last executing test programs: 1m29.673544482s ago: executing program 2 (id=1709): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002300)={0x7, {"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", 0x105d}}, 0x1006) 1m29.038438836s ago: executing program 2 (id=1716): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x3c}, 0x1, 0x2}, 0x4050) 1m28.650855135s ago: executing program 2 (id=1722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_OSF_TTL={0x5}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1m28.394740035s ago: executing program 2 (id=1724): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) poll(&(0x7f0000000840)=[{r0, 0x8}], 0x1, 0x6) 1m28.394109451s ago: executing program 1 (id=1725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0) 1m28.028405495s ago: executing program 2 (id=1730): unshare(0x22020400) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 1m27.899295425s ago: executing program 1 (id=1731): ioprio_set$pid(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) ioprio_get$pid(0x2, 0x0) 1m27.386553612s ago: executing program 1 (id=1737): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x9}}}, 0x24}}, 0x0) 1m26.85261674s ago: executing program 2 (id=1739): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1m21.935916165s ago: executing program 1 (id=1749): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x6, 0x0, 0x83, 0x12e}]}, 0x10) 1m21.816339496s ago: executing program 1 (id=1750): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x40, 0x1, 'queue0\x00', 0x4}) 1m21.727411821s ago: executing program 1 (id=1751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) 1m11.64175183s ago: executing program 32 (id=1739): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1m8.894730576s ago: executing program 3 (id=1781): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000002600)=@ready={0x0, 0x0, 0x8, "76a7e717", {0x1, 0xffff, 0xc98, 0x69, 0xed}}) 1m6.625119583s ago: executing program 33 (id=1751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) 1m5.498700149s ago: executing program 3 (id=1788): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 1m5.126321302s ago: executing program 3 (id=1790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x29, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0x50}}, 0x0) 1m4.563876382s ago: executing program 3 (id=1794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x2c}}, 0x0) 1m4.237770794s ago: executing program 3 (id=1797): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/73, 0x49}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) 1m3.833080328s ago: executing program 3 (id=1800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)) 56.352282397s ago: executing program 4 (id=1827): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x6, 0x4) 55.974803692s ago: executing program 4 (id=1829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x25dfdbfb, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 55.58550643s ago: executing program 4 (id=1832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000002495000000000b0000400c0005800700020069"], 0x20}}, 0x0) 55.292457899s ago: executing program 4 (id=1834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000340)={0xa, 0x0, 0x9, @empty}, 0x1c) 54.896856272s ago: executing program 4 (id=1836): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r1, 0x615, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) 54.504902573s ago: executing program 4 (id=1839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="c9db", 0x2}, {0x0, 0x54}], 0x2, 0xfffffffc, 0x0) 49.518073817s ago: executing program 5 (id=1863): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x19}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x4000}) 49.204910215s ago: executing program 5 (id=1865): unshare(0x62040200) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 48.565290537s ago: executing program 34 (id=1800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)) 48.080303933s ago: executing program 5 (id=1870): r0 = socket(0x15, 0x5, 0x0) connect$can_j1939(r0, &(0x7f0000000040)={0xa, 0x0, 0xffffc0fe}, 0x1c) getpeername(r0, 0x0, &(0x7f0000000140)) 47.747431251s ago: executing program 5 (id=1873): syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x20, &(0x7f0000000380)=@string={0x20, 0x3, "5fe9a8bc6ddeb68a6c31648d9c242d82d74530521e60e309def98aafcc13"}}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d800800"], 0x24}], 0x1, 0x0, 0x0, 0x80}, 0x19852e3079d1c81a) 46.965829482s ago: executing program 5 (id=1877): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) r0 = io_uring_setup(0x7622, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 46.714849445s ago: executing program 5 (id=1878): r0 = io_uring_setup(0x743b, &(0x7f0000000e80)={0x0, 0xfffffffd, 0x1046, 0x0, 0x3a9}) ppoll(&(0x7f00000004c0)=[{r0, 0xa008}], 0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 39.036739894s ago: executing program 35 (id=1839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="c9db", 0x2}, {0x0, 0x54}], 0x2, 0xfffffffc, 0x0) 31.580211454s ago: executing program 36 (id=1878): r0 = io_uring_setup(0x743b, &(0x7f0000000e80)={0x0, 0xfffffffd, 0x1046, 0x0, 0x3a9}) ppoll(&(0x7f00000004c0)=[{r0, 0xa008}], 0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 22.99781218s ago: executing program 6 (id=1968): syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaabb86dd60122d9200283a0020010000000000000000000000000001fe8000000000000000000000000000aa"], 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 22.590115172s ago: executing program 6 (id=1971): openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x1000, 0x3, 0x4}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x100, 0x0, 0x10}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400}, 0x0, 0x0, 0x0) 22.261173226s ago: executing program 6 (id=1972): r0 = socket$inet6(0xa, 0x400000000001, 0x0) unshare(0x22020400) pwritev(r0, 0x0, 0x0, 0x3, 0x80) 21.886314831s ago: executing program 6 (id=1975): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "b584424c"}]}}, 0x0}, 0x0) 19.525459833s ago: executing program 0 (id=1988): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1}) 19.493570566s ago: executing program 8 (id=1989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 19.156601619s ago: executing program 0 (id=1991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) 18.932001268s ago: executing program 8 (id=1993): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000140)) 18.674807446s ago: executing program 0 (id=1994): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) 18.594325512s ago: executing program 7 (id=1995): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r0, &(0x7f00000000c0), 0x2a) 18.53211561s ago: executing program 6 (id=1996): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x3ff}]}}]}, 0x38}}, 0x0) 18.531502347s ago: executing program 8 (id=1997): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000000), 0x0}, 0x20) 18.261905911s ago: executing program 0 (id=1998): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6c}, 0x0, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x1000}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x558ac59, 'syz0\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 18.072987266s ago: executing program 7 (id=1999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000440)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x3c}}, 0x40000) 17.925690281s ago: executing program 6 (id=2000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0xfffffffe) 17.76249522s ago: executing program 8 (id=2001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xfb}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 17.491829084s ago: executing program 7 (id=2002): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0xfdff]}}], 0xffc8) 17.34186594s ago: executing program 0 (id=2003): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) waitid(0x0, 0x0, &(0x7f0000000100), 0xe, 0x0) 17.222020717s ago: executing program 8 (id=2004): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc713, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x18, &(0x7f0000000200)={0x20, 0x25, 0x8, {0x8, 0x32, "2657649857b7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 17.11668793s ago: executing program 7 (id=2005): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') 16.874476598s ago: executing program 0 (id=2006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100030000000000000001000000000000000141000000180017000000a500000000696254a43d69aa1a7a112b3a"], 0x34}}, 0x0) 16.814577995s ago: executing program 7 (id=2007): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x4, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {}, {}, 0x0, 0x800000}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1404bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 16.612771173s ago: executing program 7 (id=2008): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}, {&(0x7f0000001b00)="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", 0x272}], 0x2}, 0x11) 15.199517863s ago: executing program 8 (id=2009): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 2.536907731s ago: executing program 37 (id=2000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0xfffffffe) 1.529068551s ago: executing program 38 (id=2006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100030000000000000001000000000000000141000000180017000000a500000000696254a43d69aa1a7a112b3a"], 0x34}}, 0x0) 1.422835949s ago: executing program 39 (id=2008): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}, {&(0x7f0000001b00)="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", 0x272}], 0x2}, 0x11) 0s ago: executing program 40 (id=2009): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) kernel console output (not intermixed with test programs): s=4294967295 subj=unconfined pid=8235 comm="syz.4.1081" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcab78d169 code=0x0 [ 173.235072][ T8242] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 173.256140][ T53] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.420508][ T53] usb 4-1: Using ep0 maxpacket: 8 [ 173.438361][ T53] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 173.466724][ T53] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 173.482731][ T53] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 173.500696][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.537116][ T53] usb 4-1: config 0 descriptor?? [ 173.957149][ T53] elecom 0003:056E:00FB.001B: unknown main item tag 0x0 [ 173.989075][ T53] elecom 0003:056E:00FB.001B: unknown main item tag 0x0 [ 174.006798][ T53] elecom 0003:056E:00FB.001B: unknown main item tag 0x0 [ 174.013845][ T53] elecom 0003:056E:00FB.001B: unknown main item tag 0x0 [ 174.031690][ T53] elecom 0003:056E:00FB.001B: unknown main item tag 0x0 [ 174.043752][ T8269] blktrace: Concurrent blktraces are not allowed on loop3 [ 174.052164][ T53] elecom 0003:056E:00FB.001B: hidraw0: USB HID v38.04 Device [HID 056e:00fb] on usb-dummy_hcd.3-1/input0 [ 174.188162][ T5883] usb 4-1: USB disconnect, device number 12 [ 174.366291][ T53] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 174.386755][ T5893] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 174.536503][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 174.545879][ T53] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.557058][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 174.560885][ T53] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 174.583780][ T53] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.590991][ T5893] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 174.596560][ T53] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 174.610813][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.625378][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.632232][ T5893] usb 5-1: config 0 descriptor?? [ 174.659861][ T53] usb 2-1: config 0 descriptor?? [ 174.671242][ T5893] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 175.085236][ T53] corsair-cpro 0003:1B1C:0C10.001C: unbalanced collection at end of report description [ 175.109064][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 175.117393][ T53] corsair-cpro 0003:1B1C:0C10.001C: probe with driver corsair-cpro failed with error -22 [ 175.273142][ T5893] gspca_vc032x: reg_w err -71 [ 175.286513][ T53] usb 2-1: USB disconnect, device number 20 [ 175.295789][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.311926][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.326275][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.347376][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.371039][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.387412][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.392793][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.411665][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.429755][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.445538][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.469978][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.476646][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.478374][ T8318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1120'. [ 175.481993][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.482009][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.482020][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.512206][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.517964][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.523365][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.532798][ T5893] gspca_vc032x: Unknown sensor... [ 175.538513][ T5893] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 175.585282][ T5893] usb 5-1: USB disconnect, device number 16 [ 175.906551][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 176.084090][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.105678][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.146223][ T9] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 176.186606][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.207138][ T9] usb 4-1: config 0 descriptor?? [ 176.628618][ T9] elo 0003:04E7:0030.001D: reserved main item tag 0xd [ 176.661624][ T9] elo 0003:04E7:0030.001D: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input0 [ 176.839225][ T9] usb 4-1: USB disconnect, device number 13 [ 177.426155][ T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 177.479829][ T8397] netlink: 'syz.3.1158': attribute type 2 has an invalid length. [ 177.606042][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 177.625428][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.656695][ T9] usb 3-1: Product: syz [ 177.663752][ T9] usb 3-1: Manufacturer: syz [ 177.676749][ T9] usb 3-1: SerialNumber: syz [ 177.683931][ T9] usb 3-1: config 0 descriptor?? [ 177.701728][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 177.876225][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 178.042295][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.066126][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 178.075249][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.111254][ T24] usb 1-1: config 0 descriptor?? [ 178.240208][ T8429] syz.1.1173 uses obsolete (PF_INET,SOCK_PACKET) [ 178.377027][ T9] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 178.498143][ T8437] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1177'. [ 178.557321][ T24] logitech-hidpp-device 0003:046D:C086.001E: item fetching failed at offset 0/3 [ 178.578329][ T24] logitech-hidpp-device 0003:046D:C086.001E: hidpp_probe:parse failed [ 178.596565][ T9] gspca_sq930x: Sensor ov9630 not yet treated [ 178.602887][ T24] logitech-hidpp-device 0003:046D:C086.001E: probe with driver logitech-hidpp-device failed with error -22 [ 178.641262][ T9] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 178.670345][ T9] usb 3-1: USB disconnect, device number 14 [ 178.760892][ T5890] usb 1-1: USB disconnect, device number 18 [ 178.945044][ T8454] usb usb8: usbfs: process 8454 (syz.1.1185) did not claim interface 0 before use [ 179.230527][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1193'. [ 179.315782][ T8475] tipc: Started in network mode [ 179.327664][ T8475] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 179.350187][ T8475] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0001 [ 179.364806][ T8477] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 179.371588][ T8477] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 179.380828][ T8475] tipc: Enabled bearer , priority 10 [ 179.396836][ T8477] vhci_hcd vhci_hcd.0: Device attached [ 179.476697][ T5883] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 179.566363][ T53] vhci_hcd: vhci_device speed not set [ 179.637453][ T53] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 179.638796][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 179.651454][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 179.674085][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.697319][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.727674][ T5883] usb 3-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 179.754195][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.777028][ T5883] usb 3-1: config 0 descriptor?? [ 179.816491][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 179.832614][ T9] usb 5-1: config 0 has no interfaces? [ 179.843206][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 179.874245][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.895789][ T9] usb 5-1: Product: syz [ 179.910210][ T9] usb 5-1: Manufacturer: syz [ 179.914907][ T9] usb 5-1: SerialNumber: syz [ 179.937578][ T9] usb 5-1: config 0 descriptor?? [ 180.174104][ T24] usb 5-1: USB disconnect, device number 17 [ 180.183102][ T8478] vhci_hcd: connection reset by peer [ 180.206461][ T2967] vhci_hcd: stop threads [ 180.220631][ T2967] vhci_hcd: release socket [ 180.225755][ T5883] hid_mf 0003:0079:1843.001F: hidraw0: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.2-1/input0 [ 180.246967][ T2967] vhci_hcd: disconnect device [ 180.254084][ T5883] hid_mf 0003:0079:1843.001F: Invalid report, this should never happen! [ 180.262787][ T53] vhci_hcd: vhci_device speed not set [ 180.278577][ T5883] hid_mf 0003:0079:1843.001F: Force feedback init failed. [ 180.406612][ T5883] usb 3-1: USB disconnect, device number 15 [ 180.516147][ T9] tipc: Node number set to 1 [ 181.029166][ T8552] netlink: 'syz.4.1231': attribute type 3 has an invalid length. [ 181.146560][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 181.162136][ T8559] tipc: Bearer : already 2 bearers with priority 10 [ 181.192030][ T8559] tipc: Bearer : trying with adjusted priority [ 181.200657][ T8559] tipc: Enabling of bearer rejected, failed to enable media [ 181.332301][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 181.356627][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.395227][ T9] usb 1-1: Product: syz [ 181.400287][ T9] usb 1-1: Manufacturer: syz [ 181.405321][ T9] usb 1-1: SerialNumber: syz [ 181.421066][ T9] usb 1-1: config 0 descriptor?? [ 181.434757][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 182.044502][ T9] gspca_sunplus: reg_r err -71 [ 182.052183][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 182.085181][ T9] usb 1-1: USB disconnect, device number 19 [ 183.076434][ T9] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 183.136572][ T5883] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 183.238332][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 183.245997][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 183.267401][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.280584][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 183.296695][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 183.302491][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 183.306078][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 183.306157][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 183.306183][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.306208][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 183.306235][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 183.308137][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 183.308189][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 183.308247][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.308274][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 183.308300][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 183.316515][ T53] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 183.317171][ T5883] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 183.317202][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.317221][ T5883] usb 1-1: Product: syz [ 183.317236][ T5883] usb 1-1: Manufacturer: syz [ 183.317272][ T5883] usb 1-1: SerialNumber: syz [ 183.319870][ T5883] usb 1-1: config 0 descriptor?? [ 183.329278][ T5883] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 183.488201][ T5883] usb 1-1: setting power ON [ 183.488751][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 183.501693][ T9] usb 4-1: string descriptor 0 read error: -22 [ 183.508703][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 183.510054][ T53] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 183.517954][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.537635][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 183.562859][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.586676][ T5883] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 183.588096][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.608729][ T5883] usb 1-1: media controller created [ 183.624306][ T53] usb 3-1: Product: syz [ 183.635940][ T53] usb 3-1: Manufacturer: syz [ 183.652062][ T53] usb 3-1: SerialNumber: syz [ 183.672662][ T53] usb 3-1: config 0 descriptor?? [ 183.674067][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.736110][ T5892] usb 4-1: USB disconnect, device number 14 [ 183.759088][ T5883] usb 1-1: selecting invalid altsetting 6 [ 183.768980][ T5883] usb 1-1: digital interface selection failed (-22) [ 183.775634][ T5883] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 183.794069][ T5883] usb 1-1: setting power OFF [ 183.801539][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 183.813403][ T5883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 183.860326][ T5883] (NULL device *): no alternate interface [ 183.908191][ T5893] usb 3-1: USB disconnect, device number 16 [ 183.984322][ T5883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 184.018894][ T5883] usb 1-1: USB disconnect, device number 20 [ 184.132189][ T30] audit: type=1326 audit(1743507452.891:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8676 comm="syz.1.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbfb8d169 code=0x7ffc0000 [ 184.168825][ T30] audit: type=1326 audit(1743507452.921:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8676 comm="syz.1.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbfb8d169 code=0x7ffc0000 [ 184.195581][ T30] audit: type=1326 audit(1743507452.921:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8676 comm="syz.1.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9cbfb8d169 code=0x7ffc0000 [ 184.246472][ T30] audit: type=1326 audit(1743507452.921:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8676 comm="syz.1.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbfb8d169 code=0x7ffc0000 [ 184.274442][ T30] audit: type=1326 audit(1743507452.921:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8676 comm="syz.1.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbfb8d169 code=0x7ffc0000 [ 184.299201][ T30] audit: type=1326 audit(1743507452.921:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8676 comm="syz.1.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f9cbfb8d169 code=0x7ffc0000 [ 184.325307][ T30] audit: type=1326 audit(1743507453.001:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8676 comm="syz.1.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbfb8d169 code=0x7ffc0000 [ 184.353747][ T30] audit: type=1326 audit(1743507453.001:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8676 comm="syz.1.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbfb8d169 code=0x7ffc0000 [ 184.624928][ T30] audit: type=1326 audit(1743507453.381:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472198d169 code=0x7ffc0000 [ 184.657431][ T30] audit: type=1326 audit(1743507453.381:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472198d169 code=0x7ffc0000 [ 184.872233][ T8708] [U]  [ 186.357060][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1347'. [ 186.661178][ T8793] tipc: Resetting bearer [ 186.701113][ T8793] tipc: Disabling bearer [ 187.058581][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 187.105736][ T8825] tipc: Can't bind to reserved service type 2 [ 187.606712][ T5893] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 187.661930][ T8854] ptrace attach of "./syz-executor exec"[5855] was attempted by ""[8854] [ 187.760872][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.803217][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.823539][ T5893] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 187.835189][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.867743][ T5893] usb 2-1: config 0 descriptor?? [ 188.299521][ T5893] arvo 0003:1E7D:30D4.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 188.491198][ T5893] arvo 0003:1E7D:30D4.0020: couldn't init struct arvo_device [ 188.506292][ T5893] arvo 0003:1E7D:30D4.0020: couldn't install keyboard [ 188.549148][ T5893] arvo 0003:1E7D:30D4.0020: probe with driver arvo failed with error -71 [ 188.568876][ T5893] usb 2-1: USB disconnect, device number 21 [ 189.767288][ T5892] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 189.947546][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 189.967869][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.985900][ T5892] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 190.010773][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.032350][ T5892] usb 2-1: config 0 descriptor?? [ 190.086349][ T5893] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 190.256436][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 190.270848][ T5893] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 190.287900][ T5893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.294886][ T5893] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 190.316697][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.337781][ T5893] usb 4-1: config 0 descriptor?? [ 190.480247][ T5892] apple 0003:05AC:026C.0021: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.1-1/input0 [ 190.692844][ T10] usb 2-1: USB disconnect, device number 22 [ 190.764072][ T5893] cherry 0003:046A:0027.0022: unknown main item tag 0x0 [ 190.772907][ T5893] cherry 0003:046A:0027.0022: unknown main item tag 0x0 [ 190.783051][ T5892] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 190.791013][ T5893] cherry 0003:046A:0027.0022: unknown main item tag 0x0 [ 190.804903][ T5893] cherry 0003:046A:0027.0022: unknown main item tag 0x0 [ 190.815339][ T5893] cherry 0003:046A:0027.0022: unknown main item tag 0x0 [ 190.830961][ T5893] cherry 0003:046A:0027.0022: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.3-1/input0 [ 190.965204][ T5893] usb 4-1: USB disconnect, device number 15 [ 190.972407][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 190.997155][ T5892] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 191.033947][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 191.044497][ T5892] usb 1-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 191.064858][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.100393][ T5892] usb 1-1: config 0 descriptor?? [ 191.471445][ T9000] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1440'. [ 191.494047][ T8998] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1440'. [ 191.548250][ T5892] lenovo 0003:17EF:60FE.0023: hidraw0: USB HID v0.0b Device [HID 17ef:60fe] on usb-dummy_hcd.0-1/input0 [ 191.760050][ T837] usb 1-1: USB disconnect, device number 21 [ 192.596433][ T837] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 192.748608][ T837] usb 4-1: Using ep0 maxpacket: 8 [ 192.765130][ T837] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 192.780165][ T837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.803666][ T837] usb 4-1: Product: syz [ 192.812843][ T837] usb 4-1: Manufacturer: syz [ 192.825053][ T837] usb 4-1: SerialNumber: syz [ 192.844587][ T837] usb 4-1: config 0 descriptor?? [ 192.869634][ T837] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 192.887481][ T837] usb 4-1: setting power ON [ 192.892260][ T837] dvb-usb: bulk message failed: -22 (2/0) [ 192.907055][ T837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 192.917327][ T837] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 192.925884][ T837] usb 4-1: media controller created [ 192.983159][ T837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.048556][ T837] usb 4-1: selecting invalid altsetting 6 [ 193.059451][ T837] usb 4-1: digital interface selection failed (-22) [ 193.074516][ T837] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 193.089886][ T9036] dvb-usb: bulk message failed: -22 (3/0) [ 193.098339][ T9036] usb 4-1: gpio_write failed. [ 193.107470][ T837] usb 4-1: setting power OFF [ 193.116244][ T837] dvb-usb: bulk message failed: -22 (2/0) [ 193.122879][ T9036] cxusb: i2c wr: len=80 is too big! [ 193.122879][ T9036] [ 193.132990][ T837] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 193.156599][ T837] (NULL device *): no alternate interface [ 193.232117][ T837] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 193.323944][ T837] usb 4-1: USB disconnect, device number 16 [ 193.546491][ T53] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 193.722116][ T53] usb 2-1: Using ep0 maxpacket: 16 [ 193.750632][ T53] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 193.770395][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 193.800915][ T53] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 193.836436][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.856437][ T53] usb 2-1: Product: syz [ 193.860672][ T53] usb 2-1: Manufacturer: syz [ 193.889905][ T53] usb 2-1: SerialNumber: syz [ 193.907874][ T53] usb 2-1: config 0 descriptor?? [ 194.205115][ T53] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 194.239161][ T53] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 194.282048][ T53] usb 2-1: USB disconnect, device number 23 [ 194.324180][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.331145][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.677004][ T5890] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 194.849870][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 194.871550][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 194.893048][ T5890] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 194.903110][ T5890] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 194.923386][ T5890] usb 1-1: Product: syz [ 194.957284][ T5890] usb 1-1: Manufacturer: syz [ 194.972158][ T5890] usb 1-1: SerialNumber: syz [ 195.219848][ T5890] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 195.242012][ T5890] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 195.252948][ T5890] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 195.263430][ T5890] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 195.430373][ T5890] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 195.451612][ T8963] syz.2.1422 (8963) used greatest stack depth: 18360 bytes left [ 195.467522][ T5890] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 195.511233][ T5890] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 195.665155][ T5892] usb 1-1: USB disconnect, device number 22 [ 195.717719][ T5892] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 195.790314][ T5892] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 195.831412][ T5892] visor 1-1:1.0: device disconnected [ 196.030428][ T9166] team0: Device gtp0 is of different type [ 196.877762][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 196.968266][ T5892] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 197.046162][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 197.078084][ T24] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 197.096825][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.126828][ T24] usb 2-1: Product: syz [ 197.131062][ T24] usb 2-1: Manufacturer: syz [ 197.136119][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 197.153985][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.175188][ T24] usb 2-1: SerialNumber: syz [ 197.182080][ T9214] x_tables: ip_tables: udp match: only valid for protocol 17 [ 197.188240][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.192620][ T24] usb 2-1: config 0 descriptor?? [ 197.230735][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 197.232526][ T5892] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 197.241820][ T24] usb 2-1: setting power ON [ 197.281217][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 197.288609][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.313932][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.344461][ T5892] usb 5-1: config 0 descriptor?? [ 197.345784][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 197.382234][ T24] usb 2-1: media controller created [ 197.457169][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.471781][ T9197] dvb-usb: bulk message failed: -22 (3/0) [ 197.496976][ T9197] usb 2-1: gpio_write failed. [ 197.501729][ T9197] cxusb: i2c wr: len=80 is too big! [ 197.501729][ T9197] [ 197.542687][ T24] usb 2-1: selecting invalid altsetting 6 [ 197.567568][ T24] usb 2-1: digital interface selection failed (-22) [ 197.584446][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 197.612426][ T24] usb 2-1: setting power OFF [ 197.629465][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 197.639620][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 197.667034][ T24] (NULL device *): no alternate interface [ 197.755017][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 197.776963][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 197.788637][ T5892] apple 0003:05AC:0246.0024: reserved main item tag 0xd [ 197.819072][ T5892] apple 0003:05AC:0246.0024: unexpected long global item [ 197.827007][ T5892] apple 0003:05AC:0246.0024: parse failed [ 197.831268][ T24] usb 2-1: USB disconnect, device number 24 [ 197.845807][ T5892] apple 0003:05AC:0246.0024: probe with driver apple failed with error -22 [ 197.956150][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 197.989951][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 198.019571][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 198.043509][ T24] usb 5-1: USB disconnect, device number 18 [ 198.054691][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 198.093708][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 198.130966][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 198.149844][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 198.177121][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 198.214350][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 198.241847][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 198.260322][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 198.292168][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 198.313818][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 198.343993][ T10] usb 4-1: string descriptor 0 read error: -22 [ 198.350619][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 198.370217][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.427676][ T10] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 198.680108][ T5893] usb 4-1: USB disconnect, device number 17 [ 198.988180][ T9272] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1544'. [ 199.157271][ T5893] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 199.338851][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 199.350213][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'. [ 199.379003][ T5893] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 199.388299][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 199.403428][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.413386][ T9291] netlink: 'syz.4.1550': attribute type 18 has an invalid length. [ 199.426664][ T5893] usb 3-1: Product: syz [ 199.434657][ T5893] usb 3-1: Manufacturer: syz [ 199.452382][ T5893] usb 3-1: SerialNumber: syz [ 199.478292][ T5893] usb 3-1: config 0 descriptor?? [ 199.505913][ T5893] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 199.527623][ T5893] usb 3-1: setting power ON [ 199.532204][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 199.573851][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 199.598578][ T5893] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 199.619958][ T5893] usb 3-1: media controller created [ 199.673475][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 199.673495][ T30] audit: type=1326 audit(1743507468.431:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cbfb8d169 code=0x7fc00000 [ 199.710624][ T9268] dvb-usb: bulk message failed: -22 (3/0) [ 199.726968][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.739350][ T9268] usb 3-1: gpio_write failed. [ 199.745004][ T9268] cxusb: i2c wr: len=80 is too big! [ 199.745004][ T9268] [ 199.814827][ T5893] usb 3-1: selecting invalid altsetting 6 [ 199.814872][ T5893] usb 3-1: digital interface selection failed (-22) [ 199.814890][ T5893] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 199.823429][ T5893] usb 3-1: setting power OFF [ 199.823473][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 199.823494][ T5893] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 199.823511][ T5893] (NULL device *): no alternate interface [ 199.891576][ T9307] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1554'. [ 199.899046][ T5893] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 199.933598][ T9303] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1554'. [ 200.057386][ T5893] usb 3-1: USB disconnect, device number 17 [ 200.299274][ T9319] netlink: 'syz.1.1559': attribute type 2 has an invalid length. [ 200.324412][ T9319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1559'. [ 200.569638][ T5893] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 200.632428][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1565'. [ 200.743353][ T5893] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 200.765268][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.785448][ T5893] usb 4-1: Product: syz [ 200.795558][ T5893] usb 4-1: Manufacturer: syz [ 200.818543][ T5893] usb 4-1: SerialNumber: syz [ 200.825627][ T5893] usb 4-1: config 0 descriptor?? [ 200.854468][ T5893] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 201.134212][ T9361] veth0_to_team: entered promiscuous mode [ 201.142638][ T9361] veth0_to_team: entered allmulticast mode [ 201.457457][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 201.475438][ T5893] gspca_sunplus: reg_r err -71 [ 201.484651][ T5893] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 201.515791][ T5893] usb 4-1: USB disconnect, device number 18 [ 201.636264][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 201.661414][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.673373][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.696117][ T10] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 201.707546][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.718950][ T10] usb 1-1: config 0 descriptor?? [ 201.818579][ T837] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 201.921993][ T9394] gtp0: entered promiscuous mode [ 201.934435][ T9394] gtp0: entered allmulticast mode [ 201.991653][ T837] usb 3-1: Using ep0 maxpacket: 16 [ 202.004652][ T837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.026192][ T837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.049160][ T837] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.067608][ T837] usb 3-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 202.081746][ T837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.094670][ T837] usb 3-1: config 0 descriptor?? [ 202.142216][ T10] bigben 0003:146B:0902.0025: unexpected rdesc, please submit for review [ 202.165275][ T10] bigben 0003:146B:0902.0025: item fetching failed at offset 3/5 [ 202.190658][ T10] bigben 0003:146B:0902.0025: parse failed [ 202.206992][ T10] bigben 0003:146B:0902.0025: probe with driver bigben failed with error -22 [ 202.351280][ T53] usb 1-1: USB disconnect, device number 23 [ 202.516911][ T837] hid-generic 0003:18D1:503C.0026: unbalanced collection at end of report description [ 202.531876][ T837] hid-generic 0003:18D1:503C.0026: probe with driver hid-generic failed with error -22 [ 202.536179][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 202.550746][ T5893] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 202.641837][ T9419] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 202.732478][ T837] usb 3-1: USB disconnect, device number 18 [ 202.750752][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 202.756553][ T5893] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 202.765900][ T5893] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.775482][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 202.783552][ T5893] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.794861][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 202.807997][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.814794][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 202.826052][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 202.838142][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 202.845649][ T5893] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.854641][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 202.866832][ T5893] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.877932][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 202.889154][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.895989][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 202.907561][ T5893] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.918221][ T5893] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.930459][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 202.940613][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 202.952021][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.959663][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 202.970965][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 202.982277][ T5893] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.992344][ T5893] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.003682][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.012761][ T10] usb 2-1: string descriptor 0 read error: -22 [ 203.019607][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 203.029070][ T5893] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.038208][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.046942][ T5893] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.059549][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.074095][ T10] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 203.083421][ T5893] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.104512][ T5893] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.125176][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.143254][ T5893] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.153136][ T5893] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.164839][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.173849][ T5893] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.183865][ T5893] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.194944][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.218357][ T5893] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 203.227952][ T5893] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 203.240184][ T5893] usb 5-1: Product: syz [ 203.244412][ T5893] usb 5-1: Manufacturer: syz [ 203.250616][ T5893] usb 5-1: SerialNumber: syz [ 203.259652][ T9428] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1607'. [ 203.277290][ T5893] usb 5-1: config 0 descriptor?? [ 203.298105][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'. [ 203.314923][ T5893] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 203.334079][ T9428] tipc: MTU too low for tipc bearer [ 203.339569][ T5892] usb 2-1: USB disconnect, device number 25 [ 203.531888][ T5892] usb 5-1: USB disconnect, device number 19 [ 203.543179][ T5892] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 204.285052][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1626'. [ 204.318445][ T9481] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 204.325037][ T9481] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 204.360617][ T9481] vhci_hcd vhci_hcd.0: Device attached [ 204.403839][ T9482] vhci_hcd: connection closed [ 204.404648][ T12] vhci_hcd: stop threads [ 204.419044][ T12] vhci_hcd: release socket [ 204.423528][ T12] vhci_hcd: disconnect device [ 204.455833][ T9488] VFS: Mount too revealing [ 205.141782][ T9522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1648'. [ 205.206715][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1649'. [ 207.702550][ T9574] delete_channel: no stack [ 208.086465][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 208.194802][ T30] audit: type=1800 audit(1743507476.951:51): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1692" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 208.214845][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.237921][ T5893] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 208.256185][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 208.263616][ T10] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 208.272779][ T10] usb 2-1: config 0 has no interface number 0 [ 208.282899][ T10] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 208.303795][ T10] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 208.330860][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 208.344515][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.353927][ T10] usb 2-1: Product: syz [ 208.382533][ T10] usb 2-1: Manufacturer: syz [ 208.400049][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.426596][ T10] usb 2-1: SerialNumber: syz [ 208.443501][ T5893] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 208.457574][ T10] usb 2-1: config 0 descriptor?? [ 208.464193][ T9603] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.482083][ T9603] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.502187][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.545966][ T5893] usb 5-1: config 0 descriptor?? [ 208.703036][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1698'. [ 208.738969][ T9603] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.772449][ T9603] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.830678][ T9638] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1700'. [ 208.840189][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 208.928252][ T5890] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 208.985891][ T5893] sony 0003:1345:3008.0027: item fetching failed at offset 4/5 [ 208.997949][ T5893] sony 0003:1345:3008.0027: parse failed [ 209.003822][ T5893] sony 0003:1345:3008.0027: probe with driver sony failed with error -22 [ 209.088683][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.116191][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.136191][ T5890] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 209.156419][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.173958][ T5890] usb 1-1: config 0 descriptor?? [ 209.183306][ T5893] usb 5-1: USB disconnect, device number 20 [ 209.196241][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 209.219243][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 209.241013][ T10] asix 2-1:0.251: probe with driver asix failed with error -71 [ 209.290681][ T10] usb 2-1: USB disconnect, device number 26 [ 209.392393][ T9647] netlink: 'syz.2.1704': attribute type 10 has an invalid length. [ 209.403617][ T9647] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1704'. [ 209.604458][ T5890] waterforce 0003:1044:7A4D.0028: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.0-1/input0 [ 209.688554][ T5890] waterforce 0003:1044:7A4D.0028: fw version request failed with -38 [ 209.828894][ T5890] usb 1-1: USB disconnect, device number 24 [ 210.850641][ T9684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.837130][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 212.011588][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1737'. [ 212.073220][ T9712] tipc: Resetting bearer [ 212.089026][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 212.136980][ T24] usb 5-1: config 0 has no interface number 0 [ 212.177457][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.251386][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.261998][ T53] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 212.329611][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 212.400033][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.456242][ T53] usb 1-1: Using ep0 maxpacket: 8 [ 212.463374][ T24] usb 5-1: config 0 descriptor?? [ 212.497412][ T53] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 212.538704][ T53] usb 1-1: config 179 has no interface number 0 [ 212.588343][ T53] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 212.665672][ T53] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 212.715241][ T53] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 212.766587][ T53] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 212.793624][ T53] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 212.850777][ T53] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 212.881431][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.948046][ T9710] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 212.990904][ T24] uclogic 0003:256C:006D.0029: No inputs registered, leaving [ 213.035198][ T9712] tipc: Disabling bearer [ 213.091746][ T9718] netlink: 'syz.2.1739': attribute type 10 has an invalid length. [ 213.110873][ T24] uclogic 0003:256C:006D.0029: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input1 [ 213.304309][ T24] usb 5-1: USB disconnect, device number 21 [ 213.427029][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1739'. [ 213.747128][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 213.755507][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 213.764231][ T24] usb 1-1: USB disconnect, device number 25 [ 214.233581][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.242315][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.392639][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.400530][ T9718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.408192][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.415389][ T9718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.612538][ T9718] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 214.661299][ T9721] bridge_slave_1: left allmulticast mode [ 214.691069][ T9721] bridge_slave_1: left promiscuous mode [ 214.721793][ T9721] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.811411][ T9721] bridge_slave_0: left allmulticast mode [ 214.829425][ T9721] bridge_slave_0: left promiscuous mode [ 214.847216][ T9721] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.059160][ T9721] bond0: (slave bridge0): Releasing backup interface [ 216.956480][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 216.962625][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 216.969173][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 216.975278][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 216.981771][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 221.576232][ T5890] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 221.753408][ T5890] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 221.774716][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.785760][ T5890] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.799811][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 221.808740][ T5890] usb 5-1: Product: syz [ 221.813018][ T5890] usb 5-1: Manufacturer: syz [ 221.822367][ T5890] usb 5-1: SerialNumber: syz [ 221.833463][ T5890] usb 5-1: config 0 descriptor?? [ 221.862432][ T5890] usb 5-1: selecting invalid altsetting 0 [ 222.130005][ T5890] usb 5-1: USB disconnect, device number 22 [ 223.906240][ T5890] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 224.068135][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 224.081685][ T5890] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.092232][ T5890] usb 5-1: config 0 has no interface number 0 [ 224.101330][ T5890] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.114608][ T5890] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.129112][ T5890] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 224.139768][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.159026][ T5890] usb 5-1: config 0 descriptor?? [ 224.794535][ T5890] uclogic 0003:28BD:0071.002A: failed retrieving string descriptor #100: -71 [ 224.814735][ T5890] uclogic 0003:28BD:0071.002A: failed retrieving pen parameters: -71 [ 224.832008][ T5890] uclogic 0003:28BD:0071.002A: pen probing failed: -71 [ 224.839872][ T5890] uclogic 0003:28BD:0071.002A: failed probing parameters: -71 [ 224.852733][ T5890] uclogic 0003:28BD:0071.002A: probe with driver uclogic failed with error -71 [ 224.873921][ T5890] usb 5-1: USB disconnect, device number 23 [ 226.670430][ T9784] sctp: [Deprecated]: syz.3.1766 (pid 9784) Use of int in max_burst socket option. [ 226.670430][ T9784] Use struct sctp_assoc_value instead [ 227.016480][ T5890] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 227.178365][ T5890] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.190176][ T5890] usb 4-1: config 0 has no interface number 0 [ 227.198011][ T5890] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 227.212633][ T5890] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 227.224845][ T5890] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 227.240912][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.254909][ T5890] usb 4-1: config 0 descriptor?? [ 227.270482][ T9786] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 227.311009][ T5890] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 227.529189][ T5890] usb 4-1: USB disconnect, device number 19 [ 228.898334][ T5890] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 228.952087][ T9804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1776'. [ 229.094988][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.142126][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.196384][ T5890] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 229.207497][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.226231][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.237656][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.247750][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.256680][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.311298][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.355476][ T5890] usb 1-1: config 0 descriptor?? [ 229.871158][ T5890] hid-retrode 0003:0403:97C1.002B: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.0-1/input0 [ 230.069673][ T24] usb 1-1: USB disconnect, device number 26 [ 230.244141][ T9808] chnl_net:caif_netlink_parms(): no params data found [ 230.292903][ T9818] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.301949][ T9818] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.310957][ T9818] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.320320][ T9818] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.678146][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.685397][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.709651][ T9808] bridge_slave_0: entered allmulticast mode [ 230.729914][ T9808] bridge_slave_0: entered promiscuous mode [ 230.752200][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.759550][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 230.788456][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.808825][ T9808] bridge_slave_1: entered allmulticast mode [ 230.831932][ T9808] bridge_slave_1: entered promiscuous mode [ 230.930781][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 230.950103][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.001732][ T24] usb 4-1: Product: syz [ 231.005959][ T24] usb 4-1: Manufacturer: syz [ 231.023075][ T24] usb 4-1: SerialNumber: syz [ 231.043304][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 231.121075][ T9808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.141117][ T9808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.162700][ T53] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 231.356413][ T5850] Bluetooth: hci0: command tx timeout [ 231.408777][ T9808] team0: Port device team_slave_0 added [ 231.530064][ T9808] team0: Port device team_slave_1 added [ 231.742984][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.755742][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.800103][ T9808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.821565][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.831082][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.864755][ T9808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.172396][ T9808] hsr_slave_0: entered promiscuous mode [ 232.183175][ T9808] hsr_slave_1: entered promiscuous mode [ 232.195219][ T9808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.211107][ T9808] Cannot create hsr debugfs directory [ 232.796196][ T53] usb 4-1: Service connection timeout for: 256 [ 232.810872][ T53] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 232.892631][ T53] ath9k_htc: Failed to initialize the device [ 232.962748][ T53] usb 4-1: ath9k_htc: USB layer deinitialized [ 233.230607][ T5890] usb 4-1: USB disconnect, device number 20 [ 233.435092][ T9808] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.442532][ T5850] Bluetooth: hci0: command tx timeout [ 233.538862][ T9808] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 233.621352][ T9808] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 233.728417][ T9808] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.220632][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.231643][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.246713][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.256688][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.266599][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.518159][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 234.587191][ T9808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.776952][ T9808] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.928667][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.935891][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.025541][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.032786][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.517075][ T5850] Bluetooth: hci0: command tx timeout [ 235.767731][ T9808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.221545][ T9808] veth0_vlan: entered promiscuous mode [ 236.292153][ T9841] chnl_net:caif_netlink_parms(): no params data found [ 236.397157][ T5850] Bluetooth: hci5: command tx timeout [ 236.439602][ T9808] veth1_vlan: entered promiscuous mode [ 236.846343][ T837] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 236.941252][ T9841] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.969438][ T9841] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.992487][ T9841] bridge_slave_0: entered allmulticast mode [ 237.008349][ T9841] bridge_slave_0: entered promiscuous mode [ 237.034705][ T837] usb 1-1: Using ep0 maxpacket: 32 [ 237.056433][ T837] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.064496][ T837] usb 1-1: config 0 has no interface number 0 [ 237.116705][ T837] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.156341][ T9841] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.163548][ T9841] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.181756][ T837] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.233511][ T837] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 237.246971][ T9841] bridge_slave_1: entered allmulticast mode [ 237.275629][ T9841] bridge_slave_1: entered promiscuous mode [ 237.282894][ T837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.331981][ T837] usb 1-1: config 0 descriptor?? [ 237.346737][ T9808] veth0_macvtap: entered promiscuous mode [ 237.599671][ T5850] Bluetooth: hci0: command tx timeout [ 237.639538][ T9808] veth1_macvtap: entered promiscuous mode [ 237.682757][ T9841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.744761][ T9841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.025746][ T837] uclogic 0003:28BD:0094.002C: failed retrieving string descriptor #100: -71 [ 238.050049][ T837] uclogic 0003:28BD:0094.002C: failed retrieving pen parameters: -71 [ 238.066851][ T837] uclogic 0003:28BD:0094.002C: pen probing failed: -71 [ 238.075895][ T837] uclogic 0003:28BD:0094.002C: failed probing parameters: -71 [ 238.093152][ T837] uclogic 0003:28BD:0094.002C: probe with driver uclogic failed with error -71 [ 238.151164][ T9841] team0: Port device team_slave_0 added [ 238.159802][ T9893] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 238.159802][ T9893] The task syz.4.1811 (9893) triggered the difference, watch for misbehavior. [ 238.178001][ T837] usb 1-1: USB disconnect, device number 27 [ 238.213903][ T9841] team0: Port device team_slave_1 added [ 238.476860][ T5850] Bluetooth: hci5: command tx timeout [ 238.583041][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.614434][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.652348][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.685408][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.710879][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.744113][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.782863][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.815442][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.844375][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.846024][ C0] sched: DL replenish lagged too much [ 238.921297][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.978106][ T9808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.021277][ T9841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.066629][ T9841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.175238][ T9841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.228758][ T9841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.235759][ T9841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.340046][ T9841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.363240][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.383696][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.409763][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.425652][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.444033][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.455873][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.466554][ T837] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 239.483085][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.502302][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.520615][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.534249][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.554858][ T9808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.629590][ T837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.646601][ T837] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 239.663352][ T837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.714724][ T837] usb 1-1: config 0 descriptor?? [ 239.789181][ T9808] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.807890][ T9808] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.824046][ T9808] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.849581][ T9808] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.892559][ T9841] hsr_slave_0: entered promiscuous mode [ 239.905000][ T9841] hsr_slave_1: entered promiscuous mode [ 239.921823][ T9841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.933874][ T9841] Cannot create hsr debugfs directory [ 240.184252][ T837] logitech-hidpp-device 0003:046D:C262.002D: unknown global tag 0xd [ 240.223335][ T837] logitech-hidpp-device 0003:046D:C262.002D: item 0 2 1 13 parsing failed [ 240.267910][ T837] logitech-hidpp-device 0003:046D:C262.002D: hidpp_probe:parse failed [ 240.300927][ T837] logitech-hidpp-device 0003:046D:C262.002D: probe with driver logitech-hidpp-device failed with error -22 [ 240.424956][ T837] usb 1-1: USB disconnect, device number 28 [ 240.557453][ T5850] Bluetooth: hci5: command tx timeout [ 240.919560][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.947408][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.976464][ T837] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 241.181588][ T837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.205342][ T9841] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 241.241476][ T837] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 241.275772][ T837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.307986][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.325073][ T837] usb 5-1: config 0 descriptor?? [ 241.345921][ T9841] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 241.366672][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.459205][ T9841] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 241.533972][ T9841] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 241.616679][ T837] usbhid 5-1:0.0: can't add hid device: -71 [ 241.622734][ T837] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 241.731121][ T837] usb 5-1: USB disconnect, device number 24 [ 242.292702][ T9841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.432519][ T9841] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.552259][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.559562][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.638316][ T5850] Bluetooth: hci5: command tx timeout [ 242.685377][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.692663][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.361259][ T9841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.652531][ T9841] veth0_vlan: entered promiscuous mode [ 243.709549][ T9941] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1830'. [ 243.767050][ T9940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1830'. [ 243.860692][ T9841] veth1_vlan: entered promiscuous mode [ 244.060588][ T9841] veth0_macvtap: entered promiscuous mode [ 244.108350][ T9841] veth1_macvtap: entered promiscuous mode [ 244.289684][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.377180][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.446548][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.524324][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.577631][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.639023][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.709713][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.770341][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.843140][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.950072][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.995009][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.034567][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.081565][ T9841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.359456][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.436802][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.488535][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.545429][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.646142][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.715088][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.772879][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.841432][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.882655][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.941275][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.996928][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.048929][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.129260][ T9841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.334393][ T9841] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.388445][ T9841] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.442624][ T9841] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.492342][ T9841] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.690006][ T9980] program syz.0.1847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.049324][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.098989][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.318431][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.377752][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.986203][ T5890] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 249.176475][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 249.204885][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.265268][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.315352][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.384259][ T5890] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 249.456502][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.533233][ T5890] usb 1-1: config 0 descriptor?? [ 249.911631][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1862'. [ 250.015485][ T5890] microsoft 0003:045E:07DA.002E: ignoring exceeding usage max [ 250.071010][ T5890] microsoft 0003:045E:07DA.002E: No inputs registered, leaving [ 250.166608][ T5890] microsoft 0003:045E:07DA.002E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 250.237548][ T5890] microsoft 0003:045E:07DA.002E: no inputs found [ 250.252993][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1864'. [ 250.276215][ T5890] microsoft 0003:045E:07DA.002E: could not initialize ff, continuing anyway [ 250.339606][ T5890] usb 1-1: USB disconnect, device number 29 [ 250.391979][T10025] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1865'. [ 252.184781][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.194688][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.209446][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.228130][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.243039][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.065504][T10050] chnl_net:caif_netlink_parms(): no params data found [ 253.493919][T10050] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.518191][T10050] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.548329][T10050] bridge_slave_0: entered allmulticast mode [ 253.574353][T10050] bridge_slave_0: entered promiscuous mode [ 253.603829][T10050] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.624687][T10050] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.634501][T10050] bridge_slave_1: entered allmulticast mode [ 253.660527][T10050] bridge_slave_1: entered promiscuous mode [ 253.831622][T10050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.877846][T10050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.063713][T10050] team0: Port device team_slave_0 added [ 254.155128][T10050] team0: Port device team_slave_1 added [ 254.316893][ T5844] Bluetooth: hci6: command tx timeout [ 254.364526][T10050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.382033][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.408170][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.544092][T10050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.621405][T10050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.656250][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.682269][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.811513][T10050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.199221][T10050] hsr_slave_0: entered promiscuous mode [ 255.240409][T10050] hsr_slave_1: entered promiscuous mode [ 255.286752][T10050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.320108][T10050] Cannot create hsr debugfs directory [ 255.731864][ T5890] IPVS: starting estimator thread 0... [ 255.807891][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.814353][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.877092][T10082] IPVS: using max 24 ests per chain, 57600 per kthread [ 256.399006][ T5844] Bluetooth: hci6: command tx timeout [ 256.444071][T10050] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 256.513858][T10050] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 256.576552][T10089] IPVS: ip_vs_edit_dest(): server weight less than zero [ 256.587891][T10050] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 256.661511][T10050] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 257.259514][T10050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.400952][T10050] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.477629][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.484878][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.560021][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.567300][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.735510][T10100] tipc: Enabling of bearer rejected, failed to enable media [ 257.911932][T10050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.115098][T10050] veth0_vlan: entered promiscuous mode [ 258.195684][T10050] veth1_vlan: entered promiscuous mode [ 258.343545][T10050] veth0_macvtap: entered promiscuous mode [ 258.410884][T10050] veth1_macvtap: entered promiscuous mode [ 258.476752][ T5844] Bluetooth: hci6: command tx timeout [ 258.550162][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.602203][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.624501][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.645746][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.663059][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.674790][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.692556][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.720816][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.741227][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.755247][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.774371][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.785418][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.804066][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.826209][ T837] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 258.841940][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.862986][T10050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.932981][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.995145][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.034647][ T837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.066521][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.082258][ T837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.109534][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.126119][ T837] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 259.144279][T10110] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1899'. [ 259.154755][ T837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.163536][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.190596][ T837] usb 1-1: config 0 descriptor?? [ 259.205878][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.232315][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.252296][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.264192][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.294873][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.321225][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.341529][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.354025][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.375333][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.394276][T10050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.479588][T10050] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.546738][T10050] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.555640][T10050] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.642383][T10050] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.687365][ T837] logitech-djreceiver 0003:046D:C534.002F: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.0-1/input0 [ 259.898817][ T837] usb 1-1: USB disconnect, device number 30 [ 260.124832][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.159792][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.267519][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.321300][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.557255][ T5844] Bluetooth: hci6: command tx timeout [ 260.998803][ T53] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 261.168581][ T53] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.199265][ T53] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 261.247812][ T53] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 261.299022][ T53] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 261.336289][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.365162][ T53] usb 1-1: Product: syz [ 261.384389][ T53] usb 1-1: Manufacturer: syz [ 261.396361][ T53] usb 1-1: SerialNumber: syz [ 261.413900][ T53] usb 1-1: config 0 descriptor?? [ 261.588596][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 261.598841][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 261.610496][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 261.620762][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 261.630189][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 261.695348][ T837] usb 1-1: USB disconnect, device number 31 [ 262.213246][T10122] chnl_net:caif_netlink_parms(): no params data found [ 262.745017][T10122] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.766414][T10122] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.781549][T10134] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1906'. [ 262.836258][T10122] bridge_slave_0: entered allmulticast mode [ 262.869704][T10122] bridge_slave_0: entered promiscuous mode [ 262.927490][T10122] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.974998][T10122] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.996862][T10122] bridge_slave_1: entered allmulticast mode [ 263.028064][T10122] bridge_slave_1: entered promiscuous mode [ 263.333152][T10122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.389653][T10122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.682009][ T5844] Bluetooth: hci7: command tx timeout [ 263.727882][T10122] team0: Port device team_slave_0 added [ 263.763001][T10122] team0: Port device team_slave_1 added [ 264.020790][T10122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.063068][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.214428][T10122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.302190][T10122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.373201][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.536431][T10122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.149041][T10122] hsr_slave_0: entered promiscuous mode [ 265.195623][T10122] hsr_slave_1: entered promiscuous mode [ 265.224613][T10122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.286414][T10122] Cannot create hsr debugfs directory [ 265.758263][ T5844] Bluetooth: hci7: command tx timeout [ 266.015358][T10174] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1925'. [ 266.565847][T10122] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 266.678705][T10122] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 266.774532][T10122] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 266.866486][T10122] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 266.892200][T10185] netlink: 'syz.6.1931': attribute type 10 has an invalid length. [ 266.993855][T10188] netlink: 'syz.6.1931': attribute type 10 has an invalid length. [ 267.069580][T10185] team0: Port device netdevsim0 added [ 267.220343][T10188] team0: Port device netdevsim0 removed [ 267.235652][T10188] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 267.731908][T10122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.836385][ T5844] Bluetooth: hci7: command tx timeout [ 267.950004][T10122] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.082537][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.090166][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.238775][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.246082][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.909336][T10122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.295211][T10122] veth0_vlan: entered promiscuous mode [ 269.409559][T10122] veth1_vlan: entered promiscuous mode [ 269.637943][T10122] veth0_macvtap: entered promiscuous mode [ 269.709839][T10122] veth1_macvtap: entered promiscuous mode [ 269.747780][ T5850] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 269.758418][ T5850] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 269.769479][ T5850] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 269.778679][ T5850] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 269.788172][ T5850] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 269.921682][ T5850] Bluetooth: hci7: command tx timeout [ 269.947678][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.056155][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.118231][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.163533][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.233099][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.265763][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.332300][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.391547][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.445216][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.506405][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.557103][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.603386][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.665932][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.718917][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.756096][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.802934][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.847827][T10122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.915248][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.998191][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.036448][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.088253][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.167292][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.236366][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.277358][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.312148][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.356166][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.396139][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.419532][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.453822][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.486773][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.525840][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.559296][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.593609][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.632135][T10122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.765697][T10122] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.836769][ T5850] Bluetooth: hci8: command tx timeout [ 271.856162][T10122] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.864953][T10122] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.986434][T10122] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.996680][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.004583][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.374503][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.438031][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.918066][ T5850] Bluetooth: hci8: command tx timeout [ 274.184011][T10211] chnl_net:caif_netlink_parms(): no params data found [ 274.354911][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1958'. [ 274.407298][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1958'. [ 274.466282][T10251] netlink: 'syz.6.1958': attribute type 11 has an invalid length. [ 274.516525][T10251] netlink: 'syz.6.1958': attribute type 12 has an invalid length. [ 274.688103][T10255] netlink: 'syz.8.1901': attribute type 3 has an invalid length. [ 274.722033][T10255] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.1901'. [ 275.682626][T10211] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.722030][T10211] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.763474][T10211] bridge_slave_0: entered allmulticast mode [ 275.797506][T10211] bridge_slave_0: entered promiscuous mode [ 275.842147][T10211] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.874384][T10211] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.910702][T10211] bridge_slave_1: entered allmulticast mode [ 275.956572][T10211] bridge_slave_1: entered promiscuous mode [ 276.017975][ T5850] Bluetooth: hci8: command tx timeout [ 276.380696][T10211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.507131][T10275] ip6tnl1: entered promiscuous mode [ 276.562696][T10211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.045211][T10211] team0: Port device team_slave_0 added [ 277.134625][T10211] team0: Port device team_slave_1 added [ 277.536355][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 277.562755][T10211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.594975][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.710021][T10211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.736837][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 277.763988][ T24] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 277.794099][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.834070][ T24] usb 9-1: Product: syz [ 277.847396][T10211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.868844][ T24] usb 9-1: Manufacturer: syz [ 277.878798][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.915729][ T24] usb 9-1: SerialNumber: syz [ 277.958238][ T24] usb 9-1: config 0 descriptor?? [ 277.978943][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 277.999219][T10211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.076693][ T5850] Bluetooth: hci8: command tx timeout [ 278.382335][ T24] gspca_sonixj: reg_r err -71 [ 278.401542][ T24] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 278.450889][ T24] usb 9-1: USB disconnect, device number 2 [ 278.463609][T10211] hsr_slave_0: entered promiscuous mode [ 278.548290][T10211] hsr_slave_1: entered promiscuous mode [ 278.596446][T10211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.625451][T10211] Cannot create hsr debugfs directory [ 280.118061][T10319] tipc: Started in network mode [ 280.145926][T10319] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 280.182173][T10319] tipc: Enabled bearer , priority 0 [ 280.601505][T10211] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 280.759016][T10211] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 280.893299][T10211] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 281.005518][T10211] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 281.296160][ T24] tipc: Node number set to 11578026 [ 281.751336][T10337] xt_CT: No such helper "pptp" [ 282.556755][ T5890] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 282.759809][ T5890] usb 9-1: Using ep0 maxpacket: 16 [ 282.782800][ T5890] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.819069][ T5890] usb 9-1: New USB device found, idVendor=046d, idProduct=c713, bcdDevice= 0.00 [ 282.844604][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.873745][ T5890] usb 9-1: config 0 descriptor?? [ 283.325549][ T5890] logitech-djreceiver 0003:046D:C713.0030: unknown main item tag 0x3 [ 283.542460][ T5890] usb 9-1: USB disconnect, device number 3 [ 298.066050][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.075268][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.083538][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.113147][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.146606][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.393574][ T5850] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 299.411826][ T5850] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 299.420005][ T5850] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 299.428686][ T5850] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 299.438096][ T5850] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 299.565695][ T5844] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 299.584021][ T5844] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 299.593951][ T5844] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 299.606628][ T5844] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 299.647207][ T5844] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 300.237183][ T5850] Bluetooth: hci1: command tx timeout [ 300.379372][ T5844] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 300.399550][ T5844] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 300.408029][ T5844] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 300.417839][ T5844] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 300.425642][ T5844] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 301.516365][ T5850] Bluetooth: hci9: command tx timeout [ 301.762303][ T5850] Bluetooth: hci10: command tx timeout [ 302.316961][ T5850] Bluetooth: hci1: command tx timeout [ 302.479277][ T5844] Bluetooth: hci11: command tx timeout [ 303.596694][ T5850] Bluetooth: hci9: command tx timeout [ 303.842030][ T5850] Bluetooth: hci10: command tx timeout [ 304.398434][ T5850] Bluetooth: hci1: command tx timeout [ 304.556691][ T5850] Bluetooth: hci11: command tx timeout [ 305.679410][ T5850] Bluetooth: hci9: command tx timeout [ 305.922656][ T5850] Bluetooth: hci10: command tx timeout [ 306.476642][ T5850] Bluetooth: hci1: command tx timeout [ 306.636711][ T5850] Bluetooth: hci11: command tx timeout [ 307.766141][ T5850] Bluetooth: hci9: command tx timeout [ 308.002288][ T5850] Bluetooth: hci10: command tx timeout [ 308.716416][ T5850] Bluetooth: hci11: command tx timeout [ 317.228999][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.235369][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.132266][ T5844] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 329.153325][ T5844] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 329.164461][ T5844] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 329.173636][ T5844] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 329.182811][ T5844] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 331.277237][ T5850] Bluetooth: hci12: command tx timeout [ 333.356402][ T5844] Bluetooth: hci12: command tx timeout [ 335.442098][ T5844] Bluetooth: hci12: command tx timeout [ 337.521749][ T5844] Bluetooth: hci12: command tx timeout [ 350.181086][T10379] chnl_net:caif_netlink_parms(): no params data found [ 350.396857][T10374] chnl_net:caif_netlink_parms(): no params data found [ 350.597637][T10381] chnl_net:caif_netlink_parms(): no params data found [ 350.623023][T10377] chnl_net:caif_netlink_parms(): no params data found [ 351.186571][T10389] chnl_net:caif_netlink_parms(): no params data found [ 351.616275][T10379] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.623477][T10379] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.651516][T10379] bridge_slave_0: entered allmulticast mode [ 351.687208][T10379] bridge_slave_0: entered promiscuous mode [ 351.707714][T10379] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.714905][T10379] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.738999][T10379] bridge_slave_1: entered allmulticast mode [ 351.759685][T10379] bridge_slave_1: entered promiscuous mode [ 352.227487][T10374] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.234721][T10374] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.255408][T10374] bridge_slave_0: entered allmulticast mode [ 352.276989][T10374] bridge_slave_0: entered promiscuous mode [ 352.301936][T10374] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.323686][T10374] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.346516][T10374] bridge_slave_1: entered allmulticast mode [ 352.357028][T10374] bridge_slave_1: entered promiscuous mode [ 352.458027][T10381] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.465227][T10381] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.490605][T10381] bridge_slave_0: entered allmulticast mode [ 352.515708][T10381] bridge_slave_0: entered promiscuous mode [ 352.634865][T10379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.872745][T10381] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.894014][T10381] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.926742][T10381] bridge_slave_1: entered allmulticast mode [ 352.948891][T10381] bridge_slave_1: entered promiscuous mode [ 355.126487][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 358.582053][ T5151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.596378][ T5151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.604733][ T5151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.613401][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.626746][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.241344][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.251062][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.264495][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.273152][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.298642][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.714128][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.723683][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.736629][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.745257][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.763026][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.238361][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 360.653310][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.674373][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.685104][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.708491][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.717650][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 378.650796][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.657453][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.932495][ T55] Bluetooth: hci4: command tx timeout [ 379.155605][T10379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.307621][T10374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.531670][T10389] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.596256][T10389] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.603606][T10389] bridge_slave_0: entered allmulticast mode [ 380.786464][T10389] bridge_slave_0: entered promiscuous mode [ 380.891640][T10389] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.968246][ T5850] Bluetooth: hci4: command tx timeout [ 380.978271][ T55] Bluetooth: hci2: command tx timeout [ 380.984461][ T55] Bluetooth: hci3: command tx timeout [ 380.992323][ T5844] Bluetooth: hci6: command tx timeout [ 380.999882][T10389] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.058012][T10389] bridge_slave_1: entered allmulticast mode [ 381.165827][T10389] bridge_slave_1: entered promiscuous mode [ 382.661394][T10389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.769491][T10389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.036522][ T55] Bluetooth: hci3: command tx timeout [ 383.041998][ T55] Bluetooth: hci6: command tx timeout [ 383.048113][ T5844] Bluetooth: hci4: command tx timeout [ 383.053599][ T5850] Bluetooth: hci2: command tx timeout [ 383.067749][T10389] team0: Port device team_slave_0 added [ 383.192585][T10389] team0: Port device team_slave_1 added [ 383.474112][T10389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.494727][T10389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.538232][T10389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.703289][T10389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.722659][T10389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.812051][T10389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.438711][T10436] chnl_net:caif_netlink_parms(): no params data found [ 384.571544][T10389] hsr_slave_0: entered promiscuous mode [ 384.589837][T10389] hsr_slave_1: entered promiscuous mode [ 384.636953][T10389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.644576][T10389] Cannot create hsr debugfs directory [ 384.788299][T10428] chnl_net:caif_netlink_parms(): no params data found [ 385.116418][ T5850] Bluetooth: hci2: command tx timeout [ 385.121899][ T5850] Bluetooth: hci4: command tx timeout [ 385.128616][ T5844] Bluetooth: hci3: command tx timeout [ 385.134216][ T55] Bluetooth: hci6: command tx timeout [ 385.161418][T10433] chnl_net:caif_netlink_parms(): no params data found [ 385.324794][T10431] chnl_net:caif_netlink_parms(): no params data found [ 386.194678][T10436] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.216556][T10436] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.223898][T10436] bridge_slave_0: entered allmulticast mode [ 386.247898][T10436] bridge_slave_0: entered promiscuous mode [ 386.274598][T10436] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.297432][T10436] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.304795][T10436] bridge_slave_1: entered allmulticast mode [ 386.341978][T10436] bridge_slave_1: entered promiscuous mode [ 386.420244][T10428] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.437157][T10428] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.444797][T10428] bridge_slave_0: entered allmulticast mode [ 386.473505][T10428] bridge_slave_0: entered promiscuous mode [ 386.830200][T10428] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.846527][T10428] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.853874][T10428] bridge_slave_1: entered allmulticast mode [ 386.889097][T10428] bridge_slave_1: entered promiscuous mode [ 387.045116][T10436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.197618][ T55] Bluetooth: hci6: command tx timeout [ 387.203093][ T55] Bluetooth: hci3: command tx timeout [ 387.212420][ T5850] Bluetooth: hci2: command tx timeout [ 387.225644][T10428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.599752][T10436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.792941][T10428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.944279][T10431] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.966184][T10431] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.973540][T10431] bridge_slave_0: entered allmulticast mode [ 388.005096][T10431] bridge_slave_0: entered promiscuous mode [ 388.183861][T10433] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.206373][T10433] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.213718][T10433] bridge_slave_0: entered allmulticast mode [ 388.244185][T10433] bridge_slave_0: entered promiscuous mode [ 388.823609][T10431] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.858386][T10431] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.865743][T10431] bridge_slave_1: entered allmulticast mode [ 388.927981][T10431] bridge_slave_1: entered promiscuous mode [ 389.078930][T10433] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.107431][T10433] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.114748][T10433] bridge_slave_1: entered allmulticast mode [ 389.159927][T10433] bridge_slave_1: entered promiscuous mode [ 389.309352][T10436] team0: Port device team_slave_0 added [ 389.331797][T10428] team0: Port device team_slave_0 added [ 389.375670][T10428] team0: Port device team_slave_1 added [ 389.508615][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 389.522613][T10431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.537594][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.546654][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.556448][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.564316][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.774054][T10433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.810524][T10436] team0: Port device team_slave_1 added [ 390.121480][T10431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.251380][T10433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.382952][T10436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.406341][T10436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.453528][T10436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.496837][T10428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.503829][T10428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.552921][T10428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.897768][T10436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.912097][T10436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.961259][T10436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.008666][T10428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.015676][T10428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.074650][T10428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.245377][T10431] team0: Port device team_slave_0 added [ 391.289509][T10431] team0: Port device team_slave_1 added [ 391.596592][ T55] Bluetooth: hci1: command tx timeout [ 391.637477][T10433] team0: Port device team_slave_0 added [ 391.748511][T10436] hsr_slave_0: entered promiscuous mode [ 391.755353][T10436] hsr_slave_1: entered promiscuous mode [ 391.777201][T10436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.784817][T10436] Cannot create hsr debugfs directory [ 391.812022][T10428] hsr_slave_0: entered promiscuous mode [ 391.858540][T10428] hsr_slave_1: entered promiscuous mode [ 391.877948][T10428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.885563][T10428] Cannot create hsr debugfs directory [ 392.153376][T10431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.176430][T10431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.222592][T10431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.260880][T10433] team0: Port device team_slave_1 added [ 392.618960][T10431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.639620][T10431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.695888][T10431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.896271][T10433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.903270][T10433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.994098][T10433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.200132][T10433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.212606][T10433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.281086][T10433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.677918][ T55] Bluetooth: hci1: command tx timeout [ 393.858400][T10431] hsr_slave_0: entered promiscuous mode [ 393.880448][T10431] hsr_slave_1: entered promiscuous mode [ 393.898727][T10431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.912278][T10431] Cannot create hsr debugfs directory [ 394.229232][T10433] hsr_slave_0: entered promiscuous mode [ 394.266803][T10433] hsr_slave_1: entered promiscuous mode [ 394.273982][T10433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.326418][T10433] Cannot create hsr debugfs directory [ 395.241927][T10473] chnl_net:caif_netlink_parms(): no params data found [ 395.756877][ T55] Bluetooth: hci1: command tx timeout [ 396.347040][T10473] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.354241][T10473] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.376577][T10473] bridge_slave_0: entered allmulticast mode [ 396.398796][T10473] bridge_slave_0: entered promiscuous mode [ 396.430268][T10473] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.456378][T10473] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.463823][T10473] bridge_slave_1: entered allmulticast mode [ 396.478466][T10473] bridge_slave_1: entered promiscuous mode [ 396.759684][T10473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.790359][T10473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.071215][T10473] team0: Port device team_slave_0 added [ 397.098430][T10473] team0: Port device team_slave_1 added [ 397.302803][T10473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.327330][T10473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.406888][T10473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.428888][T10473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.435888][T10473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.495308][T10473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.772969][T10473] hsr_slave_0: entered promiscuous mode [ 397.794864][T10473] hsr_slave_1: entered promiscuous mode [ 397.813949][T10473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.841679][ T55] Bluetooth: hci1: command tx timeout [ 397.848286][T10473] Cannot create hsr debugfs directory [ 420.430925][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 420.441069][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 420.467457][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 420.503451][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 420.525219][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 420.610782][ T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 420.635332][ T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 420.650504][ T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 420.661843][ T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 420.671056][ T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 420.851604][ T5850] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 420.873960][ T5850] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 420.886571][ T5850] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 420.895768][ T5850] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 420.904036][ T5850] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 421.870262][ T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 421.884534][ T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 421.892664][ T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 421.901087][ T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 421.910506][ T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 422.435061][T10491] chnl_net:caif_netlink_parms(): no params data found [ 422.639433][ T55] Bluetooth: hci7: command tx timeout [ 422.670787][T10490] chnl_net:caif_netlink_parms(): no params data found [ 422.797617][ T55] Bluetooth: hci8: command tx timeout [ 422.956716][ T55] Bluetooth: hci9: command tx timeout [ 423.996380][ T55] Bluetooth: hci10: command tx timeout [ 424.717166][ T55] Bluetooth: hci7: command tx timeout [ 424.876855][ T5850] Bluetooth: hci8: command tx timeout [ 425.039841][ T5850] Bluetooth: hci9: command tx timeout [ 426.076644][ T5850] Bluetooth: hci10: command tx timeout [ 426.797043][ T5850] Bluetooth: hci7: command tx timeout [ 426.956450][ T5850] Bluetooth: hci8: command tx timeout [ 427.116435][ T5850] Bluetooth: hci9: command tx timeout [ 428.156535][ T5850] Bluetooth: hci10: command tx timeout [ 428.876711][ T5850] Bluetooth: hci7: command tx timeout [ 429.036723][ T5850] Bluetooth: hci8: command tx timeout [ 429.196806][ T5850] Bluetooth: hci9: command tx timeout [ 430.236324][ T5850] Bluetooth: hci10: command tx timeout [ 440.098589][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.104974][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.409795][ T55] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 450.421556][ T55] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 450.436353][ T55] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 450.444923][ T55] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 450.455117][ T55] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 452.401594][ T55] Bluetooth: hci12: command 0x0406 tx timeout [ 452.556434][ T55] Bluetooth: hci11: command tx timeout [ 454.638580][ T55] Bluetooth: hci11: command tx timeout [ 456.716986][ T55] Bluetooth: hci11: command tx timeout [ 458.796498][ T5845] Bluetooth: hci11: command tx timeout [ 477.409389][T10493] chnl_net:caif_netlink_parms(): no params data found [ 477.878801][T10491] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.896605][T10491] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.903965][T10491] bridge_slave_0: entered allmulticast mode [ 477.937855][T10491] bridge_slave_0: entered promiscuous mode [ 477.960072][T10491] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.987502][T10491] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.995147][T10491] bridge_slave_1: entered allmulticast mode [ 478.036240][T10491] bridge_slave_1: entered promiscuous mode [ 478.800522][T10491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.880314][T10491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.272044][T10499] chnl_net:caif_netlink_parms(): no params data found [ 480.902999][ T5845] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 480.989624][ T5845] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 481.013150][ T5845] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 481.046571][ T5845] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 481.064577][ T5845] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 481.986779][ T55] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 482.041347][ T55] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 482.056466][ T55] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 482.079572][ T55] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 482.091723][ T55] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 482.327457][T10512] chnl_net:caif_netlink_parms(): no params data found [ 482.658582][ T5844] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 482.682888][ T5844] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 482.691481][ T5844] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 482.700328][ T5844] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 482.708903][ T5844] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 483.045129][ T5151] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 483.054352][ T5151] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 483.069502][ T5151] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 483.079643][ T5151] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 483.088450][ T5151] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 493.837058][ T31] INFO: task kworker/u8:5:1164 blocked for more than 143 seconds. [ 493.844951][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.898117][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.962171][ T31] task:kworker/u8:5 state:D stack:21928 pid:1164 tgid:1164 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 494.016482][ T31] Workqueue: netns cleanup_net [ 494.100044][ T31] Call Trace: [ 494.103422][ T31] [ 494.163637][ T31] __schedule+0x1b88/0x5240 [ 494.232077][ T31] ? schedule+0x163/0x360 [ 494.266148][ T31] ? __pfx___schedule+0x10/0x10 [ 494.271543][ T31] ? schedule+0x90/0x360 [ 494.334561][ T31] ? schedule+0x90/0x360 [ 494.376274][ T31] schedule+0x163/0x360 [ 494.380520][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 494.385324][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.441194][ T31] __mutex_lock+0x805/0x10c0 [ 494.466267][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 494.471120][ T31] ? rcu_barrier+0x4c/0x530 [ 494.475670][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.506400][ T31] ? kasan_quarantine_put+0xdc/0x230 [ 494.511783][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 494.533922][ T31] ? __up_read+0x2c4/0x6b0 [ 494.551423][ T31] rcu_barrier+0x4c/0x530 [ 494.555857][ T31] cleanup_net+0x96a/0xd60 [ 494.563396][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 494.590474][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 494.598921][ T31] process_scheduled_works+0xac3/0x18e0 [ 494.604562][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 494.626264][ T31] ? assign_work+0x367/0x3d0 [ 494.630929][ T31] worker_thread+0x870/0xd50 [ 494.662573][ T31] ? __kthread_parkme+0x1a8/0x200 [ 494.676025][ T31] ? __pfx_worker_thread+0x10/0x10 [ 494.681212][ T31] kthread+0x7b7/0x940 [ 494.685328][ T31] ? __pfx_worker_thread+0x10/0x10 [ 494.716238][ T31] ? __pfx_kthread+0x10/0x10 [ 494.720911][ T31] ? __pfx_kthread+0x10/0x10 [ 494.725543][ T31] ? __pfx_kthread+0x10/0x10 [ 494.746187][ T31] ? __pfx_kthread+0x10/0x10 [ 494.750864][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.776679][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 494.781958][ T31] ? __pfx_kthread+0x10/0x10 [ 494.796616][ T31] ret_from_fork+0x4b/0x80 [ 494.801103][ T31] ? __pfx_kthread+0x10/0x10 [ 494.805737][ T31] ret_from_fork_asm+0x1a/0x30 [ 494.826132][ T31] [ 494.829276][ T31] INFO: task syz.3.1800:9862 blocked for more than 144 seconds. [ 494.856251][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 [ 494.863592][ T31] Blocked by coredump. [ 494.883144][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.906695][ T31] task:syz.3.1800 state:D stack:23656 pid:9862 tgid:9862 ppid:5857 task_flags:0x40044c flags:0x00004006 [ 494.936404][ T31] Call Trace: [ 494.943551][ T31] [ 494.956314][ T31] __schedule+0x1b88/0x5240 [ 494.960914][ T31] ? schedule+0x163/0x360 [ 494.965289][ T31] ? __pfx___schedule+0x10/0x10 [ 494.991794][ T31] ? schedule+0x90/0x360 [ 494.998864][ T31] ? schedule+0x90/0x360 [ 495.003162][ T31] schedule+0x163/0x360 [ 495.016507][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 495.021343][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.056798][ T31] __mutex_lock+0x805/0x10c0 [ 495.061479][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 495.076016][ T31] ? rcu_barrier+0x4c/0x530 [ 495.080635][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.085708][ T31] ? __mutex_unlock_slowpath+0x79a/0x800 [ 495.116923][ T31] ? do_group_exit+0x207/0x2c0 [ 495.121780][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 495.140590][ T31] rcu_barrier+0x4c/0x530 [ 495.158136][ T31] netdev_run_todo+0x380/0xf30 [ 495.162985][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 495.186292][ T31] ? netdev_state_change+0xa9/0x1a0 [ 495.191576][ T31] ? __pfx_netdev_state_change+0x10/0x10 [ 495.211806][ T31] ? kfree+0x198/0x430 [ 495.216715][ T31] ? tun_chr_close+0x105/0x1b0 [ 495.221533][ T31] tun_chr_close+0x137/0x1b0 [ 495.237231][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 495.242404][ T31] __fput+0x3e9/0x9f0 [ 495.267771][ T31] task_work_run+0x251/0x310 [ 495.272456][ T31] ? __pfx_task_work_run+0x10/0x10 [ 495.286563][ T31] ? do_exit+0xa0c/0x2950 [ 495.291283][ T31] ? do_exit+0xa0c/0x2950 [ 495.295680][ T31] do_exit+0xa11/0x2950 [ 495.321333][ T31] ? do_raw_spin_lock+0x151/0x370 [ 495.340360][ T31] ? __pfx_do_exit+0x10/0x10 [ 495.345058][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 495.376197][ T31] do_group_exit+0x207/0x2c0 [ 495.380968][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.396134][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 495.401412][ T31] get_signal+0x1696/0x1730 [ 495.416905][ T31] ? __pfx_get_signal+0x10/0x10 [ 495.421843][ T31] arch_do_signal_or_restart+0x98/0x840 [ 495.446527][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 495.470175][ T31] ? task_work_run+0x2c9/0x310 [ 495.475050][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 495.496142][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 495.501773][ T31] do_syscall_64+0x100/0x230 [ 495.516888][ T31] ? clear_bhb_loop+0x45/0xa0 [ 495.521639][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.541920][ T31] RIP: 0033:0x7f41c8f8d169 [ 495.557912][ T31] RSP: 002b:00007f41c92cfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 495.580949][ T31] RAX: 0000000000000000 RBX: 000000000003987c RCX: 00007f41c8f8d169 [ 495.606235][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 495.614281][ T31] RBP: 00007f41c91a7ba0 R08: 0000000000000001 R09: 00000003c92cfe7f [ 495.636073][ T31] R10: 00007f41c8e00000 R11: 0000000000000246 R12: 00007f41c91a5fac [ 495.644116][ T31] R13: 00007f41c91a5fa0 R14: ffffffffffffffff R15: 00007f41c92cfca0 [ 495.682193][ T31] [ 495.685383][ T31] INFO: task syz.4.1839:9960 blocked for more than 145 seconds. [ 495.711073][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 [ 495.736173][ T31] Blocked by coredump. [ 495.740825][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.758395][ T31] task:syz.4.1839 state:D stack:24616 pid:9960 tgid:9960 ppid:5856 task_flags:0x40044c flags:0x00004006 [ 495.797226][ T31] Call Trace: [ 495.800579][ T31] [ 495.803543][ T31] __schedule+0x1b88/0x5240 [ 495.826197][ T31] ? schedule+0x163/0x360 [ 495.830609][ T31] ? __pfx___schedule+0x10/0x10 [ 495.835522][ T31] ? schedule+0x90/0x360 [ 495.856272][ T31] ? schedule+0x90/0x360 [ 495.860613][ T31] schedule+0x163/0x360 [ 495.880674][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 495.885614][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.907827][ T31] __mutex_lock+0x805/0x10c0 [ 495.912506][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 495.936181][ T31] ? rcu_barrier+0x4c/0x530 [ 495.940859][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.956775][ T31] ? __mutex_unlock_slowpath+0x79a/0x800 [ 495.962593][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 495.993128][ T31] rcu_barrier+0x4c/0x530 [ 496.007894][ T31] ? do_raw_spin_lock+0x151/0x370 [ 496.013006][ T31] netdev_run_todo+0x380/0xf30 [ 496.036181][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 496.041669][ T31] ? netdev_state_change+0xa9/0x1a0 [ 496.070218][ T31] ? __pfx_netdev_state_change+0x10/0x10 [ 496.077316][ T31] ? _raw_spin_unlock+0x28/0x50 [ 496.082229][ T31] ? rcu_is_watching+0x15/0xb0 [ 496.109086][ T31] ? kfree+0x54/0x430 [ 496.113244][ T31] ? tun_chr_close+0x105/0x1b0 [ 496.127381][ T31] tun_chr_close+0x137/0x1b0 [ 496.132048][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 496.156434][ T31] __fput+0x3e9/0x9f0 [ 496.160633][ T31] task_work_run+0x251/0x310 [ 496.165291][ T31] ? __pfx_task_work_run+0x10/0x10 [ 496.186773][ T31] ? do_exit+0xa0c/0x2950 [ 496.191269][ T31] ? do_exit+0xa0c/0x2950 [ 496.195651][ T31] do_exit+0xa11/0x2950 [ 496.226651][ T31] ? do_raw_spin_lock+0x151/0x370 [ 496.231813][ T31] ? __pfx_do_exit+0x10/0x10 [ 496.254553][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 496.266164][ T31] do_group_exit+0x207/0x2c0 [ 496.286688][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.292044][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 496.309552][ T31] get_signal+0x1696/0x1730 [ 496.314237][ T31] ? __pfx_get_signal+0x10/0x10 [ 496.336286][ T31] arch_do_signal_or_restart+0x98/0x840 [ 496.341941][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 496.366345][ T31] ? task_work_run+0x2c9/0x310 [ 496.371219][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 496.401743][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 496.409790][ T31] do_syscall_64+0x100/0x230 [ 496.414449][ T31] ? clear_bhb_loop+0x45/0xa0 [ 496.422376][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.438606][ T31] RIP: 0033:0x7fbcab78d169 [ 496.443083][ T31] RSP: 002b:00007fbcabacfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 496.470472][ T31] RAX: 0000000000000000 RBX: 00007fbcab9a7ba0 RCX: 00007fbcab78d169 [ 496.496506][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 496.504547][ T31] RBP: 00007fbcab9a7ba0 R08: 00000000000014a8 R09: 00000003abacfe7f [ 496.538692][ T31] R10: 00000000005fae44 R11: 0000000000000246 R12: 000000000003c024 [ 496.557047][ T31] R13: 00007fbcab9a6080 R14: ffffffffffffffff R15: 00007fbcabacfca0 [ 496.565121][ T31] [ 496.596143][ T31] INFO: task syz-executor:10211 blocked for more than 146 seconds. [ 496.616784][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 [ 496.624128][ T31] Blocked by coredump. [ 496.637578][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.659752][ T31] task:syz-executor state:D stack:21608 pid:10211 tgid:10211 ppid:1 task_flags:0x40054c flags:0x00004006 [ 496.689783][ T31] Call Trace: [ 496.693217][ T31] [ 496.706798][ T31] __schedule+0x1b88/0x5240 [ 496.711396][ T31] ? schedule+0x163/0x360 [ 496.715765][ T31] ? __pfx___schedule+0x10/0x10 [ 496.747507][ T31] ? schedule+0x90/0x360 [ 496.751831][ T31] ? schedule+0x90/0x360 [ 496.768119][ T31] schedule+0x163/0x360 [ 496.772349][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 496.800462][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.807009][ T31] __mutex_lock+0x805/0x10c0 [ 496.811664][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 496.826853][ T31] ? rcu_barrier+0x4c/0x530 [ 496.831426][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.852352][ T31] ? __mutex_unlock_slowpath+0x7f9/0x800 [ 496.878623][ T31] ? do_group_exit+0x207/0x2c0 [ 496.883479][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 496.909938][ T31] rcu_barrier+0x4c/0x530 [ 496.914368][ T31] netdev_run_todo+0x380/0xf30 [ 496.936215][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 496.941585][ T31] ? netdev_state_change+0xa9/0x1a0 [ 496.957098][ T31] ? __pfx_netdev_state_change+0x10/0x10 [ 496.962813][ T31] ? kfree+0x198/0x430 [ 496.979211][ T31] ? tun_chr_close+0x105/0x1b0 [ 496.984049][ T31] tun_chr_close+0x137/0x1b0 [ 497.007523][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 497.012712][ T31] __fput+0x3e9/0x9f0 [ 497.036830][ T31] task_work_run+0x251/0x310 [ 497.041516][ T31] ? __pfx_task_work_run+0x10/0x10 [ 497.056477][ T31] ? do_exit+0xa0c/0x2950 [ 497.060887][ T31] ? do_exit+0xa0c/0x2950 [ 497.065266][ T31] do_exit+0xa11/0x2950 [ 497.088574][ T31] ? do_raw_spin_lock+0x151/0x370 [ 497.117689][ T31] ? __pfx_do_exit+0x10/0x10 [ 497.122368][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 497.136076][ T31] do_group_exit+0x207/0x2c0 [ 497.140743][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.166419][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 497.171701][ T31] get_signal+0x1696/0x1730 [ 497.184939][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 497.191868][ T31] ? __pfx_get_signal+0x10/0x10 [ 497.216479][ T31] arch_do_signal_or_restart+0x98/0x840 [ 497.222201][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 497.246562][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 497.252551][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 497.266985][ T31] do_syscall_64+0x100/0x230 [ 497.271759][ T31] ? clear_bhb_loop+0x45/0xa0 [ 497.300064][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.318166][ T31] RIP: 0033:0x7fadb338effc [ 497.322658][ T31] RSP: 002b:00007fadb36cf670 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 497.350689][ T31] RAX: 0000000000000040 RBX: 00007fadb40d4620 RCX: 00007fadb338effc [ 497.376251][ T31] RDX: 0000000000000040 RSI: 00007fadb40d4670 RDI: 0000000000000003 [ 497.384302][ T31] RBP: 0000000000000000 R08: 00007fadb36cf6c4 R09: 000000000000000c [ 497.418636][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 497.436614][ T31] R13: 0000000000000000 R14: 00007fadb40d4670 R15: 0000000000000000 [ 497.444832][ T31] [ 497.459888][ T31] INFO: task syz.0.2006:10361 blocked for more than 146 seconds. [ 497.476321][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 [ 497.483658][ T31] Blocked by coredump. [ 497.506212][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.514955][ T31] task:syz.0.2006 state:D stack:24360 pid:10361 tgid:10358 ppid:5855 task_flags:0x40054c flags:0x00004002 [ 497.557629][ T31] Call Trace: [ 497.560981][ T31] [ 497.563950][ T31] __schedule+0x1b88/0x5240 [ 497.586616][ T31] ? schedule+0x163/0x360 [ 497.591028][ T31] ? __pfx___schedule+0x10/0x10 [ 497.616774][ T31] ? schedule+0x90/0x360 [ 497.621087][ T31] ? schedule+0x90/0x360 [ 497.625369][ T31] schedule+0x163/0x360 [ 497.650181][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 497.655024][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.680694][ T31] __mutex_lock+0x805/0x10c0 [ 497.685370][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 497.696413][ T31] ? rcu_barrier+0x4c/0x530 [ 497.700995][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.726434][ T31] ? __mutex_unlock_slowpath+0x79a/0x800 [ 497.732153][ T31] ? do_group_exit+0x207/0x2c0 [ 497.749568][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 497.755644][ T31] rcu_barrier+0x4c/0x530 [ 497.786473][ T31] netdev_run_todo+0x380/0xf30 [ 497.791330][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 497.816581][ T31] ? netdev_state_change+0xa9/0x1a0 [ 497.821859][ T31] ? __pfx_netdev_state_change+0x10/0x10 [ 497.841790][ T31] ? kfree+0x198/0x430 [ 497.846735][ T31] ? tun_chr_close+0x105/0x1b0 [ 497.851558][ T31] tun_chr_close+0x137/0x1b0 [ 497.876347][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 497.881541][ T31] __fput+0x3e9/0x9f0 [ 497.885579][ T31] task_work_run+0x251/0x310 [ 497.915239][ T31] ? __pfx_task_work_run+0x10/0x10 [ 497.936431][ T31] ? do_exit+0xa0c/0x2950 [ 497.940857][ T31] ? do_exit+0xa0c/0x2950 [ 497.945238][ T31] do_exit+0xa11/0x2950 [ 497.969479][ T31] ? do_raw_spin_lock+0x151/0x370 [ 497.974619][ T31] ? __pfx_do_exit+0x10/0x10 [ 497.987725][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 497.993197][ T31] do_group_exit+0x207/0x2c0 [ 498.020208][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.025574][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 498.046159][ T31] get_signal+0x1696/0x1730 [ 498.050758][ T31] ? __pfx_get_signal+0x10/0x10 [ 498.055658][ T31] arch_do_signal_or_restart+0x98/0x840 [ 498.080303][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 498.099511][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 498.105315][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 498.136363][ T31] do_syscall_64+0x100/0x230 [ 498.141038][ T31] ? clear_bhb_loop+0x45/0xa0 [ 498.145761][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.166074][ T31] RIP: 0033:0x7f472198d169 [ 498.170557][ T31] RSP: 002b:00007f47227d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.198531][ T31] RAX: 0000000000000034 RBX: 00007f4721ba5fa0 RCX: 00007f472198d169 [ 498.221049][ T31] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 498.246486][ T31] RBP: 00007f4721a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 498.254521][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.286167][ T31] R13: 0000000000000000 R14: 00007f4721ba5fa0 R15: 00007f4721ccfa28 [ 498.294228][ T31] [ 498.308521][ T31] INFO: task syz.7.2008:10362 blocked for more than 147 seconds. [ 498.336861][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 [ 498.344218][ T31] Blocked by coredump. [ 498.366664][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.375403][ T31] task:syz.7.2008 state:D stack:24616 pid:10362 tgid:10362 ppid:10050 task_flags:0x40044c flags:0x00004006 [ 498.418417][ T31] Call Trace: [ 498.425779][ T31] [ 498.437256][ T31] __schedule+0x1b88/0x5240 [ 498.441930][ T31] ? schedule+0x163/0x360 [ 498.460637][ T31] ? __pfx___schedule+0x10/0x10 [ 498.465582][ T31] ? schedule+0x90/0x360 [ 498.486757][ T31] ? schedule+0x90/0x360 [ 498.491077][ T31] schedule+0x163/0x360 [ 498.506776][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 498.511635][ T31] schedule_preempt_disabled+0x13/0x30 [ 498.531863][ T31] __mutex_lock+0x805/0x10c0 [ 498.546395][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 498.551241][ T31] ? rcu_barrier+0x4c/0x530 [ 498.555790][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 498.586216][ T31] ? __mutex_unlock_slowpath+0x79a/0x800 [ 498.591943][ T31] ? do_group_exit+0x207/0x2c0 [ 498.606368][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.612429][ T31] rcu_barrier+0x4c/0x530 [ 498.640817][ T31] netdev_run_todo+0x380/0xf30 [ 498.645738][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 498.656246][ T31] ? netdev_state_change+0xa9/0x1a0 [ 498.661518][ T31] ? __pfx_netdev_state_change+0x10/0x10 [ 498.686202][ T31] ? kfree+0x198/0x430 [ 498.690352][ T31] ? tun_chr_close+0x105/0x1b0 [ 498.695164][ T31] tun_chr_close+0x137/0x1b0 [ 498.716316][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 498.721514][ T31] __fput+0x3e9/0x9f0 [ 498.725551][ T31] task_work_run+0x251/0x310 [ 498.756605][ T31] ? __pfx_task_work_run+0x10/0x10 [ 498.761814][ T31] ? do_exit+0xa0c/0x2950 [ 498.777223][ T31] ? do_exit+0xa0c/0x2950 [ 498.781645][ T31] do_exit+0xa11/0x2950 [ 498.785857][ T31] ? do_raw_spin_lock+0x151/0x370 [ 498.816731][ T31] ? __pfx_do_exit+0x10/0x10 [ 498.821403][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 498.849706][ T31] do_group_exit+0x207/0x2c0 [ 498.854422][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.868956][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 498.874235][ T31] get_signal+0x1696/0x1730 [ 498.896334][ T31] ? __pfx_get_signal+0x10/0x10 [ 498.901273][ T31] ? __phys_addr+0xba/0x170 [ 498.905826][ T31] arch_do_signal_or_restart+0x98/0x840 [ 498.926150][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 498.932394][ T31] ? task_work_run+0x2c9/0x310 [ 498.959780][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 498.973353][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 498.986800][ T31] do_syscall_64+0x100/0x230 [ 498.991549][ T31] ? clear_bhb_loop+0x45/0xa0 [ 499.018742][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.024808][ T31] RIP: 0033:0x7fdc9bd8d169 [ 499.041243][ T31] RSP: 002b:00007fdc9c0cfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 499.056679][ T31] RAX: 0000000000000000 RBX: 00000000000450b5 RCX: 00007fdc9bd8d169 [ 499.064805][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 499.096247][ T31] RBP: 00007fdc9bfa7ba0 R08: 0000000000000001 R09: 000000039c0cfe7f [ 499.104300][ T31] R10: 00007fdc9bc00000 R11: 0000000000000246 R12: 00007fdc9bfa5fac [ 499.136374][ T31] R13: 00007fdc9bfa5fa0 R14: ffffffffffffffff R15: 00007fdc9c0cfca0 [ 499.166095][ T31] [ 499.169176][ T31] INFO: task syz.8.2009:10365 blocked for more than 148 seconds. [ 499.189106][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 [ 499.208381][ T31] Blocked by coredump. [ 499.213013][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.244182][ T31] task:syz.8.2009 state:D stack:24616 pid:10365 tgid:10365 ppid:10122 task_flags:0x40044c flags:0x00004006 [ 499.276541][ T31] Call Trace: [ 499.279878][ T31] [ 499.282837][ T31] __schedule+0x1b88/0x5240 [ 499.299515][ T31] ? schedule+0x163/0x360 [ 499.304332][ T31] ? __pfx___schedule+0x10/0x10 [ 499.327829][ T31] ? schedule+0x90/0x360 [ 499.332139][ T31] ? schedule+0x90/0x360 [ 499.349775][ T31] schedule+0x163/0x360 [ 499.353996][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 499.376299][ T31] schedule_preempt_disabled+0x13/0x30 [ 499.381832][ T31] __mutex_lock+0x805/0x10c0 [ 499.397210][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 499.402066][ T31] ? rcu_barrier+0x4c/0x530 [ 499.419887][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 499.424996][ T31] ? __mutex_unlock_slowpath+0x79a/0x800 [ 499.449580][ T31] ? do_group_exit+0x207/0x2c0 [ 499.454427][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 499.479622][ T31] rcu_barrier+0x4c/0x530 [ 499.484049][ T31] netdev_run_todo+0x380/0xf30 [ 499.496480][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 499.501824][ T31] ? netdev_state_change+0xa9/0x1a0 [ 499.527595][ T31] ? __pfx_netdev_state_change+0x10/0x10 [ 499.533321][ T31] ? kfree+0x198/0x430 [ 499.556356][ T31] ? tun_chr_close+0x105/0x1b0 [ 499.561207][ T31] tun_chr_close+0x137/0x1b0 [ 499.565837][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 499.586055][ T31] __fput+0x3e9/0x9f0 [ 499.590137][ T31] task_work_run+0x251/0x310 [ 499.594779][ T31] ? __pfx_task_work_run+0x10/0x10 [ 499.617259][ T31] ? do_exit+0xa0c/0x2950 [ 499.621668][ T31] ? do_exit+0xa0c/0x2950 [ 499.637894][ T31] do_exit+0xa11/0x2950 [ 499.642124][ T31] ? do_raw_spin_lock+0x151/0x370 [ 499.666151][ T31] ? __pfx_do_exit+0x10/0x10 [ 499.670820][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 499.690401][ T31] do_group_exit+0x207/0x2c0 [ 499.695120][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.716667][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 499.721948][ T31] get_signal+0x1696/0x1730 [ 499.739814][ T31] ? __pfx_get_signal+0x10/0x10 [ 499.744740][ T31] ? __phys_addr+0xba/0x170 [ 499.770451][ T31] arch_do_signal_or_restart+0x98/0x840 [ 499.788440][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 499.794674][ T31] ? task_work_run+0x2c9/0x310 [ 499.806288][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 499.812075][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 499.843719][ T31] do_syscall_64+0x100/0x230 [ 499.860679][ T31] ? clear_bhb_loop+0x45/0xa0 [ 499.865455][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.886110][ T31] RIP: 0033:0x7f1e9e18d169 [ 499.890615][ T31] RSP: 002b:00007f1e9e4cfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 499.916817][ T31] RAX: 0000000000000000 RBX: 000000000004562e RCX: 00007f1e9e18d169 [ 499.924867][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 499.964088][ T31] RBP: 00007f1e9e3a7ba0 R08: 0000000000000001 R09: 000000039e4cfe7f [ 499.976323][ T31] R10: 00007f1e9e000000 R11: 0000000000000246 R12: 00007f1e9e3a5fac [ 499.984436][ T31] R13: 00007f1e9e3a5fa0 R14: ffffffffffffffff R15: 00007f1e9e4cfca0 [ 500.017224][ T31] [ 500.020314][ T31] INFO: task kworker/1:7:10383 blocked for more than 149 seconds. [ 500.046523][ T31] Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 [ 500.053864][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.086439][ T31] task:kworker/1:7 state:D stack:26208 pid:10383 tgid:10383 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 500.118473][ T31] Workqueue: events fqdir_free_fn [ 500.123577][ T31] Call Trace: [ 500.136807][ T31] [ 500.139800][ T31] __schedule+0x1b88/0x5240 [ 500.144349][ T31] ? try_to_wake_up+0xa27/0x15d0 [ 500.166485][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 500.171763][ T31] ? schedule+0x163/0x360 [ 500.196801][ T31] ? __pfx___schedule+0x10/0x10 [ 500.201735][ T31] ? schedule+0x90/0x360 [ 500.216163][ T31] ? schedule+0x90/0x360 [ 500.220482][ T31] schedule+0x163/0x360 [ 500.224670][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 500.246091][ T31] schedule_preempt_disabled+0x13/0x30 [ 500.251651][ T31] __mutex_lock+0x805/0x10c0 [ 500.276372][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 500.281213][ T31] ? rcu_barrier+0x4c/0x530 [ 500.285757][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 500.307283][ T31] ? __lock_acquire+0xad5/0xd80 [ 500.312236][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 500.338451][ T31] rcu_barrier+0x4c/0x530 [ 500.342878][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 500.370964][ T31] fqdir_free_fn+0x32/0x140 [ 500.375560][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 500.400073][ T31] process_scheduled_works+0xac3/0x18e0 [ 500.405729][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 500.427053][ T31] ? assign_work+0x367/0x3d0 [ 500.431725][ T31] worker_thread+0x870/0xd50 [ 500.448205][ T31] ? __kthread_parkme+0x1a8/0x200 [ 500.453318][ T31] ? __pfx_worker_thread+0x10/0x10 [ 500.472819][ T31] kthread+0x7b7/0x940 [ 500.487281][ T31] ? __pfx_worker_thread+0x10/0x10 [ 500.492468][ T31] ? __pfx_kthread+0x10/0x10 [ 500.509974][ T31] ? __pfx_kthread+0x10/0x10 [ 500.514648][ T31] ? __pfx_kthread+0x10/0x10 [ 500.536309][ T31] ? __pfx_kthread+0x10/0x10 [ 500.540994][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.559218][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 500.564493][ T31] ? __pfx_kthread+0x10/0x10 [ 500.586906][ T31] ret_from_fork+0x4b/0x80 [ 500.591421][ T31] ? __pfx_kthread+0x10/0x10 [ 500.606174][ T31] ret_from_fork_asm+0x1a/0x30 [ 500.611018][ T31] [ 500.614103][ T31] [ 500.614103][ T31] Showing all locks held in the system: [ 500.646766][ T31] 3 locks held by kworker/0:0/9: [ 500.651770][ T31] 2 locks held by kworker/0:1/10: [ 500.672906][ T31] 1 lock held by khungtaskd/31: [ 500.696136][ T31] #0: ffffffff8ed3b560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 500.716216][ T31] 4 locks held by kworker/u8:2/36: [ 500.721392][ T31] #0: ffff88802a477148 ((wq_completion)wg-kex-wg0#17){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 500.756225][ T31] #1: ffffc90000ad7c60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 500.796603][ T31] #2: ffff88802b331308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x112/0xcb0 [ 500.826620][ T31] #3: ffff88806e5aaad8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x121/0xcb0 [ 500.848351][ T31] 3 locks held by kworker/u8:3/52: [ 500.870928][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 500.916718][ T31] #1: ffffc90000bd7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 500.948570][ T31] #2: ffffffff900f7cc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 500.967354][ T31] 4 locks held by kworker/u9:0/55: [ 500.972524][ T31] #0: ffff888063262948 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 501.016100][ T31] #1: ffffc9000121fc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 501.046296][ T31] #2: ffff888094fe0078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9f/0x9e0 [ 501.068785][ T31] #3: ffffffff9025da48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x5b1/0x9e0 [ 501.096357][ T31] 2 locks held by kworker/0:2/918: [ 501.101539][ T31] 2 locks held by kworker/0:3/978: [ 501.121164][ T31] 3 locks held by kworker/u8:5/1164: [ 501.136702][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 501.168137][ T31] #1: ffffc9000407fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 501.191263][ T31] #2: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 501.217695][ T31] 3 locks held by kworker/u8:7/2984: [ 501.223047][ T31] 4 locks held by kworker/u9:1/5151: [ 501.246901][ T31] #0: ffff888095620948 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 501.266124][ T31] #1: ffffc9000ef87c60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 501.316222][ T31] #2: ffff888095688078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9f/0x9e0 [ 501.338437][ T31] #3: ffffffff9025da48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x5b1/0x9e0 [ 501.356689][ T31] 2 locks held by getty/5591: [ 501.361421][ T31] #0: ffff8880317850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 501.394406][ T31] #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x53d/0x16b0 [ 501.426602][ T31] 4 locks held by kworker/u9:5/5845: [ 501.431961][ T31] #0: ffff888059bc6148 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 501.466735][ T31] #1: ffffc900041efc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 501.499659][ T31] #2: ffff88804002c078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9f/0x9e0 [ 501.536747][ T31] #3: ffffffff9025da48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x5b1/0x9e0 [ 501.554233][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.562791][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.569842][ T31] 3 locks held by kworker/u9:7/5848: [ 501.575177][ T31] #0: ffff888062493148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 501.626332][ T31] #1: ffffc9000422fc60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 501.657073][ T31] #2: ffff88805f244d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 501.677067][ T31] 4 locks held by kworker/u9:9/5850: [ 501.682401][ T31] #0: ffff888057c61948 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 501.718156][ T31] #1: ffffc9000425fc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 501.749979][ T31] #2: ffff888092f40078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9f/0x9e0 [ 501.778471][ T31] #3: ffffffff9025da48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x5b1/0x9e0 [ 501.796555][ T31] 2 locks held by kworker/0:4/5883: [ 501.818040][ T31] 3 locks held by kworker/0:6/5893: [ 501.823328][ T31] 1 lock held by syz.3.1800/9862: [ 501.846256][ T31] #0: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 501.866149][ T31] 2 locks held by kworker/0:7/9896: [ 501.871393][ T31] 2 locks held by kworker/u8:8/9928: [ 501.896226][ T31] 1 lock held by syz.4.1839/9960: [ 501.901301][ T31] #0: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 501.946414][ T31] 1 lock held by iou-sqp-10055/10056: [ 501.951848][ T31] 1 lock held by syz-executor/10211: [ 501.970196][ T31] #0: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 501.998266][ T31] 3 locks held by kworker/1:6/10230: [ 502.003604][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 502.048103][ T31] #1: ffffc9000bb27c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 502.066262][ T31] #2: ffffffff900f7cc8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 502.097592][ T31] 1 lock held by syz.6.2000/10343: [ 502.102766][ T31] #0: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 502.137268][ T31] 1 lock held by syz.0.2006/10361: [ 502.142441][ T31] #0: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 502.166082][ T31] 1 lock held by syz.7.2008/10362: [ 502.171261][ T31] #0: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 502.207343][ T31] 1 lock held by syz.8.2009/10365: [ 502.228057][ T31] #0: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 502.256737][ T31] 1 lock held by syz-executor/10374: [ 502.262080][ T31] #0: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 502.288049][ T31] 1 lock held by syz-executor/10377: [ 502.293399][ T31] #0: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 502.336680][ T31] 1 lock held by syz-executor/10379: [ 502.342144][ T31] #0: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 502.378191][ T31] 1 lock held by syz-executor/10381: [ 502.383540][ T31] #0: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 502.406357][ T31] 2 locks held by kworker/0:9/10382: [ 502.411792][ T31] 3 locks held by kworker/1:7/10383: [ 502.440056][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 502.467536][ T31] #1: ffffc9001b1d7c60 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 502.496245][ T31] #2: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 502.516498][ T31] 7 locks held by syz-executor/10389: [ 502.537175][ T31] #0: ffff888031090420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 502.556488][ T31] #1: ffff88804d9ff488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 502.586737][ T31] #2: ffff8880273c23c8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 502.606757][ T31] #3: ffffffff8f991348 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 502.640057][ T31] #4: ffff888024cde0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 [ 502.666511][ T31] #5: ffff88807b602250 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 502.687228][ T31] #6: ffffffff8ed40940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 502.712059][ T31] 6 locks held by kworker/0:10/10391: [ 502.736567][ T31] 4 locks held by syz-executor/10428: [ 502.742007][ T31] #0: ffff888031090420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 502.766036][ T31] #1: ffff88807ffeb488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 502.790475][ T31] #2: ffff8880273c23c8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 502.818464][ T31] #3: ffffffff8f991348 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 502.846503][ T31] 4 locks held by syz-executor/10431: [ 502.851945][ T31] #0: ffff888031090420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 502.886286][ T31] #1: ffff88803bb10c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 502.907677][ T31] #2: ffff8880273c23c8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 502.936640][ T31] #3: ffffffff8f991348 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 502.962644][ T31] 4 locks held by syz-executor/10433: [ 502.986116][ T31] #0: ffff888031090420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 502.995115][ T31] #1: ffff88803eb9d088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 503.027026][ T31] #2: ffff8880273c23c8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 503.056487][ T31] #3: ffffffff8f991348 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 503.083878][ T31] 4 locks held by syz-executor/10436: [ 503.096067][ T31] #0: ffff888031090420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 503.105075][ T31] #1: ffff8880381f0888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 503.148485][ T31] #2: ffff8880273c23c8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 503.176600][ T31] #3: ffffffff8f991348 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 503.198254][ T31] 4 locks held by syz-executor/10473: [ 503.203773][ T31] #0: ffff888031090420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 503.245612][ T31] #1: ffff8880554df488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 503.276300][ T31] #2: ffff8880273c23c8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 503.300505][ T31] #3: ffffffff8f991348 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 503.326522][ T31] 5 locks held by syz-executor/10490: [ 503.331948][ T31] #0: ffff8880492c4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 503.368648][ T31] #1: ffff8880492c4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 503.396343][ T31] #2: ffffffff9025da48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 503.419320][ T31] #3: ffff88804cadcb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 503.442817][ T31] #4: ffffffff8ed40a78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 503.467989][ T31] 3 locks held by syz-executor/10491: [ 503.473429][ T31] #0: ffff888066f10d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 503.506961][ T31] #1: ffff888066f10078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 503.536450][ T31] #2: ffffffff9025da48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 503.556022][ T31] 3 locks held by syz-executor/10493: [ 503.561447][ T31] #0: ffff888061cb4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 503.600773][T10548] Bluetooth: hci3: command 0x0406 tx timeout [ 503.608955][T10548] Bluetooth: hci4: command 0x0406 tx timeout [ 503.615017][T10548] Bluetooth: hci2: command 0x0406 tx timeout [ 503.622006][T10548] Bluetooth: hci6: command 0x0406 tx timeout [ 503.632502][ T31] #1: ffff888061cb4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 503.666377][ T31] #2: ffffffff9025da48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 503.686521][ T31] 1 lock held by syz-executor/10499: [ 503.691868][ T31] #0: ffffffff8ed40a78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x384/0x830 [ 503.726657][ T31] 2 locks held by syz-executor/10512: [ 503.732100][ T31] #0: ffffffff8f88b640 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 503.767279][ T31] #1: ffffffff900f7cc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 503.791224][ T31] 5 locks held by kworker/0:14/10515: [ 503.807645][ T31] 1 lock held by syz-executor/10537: [ 503.813580][ T31] #0: ffffffff900f7cc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xd70 [ 503.836993][ T31] 2 locks held by syz-executor/10540: [ 503.842420][ T31] #0: ffffffff900eb090 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570