, @loopback}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 15.823503615s ago: executing program 0 (id=714): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x24004040) 15.431139968s ago: executing program 0 (id=715): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) shutdown(r0, 0x2) 14.984480123s ago: executing program 0 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 11.688395625s ago: executing program 34 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_setup(0x10000, &(0x7f0000000800)) io_setup(0x7a, &(0x7f0000002080)) 1.187570048s ago: executing program 35 (id=712): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 0s ago: executing program 36 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 84.808924][ T5826] cgroup: Unknown subsys name 'net' [ 85.065221][ T5826] cgroup: Unknown subsys name 'cpuset' [ 85.130784][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.043079][ T31] cfg80211: failed to load regulatory.db [ 87.072993][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.311961][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.316313][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.319145][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.329888][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.334823][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.335520][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.336767][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.337534][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.371365][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.373624][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.382440][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.387420][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.388025][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.389240][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.390862][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.420203][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.421579][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.422317][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.423509][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.425231][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.427327][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.429054][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.429722][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.431109][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.438220][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.432668][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 92.438370][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 92.572368][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 92.799427][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 92.827994][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 93.351342][ T59] Bluetooth: hci2: command tx timeout [ 93.430311][ T59] Bluetooth: hci0: command tx timeout [ 93.511308][ T59] Bluetooth: hci3: command tx timeout [ 93.511436][ T5153] Bluetooth: hci4: command tx timeout [ 93.511447][ T59] Bluetooth: hci1: command tx timeout [ 93.570698][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.570888][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.571910][ T5838] bridge_slave_0: entered allmulticast mode [ 93.575261][ T5838] bridge_slave_0: entered promiscuous mode [ 93.619391][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.619495][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.619613][ T5846] bridge_slave_0: entered allmulticast mode [ 93.632871][ T5846] bridge_slave_0: entered promiscuous mode [ 93.743097][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.743283][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.743511][ T5838] bridge_slave_1: entered allmulticast mode [ 93.746784][ T5838] bridge_slave_1: entered promiscuous mode [ 93.773909][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.774049][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.774228][ T5846] bridge_slave_1: entered allmulticast mode [ 93.777263][ T5846] bridge_slave_1: entered promiscuous mode [ 94.201660][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.201902][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.202099][ T5839] bridge_slave_0: entered allmulticast mode [ 94.205427][ T5839] bridge_slave_0: entered promiscuous mode [ 94.544556][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.544743][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.544954][ T5839] bridge_slave_1: entered allmulticast mode [ 94.548198][ T5839] bridge_slave_1: entered promiscuous mode [ 94.555229][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.555692][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.555827][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.555991][ T5849] bridge_slave_0: entered allmulticast mode [ 94.558780][ T5849] bridge_slave_0: entered promiscuous mode [ 94.619570][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.619834][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.621631][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.621817][ T5837] bridge_slave_0: entered allmulticast mode [ 94.624622][ T5837] bridge_slave_0: entered promiscuous mode [ 94.725288][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.725583][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.725695][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.725848][ T5849] bridge_slave_1: entered allmulticast mode [ 94.727501][ T5849] bridge_slave_1: entered promiscuous mode [ 94.742908][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.743420][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.743633][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.743816][ T5837] bridge_slave_1: entered allmulticast mode [ 94.746974][ T5837] bridge_slave_1: entered promiscuous mode [ 95.137202][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.431629][ T5851] Bluetooth: hci2: command tx timeout [ 95.452036][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.455276][ T5838] team0: Port device team_slave_0 added [ 95.463060][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.466939][ T5846] team0: Port device team_slave_0 added [ 95.475676][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.510391][ T5851] Bluetooth: hci0: command tx timeout [ 95.565569][ T5838] team0: Port device team_slave_1 added [ 95.571942][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.574641][ T5846] team0: Port device team_slave_1 added [ 95.578698][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.590985][ T5851] Bluetooth: hci4: command tx timeout [ 95.591031][ T5851] Bluetooth: hci1: command tx timeout [ 95.591110][ T5851] Bluetooth: hci3: command tx timeout [ 96.275417][ T5839] team0: Port device team_slave_0 added [ 96.585589][ T5839] team0: Port device team_slave_1 added [ 96.588929][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.588945][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.588972][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.645526][ T5849] team0: Port device team_slave_0 added [ 96.648204][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.648218][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.648245][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.653440][ T5837] team0: Port device team_slave_0 added [ 96.772517][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.772534][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.772562][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.776117][ T5849] team0: Port device team_slave_1 added [ 96.777073][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.777084][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.777099][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.779304][ T5837] team0: Port device team_slave_1 added [ 97.122534][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.122552][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.122566][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.409243][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.409262][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.409289][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.417560][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.417575][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.417598][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.431051][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.431067][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.431090][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.522225][ T5153] Bluetooth: hci2: command tx timeout [ 97.583436][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.583454][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.583479][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.591290][ T5153] Bluetooth: hci0: command tx timeout [ 97.671499][ T5153] Bluetooth: hci3: command tx timeout [ 97.671535][ T5153] Bluetooth: hci1: command tx timeout [ 97.671555][ T5153] Bluetooth: hci4: command tx timeout [ 97.701736][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.701750][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.701765][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.940638][ T5838] hsr_slave_0: entered promiscuous mode [ 97.942514][ T5838] hsr_slave_1: entered promiscuous mode [ 97.959150][ T5846] hsr_slave_0: entered promiscuous mode [ 97.961722][ T5846] hsr_slave_1: entered promiscuous mode [ 97.962719][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 97.962813][ T5846] Cannot create hsr debugfs directory [ 98.460782][ T5839] hsr_slave_0: entered promiscuous mode [ 98.462383][ T5839] hsr_slave_1: entered promiscuous mode [ 98.463823][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 98.463851][ T5839] Cannot create hsr debugfs directory [ 98.649736][ T5849] hsr_slave_0: entered promiscuous mode [ 98.651498][ T5849] hsr_slave_1: entered promiscuous mode [ 98.652460][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 98.652482][ T5849] Cannot create hsr debugfs directory [ 98.683157][ T5837] hsr_slave_0: entered promiscuous mode [ 98.684823][ T5837] hsr_slave_1: entered promiscuous mode [ 98.685838][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 98.685864][ T5837] Cannot create hsr debugfs directory [ 99.590583][ T5851] Bluetooth: hci2: command tx timeout [ 99.670190][ T5851] Bluetooth: hci0: command tx timeout [ 99.751097][ T5851] Bluetooth: hci4: command tx timeout [ 99.751133][ T5851] Bluetooth: hci1: command tx timeout [ 99.751155][ T5851] Bluetooth: hci3: command tx timeout [ 100.373941][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.411143][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.459151][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.513079][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.680503][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.728730][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.771019][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.826758][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.000953][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.048130][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.107797][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.155597][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.363723][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.415418][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.460899][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.519880][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.703688][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.727625][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.784191][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.845377][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.899476][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.011036][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.064163][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.064706][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.114161][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.140637][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.140875][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.251400][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.312002][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.312487][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.368879][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.398990][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.399235][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.527705][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.537431][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.625663][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.626470][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.723657][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.723837][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.757335][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.827500][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.853586][ T2830] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.853899][ T2830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.906374][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.906914][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.033746][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.088449][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.089325][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.154792][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.154994][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.216539][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.656559][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.657493][ T5838] veth0_vlan: entered promiscuous mode [ 103.716948][ T5838] veth1_vlan: entered promiscuous mode [ 104.008391][ T5838] veth0_macvtap: entered promiscuous mode [ 104.058941][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.086143][ T5838] veth1_macvtap: entered promiscuous mode [ 104.119681][ T5849] veth0_vlan: entered promiscuous mode [ 104.180912][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.214270][ T5849] veth1_vlan: entered promiscuous mode [ 104.289496][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.347947][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.437295][ T4742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.453337][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.453618][ T4742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.477533][ T4742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.520598][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.629160][ T5849] veth0_macvtap: entered promiscuous mode [ 104.712044][ T5849] veth1_macvtap: entered promiscuous mode [ 104.742595][ T5837] veth0_vlan: entered promiscuous mode [ 104.911476][ T5837] veth1_vlan: entered promiscuous mode [ 104.944089][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.962471][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.962492][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.005679][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.104655][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.109374][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.109951][ T5846] veth0_vlan: entered promiscuous mode [ 105.118387][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.143622][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.143642][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.156780][ T44] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.187534][ T5839] veth0_vlan: entered promiscuous mode [ 105.264801][ T5846] veth1_vlan: entered promiscuous mode [ 105.362395][ T5839] veth1_vlan: entered promiscuous mode [ 105.403223][ T5837] veth0_macvtap: entered promiscuous mode [ 105.471133][ T5837] veth1_macvtap: entered promiscuous mode [ 105.599463][ T2830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.599483][ T2830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.731910][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.840846][ T5846] veth0_macvtap: entered promiscuous mode [ 105.844376][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.844397][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.859566][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.941726][ T5839] veth0_macvtap: entered promiscuous mode [ 105.946012][ T5846] veth1_macvtap: entered promiscuous mode [ 106.000943][ T3540] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.012477][ T3540] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.017982][ T5839] veth1_macvtap: entered promiscuous mode [ 106.033294][ T3540] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.037132][ T3540] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.236599][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.342588][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.345384][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.517474][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.553482][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.564449][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.602020][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.634436][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.720674][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.751116][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.757604][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.820914][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.840412][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.840433][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.411987][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.412010][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.480938][ T5977] sp0: Synchronizing with TNC [ 107.518094][ T5976] [U] è [ 107.742436][ T984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.742457][ T984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.993943][ T10] kernel write not supported for file /19/clear_refs (pid: 10 comm: kworker/0:1) [ 108.036558][ T2830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.036579][ T2830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.168647][ T984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.168668][ T984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.405437][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.405460][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.953374][ T5999] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 111.307400][ T6059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.44'. [ 112.346465][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 112.346489][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 112.346650][ T6082] netlink: 'syz.3.57': attribute type 12 has an invalid length. [ 112.346665][ T6082] netlink: 'syz.3.57': attribute type 13 has an invalid length. [ 112.810538][ T5928] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.980873][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 112.987009][ T5928] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.025589][ T5928] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 113.025620][ T5928] usb 2-1: config 4 has no interface number 0 [ 113.025656][ T5928] usb 2-1: config 4 interface 30 has no altsetting 0 [ 113.069178][ T5928] usb 2-1: string descriptor 0 read error: -22 [ 113.069377][ T5928] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 113.069400][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.217427][ T5928] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 113.217480][ T5928] dw2102: su3000_power_ctrl: 1, initialized 0 [ 113.217919][ T5928] dvb-usb: bulk message failed: -22 (2/0) [ 113.259369][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.281032][ T5928] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 113.281113][ T5928] usb 2-1: media controller created [ 113.282432][ T5928] dvb-usb: bulk message failed: -22 (6/0) [ 113.282452][ T5928] dw2102: i2c transfer failed. [ 113.282474][ T5928] dvb-usb: bulk message failed: -22 (6/0) [ 113.282488][ T5928] dw2102: i2c transfer failed. [ 113.282506][ T5928] dvb-usb: bulk message failed: -22 (6/0) [ 113.282521][ T5928] dw2102: i2c transfer failed. [ 113.282539][ T5928] dvb-usb: bulk message failed: -22 (6/0) [ 113.282553][ T5928] dw2102: i2c transfer failed. [ 113.282571][ T5928] dvb-usb: bulk message failed: -22 (6/0) [ 113.282585][ T5928] dw2102: i2c transfer failed. [ 113.282603][ T5928] dvb-usb: bulk message failed: -22 (6/0) [ 113.282617][ T5928] dw2102: i2c transfer failed. [ 113.282628][ T5928] dvb-usb: MAC address: 02:02:02:02:02:02 [ 113.392566][ T6086] dw2102: i2c wr: len=66 is too big! [ 113.392566][ T6086] [ 113.429690][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.461593][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 113.461618][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 113.461645][ T6104] netlink: 'syz.0.65': attribute type 13 has an invalid length. [ 113.533471][ T5928] dvb-usb: bulk message failed: -22 (3/0) [ 113.533496][ T5928] dw2102: command 0x0e transfer failed. [ 113.533506][ T5928] dvb-usb: bulk message failed: -22 (3/0) [ 113.533529][ T5928] dw2102: command 0x0e transfer failed. [ 113.855986][ T5928] dvb-usb: bulk message failed: -22 (3/0) [ 113.856011][ T5928] dw2102: command 0x0e transfer failed. [ 113.856021][ T5928] dvb-usb: bulk message failed: -22 (3/0) [ 113.856034][ T5928] dw2102: command 0x0e transfer failed. [ 113.856042][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 113.856056][ T5928] dw2102: command 0x51 transfer failed. [ 113.856064][ T5928] dvb-usb: bulk message failed: -22 (5/0) [ 113.856077][ T5928] dw2102: i2c probe for address 0x68 failed. [ 113.856089][ T5928] dvb-usb: bulk message failed: -22 (5/0) [ 113.856101][ T5928] dw2102: i2c probe for address 0x69 failed. [ 113.856111][ T5928] dvb-usb: bulk message failed: -22 (5/0) [ 113.856125][ T5928] dw2102: i2c probe for address 0x6a failed. [ 113.856134][ T5928] dw2102: probing for demodulator failed. Is the external power switched on? [ 113.856144][ T5928] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 114.010146][ T5952] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.120271][ T5928] rc_core: IR keymap rc-tt-1500 not found [ 114.120294][ T5928] Registered IR keymap rc-empty [ 114.149076][ T5928] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 114.174352][ T5928] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 114.190194][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 114.194150][ T5952] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 114.197776][ T5952] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 114.197801][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.197818][ T5952] usb 4-1: Product: syz [ 114.197831][ T5952] usb 4-1: Manufacturer: syz [ 114.197843][ T5952] usb 4-1: SerialNumber: syz [ 114.238621][ T5952] usb 4-1: config 0 descriptor?? [ 114.252451][ T5928] dvb-usb: schedule remote query interval to 250 msecs. [ 114.252475][ T5928] dw2102: su3000_power_ctrl: 0, initialized 1 [ 114.252489][ T5928] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 114.287128][ T5928] usb 2-1: USB disconnect, device number 2 [ 114.325442][ T5952] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 114.325518][ T5952] usb 4-1: setting power ON [ 114.325538][ T5952] dvb-usb: bulk message failed: -22 (2/0) [ 114.399720][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.446886][ T5952] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 114.446957][ T5952] usb 4-1: media controller created [ 114.515871][ T6102] dw2102: i2c wr: len=78 is too big! [ 114.515871][ T6102] [ 114.666455][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.821079][ T5952] usb 4-1: selecting invalid altsetting 6 [ 114.821104][ T5952] usb 4-1: digital interface selection failed (-22) [ 114.821119][ T5952] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 114.822376][ T5952] usb 4-1: setting power OFF [ 114.822589][ T5952] dvb-usb: bulk message failed: -22 (2/0) [ 114.822608][ T5952] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 114.822619][ T5952] (NULL device *): no alternate interface [ 114.899161][ T6124] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 114.923187][ T5928] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 115.108183][ T5952] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 115.207387][ T5952] usb 4-1: USB disconnect, device number 2 [ 115.930394][ T6149] netlink: 72 bytes leftover after parsing attributes in process `syz.1.85'. [ 115.930417][ T6149] tc_dump_action: action bad kind [ 116.730256][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96'. [ 118.165950][ T6211] netlink: 44 bytes leftover after parsing attributes in process `syz.3.116'. [ 118.165979][ T6211] netlink: 43 bytes leftover after parsing attributes in process `syz.3.116'. [ 118.165995][ T6211] netlink: 'syz.3.116': attribute type 6 has an invalid length. [ 118.166008][ T6211] netlink: 'syz.3.116': attribute type 5 has an invalid length. [ 118.166020][ T6211] netlink: 43 bytes leftover after parsing attributes in process `syz.3.116'. [ 118.842582][ T37] audit: type=1326 audit(1757067725.049:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6224 comm="syz.4.122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5963d7ebe9 code=0x0 [ 120.102627][ T6257] netlink: 'syz.4.135': attribute type 10 has an invalid length. [ 120.158317][ T6256] netlink: 256 bytes leftover after parsing attributes in process `syz.2.136'. [ 120.158340][ T6256] netlink: 80 bytes leftover after parsing attributes in process `syz.2.136'. [ 120.356028][ T6257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.412176][ T6257] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 120.536026][ T6264] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 121.113126][ T6281] capability: warning: `syz.3.149' uses 32-bit capabilities (legacy support in use) [ 121.491834][ T5928] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.667722][ T5928] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 121.667754][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.667772][ T5928] usb 3-1: Product: syz [ 121.667784][ T5928] usb 3-1: Manufacturer: syz [ 121.667797][ T5928] usb 3-1: SerialNumber: syz [ 121.735069][ T5928] usb 3-1: config 0 descriptor?? [ 122.004267][ T5913] usb 3-1: USB disconnect, device number 2 [ 122.229761][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.430169][ T6031] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.590092][ T6031] usb 2-1: Using ep0 maxpacket: 16 [ 122.593008][ T6031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.593057][ T6031] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 122.593079][ T6031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.611787][ T6031] usb 2-1: config 0 descriptor?? [ 122.941913][ T5928] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.127827][ T6031] waltop 0003:172F:0501.0001: unknown main item tag 0x0 [ 123.127871][ T6031] waltop 0003:172F:0501.0001: unknown main item tag 0x0 [ 123.127896][ T6031] waltop 0003:172F:0501.0001: unknown main item tag 0x0 [ 123.127921][ T6031] waltop 0003:172F:0501.0001: unknown main item tag 0x0 [ 123.127947][ T6031] waltop 0003:172F:0501.0001: unknown main item tag 0x0 [ 123.160169][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 123.177053][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.177098][ T5928] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 123.177120][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.180997][ T6031] waltop 0003:172F:0501.0001: hidraw0: USB HID v0.08 Device [HID 172f:0501] on usb-dummy_hcd.1-1/input0 [ 123.225280][ T5928] usb 5-1: config 0 descriptor?? [ 123.307466][ T6327] netlink: 'syz.2.171': attribute type 29 has an invalid length. [ 123.322893][ T6327] netlink: 'syz.2.171': attribute type 29 has an invalid length. [ 123.384058][ T5913] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 123.555278][ T5913] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.555313][ T5913] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 123.555339][ T5913] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.555375][ T5913] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 123.555399][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.574325][ T5913] usb 4-1: config 0 descriptor?? [ 123.575634][ T6324] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 123.639832][ T6031] usb 2-1: USB disconnect, device number 3 [ 123.705144][ T5928] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 123.705181][ T5928] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 123.705204][ T5928] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 123.705228][ T5928] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 123.705252][ T5928] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 123.753266][ T5928] arvo 0003:1E7D:30D4.0002: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 123.912627][ T5928] usb 5-1: USB disconnect, device number 2 [ 124.293947][ T5913] uclogic 0003:28BD:0074.0003: interface is invalid, ignoring [ 124.348862][ T5913] usb 4-1: USB disconnect, device number 3 [ 124.476204][ T6340] ======================================================= [ 124.476204][ T6340] WARNING: The mand mount option has been deprecated and [ 124.476204][ T6340] and is ignored by this kernel. Remove the mand [ 124.476204][ T6340] option from the mount to silence this warning. [ 124.476204][ T6340] ======================================================= [ 124.476791][ T5928] kernel write not supported for file /stat (pid: 5928 comm: kworker/1:5) [ 124.563354][ T6337] fido_id[6337]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 125.091780][ T6349] fido_id[6349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 125.164413][ T6357] program syz.3.183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.670158][ T5928] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.826264][ T5928] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 126.826319][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.826341][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 126.826386][ T5928] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 126.826409][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.892530][ T5928] usb 4-1: config 0 descriptor?? [ 126.925886][ T6410] vivid-004: disconnect [ 126.936671][ T6409] vivid-004: reconnect [ 127.362289][ T5928] holtek_kbd 0003:04D9:A055.0004: item fetching failed at offset 5/7 [ 127.363325][ T5928] holtek_kbd 0003:04D9:A055.0004: probe with driver holtek_kbd failed with error -22 [ 127.580162][ T6031] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.604881][ T6423] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 127.679965][ T10] usb 4-1: USB disconnect, device number 4 [ 127.735607][ T6031] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.735637][ T6031] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.742796][ T6031] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 127.742823][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 127.742840][ T6031] usb 5-1: SerialNumber: syz [ 128.079927][ T6434] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 128.117898][ T6031] usb 5-1: 0:2 : does not exist [ 128.443569][ T6031] usb 5-1: USB disconnect, device number 3 [ 128.690517][ T6343] udevd[6343]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.226845][ T5926] IPVS: starting estimator thread 0... [ 129.320422][ T6456] IPVS: using max 6 ests per chain, 14400 per kthread [ 130.465920][ T6487] mmap: syz.3.238 (6487) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.601886][ T6492] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.828287][ T6524] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 131.828352][ T6524] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 131.828405][ T6524] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 131.828606][ T6524] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 131.828661][ T6524] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 131.828719][ T6524] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 131.943355][ T6526] bridge0: entered promiscuous mode [ 131.943580][ T6526] macvlan2: entered promiscuous mode [ 132.220220][ T5928] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 132.386189][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.386242][ T5928] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 132.386265][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.428694][ T5928] usb 4-1: config 0 descriptor?? [ 132.921951][ T5928] nintendo 0003:057E:200E.0005: unbalanced collection at end of report description [ 132.922916][ T5928] nintendo 0003:057E:200E.0005: HID parse failed [ 132.928487][ T5928] nintendo 0003:057E:200E.0005: probe - fail = -22 [ 132.928618][ T5928] nintendo 0003:057E:200E.0005: probe with driver nintendo failed with error -22 [ 133.089549][ T5928] usb 4-1: USB disconnect, device number 5 [ 133.118314][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.118425][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.247610][ T6561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.271'. [ 133.254348][ T6561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.271'. [ 133.670271][ T5153] Bluetooth: hci1: command tx timeout [ 134.062175][ T6582] capability: warning: `syz.1.279' uses deprecated v2 capabilities in a way that may be insecure [ 134.246570][ T6585] syz.4.284 (6585) used greatest stack depth: 18584 bytes left [ 134.490227][ T5928] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.658341][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.658382][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.658427][ T5928] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 134.658451][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.713836][ T5928] usb 3-1: config 0 descriptor?? [ 134.745393][ T6089] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 134.745428][ T6089] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 134.745452][ T6089] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 134.767332][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 134.826587][ T6089] hid-generic 0000:0004:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 135.176687][ T5928] logitech 0003:046D:C29C.0007: unknown main item tag 0x0 [ 135.176724][ T5928] logitech 0003:046D:C29C.0007: unknown main item tag 0x0 [ 135.212668][ T5928] logitech 0003:046D:C29C.0007: hidraw0: USB HID v10.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 135.371129][ T5928] logitech 0003:046D:C29C.0007: no inputs found [ 135.420586][ T5928] usb 3-1: USB disconnect, device number 3 [ 135.636938][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'. [ 135.785249][ T6613] fido_id[6613]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 136.041187][ T6629] netlink: 'syz.4.301': attribute type 10 has an invalid length. [ 136.161868][ T6629] team0: Port device syz_tun added [ 136.343037][ T6638] Bluetooth: MGMT ver 1.23 [ 136.403866][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 136.403895][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 136.756447][ T6640] fido_id[6640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 137.026432][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 137.026520][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.317'. [ 137.080572][ T6660] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 137.080572][ T6660] The task syz.4.318 (6660) triggered the difference, watch for misbehavior. [ 137.480407][ T6668] netlink: 'syz.0.323': attribute type 1 has an invalid length. [ 137.480431][ T6668] netlink: 'syz.0.323': attribute type 2 has an invalid length. [ 137.480446][ T6668] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.323'. [ 138.010289][ T5928] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.071479][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 138.071514][ T6686] netlink: 'syz.4.331': attribute type 12 has an invalid length. [ 138.071527][ T6686] netlink: 'syz.4.331': attribute type 11 has an invalid length. [ 138.170295][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 138.173379][ T5928] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 138.173414][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.173451][ T5928] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 138.173474][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.229021][ T5928] usb 4-1: config 0 descriptor?? [ 138.678692][ T5928] logitech 0003:046D:C626.0008: item fetching failed at offset 5/7 [ 138.694512][ T5928] logitech 0003:046D:C626.0008: parse failed [ 138.694636][ T5928] logitech 0003:046D:C626.0008: probe with driver logitech failed with error -22 [ 138.883114][ T6089] usb 4-1: USB disconnect, device number 6 [ 139.249092][ T6706] rdma_op ffff88805d9ca270 conn xmit_rdma 0000000000000000 [ 140.020324][ T5928] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.126969][ T6727] wireguard: wg2: Could not create IPv4 socket [ 140.170117][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 140.174440][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.174474][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.174516][ T5928] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 140.174539][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.226111][ T5928] usb 5-1: config 0 descriptor?? [ 140.619365][ T6736] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 140.744169][ T5928] waltop 0003:172F:0034.0009: item fetching failed at offset 0/2 [ 140.745201][ T5928] waltop 0003:172F:0034.0009: probe with driver waltop failed with error -22 [ 140.936987][ T5952] usb 5-1: USB disconnect, device number 4 [ 141.540979][ T6759] process 'syz.3.366' launched '/dev/fd/3' with NULL argv: empty string added [ 141.952195][ T50] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 142.100494][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 142.103800][ T50] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.103827][ T50] usb 5-1: config 0 has no interface number 0 [ 142.103879][ T50] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.103906][ T50] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.103929][ T50] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.103973][ T50] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 142.103996][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.186544][ T50] usb 5-1: config 0 descriptor?? [ 142.679325][ T50] holtek_mouse 0003:04D9:A072.000A: item fetching failed at offset 3/4 [ 142.696131][ T50] holtek_mouse 0003:04D9:A072.000A: hid parse failed: -22 [ 142.696221][ T50] holtek_mouse 0003:04D9:A072.000A: probe with driver holtek_mouse failed with error -22 [ 142.875976][ T50] usb 5-1: USB disconnect, device number 5 [ 144.229875][ T6814] __nla_validate_parse: 1 callbacks suppressed [ 144.229895][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 145.459585][ T6838] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 146.888641][ T6882] program syz.1.418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.538160][ T6898] bond0: option all_slaves_active: invalid value (7) [ 147.539117][ T3540] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.539167][ T3540] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.539205][ T3540] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.539240][ T3540] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.603245][ T6896] Zero length message leads to an empty skb [ 148.030613][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'. [ 149.520385][ T6946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.450'. [ 149.830239][ T6957] tipc: Started in network mode [ 149.830280][ T6957] tipc: Node identity 1a5e72eb9db7, cluster identity 4711 [ 149.857340][ T6957] tipc: Enabled bearer , priority 10 [ 150.446192][ T5913] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.610250][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 150.612938][ T5913] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.612963][ T5913] usb 5-1: config 0 has no interface number 0 [ 150.616582][ T5913] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 150.616700][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.616721][ T5913] usb 5-1: Product: syz [ 150.616736][ T5913] usb 5-1: Manufacturer: syz [ 150.616751][ T5913] usb 5-1: SerialNumber: syz [ 150.691337][ T5913] usb 5-1: config 0 descriptor?? [ 150.921129][ T5913] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 150.921584][ T5952] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.923928][ T5913] gspca_spca1528: reg_w err -71 [ 150.949055][ T5913] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 150.963215][ T10] tipc: Node number set to 2280223467 [ 150.980620][ T5913] usb 5-1: USB disconnect, device number 6 [ 151.075329][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.075380][ T5952] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 151.075403][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.129502][ T5952] usb 3-1: config 0 descriptor?? [ 151.564735][ T5952] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 151.564774][ T5952] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 151.564800][ T5952] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 151.564825][ T5952] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 151.564849][ T5952] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 151.639402][ T5952] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 151.762540][ T5952] lenovo 0003:17EF:6047.000B: Failed to switch F7/9/11 mode: -71 [ 151.766779][ T5952] lenovo 0003:17EF:6047.000B: Failed to switch middle button: -71 [ 151.768281][ T5952] lenovo 0003:17EF:6047.000B: Fn-lock setting failed: -71 [ 151.792989][ T5952] lenovo 0003:17EF:6047.000B: Sensitivity setting failed: -71 [ 151.853060][ T5952] usb 3-1: USB disconnect, device number 4 [ 151.994809][ T6997] fido_id[6997]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 152.743563][ T7016] warning: `syz.3.482' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.228806][ T37] audit: type=1326 audit(1757067759.469:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910b49ebe9 code=0x7ffc0000 [ 153.234548][ T37] audit: type=1326 audit(1757067759.479:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910b49ebe9 code=0x7ffc0000 [ 153.252153][ T37] audit: type=1326 audit(1757067759.499:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f910b49ebe9 code=0x7ffc0000 [ 153.252213][ T37] audit: type=1326 audit(1757067759.499:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910b49ebe9 code=0x7ffc0000 [ 153.252254][ T37] audit: type=1326 audit(1757067759.499:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910b49ebe9 code=0x7ffc0000 [ 153.256195][ T37] audit: type=1326 audit(1757067759.499:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f910b49ebe9 code=0x7ffc0000 [ 153.256260][ T37] audit: type=1326 audit(1757067759.499:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910b49ebe9 code=0x7ffc0000 [ 153.256307][ T37] audit: type=1326 audit(1757067759.499:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910b49ebe9 code=0x7ffc0000 [ 154.103834][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.500'. [ 154.103871][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 154.240180][ T5928] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.396444][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.396498][ T5928] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 154.396521][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.408115][ T5928] usb 2-1: config 0 descriptor?? [ 154.924424][ T5928] lenovo 0003:17EF:60A3.000C: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.1-1/input0 [ 155.090104][ T50] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 155.133050][ T6089] usb 2-1: USB disconnect, device number 4 [ 155.256814][ T7074] netlink: 44 bytes leftover after parsing attributes in process `syz.3.510'. [ 155.279067][ T50] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 155.279103][ T50] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.279127][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.279161][ T50] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 155.279184][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.340330][ T50] usb 5-1: config 0 descriptor?? [ 155.802018][ T50] kovaplus 0003:1E7D:2D50.000D: unknown main item tag 0x0 [ 155.802054][ T50] kovaplus 0003:1E7D:2D50.000D: unknown main item tag 0x0 [ 155.802079][ T50] kovaplus 0003:1E7D:2D50.000D: unknown main item tag 0x0 [ 155.806694][ T50] kovaplus 0003:1E7D:2D50.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 156.044831][ T5952] usb 5-1: USB disconnect, device number 7 [ 156.157043][ T7085] fido_id[7085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 160.101239][ T37] audit: type=1326 audit(1757067766.329:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7150 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5963d7ebe9 code=0x7ffc0000 [ 160.101311][ T37] audit: type=1326 audit(1757067766.349:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7150 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5963d7ebe9 code=0x7ffc0000 [ 160.102415][ T37] audit: type=1326 audit(1757067766.349:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7150 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5963d7ebe9 code=0x7ffc0000 [ 160.106917][ T37] audit: type=1326 audit(1757067766.349:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7150 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5963d7ebe9 code=0x7ffc0000 [ 160.107392][ T37] audit: type=1326 audit(1757067766.349:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7150 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5963d7ebe9 code=0x7ffc0000 [ 160.158260][ T37] audit: type=1326 audit(1757067766.399:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7150 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5963d7ebe9 code=0x7ffc0000 [ 160.158311][ T37] audit: type=1326 audit(1757067766.399:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7150 comm="syz.4.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5963d7ebe9 code=0x7ffc0000 [ 162.551860][ T6089] IPVS: starting estimator thread 0... [ 162.650389][ T7201] IPVS: using max 6 ests per chain, 14400 per kthread [ 163.460777][ T7222] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.575'. [ 163.489059][ T7221] netlink: 'syz.3.577': attribute type 29 has an invalid length. [ 163.503333][ T7221] netlink: 'syz.3.577': attribute type 29 has an invalid length. [ 163.995049][ T7111] syz.2.527 (7111): drop_caches: 1 [ 164.691725][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'. [ 165.767787][ T7262] syz.0.595 (7262): drop_caches: 1 [ 167.171091][ T50] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 167.307786][ T7262] syz.0.595 (7262): drop_caches: 1 [ 167.333242][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 167.333278][ T50] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 167.333322][ T50] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c23, bcdDevice= 0.00 [ 167.333345][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.534768][ T50] usb 2-1: config 0 descriptor?? [ 167.536222][ T7290] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.116424][ T50] corsair-psu 0003:1B1C:1C23.000E: unbalanced collection at end of report description [ 168.117532][ T50] corsair-psu 0003:1B1C:1C23.000E: probe with driver corsair-psu failed with error -22 [ 168.288759][ T50] usb 2-1: USB disconnect, device number 5 [ 169.410190][ T50] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 169.563155][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 169.563191][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.563232][ T50] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 169.563255][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.569864][ T50] usb 2-1: config 0 descriptor?? [ 170.380883][ T50] usb 2-1: USB disconnect, device number 6 [ 172.702072][ T7319] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.256565][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 178.481040][ T7349] netlink: 'syz.2.636': attribute type 1 has an invalid length. [ 178.728857][ T37] audit: type=1326 audit(1757067784.949:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7350 comm="syz.2.637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4131cebe9 code=0x0 [ 179.549998][ C0] sched: DL replenish lagged too much [ 186.554878][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.573260][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.574959][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.576874][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.578142][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.513515][ T7390] chnl_net:caif_netlink_parms(): no params data found [ 188.638375][ T7402] team0: entered allmulticast mode [ 188.638398][ T7402] team_slave_0: entered allmulticast mode [ 188.638422][ T7402] team_slave_1: entered allmulticast mode [ 188.710349][ T5851] Bluetooth: hci5: command tx timeout [ 188.781714][ T7402] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 190.540258][ T50] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 190.693874][ T50] usb 3-1: Using ep0 maxpacket: 16 [ 190.696878][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.777315][ T50] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 190.777347][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.777367][ T50] usb 3-1: Product: syz [ 190.777382][ T50] usb 3-1: Manufacturer: syz [ 190.777395][ T50] usb 3-1: SerialNumber: syz [ 190.790234][ T5851] Bluetooth: hci5: command tx timeout [ 190.882920][ T50] usb 3-1: config 0 descriptor?? [ 190.925916][ T50] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 191.199904][ T50] usb 3-1: USB disconnect, device number 5 [ 191.489528][ T7437] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 191.545646][ T7437] [U] J"—E:ÀÆ" [ 192.338634][ T7443] binder: 7442:7443 ioctl c0306201 2000000001c0 returned -22 [ 192.870335][ T5851] Bluetooth: hci5: command tx timeout [ 194.557178][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.557269][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.950206][ T5851] Bluetooth: hci5: command tx timeout [ 197.027089][ T7474] Falling back ldisc for ptm0. [ 199.538317][ T7488] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.693'. [ 209.409858][ T5153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.431541][ T5153] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.432840][ T5153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.437789][ T5153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.472302][ T5153] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.510372][ T5153] Bluetooth: hci6: command tx timeout [ 213.592072][ T5153] Bluetooth: hci6: command tx timeout [ 215.670172][ T5850] Bluetooth: hci6: command tx timeout [ 217.180096][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 217.180141][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 218.495142][ T7508] pim6reg: entered allmulticast mode [ 218.680218][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 218.680262][ T5850] Bluetooth: hci6: command tx timeout [ 235.996393][ T7520] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.018606][ T7520] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.024198][ T7520] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.026318][ T7520] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.027286][ T7520] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.984472][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.987522][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 245.019862][ T5851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 245.028888][ T5851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 245.029786][ T5851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 246.274156][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 246.300445][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 246.310442][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 246.311849][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 246.334384][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 246.553622][ T59] Bluetooth: hci1: command tx timeout [ 247.110722][ T59] Bluetooth: hci7: command tx timeout [ 247.504587][ T5851] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 247.532081][ T5851] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 247.533394][ T5851] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 247.535771][ T5851] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 247.536706][ T5851] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 248.393540][ T5851] Bluetooth: hci8: command tx timeout [ 248.630420][ T5851] Bluetooth: hci1: command tx timeout [ 249.190540][ T5851] Bluetooth: hci7: command tx timeout [ 249.590346][ T5851] Bluetooth: hci9: command tx timeout [ 250.470598][ T5851] Bluetooth: hci8: command tx timeout [ 250.710337][ T5851] Bluetooth: hci1: command tx timeout [ 251.270307][ T5851] Bluetooth: hci7: command tx timeout [ 251.670343][ T5851] Bluetooth: hci9: command tx timeout [ 252.550228][ T5851] Bluetooth: hci8: command tx timeout [ 252.790377][ T5851] Bluetooth: hci1: command tx timeout [ 253.350306][ T5851] Bluetooth: hci7: command tx timeout [ 253.750367][ T5851] Bluetooth: hci9: command tx timeout [ 254.630183][ T5851] Bluetooth: hci8: command tx timeout [ 255.830265][ T5851] Bluetooth: hci9: command tx timeout [ 256.004638][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.004727][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.856293][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.859115][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.876657][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.887666][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.888589][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.990457][ T59] Bluetooth: hci4: command tx timeout [ 274.070305][ T59] Bluetooth: hci4: command tx timeout [ 276.152473][ T59] Bluetooth: hci4: command tx timeout [ 277.390490][ T7298] team0: Port device syz_tun removed [ 278.230741][ T59] Bluetooth: hci4: command tx timeout [ 294.327178][ T7544] lo speed is unknown, defaulting to 1000 [ 294.805560][ T7390] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.084534][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 296.116388][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 296.117709][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.134506][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.135751][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.419532][ T7390] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.476515][ T7390] bridge_slave_0: entered allmulticast mode [ 297.576054][ T7390] bridge_slave_0: entered promiscuous mode [ 298.230340][ T5851] Bluetooth: hci0: command tx timeout [ 300.310614][ T5851] Bluetooth: hci0: command tx timeout [ 302.400214][ T5851] Bluetooth: hci0: command tx timeout [ 304.470322][ T5851] Bluetooth: hci0: command tx timeout [ 305.372480][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 305.392793][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 305.394089][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 305.395491][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 305.433364][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 306.501395][ T5153] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 306.504561][ T5153] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 306.507894][ T5153] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 306.532247][ T5153] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 306.535027][ T5153] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 307.822815][ T7520] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 307.842443][ T7520] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 307.843811][ T7520] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 307.845177][ T7520] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 307.846706][ T7520] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 312.607379][ T59] Bluetooth: hci11: command tx timeout [ 314.630452][ T7520] Bluetooth: hci10: command tx timeout [ 314.630773][ T7520] Bluetooth: hci11: command tx timeout [ 314.630855][ T7520] Bluetooth: hci12: command tx timeout [ 316.710254][ T5851] Bluetooth: hci12: command tx timeout [ 316.710291][ T5851] Bluetooth: hci11: command tx timeout [ 316.710315][ T5851] Bluetooth: hci10: command tx timeout [ 317.438968][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.439058][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.790562][ T7520] Bluetooth: hci10: command tx timeout [ 318.790599][ T7520] Bluetooth: hci11: command tx timeout [ 318.790621][ T7520] Bluetooth: hci12: command tx timeout [ 320.870301][ T7520] Bluetooth: hci10: command tx timeout [ 320.870354][ T5851] Bluetooth: hci12: command tx timeout [ 330.253367][ T7520] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.273099][ T7520] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.276592][ T7520] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.278085][ T7520] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.279551][ T7520] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.630502][ T5851] Bluetooth: hci2: command tx timeout [ 338.710197][ T5851] Bluetooth: hci2: command tx timeout [ 340.790227][ T5851] Bluetooth: hci2: command tx timeout [ 342.870373][ T5851] Bluetooth: hci2: command tx timeout [ 356.367386][ T7520] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.387396][ T7520] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.388696][ T7520] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.392198][ T7520] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.416452][ T7520] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.590392][ T7520] Bluetooth: hci5: command tx timeout [ 361.674274][ T7520] Bluetooth: hci5: command tx timeout [ 363.750292][ T7520] Bluetooth: hci5: command tx timeout [ 365.833459][ T7520] Bluetooth: hci5: command tx timeout [ 366.303625][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.327210][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.350800][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.352219][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.353153][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.455950][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 367.474837][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 367.476726][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 367.478177][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 367.479333][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 368.252782][ T5851] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 368.270413][ T5851] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 368.271726][ T5851] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 368.283908][ T5851] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 368.285292][ T5851] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 368.470911][ T7520] Bluetooth: hci4: command tx timeout [ 369.590201][ T5847] Bluetooth: hci6: command tx timeout [ 370.390292][ T5847] Bluetooth: hci13: command tx timeout [ 370.550671][ T5847] Bluetooth: hci4: command tx timeout [ 370.719079][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 370.719123][ T5850] Bluetooth: hci7: command 0x0406 tx timeout [ 370.719149][ T5850] Bluetooth: hci8: command 0x0406 tx timeout [ 370.719220][ T5847] Bluetooth: hci9: command 0x0406 tx timeout [ 371.670409][ T5847] Bluetooth: hci6: command tx timeout [ 372.470325][ T5847] Bluetooth: hci13: command tx timeout [ 372.630275][ T5847] Bluetooth: hci4: command tx timeout [ 373.754760][ T5847] Bluetooth: hci6: command tx timeout [ 374.560631][ T5847] Bluetooth: hci13: command tx timeout [ 374.710229][ T5847] Bluetooth: hci4: command tx timeout [ 374.790238][ T7544] lo speed is unknown, defaulting to 1000 [ 375.830191][ T5847] Bluetooth: hci6: command tx timeout [ 376.639067][ T5847] Bluetooth: hci13: command tx timeout [ 378.885409][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.885499][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.933997][ T7520] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 390.955681][ T7520] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 390.956940][ T7520] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 390.958403][ T7520] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 390.989214][ T7520] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 416.561255][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 416.578870][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 416.595614][ T5851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 416.624266][ T5851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 416.635232][ T5851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 426.773810][ T7520] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 426.798633][ T7520] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 426.800509][ T7520] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 426.802372][ T7520] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 426.830242][ T7520] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 427.739430][ T5847] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 427.759500][ T5847] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 427.773697][ T5847] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 427.775948][ T5847] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 427.776983][ T5847] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 428.125098][ T7520] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 428.152293][ T7520] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 428.154039][ T7520] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 428.155776][ T7520] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 428.188945][ T7520] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 440.317118][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.317210][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.745928][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 451.763925][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 451.787031][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 451.801763][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 451.803263][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 453.112465][ T38] INFO: task syz.4.615:7298 blocked for more than 143 seconds. [ 453.112492][ T38] Not tainted syzkaller #0 [ 453.112503][ T38] Blocked by coredump. [ 453.112509][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.112518][ T38] task:syz.4.615 state:D stack:24120 pid:7298 tgid:7297 ppid:5839 task_flags:0x40054c flags:0x00004002 [ 453.112581][ T38] Call Trace: [ 453.112589][ T38] [ 453.112605][ T38] __schedule+0x16f3/0x4c20 [ 453.112666][ T38] ? __lock_acquire+0xab9/0xd20 [ 453.112695][ T38] ? __pfx___schedule+0x10/0x10 [ 453.112742][ T38] ? schedule+0x91/0x360 [ 453.112772][ T38] schedule+0x165/0x360 [ 453.112799][ T38] schedule_timeout+0x9a/0x270 [ 453.112825][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 453.112865][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.112892][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.112916][ T38] ? wait_for_completion+0x267/0x5d0 [ 453.112946][ T38] wait_for_completion+0x2bf/0x5d0 [ 453.112989][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 453.113034][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 453.113063][ T38] rcu_barrier+0x463/0x570 [ 453.113097][ T38] netdev_run_todo+0x327/0xea0 [ 453.113133][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 453.113158][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 453.113186][ T38] ? kasan_quarantine_put+0xdd/0x220 [ 453.113211][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.113247][ T38] ? netdev_state_change+0x1ca/0x220 [ 453.113274][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 453.113302][ T38] tun_chr_close+0x13f/0x1c0 [ 453.113331][ T38] __fput+0x45b/0xa80 [ 453.113367][ T38] task_work_run+0x1d4/0x260 [ 453.113393][ T38] ? __pfx_task_work_run+0x10/0x10 [ 453.113416][ T38] ? do_exit+0x6b0/0x2300 [ 453.113434][ T38] ? kmem_cache_free+0x195/0x510 [ 453.113471][ T38] do_exit+0x6b5/0x2300 [ 453.113490][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 453.113524][ T38] ? __lock_acquire+0xab9/0xd20 [ 453.113555][ T38] ? __pfx_do_exit+0x10/0x10 [ 453.113571][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 453.113598][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 453.113632][ T38] do_group_exit+0x21c/0x2d0 [ 453.113659][ T38] get_signal+0x125e/0x1310 [ 453.113712][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 453.113749][ T38] ? __x64_sys_sendmsg+0x236/0x260 [ 453.113783][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 453.113828][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 453.113860][ T38] exit_to_[ 453.113860][ T38] exit_to_user_mode_loop+0x75/0x110 [ 453.113888][ T38] do_syscall_64+0x2bd/0x3b0 [ 453.113916][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.113943][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.113963][ T38] ? clear_bhb_loop+0x60/0xb0 [ 453.113989][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.114010][ T38] RIP: 0033:0x7f5963d7ebe9 [ 453.114040][ T38] RSP: 002b:00007f5961fe6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.114062][ T38] RAX: 0000000000000080 RBX: 00007f5963fb5fa0 RCX: 00007f5963d7ebe9 [ 453.114076][ T38] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 453.114089][ T38] RBP: 00007f5963e01e19 R08: 0000000000000000 R09: 0000000000000000 [ 453.114102][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.114114][ T38] R13: 00007f5963fb6038 R14: 00007f5963fb5fa0 R15: 00007fffcd7ac538 [ 453.114150][ T38] [ 453.114178][ T38] [ 453.114178][ T38] Showing all locks held in the system: [ 453.114188][ T38] 3 locks held by kworker/u8:0/12: [ 453.114200][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.114255][ T38] #1: ffffc90000117bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.114305][ T38] #2: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 453.114362][ T38] 7 locks held by ktimers/0/16: [ 453.114374][ T38] 2 locks held by rcuc/0/20: [ 453.114387][ T38] 1 lock held by khungtaskd/38: [ 453.114398][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 453.114448][ T38] 4 locks held by kworker/u9:0/59: [ 453.114459][ T38] #0: ffff88805f6cc138 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.114515][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.114566][ T38] #2: ffff88806f8c40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 453.114614][ T38] #3: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 453.114669][ T38] 3 locks held by kworker/u8:5/984: [ 453.114680][ T38] #0: ffff88814ca7e138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.114731][ T38] #1: ffffc90004a07bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.114784][ T38] #2: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 453.114843][ T38] 2 locks held by kworker/u8:9/3540: [ 453.114855][ T38] 4 locks held by kworker/u9:1/5153: [ 453.114866][ T38] #0: ffff888042f52138 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.114921][ T38] #1: ffffc9000fe77bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.114972][ T38] #2: ffff88805f5880a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 453.115033][ T38] #3: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 453.115085][ T38] 2 locks held by getty/5599: [ 453.115096][ T38] #0: ffff88823bf608a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 453.115150][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 453.115200][ T38] 2 locks held by kworker/0:3/5843: [ 453.115212][ T38] 4 locks held by kworker/u9:3/5847: [ 453.115222][ T38] #0: ffff8880308fc138 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.115276][ T38] #1: ffffc90004cf7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.115327][ T38] #2: ffff888038ac00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 453.115374][ T38] #3: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 453.115423][ T38] 1 lock held by syz-executor/5849: [ 453.115435][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 453.115482][ T38] 4 locks held by kworker/u9:4/5850: [ 453.115493][ T38] #0: ffff88804e7ab938 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.115549][ T38] #1: ffffc90004d17bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.115600][ T38] #2: ffff88804f9d40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 453.115646][ T38] #3: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 453.115694][ T38] 4 locks held by kworker/u9:5/5851: [ 453.115705][ T38] #0: ffff888040a47138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.115760][ T38] #1: ffffc90004d27bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.115812][ T38] #2: ffff888063bf00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 453.115860][ T38] #3: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 453.115913][ T38] 3 locks held by kworker/1:6/6089: [ 453.115924][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.115975][ T38] #1: ffffc900059a7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.116037][ T38] #2: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 453.116095][ T38] 1 lock held by syz.4.615/7298: [ 453.116105][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 453.116152][ T38] 1 lock held by syz-executor/7390: [ 453.116163][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 453.116217][ T38] 4 locks held by kworker/u9:6/7520: [ 453.116237][ T38] #0: ffff888060dc6938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.116290][ T38] #1: ffffc90003d2fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.116340][ T38] #2: ffff88805da900a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 453.116387][ T38] #3: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 453.116435][ T38] 1 lock held by syz.1.708/7532: [ 453.116446][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 453.116493][ T38] 3 locks held by syz.2.712/7544: [ 453.116503][ T38] #0: ffffffff99421558 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 453.116558][ T38] #1: ffffffff8ea2fe60 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x341/0x5a0 [ 453.116611][ T38] #2: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 453.116656][ T38] 1 lock held by syz.0.716/7556: [ 453.116667][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 453.116714][ T38] 2 locks held by kworker/0:13/7562: [ 453.116726][ T38] 2 locks held by syz-executor/7573: [ 453.116737][ T38] #0: ffff888059900e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 453.116785][ T38] #1: ffff8880599000a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 453.116837][ T38] 2 locks held by kworker/0:15/7578: [ 453.116848][ T38] 3 locks held by syz-executor/7590: [ 453.116858][ T38] #0: ffff8880554fce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 453.116906][ T38] #1: ffff8880554fc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 453.116956][ T38] #2: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 453.117098][ T38] 3 locks held by syz-executor/7596: [ 453.117109][ T38] #0: ffff88806503ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 453.117158][ T38] #1: ffff88806503c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 453.117209][ T38] #2: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 453.117265][ T38] 4 locks held by syz-executor/7601: [ 453.117275][ T38] #0: ffff88807330ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 453.117322][ T38] #1: ffff88807330c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 453.117373][ T38] #2: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 453.117427][ T38] #3: ffff888060a42b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 453.117486][ T38] 3 locks held by syz-executor/7604: [ 453.117497][ T38] #0: ffff8880744d0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 453.117544][ T38] #1: ffff8880744d00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 453.117594][ T38] #2: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 453.117650][ T38] 3 locks held by syz-executor/7614: [ 453.117661][ T38] #0: ffff88806eecce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 453.117708][ T38] #1: ffff88806eecc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 453.117759][ T38] #2: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 453.117815][ T38] 1 lock held by syz-executor/7623: [ 453.117826][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 453.117872][ T38] 1 lock held by syz-executor/7629: [ 453.117883][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 453.117928][ T38] 1 lock held by syz-executor/7635: [ 453.117939][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 453.117984][ T38] 1 lock held by syz-executor/7637: [ 453.117995][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 453.118048][ T38] 1 lock held by syz-executor/7648: [ 453.118059][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 453.118104][ T38] 1 lock held by syz-executor/7656: [ 453.118114][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 453.118160][ T38] 1 lock held by syz-executor/7663: [ 453.118170][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 453.118215][ T38] 1 lock held by syz-executor/7668: [ 453.118226][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 453.118270][ T38] 1 lock held by syz-executor/7670: [ 453.118279][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 453.118325][ T38] 1 lock held by dhcpcd/7678: [ 453.118335][ T38] #0: ffff88805e543878 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 453.118387][ T38] 1 lock held by dhcpcd/7680: [ 453.118398][ T38] #0: ffff88805e540ff8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 453.118451][ T38] 1 lock held by syz-executor/7686: [ 453.118462][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 453.118507][ T38] [ 453.118512][ T38] ============================================= [ 453.118512][ T38] [ 453.118521][ T38] NMI backtrace for cpu 1 [ 453.118536][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 453.118559][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.118570][ T38] Call Trace: [ 453.118578][ T38] [ 453.118586][ T38] dump_stack_lvl+0x189/0x250 [ 453.118619][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.118648][ T38] ? __pfx__printk+0x10/0x10 [ 453.118684][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 453.118711][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 453.118737][ T38] ? __pfx__printk+0x10/0x10 [ 453.118764][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 453.118791][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 453.118818][ T38] watchdog+0xf93/0xfe0 [ 453.118849][ T38] ? watchdog+0x1de/0xfe0 [ 453.118881][ T38] kthread+0x70e/0x8a0 [ 453.118915][ T38] ? __pfx_watchdog+0x10/0x10 [ 453.118940][ T38] ? __pfx_kthread+0x10/0x10 [ 453.118975][ T38] ? __pfx_kthread+0x10/0x10 [ 453.119005][ T38] ret_from_fork+0x3f9/0x770 [ 453.119043][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 453.119075][ T38] ? __switch_to_asm+0x39/0x70 [ 453.119093][ T38] ? __switch_to_asm+0x33/0x70 [ 453.119110][ T38] ? __pfx_kthread+0x10/0x10 [ 453.119141][ T38] ret_from_fork_asm+0x1a/0x30 [ 453.119178][ T38] [ 453.119185][ T38] Sending NMI from CPU 1 to CPUs 0: [ 453.119214][ C0] NMI backtrace for cpu 0 [ 453.119230][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 453.119248][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.119257][ C0] RIP: 0010:stack_trace_consume_entry+0x5/0x280 [ 453.119286][ C0] Code: f0 5b 41 5e 5d e9 8b 6d 4f 09 cc e8 d5 bd 4b 09 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00 00 00 00 fc ff [ 453.119299][ C0] RSP: 0018:ffffc90000156478 EFLAGS: 00000286 [ 453.119314][ C0] RAX: ffffffff81331f6a RBX: ffffc90000156540 RCX: d3bde55d6e1bf600 [ 453.119326][ C0] RDX: 0000000000000001 RSI: ffffffff81331f6a RDI: ffffc90000156540 [ 453.119337][ C0] RBP: ffffc90000156510 R08: ffffc90000157f48 R09: 0000000000000000 [ 453.119348][ C0] R10: ffffc900001564d8 R11: ffffffff81aae2f0 R12: ffff88801ae85940 [ 453.119359][ C0] R13: ffff888050788e00 R14: ffffffff81aae2f0 R15: ffffc90000156488 [ 453.119371][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 453.119384][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.119395][ C0] CR2: 00007f6d41b79ba8 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 453.119411][ C0] Call Trace: [ 453.119417][ C0] [ 453.119424][ C0] arch_stack_walk+0x10d/0x150 [ 453.119449][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 453.119467][ C0] stack_trace_save+0x9c/0xe0 [ 453.119483][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 453.119498][ C0] ? do_raw_spin_lock+0x121/0x290 [ 453.119520][ C0] kasan_save_track+0x3e/0x80 [ 453.119537][ C0] ? kasan_save_track+0x3e/0x80 [ 453.119553][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 453.119570][ C0] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 453.119590][ C0] ? ref_tracker_alloc+0x13b/0x450 [ 453.119609][ C0] ? dst_init+0xd9/0x450 [ 453.119629][ C0] ? dst_alloc+0x12a/0x170 [ 453.119641][ C0] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 453.119656][ C0] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 453.119677][ C0] ? ip_route_output_flow+0x2a/0x150 [ 453.119697][ C0] ? ip_route_me_harder+0x6d2/0x1030 [ 453.119712][ C0] ? synproxy_send_tcp+0x359/0x6c0 [ 453.119731][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 453.119750][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 453.119764][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 453.119777][ C0] ? nft_do_chain+0x40c/0x1920 [ 453.119797][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 453.119818][ C0] ? nf_hook_slow+0xc5/0x220 [ 453.119840][ C0] ? NF_HOOK+0x206/0x3a0 [ 453.119858][ C0] ? NF_HOOK+0x309/0x3a0 [ 453.119874][ C0] ? __netif_receive_skb+0x143/0x380 [ 453.119890][ C0] ? process_backlog+0x31e/0x900 [ 453.119907][ C0] ? __napi_poll+0xb6/0x540 [ 453.119922][ C0] ? net_rx_action+0x707/0xe00 [ 453.119938][ C0] ? handle_softirqs+0x22f/0x710 [ 453.119955][ C0] ? run_ktimerd+0xcf/0x190 [ 453.119974][ C0] ? smpboot_thread_fn+0x53f/0xa60 [ 453.119991][ C0] ? kthread+0x70e/0x8a0 [ 453.120011][ C0] ? ret_from_fork+0x3f9/0x770 [ 453.120041][ C0] ? ref_tracker_alloc+0x13b/0x450 [ 453.120061][ C0] __kasan_kmalloc+0x93/0xb0 [ 453.120081][ C0] __kmalloc_cache_noprof+0x1a8/0x320 [ 453.120100][ C0] ? ref_tracker_alloc+0x13b/0x450 [ 453.120121][ C0] ref_tracker_alloc+0x13b/0x450 [ 453.120142][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 453.120167][ C0] ? dst_alloc+0x105/0x170 [ 453.120180][ C0] ? dst_alloc+0x105/0x170 [ 453.120195][ C0] dst_init+0xd9/0x450 [ 453.120218][ C0] dst_alloc+0x12a/0x170 [ 453.120234][ C0] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 453.120253][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 453.120287][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 453.120309][ C0] ? __lock_acquire+0xab9/0xd20 [ 453.120329][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 453.120355][ C0] ? ip_route_me_harder+0x4ad/0x1030 [ 453.120373][ C0] ip_route_output_flow+0x2a/0x150 [ 453.120393][ C0] ? ip_route_me_harder+0x6c0/0x1030 [ 453.120410][ C0] ip_route_me_harder+0x6d2/0x1030 [ 453.120430][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 453.120458][ C0] synproxy_send_tcp+0x359/0x6c0 [ 453.120481][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 453.120507][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 453.120527][ C0] ? nft_socket_eval+0x5e8/0xa10 [ 453.120546][ C0] ? synproxy_pernet+0x45/0x270 [ 453.120563][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 453.120580][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 453.120596][ C0] ? nf_ip_checksum+0x13c/0x510 [ 453.120620][ C0] nft_synproxy_do_eval+0x345/0x570 [ 453.120637][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 453.120659][ C0] nft_do_chain+0x40c/0x1920 [ 453.120687][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 453.120721][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 453.120742][ C0] nft_do_chain_inet+0x25d/0x340 [ 453.120763][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 453.120785][ C0] ? __lock_acquire+0xab9/0xd20 [ 453.120808][ C0] ? NF_HOOK+0x9a/0x3a0 [ 453.120826][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 453.120849][ C0] nf_hook_slow+0xc5/0x220 [ 453.120870][ C0] NF_HOOK+0x206/0x3a0 [ 453.120888][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 453.120906][ C0] ? NF_HOOK+0x9a/0x3a0 [ 453.120923][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 453.120939][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 453.120960][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 453.120979][ C0] ? skb_dst+0x4f/0xd0 [ 453.120997][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 453.121016][ C0] NF_HOOK+0x309/0x3a0 [ 453.121035][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 453.121053][ C0] ? NF_HOOK+0x9a/0x3a0 [ 453.121069][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 453.121087][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 453.121109][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 453.121126][ C0] __netif_receive_skb+0x143/0x380 [ 453.121142][ C0] ? rt_spin_unlock+0x65/0x80 [ 453.121160][ C0] ? process_backlog+0x27b/0x900 [ 453.121177][ C0] process_backlog+0x31e/0x900 [ 453.121200][ C0] __napi_poll+0xb6/0x540 [ 453.121219][ C0] net_rx_action+0x707/0xe00 [ 453.121244][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 453.121283][ C0] handle_softirqs+0x22f/0x710 [ 453.121306][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 453.121329][ C0] run_ktimerd+0xcf/0x190 [ 453.121349][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 453.121370][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 453.121389][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 453.121407][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 453.121425][ C0] smpboot_thread_fn+0x53f/0xa60 [ 453.121444][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 453.121465][ C0] kthread+0x70e/0x8a0 [ 453.121488][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 453.121506][ C0] ? __pfx_kthread+0x10/0x10 [ 453.121529][ C0] ? __pfx_kthread+0x10/0x10 [ 453.121551][ C0] ret_from_fork+0x3f9/0x770 [ 453.121571][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 453.121593][ C0] ? __switch_to_asm+0x39/0x70 [ 453.121607][ C0] ? __switch_to_asm+0x33/0x70 [ 453.121621][ C0] ? __pfx_kthread+0x10/0x10 [ 453.121642][ C0] ret_from_fork_asm+0x1a/0x30 [ 453.121664][ C0] [ 453.410006][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 453.410028][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 453.410061][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.410074][ T38] Call Trace: [ 453.410083][ T38] [ 453.410093][ T38] dump_stack_lvl+0x99/0x250 [ 453.410128][ T38] ? __asan_memcpy+0x40/0x70 [ 453.410150][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.410179][ T38] ? __pfx__printk+0x10/0x10 [ 453.410216][ T38] vpanic+0x281/0x750 [ 453.410248][ T38] ? __pfx_vpanic+0x10/0x10 [ 453.410277][ T38] ? preempt_schedule+0xae/0xc0 [ 453.410303][ T38] ? preempt_schedule_common+0x83/0xd0 [ 453.410336][ T38] panic+0xb9/0xc0 [ 453.410364][ T38] ? __pfx_panic+0x10/0x10 [ 453.410394][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 453.410425][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 453.410451][ T38] watchdog+0xfd2/0xfe0 [ 453.410483][ T38] ? watchdog+0x1de/0xfe0 [ 453.410516][ T38] kthread+0x70e/0x8a0 [ 453.410550][ T38] ? __pfx_watchdog+0x10/0x10 [ 453.410575][ T38] ? __pfx_kthread+0x10/0x10 [ 453.410610][ T38] ? __pfx_kthread+0x10/0x10 [ 453.410641][ T38] ret_from_fork+0x3f9/0x770 [ 453.410671][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 453.410704][ T38] ? __switch_to_asm+0x39/0x70 [ 453.410722][ T38] ? __switch_to_asm+0x33/0x70 [ 453.410740][ T38] ? __pfx_kthread+0x10/0x10 [ 453.410772][ T38] ret_from_fork_asm+0x1a/0x30 [ 453.410808][ T38] [ 453.411072][ T38] Kernel Offset: disabled