last executing test programs: 1m55.6900421s ago: executing program 0 (id=5558): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x4, 0xc, 0x2, @vifc_lcl_addr=@rand_addr=0x64010102, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 1m54.614933206s ago: executing program 1 (id=5568): r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r1, r0, 0x2c, &(0x7f00000000c0)={0x1, 0x80000000, 0xd}) 1m54.299972211s ago: executing program 1 (id=5571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) 1m53.994687695s ago: executing program 1 (id=5575): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) 1m53.704262826s ago: executing program 1 (id=5577): unshare(0x400) r0 = memfd_create(&(0x7f0000001440)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:Z>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x80\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\xf1\x0e\xccq*\xabM\x97}\x18\x8c5\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\x00\x00\x00\x00\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*\x7f]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9bW\x02\xd2K\xba8~\x83\x19\xfa\xf7\x9b\f\xfa\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XIkh\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\x05\x00\x00\x00\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1l 1\x8d \xc1\xab\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7;\xc0-\x9c\xac\xb9~\x9a\xdc\x15\x8d\xee*\x17\x82\x1e\xd2m+$\xb4\x8cOJ0\x85\x7f\xa0\x7f\xa8\xcc#\x0e\xa4\x86\x0fmO\xca\xa4\xd2\x9a\x16\xbb\x16\xb1\xd46l2ak[\xec\xe33\xae=\xaf\xffU)\x1fQ`\x81\xa2:\xf61\xafQ\xa6V-K;\xc50\n,\xb1j\x9b\x8f\xd0\xbd|\xbd\xb1+\x06\x98\xd4\x04\r!2\xe8\x16?H\x96\x182(\xcf\xf2\"\xf7.\x85\xc1-\xa3)|\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x5) fcntl$addseals(r0, 0x40a, 0x0) 1m53.414316278s ago: executing program 1 (id=5580): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/208, 0xd0}, {&(0x7f0000000900)=""/236, 0xec}, {&(0x7f0000000a00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x99}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/229, 0xe5}, {&(0x7f0000002e00)=""/4087, 0xff7}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f0000000040)=""/113, 0x71}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x2}], 0x8, 0x40000120, 0x0) 1m53.056178434s ago: executing program 1 (id=5582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) 1m46.450448347s ago: executing program 0 (id=5631): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x2000, 0x0) 1m46.00146603s ago: executing program 0 (id=5633): unshare(0x26020480) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, 0x0, 0x0) 1m45.690225225s ago: executing program 0 (id=5635): r0 = semget(0x2, 0x4, 0x200) semop(r0, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}, {0x0, 0x8001}], 0x2) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x2, 0xb, 0x3000}, {0x0, 0x7, 0x1000}], 0x3, 0x0) 1m45.336225679s ago: executing program 0 (id=5638): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0xb1, 0x1, 0x0, 0x80000000}, {0x16, 0x2, 0x2, 0x2000000}]}, 0x10) sendmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004888) 1m44.908981016s ago: executing program 0 (id=5642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000000c0)={@val={0x2f3a, 0x800}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @initdev={0xac, 0x1e, 0x1, 0x0}, @random="1c77897d4c6d", @multicast2}}, 0x20) 1m43.836500295s ago: executing program 4 (id=5652): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x10}) mq_notify(r0, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) 1m43.573319745s ago: executing program 4 (id=5654): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0xb, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000e80)={0x24, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x22, 0xb, {[@local=@item_012={0x2, 0x2, 0x3, "4399"}, @local=@item_012={0x2, 0x2, 0x7, "b8e9"}, @global=@item_4={0x3, 0x1, 0x1, "d03408ac"}]}}, 0x0}, 0x0) 1m41.28181535s ago: executing program 4 (id=5660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m40.982992128s ago: executing program 4 (id=5663): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 1m40.745896317s ago: executing program 4 (id=5665): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x7, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x400, 0xf, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x8000000, 0x4]}}) 1m40.511466288s ago: executing program 4 (id=5666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0xc4, 0x0, 0x4}) 1m38.640613128s ago: executing program 3 (id=5671): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) 1m38.485830684s ago: executing program 3 (id=5672): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x90, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m37.553336336s ago: executing program 32 (id=5582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) 1m36.231806674s ago: executing program 3 (id=5678): syz_usb_connect$cdc_ncm(0x4, 0x86, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x4004550f, 0x0) 1m35.432782534s ago: executing program 3 (id=5682): r0 = syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x19, 0x0) 1m35.01330932s ago: executing program 3 (id=5684): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) 1m34.627492147s ago: executing program 3 (id=5685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000100)='\x00\x00\x00\x00\x00\b\x00\x00\x00\x00', 0xa}], 0x3) 1m30.773324074s ago: executing program 2 (id=5691): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 1m30.631890931s ago: executing program 2 (id=5692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1m30.322607239s ago: executing program 2 (id=5693): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x2) 1m30.050048394s ago: executing program 2 (id=5694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70bd24, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xd}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1m29.603131015s ago: executing program 33 (id=5642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000000c0)={@val={0x2f3a, 0x800}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @initdev={0xac, 0x1e, 0x1, 0x0}, @random="1c77897d4c6d", @multicast2}}, 0x20) 1m29.564344581s ago: executing program 2 (id=5696): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000002a40)=[{{&(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x40) 1m29.204122497s ago: executing program 2 (id=5697): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) set_mempolicy(0x2, &(0x7f0000000000)=0x76, 0x105) syz_clone(0x642c7080, 0x0, 0x0, 0x0, 0x0, 0x0) 1m26.295999138s ago: executing program 5 (id=5673): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x400, @private=0xa010102}}, 0x1e) 1m26.015475323s ago: executing program 5 (id=5698): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = timerfd_create(0x1, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) 1m25.745336619s ago: executing program 5 (id=5699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001a000000080001400000001708000240000000080900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 1m25.376740718s ago: executing program 5 (id=5700): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0) 1m25.196077509s ago: executing program 34 (id=5666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0xc4, 0x0, 0x4}) 1m23.112266412s ago: executing program 5 (id=5702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7}]}) 1m19.025849186s ago: executing program 35 (id=5685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000100)='\x00\x00\x00\x00\x00\b\x00\x00\x00\x00', 0xa}], 0x3) 1m14.0598916s ago: executing program 36 (id=5697): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) set_mempolicy(0x2, &(0x7f0000000000)=0x76, 0x105) syz_clone(0x642c7080, 0x0, 0x0, 0x0, 0x0, 0x0) 1m7.504480512s ago: executing program 37 (id=5702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7}]}) 1m5.063827451s ago: executing program 6 (id=5715): r0 = memfd_create(&(0x7f0000000200)='[\v\xdb\xb3\x94\x00\x00\x00\x00\x00\x00\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6\xe1\x9f\xe8\xf1\xb3\b\xe2q\xda\xd8\xb1\x82\x1eb;(\xb5\xe1nS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc6\xd7\x89\xf8a\xc3\xcf\xd3\xae\x80G\"\xbc(\x95\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xc1\f\xd0\x99E\xd7\xab\x86\x04\xd3\xb0\xa7V\x97^8T&\xd1o9\xe7\x02\xc7\f\xdd\xa8T\xa2,\x1b\xf3j\xa3\xb0\xa4\xd5r\x0e=\x992w\x7fa\xbdR\x9aT\x9d\x04:\xb8\xe3\xe4\xe5\x8e;9\x97\xf3|\xfe\x81\xd1\t\a\x8e\x99\xbe\x06?\x89\xc0D\xaa\xdeT\x1d\xf0PA\xf8\xad\xf4\xfb_\xf0\x10\xd8\xcb\xaf\x0eb5\xc3\x89\x17r\x00\x00\xc8\x00\x02f\x03\x1b\x15\x1d\x02\x94/\xcc\xd5\xbfNI\xc1\x9c\xa7X\x01|\x8e:\x83O\xc46\xb3s\xeb\xfb\x9d\x83\xdf\xec\xbfS\xa6\xd8\x03\x95\x9e\xf5\xba\x01W\xd7V\xa1\xf6D\xf8\xd1\xcf\xe8\b\x94l\x00\x00\x00\x00\x00\x00\x00\x00\x7f\'r\x17\xa1\xfe{\xe2\x8cd\x03\t\x10O\xdf\xcf\xc6\xc1\x94;\x84\xfe\x88\xdf\xe5\x83\xc7T@\xb1t\xf5\xeb\xbc\xe5}\x80\x9f\xe2\x15\xe8\x8fy\xfc\x0f\xb1\xc5\x1a\xa2\xdb\x99\x11`\xf0\xf2W/\xc2\xb5\x94\x11\x84\x98\xb1V\xb0l;\x8a_\xf4\x16([f/\xd4J\xd3\x03\xb3t\t*K\x83\xa0\x832\xea\xe6\f\x89\x15~{d\xd9\xc8\xebh\xcc\x82\f\xcc}\xb0\x03Q\x8f\xff&cS\x9f\xbb\xb6\xc8\xc2@#\xc0m\x83\x93a\xbd!\xcfO\xa9\xf05\x9f\xc1T\xac\x84q\x8f\xd8\x90[p\x15l%\xfb\xf1\x96ui_\x018+#\x1f\xd6\xb6\xf1\xed\xbb_\xec\x1b\x9bN\x04\xd1f\xa5\xb9m\x19_v\xb9\x0e\xbdP\x8d\x8c\x1c{\xd8\x90\x8f\xef\xea\r\xdb\xb1\xder\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8e\x8cX\x82:\xf8{\xed\xdajiF\x15\xa5u \xe7\xf9o\xc2 t\vM\xa8\x80z\xf7\b\xcb\\:\xd8C\xf8/\xcc\x1f\xa7\x02\x9e-\x83?R1@0\xb4\xfb;]\x9d\x01\"{\xd9\x9b\x12Pk^\x9fy\xba~\r\xbe\x1a\xa7\xa7k\xa8\xf4s>\xfcr\xa2,\xa9d\xbf\xb2\x97\xe1\x85\x88\x1a4\xe56\xaf=\x89\xe6\x13\xf0\xf5\xd7\f\xa1\b\xed=\x12-}N\xca%\x11\x0e\xb3\xba\xb2T\x9a.\xf4\xb2\xaej\xfaM\x1b`\xe3\x96i\xc4\xe9&\x00\x94X\xbd;w\xc6\x87\xff\x15n\xd9l\x10\x0e\aT1=\x03\x03\xd4t\xf1\xbf8\x8c\x83\x8f3\xf6\x93\xd1Z\xfd\xf5a\f\xf4\xb7J\x878\x12\x86G\xea\x9c\x02a', 0x1) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}]}, 0xc) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m4.670520976s ago: executing program 6 (id=5717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}}, 0x0) 1m4.143184795s ago: executing program 6 (id=5719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a600000001d0a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a300000000009000200"], 0x88}}, 0x0) 1m3.671787371s ago: executing program 6 (id=5721): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0003bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) 1m2.911609628s ago: executing program 6 (id=5723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffffb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 1m2.515213224s ago: executing program 6 (id=5724): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) 47.031345774s ago: executing program 38 (id=5724): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) 44.623170438s ago: executing program 7 (id=5742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4040080) 44.163562579s ago: executing program 7 (id=5744): bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)="6d0d52ad43084c605c2420d276a674ec1d4ed1a47520e7", 0x0, 0x3}, 0x38) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x18, 0x84, 0x0, 'b'}], 0x18}, 0x41) 43.397935443s ago: executing program 7 (id=5745): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x3, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x58}, 0x1, 0x2}, 0x0) 42.869933027s ago: executing program 7 (id=5746): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) 39.647050944s ago: executing program 7 (id=5754): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000780)="e3", 0x1}], 0x2, 0x6) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 39.322959769s ago: executing program 7 (id=5755): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 36.575946948s ago: executing program 9 (id=5763): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00000001040300000000000000000005000003050001"], 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c"], 0x28}}, 0x0) 36.310684952s ago: executing program 9 (id=5764): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/125) 35.982757064s ago: executing program 9 (id=5766): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) 35.65876201s ago: executing program 9 (id=5768): r0 = semget$private(0x0, 0x1, 0x40) semctl$SETVAL(r0, 0x0, 0x10, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 35.405343715s ago: executing program 9 (id=5770): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000004c0)={0x2010001, 0x2, 0x2, 0x0, 0x40}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xd, 0x1, 0x65c0bce3edc0dd3e, {0x2, @raw_data="2da0a1d0645edac4593b9589cf177a94fa6736ee76a89bb04e3c78fa058764137075fd7589343b37106ae6149208bdeacfe08e5ded60993a6739a3f4488039526f37d4140674a1e11bfadf2fbfc9d8291c9ae31ead278bffa512d2301d415df94b28453cfdb5e4a4699d24221b59aadc7892fad5266348f40b4529bbaae966f1da1ce30e33ea4c2dc375206132dc6013a42d41215a7d2aecab26f6d22a8c6a4fa43e4a9fe3bd84d9468302ec99a295e94434e9ce39bca169a8257a8f4e768ed858bc3a7f50837736"}, 0x8}) 35.144113783s ago: executing program 9 (id=5772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000200)={0x3}) 24.057516037s ago: executing program 39 (id=5755): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 19.974984466s ago: executing program 40 (id=5772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000200)={0x3}) 17.492187811s ago: executing program 8 (id=5823): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x1) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 17.188763827s ago: executing program 8 (id=5824): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x0) 16.719582924s ago: executing program 8 (id=5825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010005000500070000000000080009000000000014002000fec00000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 16.377097498s ago: executing program 8 (id=5826): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) 15.579570964s ago: executing program 8 (id=5827): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffe, @empty}, 0x1c, 0x0}}], 0x1, 0x7ffffff7) 15.270018994s ago: executing program 8 (id=5828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4c7f53debf6bafca, 0x3, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) 0s ago: executing program 41 (id=5828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4c7f53debf6bafca, 0x3, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) kernel console output (not intermixed with test programs): ============================ [ 379.870392][T18498] WARNING: The mand mount option has been deprecated and [ 379.870392][T18498] and is ignored by this kernel. Remove the mand [ 379.870392][T18498] option from the mount to silence this warning. [ 379.870392][T18498] ======================================================= [ 380.091675][ T7872] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 380.243626][ T7872] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 380.252565][ T5829] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 380.260836][ T7872] usb 5-1: config 0 has no interface number 0 [ 380.268447][ T7872] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.279508][ T7872] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 380.291003][ T7872] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 380.311581][ T7872] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 380.329511][ T7872] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 380.342108][ T7872] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 380.360309][ T7872] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 380.370201][ T7872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.386123][ T7872] usb 5-1: config 0 descriptor?? [ 380.392354][T18493] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 380.399628][T18493] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 380.415212][ T7872] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 380.429632][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.451942][ T1209] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 380.452036][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.484659][ T5829] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 380.495012][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.515817][ T5829] usb 1-1: config 0 descriptor?? [ 380.631831][ T1209] usb 3-1: Using ep0 maxpacket: 32 [ 380.644452][ T7872] usb 5-1: USB disconnect, device number 36 [ 380.651368][ T1209] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 380.677207][ T7872] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 380.683922][ T1209] usb 3-1: config 0 has no interface number 0 [ 380.683962][ T1209] usb 3-1: config 0 interface 29 has no altsetting 0 [ 380.706327][ T1209] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 380.730246][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.764394][ T1209] usb 3-1: Product: syz [ 380.768628][ T1209] usb 3-1: Manufacturer: syz [ 380.792945][ T1209] usb 3-1: SerialNumber: syz [ 380.819310][ T1209] usb 3-1: config 0 descriptor?? [ 380.978508][ T5829] cypress 0003:04B4:DE61.001E: item fetching failed at offset 5/7 [ 380.992458][ T5829] cypress 0003:04B4:DE61.001E: parse failed [ 381.002240][ T5829] cypress 0003:04B4:DE61.001E: probe with driver cypress failed with error -22 [ 381.044135][ T1209] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 381.078615][T18570] netlink: 'syz.3.5174': attribute type 6 has an invalid length. [ 381.086720][T18570] netlink: 'syz.3.5174': attribute type 1 has an invalid length. [ 381.095072][T18570] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5174'. [ 381.218658][ T7886] usb 1-1: USB disconnect, device number 32 [ 381.249187][ T1209] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 381.282003][ T1209] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 381.282152][T18582] netlink: 'syz.1.5178': attribute type 3 has an invalid length. [ 381.297535][ T1209] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 381.402697][ T1209] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -8 [ 381.495392][ T1209] usb 3-1: USB disconnect, device number 29 [ 381.773073][T18614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5188'. [ 381.786677][T18616] program syz.4.5189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.796401][T18614] netlink: 'syz.1.5188': attribute type 30 has an invalid length. [ 381.820928][T18614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5188'. [ 382.771587][ T5829] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 382.943747][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 382.972003][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.991489][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 382.991547][ T5829] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 382.991570][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.994727][ T5829] usb 2-1: config 0 descriptor?? [ 383.367397][ T30] audit: type=1326 audit(1750704093.960:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.4.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9513b8e929 code=0x7ffc0000 [ 383.389908][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.417526][ T5829] cherry 0003:046A:0023.001F: unbalanced collection at end of report description [ 383.452663][ T5829] cherry 0003:046A:0023.001F: probe with driver cherry failed with error -22 [ 383.458421][ T30] audit: type=1326 audit(1750704093.990:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.4.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9513b8e929 code=0x7ffc0000 [ 383.534817][ T30] audit: type=1326 audit(1750704094.000:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.4.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9513b8e929 code=0x7ffc0000 [ 383.557490][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.601533][ T30] audit: type=1326 audit(1750704094.000:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.4.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9513b8e929 code=0x7ffc0000 [ 383.624059][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.634730][ T1209] usb 2-1: USB disconnect, device number 33 [ 383.692800][ T30] audit: type=1326 audit(1750704094.000:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.4.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9513b8e929 code=0x7ffc0000 [ 383.740251][ T30] audit: type=1326 audit(1750704094.000:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.4.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f9513b8e929 code=0x7ffc0000 [ 383.786075][ T30] audit: type=1326 audit(1750704094.000:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.4.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9513b8e929 code=0x7ffc0000 [ 383.808543][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.817839][ T30] audit: type=1326 audit(1750704094.000:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.4.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9513b8e929 code=0x7ffc0000 [ 383.840277][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.133445][T18727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.392050][ T5829] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 384.595856][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.611719][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.632015][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.668390][ T5829] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 384.683382][T18758] netlink: 'syz.1.5236': attribute type 24 has an invalid length. [ 384.692129][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.718676][ T5829] usb 4-1: config 0 descriptor?? [ 384.744692][ T30] audit: type=1326 audit(1750704095.330:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.0.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e918e929 code=0x7ffc0000 [ 384.795890][ T30] audit: type=1326 audit(1750704095.350:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.0.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f20e918e929 code=0x7ffc0000 [ 385.112059][ T5913] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 385.147705][ T5829] kye 0003:0458:5011.0020: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 385.173610][ T5829] kye 0003:0458:5011.0020: unbalanced collection at end of report description [ 385.193173][ T5829] kye 0003:0458:5011.0020: parse failed [ 385.209113][ T5829] kye 0003:0458:5011.0020: probe with driver kye failed with error -22 [ 385.271626][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 385.283972][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.313340][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.357527][ T5829] usb 4-1: USB disconnect, device number 38 [ 385.368800][ T5913] usb 2-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 385.399375][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.443528][ T5913] usb 2-1: config 0 descriptor?? [ 385.624926][T18817] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 385.631516][T18817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 385.642278][T18817] vhci_hcd vhci_hcd.0: Device attached [ 385.649824][T18819] vhci_hcd: connection closed [ 385.653924][ T3442] vhci_hcd: stop threads [ 385.668526][ T3442] vhci_hcd: release socket [ 385.674121][ T3442] vhci_hcd: disconnect device [ 385.876394][ T5913] hid_mf 0003:0079:1843.0021: unbalanced collection at end of report description [ 385.904774][ T5913] hid_mf 0003:0079:1843.0021: HID parse failed. [ 385.911165][ T5913] hid_mf 0003:0079:1843.0021: probe with driver hid_mf failed with error -22 [ 385.966240][T18836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.079561][ T5913] usb 2-1: USB disconnect, device number 34 [ 386.297006][T18863] libceph: resolve '4..' (ret=-3): failed [ 386.701997][ T5829] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 386.898008][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.959992][ T5829] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 387.001692][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.041943][ T5829] usb 5-1: config 0 descriptor?? [ 387.362390][ T7872] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 387.401525][ T1209] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 387.421622][ T5913] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 387.521786][ T7872] usb 1-1: Using ep0 maxpacket: 16 [ 387.543114][ T7872] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.558105][ T5829] input: HID 28bd:0933 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0933.0022/input/input36 [ 387.575169][ T1209] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 387.577039][ T7872] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.593830][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 387.593992][ T1209] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 387.618744][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 387.629017][ T7872] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 387.641438][ T1209] usb 4-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 387.643921][ T7872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 387.661681][ T5913] usb 2-1: config 4 interface 0 has no altsetting 0 [ 387.682473][ T5913] usb 2-1: string descriptor 0 read error: -22 [ 387.684191][ T1209] usb 4-1: config 220 has no interface number 2 [ 387.688871][ T5913] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 387.710117][ T5829] uclogic 0003:28BD:0933.0022: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.4-1/input0 [ 387.715793][ T1209] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 387.728349][ T7872] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 387.767222][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.779383][ T5829] usb 5-1: USB disconnect, device number 37 [ 387.785644][ T7872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.810918][ T1209] usb 4-1: config 220 interface 0 has no altsetting 0 [ 387.825212][ T1209] usb 4-1: config 220 interface 76 has no altsetting 0 [ 387.858147][ T5913] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 387.861446][ T1209] usb 4-1: config 220 interface 1 has no altsetting 0 [ 387.894109][ T7872] usb 1-1: config 0 descriptor?? [ 387.909105][ T1209] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 387.934314][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.940786][ T5913] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 387.960102][ T1209] usb 4-1: Product: syz [ 387.984277][ T5913] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 387.987862][ T1209] usb 4-1: Manufacturer: syz [ 388.009967][ T5913] usb 2-1: media controller created [ 388.012547][ T1209] usb 4-1: SerialNumber: syz [ 388.035128][T18901] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 388.054730][T18918] fido_id[18918]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 388.119424][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.187921][ T5913] zl10353_read_register: readreg error (reg=127, ret==0) [ 388.291359][ T1209] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 388.331481][ T1209] usb 4-1: No valid video chain found. [ 388.338677][ T5913] usb 2-1: USB disconnect, device number 35 [ 388.347405][ T1209] usb 4-1: selecting invalid altsetting 0 [ 388.353306][ T7872] hid-generic 0003:045E:05DA.0023: unknown main item tag 0x0 [ 388.386538][ T1209] usb 4-1: selecting invalid altsetting 0 [ 388.394063][ T7872] hid-generic 0003:045E:05DA.0023: unknown main item tag 0x0 [ 388.401752][ T7872] hid-generic 0003:045E:05DA.0023: unknown main item tag 0x0 [ 388.418635][ T7872] hid-generic 0003:045E:05DA.0023: ignoring exceeding usage max [ 388.429318][ T7872] hid-generic 0003:045E:05DA.0023: unknown main item tag 0x0 [ 388.434236][ T1209] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 388.439229][ T7872] hid-generic 0003:045E:05DA.0023: unknown main item tag 0x0 [ 388.468817][ T7872] hid-generic 0003:045E:05DA.0023: unbalanced collection at end of report description [ 388.487407][ T7872] hid-generic 0003:045E:05DA.0023: probe with driver hid-generic failed with error -22 [ 388.502407][ T1209] usb 4-1: USB disconnect, device number 39 [ 388.571965][ T7872] usb 1-1: USB disconnect, device number 33 [ 388.648521][T18860] syz.2.5263 (18860): drop_caches: 1 [ 389.269662][T19008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 389.760739][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 389.760759][ T30] audit: type=1800 audit(1750704100.350:2781): pid=19032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5304" name="memory.events" dev="tmpfs" ino=5623 res=0 errno=0 [ 389.834336][ T30] audit: type=1804 audit(1750704100.390:2782): pid=19032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5304" name="/newroot/1116/memory.events" dev="tmpfs" ino=5623 res=1 errno=0 [ 389.914405][ T30] audit: type=1326 audit(1750704100.500:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19037 comm="syz.0.5306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20e918e929 code=0x0 [ 390.156271][ T7872] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 390.332549][ T7872] usb 3-1: Using ep0 maxpacket: 16 [ 390.353884][ T7872] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 390.362211][ T7872] usb 3-1: config 0 has no interface number 0 [ 390.368302][ T7872] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 390.391524][ T7872] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 390.414583][ T7872] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 390.429872][ T7872] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 390.439379][ T7872] usb 3-1: Manufacturer: syz [ 390.450236][ T7872] usb 3-1: SerialNumber: syz [ 390.463512][ T7872] usb 3-1: config 0 descriptor?? [ 390.471571][ T5913] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 390.485322][T19040] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 390.643343][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 390.664104][ T5913] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 390.676479][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 390.686837][ T5913] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 390.707819][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 390.751784][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.774196][ T5913] usb 5-1: config 0 descriptor?? [ 390.910547][ T7872] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 390.948956][ T7872] usb 3-1: USB disconnect, device number 30 [ 390.986311][ T5913] hdpvr 5-1:0.0: firmware version 0x8 dated ¥)†#´–¶jnÛý [ 391.479034][ T5913] hdpvr 5-1:0.0: Could not setup controls [ 391.523228][ T5913] hdpvr 5-1:0.0: registering videodev failed [ 391.568454][ T5913] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 391.646565][ T5913] usb 5-1: USB disconnect, device number 38 [ 391.961617][ T7872] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 392.121924][ T7872] usb 1-1: Using ep0 maxpacket: 8 [ 392.139878][ T7872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.170774][ T7872] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 392.191721][ T7872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.219946][ T7872] usb 1-1: config 0 descriptor?? [ 392.668373][ T7872] lenovo 0003:17EF:6062.0024: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0 [ 392.869496][ T7872] usb 1-1: USB disconnect, device number 34 [ 392.946094][T19212] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5359'. [ 393.136555][T19191] fido_id[19191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 393.471965][ T1209] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 393.632179][ T1209] usb 2-1: Using ep0 maxpacket: 8 [ 393.654306][ T1209] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.679762][ T1209] usb 2-1: config 0 interface 0 has no altsetting 0 [ 393.694791][ T1209] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 393.721941][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.770403][ T1209] usb 2-1: config 0 descriptor?? [ 394.033397][T19256] geneve2: entered promiscuous mode [ 394.227309][ T1209] kye 0003:0458:501B.0025: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 394.241693][ T5913] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 394.280005][ T1209] kye 0003:0458:501B.0025: hidraw0: USB HID v3.ff Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0 [ 394.305882][ T1209] kye 0003:0458:501B.0025: tablet-enabling feature report not found [ 394.320467][ T1209] kye 0003:0458:501B.0025: tablet enabling failed [ 394.412558][ T5913] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 394.431848][ T7875] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 394.449720][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 394.477750][ T5913] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 394.506071][ T1209] usb 2-1: USB disconnect, device number 36 [ 394.519914][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.568959][ T5913] usb 1-1: config 0 descriptor?? [ 394.593367][T19249] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 394.621521][ T7875] usb 4-1: Using ep0 maxpacket: 32 [ 394.639245][ T7875] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 394.696094][ T7875] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.721634][ T7875] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 394.730788][ T7875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.732229][T19294] netlink: 'syz.4.5382': attribute type 27 has an invalid length. [ 394.782991][ T7875] usb 4-1: config 0 descriptor?? [ 394.789782][T19261] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 394.950818][T19302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5385'. [ 394.991660][T19302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.108880][ T5913] lenovo 0003:17EF:60B5.0026: hidraw0: USB HID vff.ff Device [HID 17ef:60b5] on usb-dummy_hcd.0-1/input0 [ 395.226670][ T7875] elecom 0003:056E:00FF.0027: item fetching failed at offset 5/7 [ 395.263220][ T7875] elecom 0003:056E:00FF.0027: probe with driver elecom failed with error -22 [ 395.312285][ T9] usb 1-1: USB disconnect, device number 35 [ 395.457587][ T7875] usb 4-1: USB disconnect, device number 40 [ 396.011487][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 396.162049][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 396.179871][ T9] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 396.197229][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 396.250938][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 396.269658][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.287080][ T9] usb 2-1: Product: syz [ 396.292067][ T9] usb 2-1: Manufacturer: syz [ 396.303720][ T9] usb 2-1: SerialNumber: syz [ 396.538892][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 396.556223][ T1209] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 396.570636][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 396.586509][ T9] usb 2-1: USB disconnect, device number 37 [ 396.734790][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.756596][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.785257][ T1209] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 396.823823][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.855506][ T1209] usb 1-1: config 0 descriptor?? [ 396.919422][T19428] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 396.919422][T19428] The task syz.2.5417 (19428) triggered the difference, watch for misbehavior. [ 397.320693][ T1209] hid-steam 0003:28DE:1142.0028: unknown main item tag 0x0 [ 397.339452][ T1209] hid-steam 0003:28DE:1142.0028: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 397.402651][ T1209] hid-steam 0003:28DE:1142.0028: Steam wireless receiver connected [ 397.425630][ T1209] hid-steam 0003:28DE:1142.0028: No HID_FEATURE_REPORT submitted - nothing to read [ 397.457380][ T1209] hid-steam 0003:28DE:1142.0029: unknown main item tag 0x0 [ 397.465215][ T7886] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 397.495575][ T1209] hid-steam 0003:28DE:1142.0029: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 397.556394][ T1209] usb 1-1: USB disconnect, device number 36 [ 397.596180][ T1209] hid-steam 0003:28DE:1142.0028: Steam wireless receiver disconnected [ 397.631967][ T7886] usb 2-1: Using ep0 maxpacket: 16 [ 397.642433][ T7886] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.663568][ T7886] usb 2-1: config 0 has no interface number 0 [ 397.690158][ T7886] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 397.703569][T19466] fido_id[19466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 397.729237][ T7886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.742015][ T7886] usb 2-1: Product: syz [ 397.746248][ T7886] usb 2-1: Manufacturer: syz [ 397.751358][ T7886] usb 2-1: SerialNumber: syz [ 397.797408][ T7886] usb 2-1: config 0 descriptor?? [ 397.830425][ T7886] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 397.852265][T19486] sctp: [Deprecated]: syz.4.5434 (pid 19486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.852265][T19486] Use struct sctp_sack_info instead [ 398.253517][T19504] netlink: 'syz.2.5442': attribute type 5 has an invalid length. [ 398.262008][T19504] netlink: 'syz.2.5442': attribute type 3 has an invalid length. [ 398.269771][T19504] netlink: 152988 bytes leftover after parsing attributes in process `syz.2.5442'. [ 398.441786][ T7886] gspca_spca1528: reg_w err -71 [ 398.463857][ T7886] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 398.501114][ T7886] usb 2-1: USB disconnect, device number 38 [ 398.761802][ T7875] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 398.887890][T19544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5453'. [ 398.905698][ T1209] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 398.950032][ T7875] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 398.960022][ T7875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.968798][ T7875] usb 4-1: Product: syz [ 398.973730][ T7875] usb 4-1: Manufacturer: syz [ 398.978394][ T7875] usb 4-1: SerialNumber: syz [ 398.995441][ T7875] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 399.072488][ T1209] usb 1-1: Using ep0 maxpacket: 8 [ 399.098428][ T5913] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 399.099318][ T1209] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 399.161436][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.189177][ T1209] usb 1-1: Product: syz [ 399.214628][ T1209] usb 1-1: Manufacturer: syz [ 399.219313][ T1209] usb 1-1: SerialNumber: syz [ 399.272875][ T1209] usb 1-1: config 0 descriptor?? [ 399.297504][ T1209] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 399.341488][ T1209] usb 1-1: setting power ON [ 399.351472][ T7872] usb 4-1: USB disconnect, device number 41 [ 399.357546][ T1209] dvb-usb: bulk message failed: -22 (2/0) [ 399.378135][ T1209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 399.412524][ T1209] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 399.443621][ T1209] usb 1-1: media controller created [ 399.502282][T19530] dvb-usb: bulk message failed: -22 (3/0) [ 399.518043][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.528904][T19530] cxusb: i2c wr: len=79 is too big! [ 399.528904][T19530] [ 399.604350][ T1209] usb 1-1: selecting invalid altsetting 6 [ 399.618132][ T1209] usb 1-1: digital interface selection failed (-22) [ 399.627417][ T1209] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 399.671222][ T1209] usb 1-1: setting power OFF [ 399.676812][ T1209] dvb-usb: bulk message failed: -22 (2/0) [ 399.683286][ T1209] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 399.693911][ T1209] (NULL device *): no alternate interface [ 399.761057][ T1209] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 399.781979][ T7875] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 399.791906][ T1209] usb 1-1: USB disconnect, device number 37 [ 399.896062][T19598] fuse: Bad value for 'user_id' [ 399.902689][T19598] fuse: Bad value for 'user_id' [ 399.956723][ T7875] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 399.978560][ T7875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.007473][ T7875] usb 2-1: Product: syz [ 400.012428][ T30] audit: type=1326 audit(1750704110.610:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.2.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaad8e929 code=0x7ffc0000 [ 400.015772][ T7875] usb 2-1: Manufacturer: syz [ 400.045990][ T7875] usb 2-1: SerialNumber: syz [ 400.063804][ T7875] usb 2-1: config 0 descriptor?? [ 400.076972][ T30] audit: type=1326 audit(1750704110.630:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.2.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaad8e929 code=0x7ffc0000 [ 400.105577][ T7875] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 400.132030][ T5913] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 400.142946][ T5913] ath9k_htc: Failed to initialize the device [ 400.158590][ T30] audit: type=1326 audit(1750704110.640:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.2.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f1aaad8e929 code=0x7ffc0000 [ 400.158772][ T7872] usb 4-1: ath9k_htc: USB layer deinitialized [ 400.194256][ T30] audit: type=1326 audit(1750704110.640:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.2.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaad8e929 code=0x7ffc0000 [ 400.221209][ T30] audit: type=1326 audit(1750704110.640:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.2.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaad8e929 code=0x7ffc0000 [ 400.243910][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.268068][ T30] audit: type=1326 audit(1750704110.640:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.2.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f1aaad8e929 code=0x7ffc0000 [ 400.290614][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.371553][ T30] audit: type=1326 audit(1750704110.640:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.2.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaad8e929 code=0x7ffc0000 [ 400.394336][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.402269][ T30] audit: type=1326 audit(1750704110.640:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.2.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaad8e929 code=0x7ffc0000 [ 400.424713][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.542289][T19627] netlink: 'syz.0.5473': attribute type 1 has an invalid length. [ 400.757278][ T7875] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 400.769339][ T7875] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 400.829448][ T7875] usb 2-1: USB disconnect, device number 39 [ 401.081770][ T1209] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 401.261572][ T1209] usb 4-1: Using ep0 maxpacket: 32 [ 401.269224][ T1209] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.282829][ T1209] usb 4-1: config 0 has no interfaces? [ 401.290260][ T1209] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 401.300638][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.314309][ T1209] usb 4-1: config 0 descriptor?? [ 401.544625][T19645] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 401.587733][T19645] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5482'. [ 401.617732][T19645] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 401.729417][ T1209] usb 4-1: USB disconnect, device number 42 [ 402.425604][T19716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5500'. [ 402.773084][T19728] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5505'. [ 402.783009][T19728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5505'. [ 402.792550][T19728] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5505'. [ 402.812180][T19728] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5505'. [ 403.123065][T19735] xt_time: unknown flags 0xc [ 403.261046][ T30] audit: type=1326 audit(1750704113.840:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19715 comm="syz.0.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e918e929 code=0x7fc00000 [ 406.191404][ C1] sched: DL replenish lagged too much [ 406.207146][T19808] netlink: 'syz.3.5537': attribute type 1 has an invalid length. [ 406.284863][T19812] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 406.284863][T19812] program syz.2.5539 not setting count and/or reply_len properly [ 407.797548][T19853] netlink: 'syz.2.5553': attribute type 1 has an invalid length. [ 408.184242][T19860] pimreg: entered allmulticast mode [ 408.261653][T19860] pimreg: left allmulticast mode [ 408.490194][T19870] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5561'. [ 408.676889][T19875] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5562'. [ 409.912614][ T7886] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 410.144059][ T7886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.186992][T19909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5578'. [ 410.204151][ T7886] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 410.256241][ T7886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.299897][ T7886] usb 5-1: config 0 descriptor?? [ 410.772816][ T7886] elecom 0003:056E:011C.002A: unknown main item tag 0x0 [ 410.830582][ T7886] elecom 0003:056E:011C.002A: item fetching failed at offset 4/7 [ 410.855473][ T7886] elecom 0003:056E:011C.002A: probe with driver elecom failed with error -22 [ 410.990807][ T7886] usb 5-1: USB disconnect, device number 39 [ 413.807177][T19991] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5609'. [ 413.920479][ T30] audit: type=1804 audit(1750704124.510:2793): pid=19993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5610" name="/newroot/1137/file0" dev="tmpfs" ino=5724 res=1 errno=0 [ 413.974978][ T30] audit: type=1800 audit(1750704124.540:2794): pid=19993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5610" name="file0" dev="tmpfs" ino=5724 res=0 errno=0 [ 416.047684][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 416.171556][ T7886] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 416.213548][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.230919][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 416.240623][ T9] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 416.256385][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.272951][ T9] usb 3-1: config 0 descriptor?? [ 416.342018][ T7886] usb 5-1: Using ep0 maxpacket: 32 [ 416.352668][ T7886] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 416.369631][ T7886] usb 5-1: config 0 has no interface number 0 [ 416.385940][ T7886] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 21760, setting to 1024 [ 416.410996][ T7886] usb 5-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 416.435994][ T7886] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 416.453127][ T7886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.469887][ T7886] usb 5-1: Product: syz [ 416.477118][ T7886] usb 5-1: Manufacturer: syz [ 416.488286][ T7886] usb 5-1: SerialNumber: syz [ 416.523004][ T7886] usb 5-1: config 0 descriptor?? [ 416.548608][T20035] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 416.569141][ T7886] smsc95xx v2.0.0 [ 416.783697][T20035] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 416.920229][ T9] Bluetooth: Can't get version to change to load ram patch err [ 416.961438][ T9] Bluetooth: Loading sysconfig file failed [ 416.992187][ T9] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 417.064474][ T9] usb 3-1: USB disconnect, device number 31 [ 417.232981][ T7886] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 417.294087][ T7886] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 417.361583][ T7886] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 417.411186][ T7886] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 417.500821][ T7886] usb 5-1: USB disconnect, device number 40 [ 419.143034][T20102] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 419.431825][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 419.592142][T20117] blktrace: Concurrent blktraces are not allowed on sg0 [ 419.616935][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 419.645421][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.710340][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 419.734126][ T9] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.801494][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 419.833785][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 419.892008][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 419.931437][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 419.956844][ T9] usb 4-1: Product: syz [ 419.986839][ T9] usb 4-1: Manufacturer: syz [ 420.044712][T20107] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 420.083962][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 420.089234][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 420.142153][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 420.184522][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 420.336427][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 420.343264][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 420.350399][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 420.357035][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 420.363683][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 420.370313][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 420.376710][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 420.383337][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 420.389950][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 420.396578][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 420.411298][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 420.417983][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 420.425688][ T7886] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 420.433965][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 420.433993][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 420.441281][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 420.441309][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 420.455682][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 420.455713][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 420.462907][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 420.462936][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 420.540204][ T9] usb 4-1: USB disconnect, device number 43 [ 420.551617][ T1209] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 420.731836][ T1209] usb 3-1: Using ep0 maxpacket: 32 [ 420.740941][ T1209] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 420.756260][ T1209] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 420.769659][ T1209] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 420.791812][ T1209] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 420.805768][ T7886] usb 5-1: Using ep0 maxpacket: 8 [ 420.824787][ T1209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 420.825579][ T7886] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 420.865737][ T7886] usb 5-1: config 0 interface 0 has no altsetting 0 [ 420.881430][ T1209] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 420.890986][ T1209] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 420.900409][ T7886] usb 5-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 420.916112][ T1209] usb 3-1: Product: syz [ 420.920574][ T7886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.928735][ T1209] usb 3-1: Manufacturer: syz [ 420.943827][ T1209] usb 3-1: SerialNumber: syz [ 420.970349][ T7886] usb 5-1: config 0 descriptor?? [ 420.983024][ T1209] usb 3-1: config 0 descriptor?? [ 421.030723][ T1209] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 421.110855][ T1209] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 421.270934][ T1209] usb 3-1: USB disconnect, device number 32 [ 421.320997][ T1209] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 421.489586][ T7886] lenovo 0003:17EF:60FE.002B: hidraw0: USB HID v0.0b Device [HID 17ef:60fe] on usb-dummy_hcd.4-1/input0 [ 421.742451][ T1209] usb 5-1: USB disconnect, device number 41 [ 424.462252][ T1209] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 424.632115][ T1209] usb 3-1: Using ep0 maxpacket: 16 [ 424.646031][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.675205][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.705528][ T1209] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 424.729024][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.766262][ T1209] usb 3-1: config 0 descriptor?? [ 425.247733][ T1209] kye 0003:0458:5016.002C: control desc unexpectedly large [ 425.264756][ T1209] kye 0003:0458:5016.002C: control desc unexpectedly large [ 425.295333][ T1209] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.002C/input/input38 [ 425.452123][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 425.474123][ T1209] kye 0003:0458:5016.002C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 425.563728][ T1209] usb 3-1: USB disconnect, device number 33 [ 425.706847][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 425.734027][T20238] fido_id[20238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 425.759374][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.782086][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 425.830039][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 425.871873][ T9] usb 4-1: Manufacturer: syz [ 425.901124][ T9] usb 4-1: config 0 descriptor?? [ 426.258629][ T9] rc_core: IR keymap rc-hauppauge not found [ 426.281134][ T9] Registered IR keymap rc-empty [ 426.302400][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 426.348085][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input39 [ 426.759549][ T9] usb 4-1: USB disconnect, device number 44 [ 427.753187][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.764159][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.772495][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.783920][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.792674][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.890823][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.903531][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.915871][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.933722][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.942331][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.692200][ T1209] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 428.876112][ T1209] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 428.906005][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.972476][ T1209] usb 3-1: config 0 descriptor?? [ 429.030419][ T1209] gspca_main: spca508-2.14.0 probing 8086:0110 [ 429.192713][ T1209] gspca_spca508: reg_read err -32 [ 429.399937][T20323] chnl_net:caif_netlink_parms(): no params data found [ 429.413826][ T1209] gspca_spca508: reg_read err -71 [ 429.437037][ T1209] gspca_spca508: reg_read err -71 [ 429.465724][ T1209] gspca_spca508: reg_read err -71 [ 429.480097][ T1209] gspca_spca508: reg write: error -71 [ 429.500229][ T1209] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 429.550198][ T1209] usb 3-1: USB disconnect, device number 34 [ 429.925215][T20323] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.939828][T20323] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.948611][T20323] bridge_slave_0: entered allmulticast mode [ 429.975906][T20323] bridge_slave_0: entered promiscuous mode [ 430.009269][T20323] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.041021][T20323] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.057276][T20323] bridge_slave_1: entered allmulticast mode [ 430.071227][ T5833] Bluetooth: hci5: command tx timeout [ 430.100785][T20323] bridge_slave_1: entered promiscuous mode [ 430.400815][T20323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.424565][T20323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.601700][ T1209] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 430.639866][T20323] team0: Port device team_slave_0 added [ 430.656350][T20323] team0: Port device team_slave_1 added [ 430.788568][ T1209] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 430.818538][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 430.843963][ T1209] usb 3-1: Product: syz [ 430.848194][ T1209] usb 3-1: Manufacturer: syz [ 430.867734][ T1209] usb 3-1: SerialNumber: syz [ 430.881316][ T1209] usb 3-1: config 0 descriptor?? [ 430.899393][T20323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.917909][T20323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.923219][ T1209] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 430.949141][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.963980][T20323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.984383][T20323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.000264][T20323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.026356][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.048384][T20323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.469778][T20323] hsr_slave_0: entered promiscuous mode [ 431.484123][T20323] hsr_slave_1: entered promiscuous mode [ 431.491341][T20323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.508543][T20323] Cannot create hsr debugfs directory [ 431.541614][ T1209] gspca_sunplus: reg_r err -71 [ 431.546532][ T1209] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 431.618640][ T1209] usb 3-1: USB disconnect, device number 35 [ 432.138965][ T5833] Bluetooth: hci5: command tx timeout [ 432.528916][T20323] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 432.584615][T20323] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 432.644673][T20323] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 432.717200][T20323] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 433.109661][T20323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.165320][T20323] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.256533][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.263790][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.314247][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.321516][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.730929][T20323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.040575][T20323] veth0_vlan: entered promiscuous mode [ 434.205339][T20323] veth1_vlan: entered promiscuous mode [ 434.219124][ T5833] Bluetooth: hci5: command tx timeout [ 434.430555][T20323] veth0_macvtap: entered promiscuous mode [ 434.554380][T20323] veth1_macvtap: entered promiscuous mode [ 434.736861][T20323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.894712][T20323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.005140][T20323] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.060471][T20323] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.088640][T20323] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.108111][T20323] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.455947][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 435.466184][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 435.475816][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 435.493481][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 435.501433][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.299558][ T51] Bluetooth: hci5: command tx timeout [ 436.743499][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.795278][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.934721][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.985463][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.506620][T20731] chnl_net:caif_netlink_parms(): no params data found [ 437.573266][ T51] Bluetooth: hci4: command tx timeout [ 437.742056][ T30] audit: type=1326 audit(1750704148.340:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20870 comm="syz.5.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ed18e929 code=0x7ffc0000 [ 437.828068][ T30] audit: type=1326 audit(1750704148.370:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20870 comm="syz.5.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f75ed18e929 code=0x7ffc0000 [ 437.954307][ T30] audit: type=1326 audit(1750704148.370:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20870 comm="syz.5.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ed18e929 code=0x7ffc0000 [ 438.064869][ T30] audit: type=1326 audit(1750704148.370:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20870 comm="syz.5.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ed18e929 code=0x7ffc0000 [ 438.116547][ T30] audit: type=1326 audit(1750704148.380:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20870 comm="syz.5.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f75ed18e929 code=0x7ffc0000 [ 438.196468][ T30] audit: type=1326 audit(1750704148.380:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20870 comm="syz.5.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ed18e929 code=0x7ffc0000 [ 438.350854][ T30] audit: type=1326 audit(1750704148.380:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20870 comm="syz.5.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ed18e929 code=0x7ffc0000 [ 438.426278][T20731] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.490929][T20731] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.533237][T20731] bridge_slave_0: entered allmulticast mode [ 438.565004][T20731] bridge_slave_0: entered promiscuous mode [ 438.600839][T20731] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.643591][T20731] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.669754][T20731] bridge_slave_1: entered allmulticast mode [ 438.688820][T20731] bridge_slave_1: entered promiscuous mode [ 438.711802][ T1209] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 438.905225][ T1209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.941418][ T1209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.986318][ T1209] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 439.030144][T20731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.048311][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.098288][ T1209] usb 6-1: config 0 descriptor?? [ 439.108997][T20731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.470480][T20731] team0: Port device team_slave_0 added [ 439.531788][T20731] team0: Port device team_slave_1 added [ 439.570759][ T1209] hid-thrustmaster 0003:044F:B65D.002D: unknown main item tag 0x0 [ 439.652390][ T51] Bluetooth: hci4: command tx timeout [ 439.689369][ T1209] hid-thrustmaster 0003:044F:B65D.002D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 439.749157][ T1209] hid-thrustmaster 0003:044F:B65D.002D: Wrong number of endpoints? [ 439.832610][ C0] hid-thrustmaster 0003:044F:B65D.002D: URB to get model id failed with error -71 [ 439.865856][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 439.884520][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 439.893698][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 439.913328][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 439.937002][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 439.955297][ T1209] usb 6-1: USB disconnect, device number 2 [ 440.164474][T20731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.189243][T20731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.226975][T20988] fido_id[20988]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 440.245714][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.252969][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.301485][T20731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.346812][T20731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.368757][T20731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.479528][T20731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.892781][T20731] hsr_slave_0: entered promiscuous mode [ 440.899997][T20731] hsr_slave_1: entered promiscuous mode [ 440.915175][T20731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.927706][T20731] Cannot create hsr debugfs directory [ 441.732529][ T51] Bluetooth: hci4: command tx timeout [ 442.051989][ T51] Bluetooth: hci6: command tx timeout [ 442.275394][T20731] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 442.330387][T21014] chnl_net:caif_netlink_parms(): no params data found [ 442.365691][T20731] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 442.435019][T20731] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 442.505350][T20731] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 442.977977][T21014] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.996508][T21014] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.010954][T21014] bridge_slave_0: entered allmulticast mode [ 443.024881][T21014] bridge_slave_0: entered promiscuous mode [ 443.056078][T21014] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.071258][T21014] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.082174][T21014] bridge_slave_1: entered allmulticast mode [ 443.090521][T21014] bridge_slave_1: entered promiscuous mode [ 443.335597][T21014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.377778][T21014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.739439][T21014] team0: Port device team_slave_0 added [ 443.757121][T21014] team0: Port device team_slave_1 added [ 443.822786][ T51] Bluetooth: hci4: command tx timeout [ 443.996146][T21014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.011908][T21014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.058863][T21014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.091047][T21014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.106334][T21014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.134271][ T51] Bluetooth: hci6: command tx timeout [ 444.149152][T21014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.417046][T20731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.455083][T21014] hsr_slave_0: entered promiscuous mode [ 444.480103][T21014] hsr_slave_1: entered promiscuous mode [ 444.489131][T21014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.501864][T21014] Cannot create hsr debugfs directory [ 444.574821][T20731] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.125173][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.132509][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.191326][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.198636][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.983641][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 445.995219][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 446.004010][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 446.012731][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 446.045384][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 446.212148][ T5833] Bluetooth: hci6: command tx timeout [ 446.664872][T20731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.690991][T21014] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 446.763585][T21014] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 446.813014][T21014] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 446.877786][T21014] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 447.213618][T20731] veth0_vlan: entered promiscuous mode [ 447.564444][T20731] veth1_vlan: entered promiscuous mode [ 447.763553][T20731] veth0_macvtap: entered promiscuous mode [ 447.842482][T21452] chnl_net:caif_netlink_parms(): no params data found [ 447.868439][T20731] veth1_macvtap: entered promiscuous mode [ 447.894222][T21014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.135090][ T5833] Bluetooth: hci7: command tx timeout [ 448.201095][T21014] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.236573][T20731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.275993][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.283236][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.293344][ T5833] Bluetooth: hci6: command tx timeout [ 448.549135][T20731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.583168][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.590387][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.621575][T21452] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.628825][T21452] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.651082][T21452] bridge_slave_0: entered allmulticast mode [ 448.662940][T21452] bridge_slave_0: entered promiscuous mode [ 448.728973][T21452] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.759676][T21452] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.773361][T21452] bridge_slave_1: entered allmulticast mode [ 448.807896][T21452] bridge_slave_1: entered promiscuous mode [ 448.935845][T20731] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.958284][T20731] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.969916][T20731] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.990574][T20731] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.163935][T21452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.206387][T21452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.693870][T21452] team0: Port device team_slave_0 added [ 449.823254][T21452] team0: Port device team_slave_1 added [ 450.215060][ T5833] Bluetooth: hci7: command tx timeout [ 450.310772][T21452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.340669][T21452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.412482][T21452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.466777][T21452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.491692][T21452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.577472][T21452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.625568][T21014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.743829][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.774277][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.960736][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 450.970815][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 450.980979][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 450.990397][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 450.998836][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 451.244607][T21452] hsr_slave_0: entered promiscuous mode [ 451.273982][T21452] hsr_slave_1: entered promiscuous mode [ 451.280644][T21452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.300372][T21452] Cannot create hsr debugfs directory [ 451.521026][T21014] veth0_vlan: entered promiscuous mode [ 451.591070][T21014] veth1_vlan: entered promiscuous mode [ 451.633339][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.641216][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.294041][ T5833] Bluetooth: hci7: command tx timeout [ 452.429675][T21014] veth0_macvtap: entered promiscuous mode [ 452.518005][T21014] veth1_macvtap: entered promiscuous mode [ 453.017746][T21014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.092538][ T5833] Bluetooth: hci8: command tx timeout [ 453.252978][T21014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.346800][T21014] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.402688][T21014] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.451952][T21014] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.460732][T21014] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.558393][T21452] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 453.718900][T21452] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 453.770431][T21726] chnl_net:caif_netlink_parms(): no params data found [ 453.857799][T21452] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 454.043163][T21452] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 454.374152][ T5833] Bluetooth: hci7: command tx timeout [ 454.831928][T21726] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.839168][T21726] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.879606][T21726] bridge_slave_0: entered allmulticast mode [ 454.898782][T21726] bridge_slave_0: entered promiscuous mode [ 454.919963][T21726] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.963170][T21726] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.970506][T21726] bridge_slave_1: entered allmulticast mode [ 455.034028][T21726] bridge_slave_1: entered promiscuous mode [ 455.174304][ T5833] Bluetooth: hci8: command tx timeout [ 455.425795][ T30] audit: type=1326 audit(1750704166.020:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22006 comm="syz.6.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117038e929 code=0x7ffc0000 [ 455.487017][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.550432][T21726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.567052][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.580484][ T30] audit: type=1326 audit(1750704166.040:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22006 comm="syz.6.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f117038e929 code=0x7ffc0000 [ 455.636421][T21726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.706837][ T30] audit: type=1326 audit(1750704166.040:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22006 comm="syz.6.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117038e929 code=0x7ffc0000 [ 455.809023][ T30] audit: type=1326 audit(1750704166.040:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22006 comm="syz.6.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117038e929 code=0x7ffc0000 [ 455.922121][ T30] audit: type=1326 audit(1750704166.050:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22006 comm="syz.6.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f117038e929 code=0x7ffc0000 [ 456.024091][ T30] audit: type=1326 audit(1750704166.330:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22006 comm="syz.6.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117038e929 code=0x7ffc0000 [ 456.234360][ T30] audit: type=1326 audit(1750704166.330:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22006 comm="syz.6.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117038e929 code=0x7ffc0000 [ 456.367978][T21726] team0: Port device team_slave_0 added [ 456.494502][T21726] team0: Port device team_slave_1 added [ 456.872917][T21726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.880812][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.933526][T21726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.961392][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.064035][T21726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.172361][T21726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.179377][T21726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.205340][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.286534][ T5833] Bluetooth: hci8: command tx timeout [ 457.430997][T21726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.952650][ T5838] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 457.963782][ T5838] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 457.979590][ T5838] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 457.997779][ T5838] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 458.007755][ T5838] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 458.124398][T21726] hsr_slave_0: entered promiscuous mode [ 458.131333][T21726] hsr_slave_1: entered promiscuous mode [ 458.271632][T21726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.279263][T21726] Cannot create hsr debugfs directory [ 459.259684][T21452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.339395][ T5838] Bluetooth: hci8: command tx timeout [ 459.677896][T21452] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.752644][T22191] netlink: 'syz.6.5719': attribute type 4 has an invalid length. [ 460.031276][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.038638][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.132473][ T5838] Bluetooth: hci9: command tx timeout [ 460.239660][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.246992][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.311040][T22221] netlink: 'syz.6.5721': attribute type 4 has an invalid length. [ 460.340205][T22221] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5721'. [ 461.622013][T22262] team0: Device gtp0 is of different type [ 462.222834][ T5838] Bluetooth: hci9: command tx timeout [ 464.292179][ T5838] Bluetooth: hci9: command tx timeout [ 466.120839][T22316] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5726'. [ 466.402924][ T5838] Bluetooth: hci9: command tx timeout [ 466.432271][T21726] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 466.655524][T21726] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 466.813349][T21726] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 466.945449][T21726] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 467.151831][T22115] chnl_net:caif_netlink_parms(): no params data found [ 468.139457][T21452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.531769][T22115] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.539189][T22115] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.559813][T22115] bridge_slave_0: entered allmulticast mode [ 469.575445][T22115] bridge_slave_0: entered promiscuous mode [ 469.614234][T22115] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.631593][T22115] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.649738][T22115] bridge_slave_1: entered allmulticast mode [ 469.679954][T22115] bridge_slave_1: entered promiscuous mode [ 470.013174][T22115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.075210][T21452] veth0_vlan: entered promiscuous mode [ 470.094854][T22115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.399652][T22115] team0: Port device team_slave_0 added [ 470.437962][T22115] team0: Port device team_slave_1 added [ 470.565635][T21452] veth1_vlan: entered promiscuous mode [ 470.704905][T22115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.723417][T22115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.765041][T22115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.945644][T22115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.981686][T22115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.092227][T22115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.380925][T21452] veth0_macvtap: entered promiscuous mode [ 471.683937][T21452] veth1_macvtap: entered promiscuous mode [ 471.778230][T22115] hsr_slave_0: entered promiscuous mode [ 471.820804][T22115] hsr_slave_1: entered promiscuous mode [ 471.851824][T22115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.879348][T22115] Cannot create hsr debugfs directory [ 471.919772][T21726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.299683][T21452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.500608][T22566] netlink: 'syz.7.5734': attribute type 16 has an invalid length. [ 472.523257][T22566] netlink: 'syz.7.5734': attribute type 17 has an invalid length. [ 472.563315][T21726] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.825315][T22566] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.833229][T22566] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.753812][T22566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.813903][T22566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.295218][T22566] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.323035][T22566] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.350626][T22566] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.367585][T22566] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.904097][T21452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.018610][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.026170][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.126698][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.133968][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.270451][T21452] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.303598][T21452] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.342284][T21452] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.351054][T21452] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.819076][T21726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.955852][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.031853][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.258725][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.311417][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.396768][T21726] veth0_vlan: entered promiscuous mode [ 478.484686][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 478.503322][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 478.514213][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 478.556091][T21726] veth1_vlan: entered promiscuous mode [ 478.567859][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 478.584805][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 478.885726][T21726] veth0_macvtap: entered promiscuous mode [ 479.107841][T21726] veth1_macvtap: entered promiscuous mode [ 479.421097][T21726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.502826][T21726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.585633][T21726] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.651792][T21726] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.701407][T21726] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.710261][T21726] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.609197][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.618456][ T5838] Bluetooth: hci0: command tx timeout [ 480.687711][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.304590][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.350621][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.526251][T22638] chnl_net:caif_netlink_parms(): no params data found [ 482.692307][ T5838] Bluetooth: hci0: command tx timeout [ 482.699115][T22638] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.747576][T22638] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.786970][T22638] bridge_slave_0: entered allmulticast mode [ 482.852034][T22638] bridge_slave_0: entered promiscuous mode [ 482.933982][T22638] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.995179][T22638] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.053517][T22638] bridge_slave_1: entered allmulticast mode [ 483.097974][T22638] bridge_slave_1: entered promiscuous mode [ 483.429041][ T7884] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 483.592926][T22638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.655789][ T7884] usb 10-1: Using ep0 maxpacket: 32 [ 483.694523][T22638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.721554][ T7884] usb 10-1: config 0 has an invalid interface number: 219 but max is 0 [ 483.761388][ T7884] usb 10-1: config 0 has no interface number 0 [ 483.809430][ T7884] usb 10-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 483.883807][ T30] audit: type=1326 audit(1750704194.480:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.8.5753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa52bf8e929 code=0x0 [ 483.920245][ T7884] usb 10-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 483.970252][ T7884] usb 10-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 484.042536][ T7884] usb 10-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 484.113248][ T7884] usb 10-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 484.168832][T22638] team0: Port device team_slave_0 added [ 484.188823][ T7884] usb 10-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 484.224786][ T7884] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.254286][ T7884] usb 10-1: Product: syz [ 484.273779][ T7884] usb 10-1: Manufacturer: syz [ 484.297771][ T7884] usb 10-1: SerialNumber: syz [ 484.357817][T22638] team0: Port device team_slave_1 added [ 484.376625][ T7884] usb 10-1: config 0 descriptor?? [ 484.418244][T22842] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 484.713374][ T7884] etas_es58x 10-1:0.219: Starting syz syz (Serial Number syz) [ 484.772723][ T5838] Bluetooth: hci0: command tx timeout [ 484.913077][ T7884] etas_es58x 10-1:0.219: could not parse product info: 'У' [ 484.972709][T22910] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 485.015184][T22910] team0: Device macvtap1 is already an upper device of the team interface [ 485.245364][T22638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.267037][T22638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.315728][T22638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.409339][T22638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.461818][ T7884] usb 10-1: USB disconnect, device number 2 [ 485.480493][T22638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.569957][ T7884] etas_es58x 10-1:0.219: Disconnecting syz syz [ 485.705283][T22638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.150198][T22972] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 486.398441][T22638] hsr_slave_0: entered promiscuous mode [ 486.475174][T22638] hsr_slave_1: entered promiscuous mode [ 486.495930][T22638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.527548][T22638] Cannot create hsr debugfs directory [ 486.854631][ T5838] Bluetooth: hci0: command tx timeout [ 487.754119][T23062] netlink: 'syz.8.5765': attribute type 2 has an invalid length. [ 488.961235][ T30] audit: type=1326 audit(1750704199.550:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23087 comm="syz.8.5774" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa52bf8e929 code=0x0 [ 491.334662][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 492.213223][ T1209] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 492.395332][ T1209] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 492.419987][ T1209] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 492.441407][ T1209] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 492.477872][ T1209] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 492.491746][ T1209] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.510555][ T1209] usb 9-1: Product: syz [ 492.520667][ T1209] usb 9-1: Manufacturer: syz [ 492.532227][ T1209] usb 9-1: SerialNumber: syz [ 492.554054][ T1209] usb 9-1: config 0 descriptor?? [ 492.562357][T23111] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 492.575232][T23111] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 492.608140][ T1209] usb 9-1: ucan: probing device on interface #0 [ 493.045253][ T1209] usb 9-1: ucan: device reported invalid device info [ 493.061730][ T1209] usb 9-1: ucan: probe failed; try to update the device firmware [ 493.318963][ T1209] usb 9-1: USB disconnect, device number 2 [ 496.752638][ T30] audit: type=1326 audit(1750704207.350:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23171 comm="syz.8.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 496.836800][ T30] audit: type=1326 audit(1750704207.370:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23171 comm="syz.8.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 496.980131][ T30] audit: type=1326 audit(1750704207.380:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23171 comm="syz.8.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 497.056610][ T30] audit: type=1326 audit(1750704207.380:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23171 comm="syz.8.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 497.122763][ T30] audit: type=1326 audit(1750704207.380:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23171 comm="syz.8.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 497.164585][ T30] audit: type=1326 audit(1750704207.380:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23171 comm="syz.8.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 497.223429][ T30] audit: type=1326 audit(1750704207.380:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23171 comm="syz.8.5797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 497.274725][ T1209] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 497.452150][ T1209] usb 9-1: Using ep0 maxpacket: 16 [ 497.460710][ T1209] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.491962][ T1209] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.511466][ T1209] usb 9-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 497.520641][ T1209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.572606][ T1209] usb 9-1: config 0 descriptor?? [ 498.063476][ T1209] zeroplus 0003:0C12:0030.002E: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.8-1/input0 [ 498.110356][ T1209] zeroplus 0003:0C12:0030.002E: no inputs found [ 498.268886][ T9] usb 9-1: USB disconnect, device number 3 [ 498.310747][T23183] fido_id[23183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 499.912914][T23213] program syz.8.5804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.864697][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 500.874804][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 500.884319][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 500.893202][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 500.901124][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 501.590580][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.597050][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.438296][T23229] chnl_net:caif_netlink_parms(): no params data found [ 502.933331][ T5833] Bluetooth: hci1: command tx timeout [ 503.059704][T23229] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.103114][T23229] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.142593][T23229] bridge_slave_0: entered allmulticast mode [ 503.167612][T23229] bridge_slave_0: entered promiscuous mode [ 503.182631][T23402] PKCS8: Unsupported PKCS#8 version [ 503.203680][T23229] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.248170][T23229] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.283738][T23229] bridge_slave_1: entered allmulticast mode [ 503.323311][T23229] bridge_slave_1: entered promiscuous mode [ 503.816610][T23229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.895731][T23229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.361548][T23229] team0: Port device team_slave_0 added [ 504.531774][T23229] team0: Port device team_slave_1 added [ 504.959937][T23229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.012108][ T5833] Bluetooth: hci1: command tx timeout [ 505.032020][T23229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.058055][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.170612][T23229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.214158][T23493] tipc: Enabling of bearer rejected, failed to enable media [ 505.243477][T23229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.281728][T23229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.307703][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.449152][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 505.478414][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 505.488175][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 505.502060][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 505.509972][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 505.556685][T23229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.926338][ T30] audit: type=1326 audit(1750704216.510:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.8.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 506.031095][ T30] audit: type=1326 audit(1750704216.510:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.8.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 506.053779][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.074121][T23229] hsr_slave_0: entered promiscuous mode [ 506.142537][T23229] hsr_slave_1: entered promiscuous mode [ 506.149082][T23229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.201983][ T30] audit: type=1326 audit(1750704216.550:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.8.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 506.225990][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.249238][T23229] Cannot create hsr debugfs directory [ 506.337855][ T30] audit: type=1326 audit(1750704216.550:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.8.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 506.441446][ T30] audit: type=1326 audit(1750704216.550:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.8.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 506.621755][ T30] audit: type=1326 audit(1750704216.560:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.8.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 506.677099][ T30] audit: type=1326 audit(1750704216.560:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.8.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 506.765353][ T30] audit: type=1326 audit(1750704216.560:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.8.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 506.788630][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.861442][ T30] audit: type=1326 audit(1750704216.870:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.8.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 507.022728][ T30] audit: type=1326 audit(1750704216.870:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.8.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52bf8e929 code=0x7ffc0000 [ 507.108813][ T5833] Bluetooth: hci1: command tx timeout [ 507.585676][ T5833] Bluetooth: hci3: command tx timeout [ 508.459527][T23502] chnl_net:caif_netlink_parms(): no params data found [ 509.058264][T23502] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.076637][T23502] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.096080][T23502] bridge_slave_0: entered allmulticast mode [ 509.116296][T23502] bridge_slave_0: entered promiscuous mode [ 509.155141][T23502] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.171553][T23502] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.182964][ T5838] Bluetooth: hci1: command tx timeout [ 509.199399][T23502] bridge_slave_1: entered allmulticast mode [ 509.211560][T23502] bridge_slave_1: entered promiscuous mode [ 509.478099][T23502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.513127][T23502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.672785][ T5838] Bluetooth: hci3: command tx timeout [ 509.800012][T23502] team0: Port device team_slave_0 added [ 509.837026][T23502] team0: Port device team_slave_1 added [ 510.086523][T23502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.101366][T23502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.147063][T23502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.218223][T23502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.241955][T23502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.318623][T23502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.808411][T23502] hsr_slave_0: entered promiscuous mode [ 510.822980][T23502] hsr_slave_1: entered promiscuous mode [ 510.840519][T23502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.855489][T23502] Cannot create hsr debugfs directory [ 511.749430][ T5838] Bluetooth: hci3: command tx timeout [ 513.812381][ T5838] Bluetooth: hci3: command tx timeout [ 517.496649][ T5833] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 517.507529][ T5833] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 517.516985][ T5833] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 517.526634][ T5833] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 517.540779][ T5833] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 518.419673][T23933] chnl_net:caif_netlink_parms(): no params data found [ 519.036990][T23933] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.052046][T23933] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.059560][T23933] bridge_slave_0: entered allmulticast mode [ 519.092387][T23933] bridge_slave_0: entered promiscuous mode [ 519.119814][T23933] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.131515][T23933] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.138875][T23933] bridge_slave_1: entered allmulticast mode [ 519.176209][T23933] bridge_slave_1: entered promiscuous mode [ 519.443624][T23933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.473565][T23933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.653051][ T5833] Bluetooth: hci10: command tx timeout [ 519.728734][T23933] team0: Port device team_slave_0 added [ 519.771107][T23933] team0: Port device team_slave_1 added [ 520.030896][T23933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.059076][T23933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.125268][T23933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.168503][T23933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.181363][T23933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.236214][T23933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.614447][T23933] hsr_slave_0: entered promiscuous mode [ 520.633637][T23933] hsr_slave_1: entered promiscuous mode [ 520.651581][T23933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.659197][T23933] Cannot create hsr debugfs directory [ 521.732209][ T5833] Bluetooth: hci10: command tx timeout [ 523.827901][ T5833] Bluetooth: hci10: command tx timeout [ 524.490756][ T5838] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 524.508020][ T5838] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 524.522355][ T5838] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 524.536780][ T5838] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 524.544828][ T5838] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 525.442824][T24251] chnl_net:caif_netlink_parms(): no params data found [ 525.892451][ T5838] Bluetooth: hci10: command tx timeout [ 526.267715][T24251] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.291531][T24251] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.298915][T24251] bridge_slave_0: entered allmulticast mode [ 526.329819][T24251] bridge_slave_0: entered promiscuous mode [ 526.364471][T24251] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.389902][T24251] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.401617][T24251] bridge_slave_1: entered allmulticast mode [ 526.418522][T24251] bridge_slave_1: entered promiscuous mode [ 526.625006][ T5838] Bluetooth: hci11: command tx timeout [ 526.668597][T24251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.709674][T24251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.982587][T24251] team0: Port device team_slave_0 added [ 526.999174][T24251] team0: Port device team_slave_1 added [ 527.301581][T24251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.308586][T24251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.376360][T24251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.542278][T24251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.549289][T24251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.604132][T24251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.983259][T24251] hsr_slave_0: entered promiscuous mode [ 528.018877][T24251] hsr_slave_1: entered promiscuous mode [ 528.035741][T24251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.051390][T24251] Cannot create hsr debugfs directory [ 528.692536][ T5838] Bluetooth: hci11: command tx timeout [ 530.772668][ T5838] Bluetooth: hci11: command tx timeout [ 532.866893][ T5838] Bluetooth: hci11: command tx timeout [ 538.017101][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 538.035492][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 538.045287][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 538.055334][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 538.072031][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 538.972627][T24583] chnl_net:caif_netlink_parms(): no params data found [ 539.506029][T24583] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.532696][T24583] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.540219][T24583] bridge_slave_0: entered allmulticast mode [ 539.568388][T24583] bridge_slave_0: entered promiscuous mode [ 539.597781][T24583] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.622092][T24583] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.629851][T24583] bridge_slave_1: entered allmulticast mode [ 539.656134][T24583] bridge_slave_1: entered promiscuous mode [ 539.924919][T24583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.996352][T24583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.146411][ T51] Bluetooth: hci4: command tx timeout [ 540.261120][T24583] team0: Port device team_slave_0 added [ 540.297664][T24583] team0: Port device team_slave_1 added [ 542.212726][ T51] Bluetooth: hci4: command tx timeout [ 544.306995][ T51] Bluetooth: hci4: command tx timeout [ 546.375290][ T51] Bluetooth: hci4: command tx timeout [ 547.336671][ T5201] udevd[5201]: worker [22637] /devices/platform/dummy_hcd.9/usb10/10-1 is taking a long time [ 547.584480][T24583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.598510][T24583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.640915][T24583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.696351][T24583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.712130][T24583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.761609][T24583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.095717][T24583] hsr_slave_0: entered promiscuous mode [ 548.123913][T24583] hsr_slave_1: entered promiscuous mode [ 548.130497][T24583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.167650][T24583] Cannot create hsr debugfs directory [ 560.597500][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 560.608543][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 560.623423][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 560.640367][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 560.650020][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 561.527028][T24901] chnl_net:caif_netlink_parms(): no params data found [ 562.693154][ T51] Bluetooth: hci5: command tx timeout [ 563.042938][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.049309][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.776135][ T5838] Bluetooth: hci5: command tx timeout [ 565.038760][T25022] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 565.049127][T25022] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 565.057972][T25022] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 565.071405][T25022] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 565.080612][T25022] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 565.094532][T25022] Bluetooth: hci6: command 0x0406 tx timeout [ 566.851699][T25022] Bluetooth: hci5: command tx timeout [ 568.932234][T25027] Bluetooth: hci5: command tx timeout [ 570.213123][T25027] Bluetooth: hci7: command 0x0406 tx timeout [ 571.258754][T24901] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.282199][T24901] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.289591][T24901] bridge_slave_0: entered allmulticast mode [ 571.322351][T24901] bridge_slave_0: entered promiscuous mode [ 571.360358][T24901] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.383020][T24901] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.390431][T24901] bridge_slave_1: entered allmulticast mode [ 571.421513][T24901] bridge_slave_1: entered promiscuous mode [ 571.714319][T24901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.775087][T24901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.210731][T24901] team0: Port device team_slave_0 added [ 572.239035][T24901] team0: Port device team_slave_1 added [ 572.555398][T24901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.578365][T24901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.651457][T24901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.700939][T24901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.709327][T25022] Bluetooth: hci12: command tx timeout [ 572.717082][T24901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.776850][T24901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.141054][T24901] hsr_slave_0: entered promiscuous mode [ 573.173067][T24901] hsr_slave_1: entered promiscuous mode [ 573.202544][T24901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.210186][T24901] Cannot create hsr debugfs directory [ 573.898877][T25025] chnl_net:caif_netlink_parms(): no params data found [ 574.772622][ T51] Bluetooth: hci12: command tx timeout [ 574.794965][T25025] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.811548][T25025] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.818962][T25025] bridge_slave_0: entered allmulticast mode [ 574.863875][T25025] bridge_slave_0: entered promiscuous mode [ 574.900205][T25025] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.918719][T25025] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.941171][T25025] bridge_slave_1: entered allmulticast mode [ 574.963930][T25025] bridge_slave_1: entered promiscuous mode [ 575.280739][T25025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.323648][T25025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.333979][ T51] Bluetooth: hci8: command 0x0406 tx timeout [ 575.631585][T25025] team0: Port device team_slave_0 added [ 575.729979][T25025] team0: Port device team_slave_1 added [ 576.024832][T25025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.041458][T25025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.095284][T25025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.145420][T25025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.161631][T25025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.213609][T25025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.567158][T25025] hsr_slave_0: entered promiscuous mode [ 576.583030][T25025] hsr_slave_1: entered promiscuous mode [ 576.589638][T25025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 576.621366][T25025] Cannot create hsr debugfs directory [ 576.852194][T25022] Bluetooth: hci12: command tx timeout [ 578.101126][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 578.111441][ T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 578.120318][ T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 578.133219][ T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 578.141251][ T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 578.936956][T25022] Bluetooth: hci12: command tx timeout [ 579.068503][T25546] chnl_net:caif_netlink_parms(): no params data found [ 579.679245][T25546] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.691627][T25546] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.699039][T25546] bridge_slave_0: entered allmulticast mode [ 579.746454][T25546] bridge_slave_0: entered promiscuous mode [ 579.763663][T25546] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.772886][T25546] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.780313][T25546] bridge_slave_1: entered allmulticast mode [ 579.804761][T25546] bridge_slave_1: entered promiscuous mode [ 580.094539][T25546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.144453][T25546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.219277][T25022] Bluetooth: hci13: command tx timeout [ 580.460696][T25022] Bluetooth: hci9: command 0x0406 tx timeout [ 580.490964][T25546] team0: Port device team_slave_0 added [ 580.544822][T25546] team0: Port device team_slave_1 added [ 580.804109][T25546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.811207][T25546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.889198][T25546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.924252][T25546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.943105][T25546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.999541][T25546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.395678][T25546] hsr_slave_0: entered promiscuous mode [ 581.423714][T25546] hsr_slave_1: entered promiscuous mode [ 581.441513][T25546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.472463][T25546] Cannot create hsr debugfs directory [ 582.303099][ T51] Bluetooth: hci13: command tx timeout [ 584.375116][ T51] Bluetooth: hci13: command tx timeout [ 585.037152][T25022] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 585.050283][T25022] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 585.059745][T25022] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 585.068759][T25022] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 585.078057][T25022] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 585.987871][T25865] chnl_net:caif_netlink_parms(): no params data found [ 586.458216][T25022] Bluetooth: hci13: command tx timeout [ 586.538945][T25865] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.573245][T25865] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.580701][T25865] bridge_slave_0: entered allmulticast mode [ 586.617938][T25865] bridge_slave_0: entered promiscuous mode [ 586.635433][T25865] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.651460][T25865] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.658889][T25865] bridge_slave_1: entered allmulticast mode [ 586.695435][T25865] bridge_slave_1: entered promiscuous mode [ 586.978849][T25865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.016143][T25865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.183708][T25022] Bluetooth: hci14: command tx timeout [ 587.324657][T25865] team0: Port device team_slave_0 added [ 587.354437][T25865] team0: Port device team_slave_1 added [ 587.634731][T25865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.651347][T25865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.709717][T25865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.757291][T25865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.771339][T25865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.847467][T25865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.336934][T25865] hsr_slave_0: entered promiscuous mode [ 588.363392][T25865] hsr_slave_1: entered promiscuous mode [ 588.385935][T25865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.404311][T25865] Cannot create hsr debugfs directory [ 589.262968][T25022] Bluetooth: hci14: command tx timeout [ 591.351365][ T51] Bluetooth: hci14: command tx timeout [ 593.422317][ T51] Bluetooth: hci14: command tx timeout [ 598.519971][T25022] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 598.532803][T25022] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 598.542647][T25022] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 598.561144][T25022] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 598.572212][T25022] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 599.566527][T26183] chnl_net:caif_netlink_parms(): no params data found [ 600.165215][T26183] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.182495][T26183] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.201766][T26183] bridge_slave_0: entered allmulticast mode [ 600.228996][T26183] bridge_slave_0: entered promiscuous mode [ 600.259246][T26183] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.283003][T26183] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.302367][T26183] bridge_slave_1: entered allmulticast mode [ 600.321984][T26183] bridge_slave_1: entered promiscuous mode [ 600.585060][T26183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.617863][ T51] Bluetooth: hci15: command tx timeout [ 600.635807][T26183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.911100][T26183] team0: Port device team_slave_0 added [ 600.932841][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 600.971455][T26183] team0: Port device team_slave_1 added [ 601.233404][T26183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.240410][T26183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.328484][T26183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.357062][T26183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.382095][T26183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.443243][T26183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.845956][T26183] hsr_slave_0: entered promiscuous mode [ 601.862946][T26183] hsr_slave_1: entered promiscuous mode [ 601.874288][T26183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.891900][T26183] Cannot create hsr debugfs directory [ 602.692520][T25022] Bluetooth: hci15: command tx timeout [ 604.772506][T25022] Bluetooth: hci15: command tx timeout [ 606.857113][T25022] Bluetooth: hci15: command tx timeout [ 621.068920][ T51] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 621.089787][ T51] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 621.103827][ T51] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 621.114161][ T51] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 621.124325][ T51] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 622.029842][T26502] chnl_net:caif_netlink_parms(): no params data found [ 623.172564][T25022] Bluetooth: hci16: command tx timeout [ 624.476297][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.483576][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.252411][T25022] Bluetooth: hci16: command tx timeout [ 625.876019][T25027] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 625.893273][T25027] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 625.902522][T25027] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 625.911853][T25027] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 625.923015][T25027] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 626.017870][T26502] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.051539][T26502] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.059022][T26502] bridge_slave_0: entered allmulticast mode [ 626.097410][T26502] bridge_slave_0: entered promiscuous mode [ 626.120720][T26502] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.152325][T26502] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.159766][T26502] bridge_slave_1: entered allmulticast mode [ 626.184786][T26502] bridge_slave_1: entered promiscuous mode [ 626.506506][T26502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.534640][T25022] Bluetooth: hci1: command 0x0406 tx timeout [ 626.569020][T26502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.943144][T26502] team0: Port device team_slave_0 added [ 627.008821][T26502] team0: Port device team_slave_1 added [ 627.334700][ T51] Bluetooth: hci16: command tx timeout [ 627.349791][T26502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.371731][T26502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.438872][T26502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.487478][T26502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.519202][T26502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.594058][T26502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.972765][ T51] Bluetooth: hci17: command tx timeout [ 628.116049][T26502] hsr_slave_0: entered promiscuous mode [ 628.148165][T26502] hsr_slave_1: entered promiscuous mode [ 628.172328][T26502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 628.179945][T26502] Cannot create hsr debugfs directory [ 628.916075][T26661] chnl_net:caif_netlink_parms(): no params data found [ 629.412965][ T51] Bluetooth: hci16: command tx timeout [ 629.797964][T26661] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.819046][T26661] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.852157][T26661] bridge_slave_0: entered allmulticast mode [ 629.882308][T26661] bridge_slave_0: entered promiscuous mode [ 629.904790][T26661] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.921768][T26661] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.929309][T26661] bridge_slave_1: entered allmulticast mode [ 629.961924][T26661] bridge_slave_1: entered promiscuous mode [ 630.057975][ T51] Bluetooth: hci17: command tx timeout [ 630.217964][T26661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.254500][T26661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.543015][T26661] team0: Port device team_slave_0 added [ 630.574647][T26661] team0: Port device team_slave_1 added [ 630.840450][T26661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.882057][T26661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.951947][T26661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.104232][T26661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.131656][T26661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.196706][T26661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.585919][T26661] hsr_slave_0: entered promiscuous mode [ 631.603780][T26661] hsr_slave_1: entered promiscuous mode [ 631.624667][T26661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.646433][T26661] Cannot create hsr debugfs directory [ 631.656248][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 632.143582][T25022] Bluetooth: hci17: command tx timeout [ 632.153740][ T31] INFO: task kworker/0:8:7884 blocked for more than 143 seconds. [ 632.175146][ T31] Not tainted 6.16.0-rc3-syzkaller #0 [ 632.181120][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 632.251564][ T31] task:kworker/0:8 state:D stack:21688 pid:7884 tgid:7884 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 632.325956][ T31] Workqueue: usb_hub_wq hub_event [ 632.331090][ T31] Call Trace: [ 632.403164][ T31] [ 632.406202][ T31] __schedule+0x16f5/0x4d00 [ 632.410779][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 632.522938][ T31] ? schedule+0x165/0x360 [ 632.527372][ T31] ? __pfx___schedule+0x10/0x10 [ 632.571976][ T31] ? schedule+0x91/0x360 [ 632.576315][ T31] schedule+0x165/0x360 [ 632.580519][ T31] schedule_preempt_disabled+0x13/0x30 [ 632.612335][ T31] __mutex_lock+0x724/0xe80 [ 632.616936][ T31] ? __mutex_lock+0x51b/0xe80 [ 632.636933][ T31] ? rcu_barrier+0x4c/0x570 [ 632.665141][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 632.670321][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 632.692439][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 632.698513][ T31] ? __mutex_lock+0xa6d/0xe80 [ 632.711329][ T31] rcu_barrier+0x4c/0x570 [ 632.715737][ T31] netdev_run_todo+0x327/0xea0 [ 632.720551][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 632.758488][ T31] ? unregister_netdevice_queue+0x33c/0x380 [ 632.782075][ T31] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 632.788407][ T31] ? rtnl_net_dev_lock+0x36/0x2f0 [ 632.802165][ T31] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 632.807397][ T31] unregister_netdev+0x52/0x60 [ 632.831532][ T31] es58x_free_netdevs+0x88/0x310 [ 632.836560][ T31] es58x_disconnect+0xdd/0x130 [ 632.855255][ T31] usb_unbind_interface+0x26b/0x8f0 [ 632.860534][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 632.885830][ T31] device_release_driver_internal+0x4d6/0x7c0 [ 632.902115][ T31] bus_remove_device+0x34d/0x410 [ 632.907135][ T31] device_del+0x511/0x8e0 [ 632.922121][ T31] ? kfree+0x18e/0x440 [ 632.926366][ T31] ? __pfx_device_del+0x10/0x10 [ 632.942461][ T31] ? kobject_put+0x446/0x480 [ 632.947133][ T31] usb_disable_device+0x3e9/0x8a0 [ 632.970430][ T31] usb_disconnect+0x330/0x910 [ 632.991618][ T31] hub_event+0x1cdb/0x4a00 [ 632.996155][ T31] ? do_raw_spin_lock+0x121/0x290 [ 633.001228][ T31] ? register_lock_class+0x51/0x320 [ 633.021928][ T31] ? __pfx_hub_event+0x10/0x10 [ 633.026807][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 633.041822][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 633.047100][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 633.085836][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 633.095929][ T31] process_scheduled_works+0xae1/0x17b0 [ 633.115019][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 633.121120][ T31] worker_thread+0x8a0/0xda0 [ 633.141982][ T31] kthread+0x70e/0x8a0 [ 633.146170][ T31] ? __pfx_worker_thread+0x10/0x10 [ 633.160053][ T31] ? __pfx_kthread+0x10/0x10 [ 633.172743][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 633.178024][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.203015][ T31] ? __pfx_kthread+0x10/0x10 [ 633.207687][ T31] ret_from_fork+0x3fc/0x770 [ 633.225301][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 633.230497][ T31] ? __switch_to_asm+0x39/0x70 [ 633.252037][ T31] ? __switch_to_asm+0x33/0x70 [ 633.256899][ T31] ? __pfx_kthread+0x10/0x10 [ 633.272016][ T31] ret_from_fork_asm+0x1a/0x30 [ 633.276887][ T31] [ 633.291630][ T31] INFO: task syz.0.5642:20092 blocked for more than 144 seconds. [ 633.299410][ T31] Not tainted 6.16.0-rc3-syzkaller #0 [ 633.335883][ T31] Blocked by coredump. [ 633.340537][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 633.422041][ T31] task:syz.0.5642 state:D stack:25128 pid:20092 tgid:20092 ppid:5835 task_flags:0x40044c flags:0x00004006 [ 633.451943][ T31] Call Trace: [ 633.455301][ T31] [ 633.458269][ T31] __schedule+0x16f5/0x4d00 [ 633.482153][ T31] ? __lock_acquire+0xab9/0xd20 [ 633.512180][ T31] ? schedule+0x165/0x360 [ 633.516623][ T31] ? __pfx___schedule+0x10/0x10 [ 633.531529][ T31] ? schedule+0x91/0x360 [ 633.535942][ T31] schedule+0x165/0x360 [ 633.540143][ T31] schedule_preempt_disabled+0x13/0x30 [ 633.572374][ T31] __mutex_lock+0x724/0xe80 [ 633.576977][ T31] ? __mutex_lock+0x51b/0xe80 [ 633.602210][ T31] ? rcu_barrier+0x4c/0x570 [ 633.606927][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 633.621998][ T31] ? __mutex_unlock_slowpath+0x6ed/0x700 [ 633.627737][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 633.653424][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 633.658628][ T31] rcu_barrier+0x4c/0x570 [ 633.681650][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 633.686858][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 633.701721][ T31] netdev_run_todo+0x327/0xea0 [ 633.706568][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 633.733187][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 633.738552][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 633.751896][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.757179][ T31] ? netdev_state_change+0x1ca/0x220 [ 633.791897][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 633.797100][ T31] tun_chr_close+0x13c/0x1c0 [ 633.812074][ T31] __fput+0x44c/0xa70 [ 633.816157][ T31] task_work_run+0x1d1/0x260 [ 633.820879][ T31] ? __pfx_task_work_run+0x10/0x10 [ 633.842359][ T31] ? kmem_cache_free+0x18f/0x400 [ 633.847376][ T31] do_exit+0x6b5/0x22e0 [ 633.862111][ T31] ? do_raw_spin_lock+0x121/0x290 [ 633.867209][ T31] ? __pfx_do_exit+0x10/0x10 [ 633.891945][ T31] do_group_exit+0x21c/0x2d0 [ 633.896629][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.921840][ T31] get_signal+0x1286/0x1340 [ 633.926463][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 633.943639][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 633.949787][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 633.981182][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 633.989552][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 634.011924][ T31] exit_to_user_mode_loop+0x75/0x110 [ 634.017357][ T31] do_syscall_64+0x2bd/0x3b0 [ 634.032103][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.037382][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.062221][ T31] ? clear_bhb_loop+0x60/0xb0 [ 634.067004][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.085532][ T31] RIP: 0033:0x7f20e918e929 [ 634.090018][ T31] RSP: 002b:00007f20e94dfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 634.121781][ T31] RAX: 0000000000000000 RBX: 00007f20e93b7ba0 RCX: 00007f20e918e929 [ 634.129837][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 634.152198][ T31] RBP: 00007f20e93b7ba0 R08: 0000000000001400 R09: 00000003e94dfe7f [ 634.160469][ T31] R10: 00000000005fabb4 R11: 0000000000000246 R12: 000000000006676e [ 634.195161][ T31] R13: 00007f20e93b6080 R14: ffffffffffffffff R15: 00007f20e94dfca0 [ 634.216051][T25022] Bluetooth: hci17: command tx timeout [ 634.225479][ T31] [ 634.251772][ T31] INFO: task syz.4.5666:20204 blocked for more than 145 seconds. [ 634.259591][ T31] Not tainted 6.16.0-rc3-syzkaller #0 [ 634.292759][ T31] Blocked by coredump. [ 634.297426][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.341897][ T31] task:syz.4.5666 state:D stack:25128 pid:20204 tgid:20204 ppid:5842 task_flags:0x40044c flags:0x00004006 [ 634.371682][ T31] Call Trace: [ 634.375045][ T31] [ 634.378016][ T31] __schedule+0x16f5/0x4d00 [ 634.402181][ T31] ? __lock_acquire+0xab9/0xd20 [ 634.407155][ T31] ? schedule+0x165/0x360 [ 634.425781][ T31] ? __pfx___schedule+0x10/0x10 [ 634.431231][ T31] ? schedule+0x91/0x360 [ 634.439373][ T31] schedule+0x165/0x360 [ 634.452668][ T31] schedule_preempt_disabled+0x13/0x30 [ 634.458456][ T31] __mutex_lock+0x724/0xe80 [ 634.482217][ T31] ? __mutex_lock+0x51b/0xe80 [ 634.490029][ T31] ? rcu_barrier+0x4c/0x570 [ 634.497550][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 634.512355][ T31] ? __mutex_unlock_slowpath+0x6ed/0x700 [ 634.518081][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 634.551542][ T31] ? free_one_page+0xfa/0x360 [ 634.556303][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 634.582065][ T31] rcu_barrier+0x4c/0x570 [ 634.586474][ T31] ? __free_pages_ok+0x535/0xc20 [ 634.601954][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 634.607175][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 634.622683][ T31] netdev_run_todo+0x327/0xea0 [ 634.627536][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 634.654623][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 634.659996][ T31] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 634.681778][ T31] ? netdev_state_change+0x1ca/0x220 [ 634.687231][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 634.712058][ T31] tun_chr_close+0x13c/0x1c0 [ 634.716731][ T31] __fput+0x44c/0xa70 [ 634.720774][ T31] task_work_run+0x1d1/0x260 [ 634.745362][ T31] ? __pfx_task_work_run+0x10/0x10 [ 634.764813][ T31] ? kmem_cache_free+0x18f/0x400 [ 634.769839][ T31] do_exit+0x6b5/0x22e0 [ 634.791659][ T31] ? do_raw_spin_lock+0x121/0x290 [ 634.801191][ T31] ? __pfx_do_exit+0x10/0x10 [ 634.812219][ T31] do_group_exit+0x21c/0x2d0 [ 634.816879][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.842657][ T31] get_signal+0x1286/0x1340 [ 634.847273][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 634.865051][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 634.871208][ T31] ? kmem_cache_free+0x309/0x400 [ 634.891884][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 634.911562][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 634.917126][ T31] exit_to_user_mode_loop+0x75/0x110 [ 634.936590][ T31] do_syscall_64+0x2bd/0x3b0 [ 634.951889][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.957177][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.985000][ T31] ? clear_bhb_loop+0x60/0xb0 [ 634.989866][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.013482][ T31] RIP: 0033:0x7f9513b8e929 [ 635.017982][ T31] RSP: 002b:00007f9513edfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 635.042030][ T31] RAX: 0000000000000000 RBX: 000000000006752b RCX: 00007f9513b8e929 [ 635.050080][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 635.083252][ T31] RBP: 00007f9513db7ba0 R08: 0000000000000001 R09: 0000000313edfe7f [ 635.112068][ T31] R10: 00007f9513a00000 R11: 0000000000000246 R12: 00007f9513db5fac [ 635.120214][ T31] R13: 00007f9513db5fa0 R14: ffffffffffffffff R15: 00007f9513edfca0 [ 635.152033][ T31] [ 635.155249][ T31] INFO: task syz-executor:22115 blocked for more than 146 seconds. [ 635.193350][ T31] Not tainted 6.16.0-rc3-syzkaller #0 [ 635.199310][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.252149][ T31] task:syz-executor state:D stack:22248 pid:22115 tgid:22115 ppid:1 task_flags:0x480140 flags:0x00004006 [ 635.295525][ T31] Call Trace: [ 635.298878][ T31] [ 635.324939][ T31] __schedule+0x16f5/0x4d00 [ 635.329546][ T31] ? __lock_acquire+0xab9/0xd20 [ 635.361818][ T31] ? schedule+0x165/0x360 [ 635.366274][ T31] ? __pfx___schedule+0x10/0x10 [ 635.371204][ T31] ? schedule+0x91/0x360 [ 635.405167][ T31] schedule+0x165/0x360 [ 635.435722][ T31] schedule_preempt_disabled+0x13/0x30 [ 635.452587][ T31] __mutex_lock+0x724/0xe80 [ 635.457181][ T31] ? __mutex_lock+0x51b/0xe80 [ 635.481859][ T31] ? rcu_barrier+0x4c/0x570 [ 635.486450][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 635.519907][ T31] ? __mutex_unlock_slowpath+0x6ed/0x700 [ 635.552436][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 635.558541][ T31] rcu_barrier+0x4c/0x570 [ 635.592168][ T31] netdev_run_todo+0x327/0xea0 [ 635.597053][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 635.632985][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.638295][ T31] ? nsim_destroy+0x3ec/0x670 [ 635.672292][ T31] nsim_destroy+0x40c/0x670 [ 635.676897][ T31] __nsim_dev_port_del+0x14d/0x1b0 [ 635.712372][ T31] nsim_dev_reload_destroy+0x288/0x490 [ 635.723452][ T31] nsim_drv_remove+0x58/0x160 [ 635.728211][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 635.764821][ T31] device_release_driver_internal+0x46f/0x7c0 [ 635.770982][ T31] bus_remove_device+0x34d/0x410 [ 635.802200][ T31] device_del+0x511/0x8e0 [ 635.806620][ T31] ? __lock_acquire+0xab9/0xd20 [ 635.844836][ T31] ? __pfx_device_del+0x10/0x10 [ 635.849781][ T31] device_unregister+0x20/0xc0 [ 635.881822][ T31] del_device_store+0x2aa/0x360 [ 635.886855][ T31] ? __pfx_del_device_store+0x10/0x10 [ 635.921805][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 635.926825][ T31] ? sysfs_kf_write+0x166/0x260 [ 635.963743][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 635.969027][ T31] kernfs_fop_write_iter+0x375/0x4f0 [ 636.012279][ T31] vfs_write+0x548/0xa90 [ 636.016620][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 636.065107][ T31] ? __pfx_vfs_write+0x10/0x10 [ 636.069960][ T31] ? do_sys_openat2+0x154/0x1c0 [ 636.111978][ T31] ? kmem_cache_free+0x18f/0x400 [ 636.117023][ T31] ksys_write+0x145/0x250 [ 636.176041][ T31] ? __pfx_ksys_write+0x10/0x10 [ 636.180972][ T31] ? rcu_is_watching+0x15/0xb0 [ 636.221525][ T31] ? do_syscall_64+0xbe/0x3b0 [ 636.226297][ T31] do_syscall_64+0xfa/0x3b0 [ 636.261523][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 636.266822][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.293342][ T31] ? clear_bhb_loop+0x60/0xb0 [ 636.298105][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.321414][ T31] RIP: 0033:0x7ff99bd8d3df [ 636.326012][ T31] RSP: 002b:00007ff99c0df220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 636.362088][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff99bd8d3df [ 636.370140][ T31] RDX: 0000000000000001 RSI: 00007ff99c0df270 RDI: 0000000000000005 [ 636.396360][ T31] RBP: 00007ff99be11d8d R08: 0000000000000000 R09: 00007ff99c0df077 [ 636.425180][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 636.452231][ T31] R13: 00007ff99c0df270 R14: 00007ff99cae4620 R15: 0000000000000003 [ 636.460328][ T31] [ 636.475866][ T31] INFO: task syz-executor:22638 blocked for more than 147 seconds. [ 636.491921][ T31] Not tainted 6.16.0-rc3-syzkaller #0 [ 636.497872][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 636.558196][ T31] task:syz-executor state:D stack:22408 pid:22638 tgid:22638 ppid:1 task_flags:0x400140 flags:0x00004004 [ 636.591854][ T31] Call Trace: [ 636.595219][ T31] [ 636.598188][ T31] __schedule+0x16f5/0x4d00 [ 636.628718][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 636.641072][ T31] ? __lock_acquire+0xab9/0xd20 [ 636.661734][ T31] ? schedule+0x165/0x360 [ 636.666155][ T31] ? __pfx___schedule+0x10/0x10 [ 636.671067][ T31] ? schedule+0x91/0x360 [ 636.692633][ T31] schedule+0x165/0x360 [ 636.696966][ T31] schedule_preempt_disabled+0x13/0x30 [ 636.711705][ T31] __mutex_lock+0x724/0xe80 [ 636.716374][ T31] ? __mutex_lock+0x51b/0xe80 [ 636.738324][ T31] ? del_device_store+0xd1/0x360 [ 636.761557][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 636.766662][ T31] ? __lock_acquire+0xab9/0xd20 [ 636.782076][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 636.787184][ T31] del_device_store+0xd1/0x360 [ 636.812230][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 636.817162][ T31] ? __pfx_del_device_store+0x10/0x10 [ 636.831905][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 636.836926][ T31] ? sysfs_kf_write+0x166/0x260 [ 636.864862][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 636.870481][ T31] kernfs_fop_write_iter+0x375/0x4f0 [ 636.891900][ T31] vfs_write+0x548/0xa90 [ 636.896312][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 636.912650][ T31] ? __pfx_vfs_write+0x10/0x10 [ 636.917500][ T31] ? do_sys_openat2+0x154/0x1c0 [ 636.941989][ T31] ? kmem_cache_free+0x18f/0x400 [ 636.957654][ T31] ksys_write+0x145/0x250 [ 636.975029][ T31] ? __pfx_ksys_write+0x10/0x10 [ 636.979946][ T31] ? rcu_is_watching+0x15/0xb0 [ 636.991965][ T31] ? do_syscall_64+0xbe/0x3b0 [ 636.996712][ T31] do_syscall_64+0xfa/0x3b0 [ 637.001254][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.018755][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.041634][ T31] ? clear_bhb_loop+0x60/0xb0 [ 637.046386][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.085159][ T31] RIP: 0033:0x7f4ab738d3df [ 637.089652][ T31] RSP: 002b:00007f4ab76df220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 637.113451][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4ab738d3df [ 637.132453][ T31] RDX: 0000000000000001 RSI: 00007f4ab76df270 RDI: 0000000000000005 [ 637.140570][ T31] RBP: 00007f4ab7411d8d R08: 0000000000000000 R09: 00007f4ab76df077 [ 637.177757][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 637.196557][ T31] R13: 00007f4ab76df270 R14: 00007f4ab80e4620 R15: 0000000000000003 [ 637.221610][ T31] [ 637.224800][ T31] INFO: task syz.7.5755:22910 blocked for more than 148 seconds. [ 637.257404][ T31] Not tainted 6.16.0-rc3-syzkaller #0 [ 637.264515][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 637.292451][ T31] task:syz.7.5755 state:D stack:21520 pid:22910 tgid:22909 ppid:21014 task_flags:0x400140 flags:0x00004006 [ 637.321742][ T31] Call Trace: [ 637.325092][ T31] [ 637.328186][ T31] __schedule+0x16f5/0x4d00 [ 637.352634][ T31] ? __lock_acquire+0xab9/0xd20 [ 637.364288][ T31] ? schedule+0x165/0x360 [ 637.368695][ T31] ? __pfx___schedule+0x10/0x10 [ 637.396484][ T31] ? schedule+0x91/0x360 [ 637.400820][ T31] schedule+0x165/0x360 [ 637.421540][ T31] schedule_preempt_disabled+0x13/0x30 [ 637.427096][ T31] __mutex_lock+0x724/0xe80 [ 637.442081][ T31] ? __mutex_lock+0x51b/0xe80 [ 637.446855][ T31] ? rcu_barrier+0x4c/0x570 [ 637.462455][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 637.467583][ T31] ? __mutex_unlock_slowpath+0x6ed/0x700 [ 637.492149][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 637.498241][ T31] rcu_barrier+0x4c/0x570 [ 637.524933][ T31] netdev_run_todo+0x327/0xea0 [ 637.529797][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 637.551736][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 637.557156][ T31] ? ns_capable+0x8a/0xf0 [ 637.572224][ T31] rtnl_newlink+0x177b/0x1c70 [ 637.577136][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 637.592361][ T31] ? __lock_acquire+0xab9/0xd20 [ 637.597308][ T31] ? __lock_acquire+0xab9/0xd20 [ 637.622409][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 637.627697][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 637.659293][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 637.682279][ T31] ? kernel_text_address+0xa5/0xe0 [ 637.687590][ T31] ? __lock_acquire+0xab9/0xd20 [ 637.701685][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 637.706783][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 637.726892][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 637.745148][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 637.761517][ T31] netlink_rcv_skb+0x208/0x470 [ 637.782061][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 637.787597][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 637.801740][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 637.813606][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 637.818907][ T31] netlink_unicast+0x75b/0x8d0 [ 637.837228][ T31] netlink_sendmsg+0x805/0xb30 [ 637.855340][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.860717][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 637.881527][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 637.886902][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.911793][ T31] __sock_sendmsg+0x21c/0x270 [ 637.916602][ T31] ____sys_sendmsg+0x505/0x830 [ 637.932073][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.937441][ T31] ? import_iovec+0x74/0xa0 [ 637.964222][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 637.981833][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.987170][ T31] ? __fget_files+0x2a/0x420 [ 638.001841][ T31] ? __fget_files+0x3a0/0x420 [ 638.006599][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 638.031946][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 638.037500][ T31] ? rcu_is_watching+0x15/0xb0 [ 638.056877][ T31] ? do_syscall_64+0xbe/0x3b0 [ 638.062708][ T31] do_syscall_64+0xfa/0x3b0 [ 638.067268][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.102061][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.108236][ T31] ? clear_bhb_loop+0x60/0xb0 [ 638.121514][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.127477][ T31] RIP: 0033:0x7f3614b8e929 [ 638.141555][ T31] RSP: 002b:00007f3615a30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.150057][ T31] RAX: ffffffffffffffda RBX: 00007f3614db5fa0 RCX: 00007f3614b8e929 [ 638.201657][ T31] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 638.209715][ T31] RBP: 00007f3614c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 638.242249][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.250397][ T31] R13: 0000000000000000 R14: 00007f3614db5fa0 R15: 00007f3614edfa28 [ 638.272218][ T31] [ 638.279959][ T31] INFO: task syz.9.5772:23079 blocked for more than 149 seconds. [ 638.311878][ T31] Not tainted 6.16.0-rc3-syzkaller #0 [ 638.349737][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.374549][ T31] task:syz.9.5772 state:D stack:25128 pid:23079 tgid:23079 ppid:21726 task_flags:0x400040 flags:0x00004006 [ 638.414304][ T31] Call Trace: [ 638.417662][ T31] [ 638.420628][ T31] __schedule+0x16f5/0x4d00 [ 638.441771][ T31] ? __lock_acquire+0xab9/0xd20 [ 638.446727][ T31] ? schedule+0x165/0x360 [ 638.451113][ T31] ? __pfx___schedule+0x10/0x10 [ 638.473128][ T31] ? schedule+0x91/0x360 [ 638.477470][ T31] schedule+0x165/0x360 [ 638.503285][ T31] schedule_preempt_disabled+0x13/0x30 [ 638.508848][ T31] __mutex_lock+0x724/0xe80 [ 638.532499][ T31] ? __mutex_lock+0x51b/0xe80 [ 638.537262][ T31] ? rcu_barrier+0x4c/0x570 [ 638.551737][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 638.556855][ T31] ? do_raw_write_lock+0x11d/0x260 [ 638.572149][ T31] ? __pfx_tdp_mmu_next_root+0x10/0x10 [ 638.577714][ T31] rcu_barrier+0x4c/0x570 [ 638.601513][ T31] ? kvm_mmu_uninit_tdp_mmu+0x32/0xc0 [ 638.607021][ T31] kvm_mmu_uninit_vm+0x23/0x60 [ 638.634243][ T31] kvm_arch_destroy_vm+0x23a/0x280 [ 638.639439][ T31] kvm_put_kvm+0xf8e/0x1650 [ 638.661964][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 638.667259][ T31] ? __pfx_kvm_vm_release+0x10/0x10 [ 638.681620][ T31] kvm_vm_release+0x43/0x50 [ 638.690702][ T31] __fput+0x44c/0xa70 [ 638.712548][ T31] task_work_run+0x1d1/0x260 [ 638.717239][ T31] ? __pfx_task_work_run+0x10/0x10 [ 638.761349][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 638.766901][ T31] exit_to_user_mode_loop+0xec/0x110 [ 638.781837][ T31] do_syscall_64+0x2bd/0x3b0 [ 638.786503][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.812142][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.818299][ T31] ? clear_bhb_loop+0x60/0xb0 [ 638.833778][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.839741][ T31] RIP: 0033:0x7fbd8458e929 [ 638.871907][ T31] RSP: 002b:00007fbd848dfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 638.880400][ T31] RAX: 0000000000000000 RBX: 000000000007746e RCX: 00007fbd8458e929 [ 638.902847][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 638.910887][ T31] RBP: 00007fbd847b7ba0 R08: 0000000000000001 R09: 00000003848dfe7f [ 638.943524][ T31] R10: 00007fbd84400000 R11: 0000000000000246 R12: 00007fbd847b5fac [ 638.976032][ T31] R13: 00007fbd847b5fa0 R14: ffffffffffffffff R15: 00007fbd848dfca0 [ 639.003453][ T31] [ 639.015534][ T31] [ 639.015534][ T31] Showing all locks held in the system: [ 639.031607][ T31] 1 lock held by pool_workqueue_/3: [ 639.036877][ T31] #0: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 639.098678][ T31] 1 lock held by khungtaskd/31: [ 639.111745][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 639.131729][ T31] 4 locks held by kworker/1:1/43: [ 639.137081][ T31] 3 locks held by kworker/u8:4/61: [ 639.151476][ T31] 4 locks held by kworker/u8:5/1099: [ 639.156826][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 639.191572][ T31] #1: ffffc90003c6fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 639.221962][ T31] #2: ffffffff8f503290 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 639.242209][ T31] #3: ffff88805823a0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 639.272903][ T31] 3 locks held by kworker/u8:7/3442: [ 639.278273][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 639.311759][ T31] #1: ffffc9000bff7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 639.341733][ T31] #2: ffffffff8f50fe88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 639.350807][ T31] 2 locks held by kworker/1:2/3574: [ 639.371623][ T31] 2 locks held by getty/5595: [ 639.376365][ T31] #0: ffff8880350d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 639.415571][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 639.442508][ T31] 2 locks held by kworker/1:5/5915: [ 639.447784][ T31] 6 locks held by kworker/0:8/7884: [ 639.462608][ T31] #0: ffff888021aa1d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 639.481945][ T31] #1: ffffc9000472fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 639.522012][ T31] #2: ffff888143f6e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 639.531109][ T31] #3: ffff8880295e9198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x910 [ 639.561832][ T31] #4: ffff88802db13160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 639.592173][ T31] #5: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 639.611665][ T31] 1 lock held by syz.0.5642/20092: [ 639.616843][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 639.654277][ T31] 1 lock held by syz.4.5666/20204: [ 639.659450][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 639.682990][ T31] 1 lock held by syz.3.5685/20438: [ 639.688369][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 639.721504][ T31] 2 locks held by syz.2.5697/20714: [ 639.727744][ T31] #0: ffffffff8f503290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 639.772313][ T31] #1: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 639.801840][ T31] 1 lock held by syz.5.5702/21031: [ 639.807025][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 639.844085][ T31] 7 locks held by syz-executor/22115: [ 639.849536][ T31] #0: ffff888035342428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 639.892426][ T31] #1: ffff888046c90088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 639.903912][ T31] #2: ffff8880279573c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 639.932374][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 639.962855][ T31] #4: ffff88805823a0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 639.992175][ T31] #5: ffff88805823c250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 640.012478][ T31] #6: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 640.041818][ T31] 1 lock held by syz.6.5724/22262: [ 640.046989][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 640.082788][ T31] 4 locks held by udevd/22637: [ 640.087709][ T31] #0: ffff88805f0161c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 640.112374][ T31] #1: ffff888046a29888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 640.141866][ T31] #2: ffff888061278b48 (kn->active#18){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 640.162928][ T31] #3: ffff8880295e9198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 640.192755][ T31] 4 locks held by syz-executor/22638: [ 640.198188][ T31] #0: ffff888035342428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 640.225618][ T31] #1: ffff88807034d888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 640.251897][ T31] #2: ffff8880279573c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 640.273474][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 640.302503][ T31] 6 locks held by kworker/1:0/22649: [ 640.307853][ T31] 2 locks held by syz.7.5755/22910: [ 640.331863][ T31] #0: ffffffff8fa148e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 640.352576][ T31] #1: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 640.372582][ T31] 1 lock held by syz.9.5772/23079: [ 640.377754][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 640.424513][ T31] 4 locks held by syz-executor/23229: [ 640.434247][ T31] #0: ffff888035342428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 640.462099][ T31] #1: ffff888070151088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 640.483893][ T31] #2: ffff8880279573c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 640.502170][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 640.536386][ T31] 4 locks held by syz-executor/23502: [ 640.551629][ T31] #0: ffff888035342428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 640.560643][ T31] #1: ffff88805fcde088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 640.591770][ T31] #2: ffff8880279573c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 640.612506][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 640.651329][ T31] 1 lock held by syz.8.5828/23710: [ 640.656512][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 640.682324][ T31] 4 locks held by syz-executor/23933: [ 640.687764][ T31] #0: ffff888035342428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 640.722490][ T31] #1: ffff88808100dc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 640.754410][ T31] #2: ffff8880279573c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 640.782501][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 640.812036][ T31] 4 locks held by syz-executor/24251: [ 640.817478][ T31] #0: ffff888035342428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 640.839753][ T31] #1: ffff8880703e2088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 640.871837][ T31] #2: ffff8880279573c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 640.902308][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 640.921944][ T31] 4 locks held by syz-executor/24583: [ 640.927377][ T31] #0: ffff888035342428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 640.966673][ T31] #1: ffff8880339dec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 640.991634][ T31] #2: ffff8880279573c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 641.012977][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 641.044800][ T31] 4 locks held by syz-executor/24901: [ 641.050245][ T31] #0: ffff888035342428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 641.075917][ T31] #1: ffff888089f12088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 641.111928][ T31] #2: ffff8880279573c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 641.132162][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 641.162914][ T31] 3 locks held by kworker/u9:1/25022: [ 641.168354][ T31] #0: ffff888069ec5148 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 641.211727][ T31] #1: ffffc9000b2f7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 641.232073][ T31] #2: ffff888037f7cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 641.261835][ T31] 4 locks held by syz-executor/25025: [ 641.267287][ T31] #0: ffff888035342428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 641.292086][ T31] #1: ffff88808d56f888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 641.322647][ T31] #2: ffff8880279573c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 641.343056][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 641.371863][ T31] 4 locks held by syz-executor/25546: [ 641.377428][ T31] #0: ffff888035342428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 641.420030][ T31] #1: ffff8880658e2488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 641.444733][ T31] #2: ffff8880279573c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 641.472535][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 641.493900][ T31] 4 locks held by syz-executor/25865: [ 641.499338][ T31] #0: ffff888035342428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 641.529038][ T31] #1: ffff88804b8f0488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 641.551524][ T31] #2: ffff8880279573c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 641.582702][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 641.603223][ T31] 4 locks held by syz-executor/26183: [ 641.608756][ T31] #0: ffff888035342428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 641.638363][ T31] #1: ffff888099455888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 641.671555][ T31] #2: ffff8880279573c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 641.692747][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 641.712848][ T31] 4 locks held by syz-executor/26502: [ 641.718296][ T31] #0: ffff888035342428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 641.761001][ T31] #1: ffff88808cf3dc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 641.781528][ T31] #2: ffff8880279573c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 641.800059][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 641.830451][ T31] 2 locks held by syz-executor/26661: [ 641.858630][ T31] #0: ffffffff8f50fe88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 641.881331][ T31] #1: ffffffff8dfd6fd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x959/0x2320 [ 641.894346][ T51] Bluetooth: hci10: command 0x0406 tx timeout [ 641.922333][ T31] 2 locks held by dhcpcd/27132: [ 641.927256][ T31] #0: ffff888077b32608 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 641.952130][ T31] #1: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 641.991977][ T31] 2 locks held by dhcpcd/27133: [ 641.996897][ T31] #0: ffff888077b36808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 642.022975][ T31] #1: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 642.063178][ T31] [ 642.069691][ T31] ============================================= [ 642.069691][ T31] [ 642.101996][ T31] NMI backtrace for cpu 0 [ 642.102019][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 642.102042][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 642.102053][ T31] Call Trace: [ 642.102061][ T31] [ 642.102070][ T31] dump_stack_lvl+0x189/0x250 [ 642.102101][ T31] ? __wake_up_klogd+0xd9/0x110 [ 642.102126][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.102153][ T31] ? __pfx__printk+0x10/0x10 [ 642.102187][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 642.102213][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 642.102233][ T31] ? _printk+0xcf/0x120 [ 642.102257][ T31] ? __pfx__printk+0x10/0x10 [ 642.102279][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 642.102306][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 642.102333][ T31] watchdog+0xfee/0x1030 [ 642.102360][ T31] ? watchdog+0x1de/0x1030 [ 642.102392][ T31] kthread+0x70e/0x8a0 [ 642.102417][ T31] ? __pfx_watchdog+0x10/0x10 [ 642.102440][ T31] ? __pfx_kthread+0x10/0x10