last executing test programs: 2m0.967181326s ago: executing program 2 (id=6665): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) 2m0.652464385s ago: executing program 2 (id=6673): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 2m0.263849694s ago: executing program 2 (id=6677): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x9) pselect6(0x40, &(0x7f0000000280)={0x5, 0x5, 0x7, 0x6, 0xbd, 0x8000000000000000, 0x56, 0x1}, &(0x7f0000000300)={0xc, 0x3, 0x2, 0x1, 0x9, 0x80000001, 0x1, 0xd}, 0x0, 0x0, 0x0) 1m58.812524292s ago: executing program 2 (id=6684): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000076"], 0x58}, 0x1, 0x0, 0x0, 0x4001045}, 0x20000054) 1m58.739546478s ago: executing program 2 (id=6686): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) unshare(0x22020400) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 1m57.684746964s ago: executing program 0 (id=6692): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) 1m57.498583707s ago: executing program 0 (id=6693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00f67f05000100000000000c0002"], 0xc0}, 0x1, 0x0, 0x0, 0xc080}, 0x48014) 1m57.283951541s ago: executing program 0 (id=6694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x300}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) 1m57.155621759s ago: executing program 2 (id=6696): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1200}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m56.950731718s ago: executing program 0 (id=6698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m55.985307361s ago: executing program 0 (id=6702): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000010000006d0500000200"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0, 0x0, 0x11000000}, 0x38) 1m55.096565924s ago: executing program 0 (id=6703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000840)=ANY=[@ANYBLOB="cf8f4f"]) 1m46.649317059s ago: executing program 4 (id=6755): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x0, 0x0) 1m46.535792938s ago: executing program 4 (id=6756): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 1m46.033141291s ago: executing program 4 (id=6760): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000080)=@can={{0x2, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "769da9d382e92a22"}, 0x10}, 0x2, 0x0, 0x0, 0x20000004}, 0x1400400d) 1m45.951075064s ago: executing program 4 (id=6762): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f00000001c0)="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", 0x656) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x9, 0x6, 0x7fffffff, 0x6, 0x100000000, 0x5}) 1m45.863833236s ago: executing program 4 (id=6765): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) fsync(r0) 1m45.687235973s ago: executing program 4 (id=6767): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x89f2, 0x0) 1m42.024730545s ago: executing program 32 (id=6696): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1200}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m39.378012087s ago: executing program 33 (id=6703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000840)=ANY=[@ANYBLOB="cf8f4f"]) 1m31.478927564s ago: executing program 3 (id=6826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m31.091855089s ago: executing program 3 (id=6828): shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffe000/0x1000)=nil) syz_clone3(&(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000003500)=""/68, &(0x7f0000003580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) syz_clone(0x10004100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m30.763528622s ago: executing program 3 (id=6829): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000001c0)) 1m30.666755092s ago: executing program 3 (id=6830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 1m30.511677383s ago: executing program 34 (id=6767): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x89f2, 0x0) 1m29.342362252s ago: executing program 3 (id=6834): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000e40)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000d40)={0xf, 0x8, 0xfa00, {r1, 0x9}}, 0x10) 1m29.058596625s ago: executing program 3 (id=6836): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x843, 0x0, 0x0, 0xfffffffffffffeb7}) 1m13.704291848s ago: executing program 35 (id=6836): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x843, 0x0, 0x0, 0xfffffffffffffeb7}) 1m12.592724652s ago: executing program 1 (id=6864): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 1m12.49506769s ago: executing program 1 (id=6865): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) unshare(0x24020400) getsockopt$inet_buf(r0, 0x118, 0x27, 0x0, &(0x7f0000000000)) 1m12.273251161s ago: executing program 1 (id=6866): r0 = timerfd_create(0x1, 0x800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2007}) 1m12.162222831s ago: executing program 1 (id=6867): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 1m5.987087483s ago: executing program 1 (id=6868): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @remote, 0xfffffffe}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x100, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x80000}}}, 0x108) 1m5.939440352s ago: executing program 1 (id=6869): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x1ff, 0x5}) 50.54359029s ago: executing program 36 (id=6869): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x1ff, 0x5}) 49.026665385s ago: executing program 5 (id=6895): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xfba1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}}, 0x4008040) 48.627494286s ago: executing program 5 (id=6898): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711853000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff5, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x2}, 0x86) 47.38484287s ago: executing program 5 (id=6900): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x108, 0x4) 47.025558001s ago: executing program 5 (id=6902): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 46.94961738s ago: executing program 5 (id=6903): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/power/pm_test', 0x82, 0x10a) io_setup(0x4fe, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f0000000000)="46cac79185c264", 0x7, 0x9, 0x0, 0x0, r0}]) 46.160403418s ago: executing program 7 (id=6905): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) write$sysctl(r0, &(0x7f0000000180)='4\x00', 0x2) 45.964876137s ago: executing program 5 (id=6906): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8}) 45.667656957s ago: executing program 7 (id=6907): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 45.613080981s ago: executing program 7 (id=6908): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xa8) fadvise64(r0, 0x2400000, 0x2, 0x0) 45.555761355s ago: executing program 7 (id=6909): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x7, @local, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="82", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000540)="be", 0x1}], 0x1}}], 0x2, 0x200000d5) 45.379915834s ago: executing program 7 (id=6911): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) preadv(r0, 0x0, 0x0, 0x1f1, 0x0) 45.319683701s ago: executing program 7 (id=6912): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 32.087845537s ago: executing program 9 (id=6889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 30.883871854s ago: executing program 9 (id=6961): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 30.694557974s ago: executing program 37 (id=6906): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8}) 29.968454384s ago: executing program 38 (id=6912): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 29.074669505s ago: executing program 9 (id=6968): r0 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x2, 0x800000e, 0x2, 0xff, 0xffffffff, 0x16}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffb, 0x6, 0x10, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001140)="ae4f759ad6f8", 0x0, 0x2, 0x13, 0x1, 0x0}) 28.879277993s ago: executing program 9 (id=6969): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) 28.660595474s ago: executing program 9 (id=6970): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0x10, 0x16, 0x0, 0x1, [@typed={0xa, 0x2a, 0x0, 0x0, @binary="f4f7599e9ddc"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) 27.416297229s ago: executing program 9 (id=6972): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 22.06818299s ago: executing program 8 (id=6991): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0xa42, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000880)={0x20, r1, 0x23, 0x0, 0x0}) 22.006541443s ago: executing program 8 (id=6992): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0x100000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}], 0x1, 0x200400c0) 21.749351392s ago: executing program 8 (id=6994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x8c1}, 0x24004844) 19.347774732s ago: executing program 8 (id=6996): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_io_uring_setup(0x3faf, &(0x7f0000000300)={0x0, 0x9cae, 0x40, 0x2, 0xd4}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) 19.217377433s ago: executing program 8 (id=6997): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, {0x9, 0x2, 0x1}}, 0xa) 18.913420061s ago: executing program 8 (id=6999): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCGETS(r0, 0x8926, 0x0) 16.766855962s ago: executing program 6 (id=7007): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) 16.484046902s ago: executing program 6 (id=7008): r0 = syz_open_dev$video(&(0x7f0000000180), 0x10001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000280)={0x4, "d033bdfd1c1a6d9fe41efc7448e420b577f594393682b07d6e68afe477631b6c", 0x2, 0x200, 0x3, 0xde, 0x2, 0x1, 0xe, 0x8}) 16.404875469s ago: executing program 6 (id=7009): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 16.219500882s ago: executing program 6 (id=7010): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x200000}) 16.119055316s ago: executing program 6 (id=7011): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000800)={r0, &(0x7f00000005c0), 0x0}, 0x20) 15.123498288s ago: executing program 6 (id=7012): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0) 12.074273629s ago: executing program 39 (id=6972): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 3.533843154s ago: executing program 40 (id=6999): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCGETS(r0, 0x8926, 0x0) 0s ago: executing program 41 (id=7012): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0) kernel console output (not intermixed with test programs): es=4294967295 subj=_ pid=18648 comm="syz.1.6138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8446a6c799 code=0x7ffc0000 [ 347.307042][ T36] audit: type=1326 audit(1772499702.510:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18648 comm="syz.1.6138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8446a6c799 code=0x7ffc0000 [ 347.307262][ T36] audit: type=1326 audit(1772499702.510:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18648 comm="syz.1.6138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8446a6c799 code=0x7ffc0000 [ 347.452413][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 347.455043][ T5895] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 347.455069][ T5895] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 347.455088][ T5895] usb 4-1: config 179 has no interface number 0 [ 347.455140][ T5895] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 347.455181][ T5895] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 347.455205][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.489313][T18653] geneve5: entered promiscuous mode [ 347.847428][ T5876] usb 4-1: USB disconnect, device number 31 [ 348.110576][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6155'. [ 348.241741][T18693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6161'. [ 348.372625][T18700] netlink: 'syz.1.6163': attribute type 25 has an invalid length. [ 349.139386][T18749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6183'. [ 349.313351][ T1956] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 349.462612][ T1956] usb 5-1: Using ep0 maxpacket: 8 [ 349.464987][ T1956] usb 5-1: config 0 interface 0 has no altsetting 0 [ 349.467712][ T1956] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 349.467739][ T1956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.467759][ T1956] usb 5-1: Product: syz [ 349.467772][ T1956] usb 5-1: Manufacturer: syz [ 349.467786][ T1956] usb 5-1: SerialNumber: syz [ 349.525485][ T1956] usb 5-1: config 0 descriptor?? [ 349.547496][ T1956] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 349.636971][T18777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6194'. [ 349.718394][T18777] bond4: entered allmulticast mode [ 349.720115][T18777] 8021q: adding VLAN 0 to HW filter on device bond4 [ 349.781522][ T1956] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 349.798931][T18785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6197'. [ 349.803380][ T1956] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 349.965636][ T5987] usb 5-1: USB disconnect, device number 30 [ 350.090097][T18799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6204'. [ 350.531221][T18823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6215'. [ 350.903074][ T5895] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 351.053262][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 351.055306][ T5895] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.055384][ T5895] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 351.055412][ T5895] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 351.063348][ T5895] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.063376][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.063397][ T5895] usb 3-1: Product: syz [ 351.063412][ T5895] usb 3-1: Manufacturer: syz [ 351.063427][ T5895] usb 3-1: SerialNumber: syz [ 351.294399][T18866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6233'. [ 351.341820][ T5895] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.341891][ T5895] usb 3-1: MIDIStreaming interface descriptor not found [ 351.342244][ T5895] usb 3-1: unit 2 not found! [ 351.608624][ T5895] usb 3-1: USB disconnect, device number 24 [ 351.796154][T12005] udevd[12005]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.878895][T18891] vivid-000: disconnect [ 351.879477][T18890] vivid-000: reconnect [ 352.035550][T18902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6246'. [ 352.080207][T18903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6247'. [ 352.182002][T18910] sctp: [Deprecated]: syz.3.6250 (pid 18910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 352.182002][T18910] Use struct sctp_sack_info instead [ 352.228892][ T5895] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 352.387981][ T5895] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 352.388007][ T5895] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.388035][ T5895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.388088][ T5895] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 352.391479][ T5895] usb 2-1: string descriptor 0 read error: -71 [ 352.391610][ T5895] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.391633][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.439408][ T5895] usb 2-1: can't set config #1, error -71 [ 352.445531][ T5895] usb 2-1: USB disconnect, device number 24 [ 352.709872][T18940] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.6265'. [ 352.893162][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 352.920626][T18950] ip6gretap1: entered promiscuous mode [ 352.933096][T18952] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6272'. [ 353.008456][T18958] netlink: 'syz.2.6273': attribute type 16 has an invalid length. [ 353.008478][T18958] netlink: 'syz.2.6273': attribute type 17 has an invalid length. [ 353.076330][T18958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.144511][T18964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6277'. [ 353.449391][T18977] bond5: Removing last ns target with arp_interval on [ 353.504875][T18993] sg_write: data in/out 131292/12 bytes for SCSI command 0x4e-- guessing data in; [ 353.504875][T18993] program syz.1.6291 not setting count and/or reply_len properly [ 353.609874][ T36] audit: type=1326 audit(1772499708.810:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18994 comm="syz.0.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fe87c799 code=0x7ffc0000 [ 353.609931][ T36] audit: type=1326 audit(1772499708.810:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18994 comm="syz.0.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fe87c799 code=0x7ffc0000 [ 353.609970][ T36] audit: type=1326 audit(1772499708.810:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18994 comm="syz.0.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fe87c799 code=0x7ffc0000 [ 353.632073][ T36] audit: type=1326 audit(1772499708.830:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18994 comm="syz.0.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88fe87c799 code=0x7ffc0000 [ 353.632122][ T36] audit: type=1326 audit(1772499708.830:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18994 comm="syz.0.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fe87c799 code=0x7ffc0000 [ 353.632159][ T36] audit: type=1326 audit(1772499708.830:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18994 comm="syz.0.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fe87c799 code=0x7ffc0000 [ 353.632197][ T36] audit: type=1326 audit(1772499708.830:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18994 comm="syz.0.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fe87c799 code=0x7ffc0000 [ 353.632444][ T36] audit: type=1326 audit(1772499708.830:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18994 comm="syz.0.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f88fe87c799 code=0x7ffc0000 [ 353.632681][ T36] audit: type=1326 audit(1772499708.830:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18994 comm="syz.0.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fe87c799 code=0x7ffc0000 [ 353.632905][ T36] audit: type=1326 audit(1772499708.830:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18994 comm="syz.0.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fe87c799 code=0x7ffc0000 [ 353.662422][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6296'. [ 353.913513][T19011] IPv6: NLM_F_CREATE should be specified when creating new route [ 353.989298][T19017] usb usb7: usbfs: process 19017 (syz.0.6303) did not claim interface 0 before use [ 354.589617][T19045] netlink: 'syz.3.6316': attribute type 10 has an invalid length. [ 354.622743][T19045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.635929][T19045] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 355.006964][ T993] kernel read not supported for file /bluetooth/6lowpan_control (pid: 993 comm: kworker/1:3) [ 355.026263][T19062] netlink: 'syz.4.6323': attribute type 32 has an invalid length. [ 355.026285][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6323'. [ 355.168016][T19062] bond3: Setting coupled_control to off (0) [ 355.171043][T19070] netlink: 'syz.2.6325': attribute type 11 has an invalid length. [ 355.549355][T19088] comedi comedi0: Minor 2 could not be opened [ 356.135981][T19019] kexec: Could not allocate control_code_buffer [ 356.383485][ T5895] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 356.402347][T19136] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 356.558066][ T5895] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 356.558094][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.558113][ T5895] usb 5-1: Product: syz [ 356.558127][ T5895] usb 5-1: Manufacturer: syz [ 356.558140][ T5895] usb 5-1: SerialNumber: syz [ 356.598645][ T5895] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 356.663687][ T5987] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 357.128150][ T9] usb 5-1: USB disconnect, device number 31 [ 357.173468][ T1956] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 357.203604][T19166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6369'. [ 357.210450][T19166] vlan2: entered promiscuous mode [ 357.210468][T19166] bridge0: entered promiscuous mode [ 357.328744][ T1956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.328798][ T1956] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 357.328821][ T1956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.366169][ T1956] usb 2-1: config 0 descriptor?? [ 357.413549][ T993] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 357.568057][ T993] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 357.568086][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.572627][ T1956] usb 2-1: string descriptor 0 read error: -71 [ 357.581392][ T993] usb 3-1: config 0 descriptor?? [ 357.605483][ T1956] rndis_host 2-1:0.0: invalid descriptor buffer length [ 357.605505][ T1956] usb 2-1: bad CDC descriptors [ 357.623266][T19186] Bluetooth: MGMT ver 1.23 [ 357.657896][ T1956] usb 2-1: USB disconnect, device number 25 [ 357.834135][ T993] usb 3-1: Cannot read MAC address [ 357.834371][ T993] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 357.844469][ T993] usb 3-1: USB disconnect, device number 25 [ 357.935076][ T5987] usb 5-1: Service connection timeout for: 256 [ 357.935167][ T5987] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 357.936119][ T5987] ath9k_htc: Failed to initialize the device [ 357.936499][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 358.218757][T19211] netlink: 'syz.0.6391': attribute type 1 has an invalid length. [ 358.218784][T19211] netlink: 216 bytes leftover after parsing attributes in process `syz.0.6391'. [ 359.693830][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 360.603940][ T993] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 360.604123][ T5987] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 360.723325][T19273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6421'. [ 360.753835][ T993] usb 5-1: Using ep0 maxpacket: 32 [ 360.753999][ T5987] usb 4-1: Using ep0 maxpacket: 16 [ 360.757616][ T993] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 360.757640][ T993] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 360.757660][ T993] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 360.757689][ T993] usb 5-1: config 1 has no interface number 0 [ 360.757733][ T993] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 360.757758][ T993] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 360.757798][ T993] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 360.757821][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.761561][ T5987] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.761584][ T5987] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.765334][ T5987] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.765361][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.765380][ T5987] usb 4-1: Product: syz [ 360.765394][ T5987] usb 4-1: Manufacturer: syz [ 360.765408][ T5987] usb 4-1: SerialNumber: syz [ 360.957875][ T993] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 361.220839][ T993] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 361.704038][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 361.815431][ T993] usb 5-1: USB disconnect, device number 32 [ 361.930234][ T993] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 361.957944][ T5987] usb 4-1: USB disconnect, device number 32 [ 362.172873][T11960] udevd[11960]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.914245][ T5987] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 363.078011][ T5987] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.078040][ T5987] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.083683][ T5987] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 363.083714][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.083734][ T5987] usb 4-1: Product: syz [ 363.083747][ T5987] usb 4-1: Manufacturer: syz [ 363.083761][ T5987] usb 4-1: SerialNumber: syz [ 363.440109][ T5987] usb 4-1: 0:2 : does not exist [ 363.491586][ T5987] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 363.633625][ T5987] usb 4-1: USB disconnect, device number 33 [ 363.765351][T11960] udevd[11960]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.453009][T19316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6440'. [ 365.467336][T19325] process 'syz.1.6444' launched '/dev/fd/3' with NULL argv: empty string added [ 366.023459][T19341] netlink: 'syz.1.6451': attribute type 10 has an invalid length. [ 366.023482][T19341] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6451'. [ 367.294465][T19378] block nbd3: not configured, cannot reconfigure [ 368.063647][T19392] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 368.063675][T19392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.063764][T19392] vhci_hcd vhci_hcd.0: Device attached [ 368.104805][ T5987] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 368.288182][ T5987] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.288209][ T5987] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 368.288258][ T5987] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 368.288281][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.349635][ T5987] usb 5-1: config 0 descriptor?? [ 368.383349][ T5987] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 368.383456][ T5987] dvb-usb: bulk message failed: -22 (3/0) [ 368.425110][ T5895] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 368.428270][ T5987] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 368.430498][ T5987] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 368.430581][ T5987] usb 5-1: media controller created [ 368.463650][ T42] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 368.483595][ T5987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.532159][ T5987] dvb-usb: bulk message failed: -22 (6/0) [ 368.532284][ T5987] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 368.557073][ T5987] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input32 [ 368.577332][ T5987] dvb-usb: schedule remote query interval to 150 msecs. [ 368.577354][ T5987] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 368.603885][ T5895] usb 4-1: config 0 has no interfaces? [ 368.603925][ T5895] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 368.603946][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.636228][ T5895] usb 4-1: config 0 descriptor?? [ 368.654371][ T5895] usb 5-1: USB disconnect, device number 33 [ 368.889687][ T993] usb 4-1: USB disconnect, device number 34 [ 368.904460][T19395] usbip_core: unknown command [ 368.904472][T19395] vhci_hcd: unknown pdu 0 [ 368.904491][T19395] usbip_core: unknown command [ 368.933762][ T1233] vhci_hcd vhci_hcd.3: stop threads [ 368.933787][ T1233] vhci_hcd vhci_hcd.3: release socket [ 368.983600][ T1233] vhci_hcd vhci_hcd.3: disconnect device [ 369.542889][T19411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6475'. [ 369.542921][T19411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6475'. [ 369.617811][ T5895] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 371.141041][T19428] bridge0: port 4(macsec1) entered blocking state [ 371.141406][T19428] bridge0: port 4(macsec1) entered disabled state [ 371.141621][T19428] macsec1: entered allmulticast mode [ 371.141637][T19428] bridge0: entered allmulticast mode [ 371.519537][T19428] macsec1: left allmulticast mode [ 371.519559][T19428] bridge0: left allmulticast mode [ 373.915051][T19482] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6506'. [ 374.340231][T19497] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 374.340257][T19497] ALSA: mixer_oss: invalid index 137438 [ 374.445441][ T5895] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 374.524727][T19503] blktrace: Concurrent blktraces are not allowed on sg0 [ 374.597611][ T5895] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 374.597638][ T5895] usb 1-1: config 0 has no interface number 0 [ 374.597680][ T5895] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.597707][ T5895] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.597743][ T5895] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 374.597765][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.681208][ T5895] usb 1-1: config 0 descriptor?? [ 375.267757][ T5895] prodikeys 0003:041E:2801.0001: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 375.270186][ T5895] hid_prodikeys: hid-prodikeys: failed to find output report [ 375.270186][ T5895] [ 375.375717][ T5895] usb 1-1: USB disconnect, device number 37 [ 375.483343][T19513] fido_id[19513]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 376.405903][T19541] support for cryptoloop has been removed. Use dm-crypt instead. [ 377.061417][T19562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6544'. [ 377.091763][T19562] vlan2: entered promiscuous mode [ 378.126212][T19581] netlink: 'syz.1.6551': attribute type 2 has an invalid length. [ 380.713838][T19644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6582'. [ 381.470306][T19666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6594'. [ 381.706700][T19673] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.706732][T19673] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 383.319271][ T42] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 383.468778][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.468807][ T42] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 383.496257][ T42] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 383.496285][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.496305][ T42] usb 4-1: Product: syz [ 383.496320][ T42] usb 4-1: Manufacturer: syz [ 383.496333][ T42] usb 4-1: SerialNumber: syz [ 383.532610][ T42] usb 4-1: config 0 descriptor?? [ 383.903349][T19707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.904123][T19707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.928844][ T5801] Bluetooth: hci1: unknown advertising packet type: 0x17 [ 383.928886][ T5801] Bluetooth: hci1: unknown advertising packet type: 0x0d [ 383.928911][ T5801] Bluetooth: hci1: Malformed LE Event: 0x02 [ 383.931820][ T42] usb 4-1: USB disconnect, device number 35 [ 384.106591][ T993] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 384.268930][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.268973][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.269011][ T993] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 384.269033][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.277688][ T993] usb 3-1: config 0 descriptor?? [ 384.761935][T19725] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 384.790148][ T993] hkems 0003:2006:0118.0002: unknown main item tag 0x0 [ 384.790189][ T993] hkems 0003:2006:0118.0002: unknown main item tag 0x0 [ 384.790465][ T993] hkems 0003:2006:0118.0002: reserved main item tag 0xe [ 384.844602][ T993] hkems 0003:2006:0118.0002: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.2-1/input0 [ 384.844636][ T993] hkems 0003:2006:0118.0002: no inputs found [ 384.844649][ T993] hkems 0003:2006:0118.0002: force feedback init failed [ 384.968813][T19730] netlink: 'syz.3.6620': attribute type 2 has an invalid length. [ 384.968835][T19730] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.6620'. [ 385.053900][ T993] usb 3-1: USB disconnect, device number 26 [ 385.302932][T19731] fido_id[19731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 386.006915][ T42] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 386.156858][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 386.161534][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.161568][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 386.161610][ T42] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 386.161632][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.226015][ T42] usb 5-1: config 0 descriptor?? [ 386.640098][T19750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6629'. [ 386.678937][ T42] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 386.678972][ T42] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 386.678998][ T42] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 386.679024][ T42] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 386.679050][ T42] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 386.679075][ T42] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 386.679100][ T42] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 386.679126][ T42] pantherlord 0003:0810:0002.0003: unknown main item tag 0x0 [ 386.769256][ T42] pantherlord 0003:0810:0002.0003: hidraw0: USB HID v0.08 Device [HID 0810:0002] on usb-dummy_hcd.4-1/input0 [ 386.769361][ T42] pantherlord 0003:0810:0002.0003: no output reports found [ 386.923559][ T42] usb 5-1: USB disconnect, device number 34 [ 387.179853][T19753] fido_id[19753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 388.243527][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 388.243545][ T36] audit: type=1326 audit(1772499743.446:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19777 comm="syz.1.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8446a6c799 code=0x7ffc0000 [ 388.245766][ T36] audit: type=1326 audit(1772499743.446:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19777 comm="syz.1.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8446a6c799 code=0x7ffc0000 [ 388.303716][ T36] audit: type=1326 audit(1772499743.506:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19777 comm="syz.1.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8446a6c799 code=0x7ffc0000 [ 388.304442][ T36] audit: type=1326 audit(1772499743.506:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19777 comm="syz.1.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8446a6c799 code=0x7ffc0000 [ 388.305836][ T36] audit: type=1326 audit(1772499743.506:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19777 comm="syz.1.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8446a6c799 code=0x7ffc0000 [ 388.306103][ T36] audit: type=1326 audit(1772499743.506:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19777 comm="syz.1.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f8446a6c799 code=0x7ffc0000 [ 388.306669][ T36] audit: type=1326 audit(1772499743.506:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19777 comm="syz.1.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8446a6c799 code=0x7ffc0000 [ 388.423866][ T36] audit: type=1326 audit(1772499743.506:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19777 comm="syz.1.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8446a6c799 code=0x7ffc0000 [ 388.927192][ T42] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 389.077104][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 389.100311][ T42] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 389.100339][ T42] usb 3-1: config 0 has no interface number 0 [ 389.100380][ T42] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 389.100403][ T42] usb 3-1: config 0 interface 196 has no altsetting 0 [ 389.104197][ T42] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 389.104227][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.104246][ T42] usb 3-1: Product: syz [ 389.104260][ T42] usb 3-1: Manufacturer: syz [ 389.104274][ T42] usb 3-1: SerialNumber: syz [ 389.181428][ T42] usb 3-1: config 0 descriptor?? [ 389.183540][T19788] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 389.647645][ T42] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 389.647943][ T42] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 389.687302][ T42] usb 3-1: USB disconnect, device number 27 [ 390.352520][T19805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6655'. [ 392.456034][T19847] netlink: 'syz.1.6674': attribute type 29 has an invalid length. [ 392.465982][T19847] netlink: 'syz.1.6674': attribute type 29 has an invalid length. [ 393.000012][T19856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6678'. [ 393.091425][T19861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6681'. [ 393.091449][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6681'. [ 393.091473][T19861] netlink: 'syz.1.6681': attribute type 14 has an invalid length. [ 393.091487][T19861] netlink: 'syz.1.6681': attribute type 11 has an invalid length. [ 393.237649][ T42] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 393.387630][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 393.390499][ T42] usb 5-1: config 157 has too many interfaces: 246, using maximum allowed: 32 [ 393.390526][ T42] usb 5-1: config 157 has an invalid interface number: 255 but max is 245 [ 393.390545][ T42] usb 5-1: config 157 has 1 interface, different from the descriptor's value: 246 [ 393.390567][ T42] usb 5-1: config 157 has no interface number 0 [ 393.390597][ T42] usb 5-1: too many endpoints for config 157 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 393.390633][ T42] usb 5-1: config 157 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 393.390661][ T42] usb 5-1: config 157 interface 255 has no altsetting 0 [ 393.394946][ T42] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 393.394974][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.394994][ T42] usb 5-1: Product: syz [ 393.395007][ T42] usb 5-1: Manufacturer: syz [ 393.395054][ T42] usb 5-1: SerialNumber: syz [ 393.763440][ T42] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 394.488519][ T42] usb 5-1: reset high-speed USB device number 35 using dummy_hcd [ 394.818126][ T5895] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 394.908580][ T42] usb 5-1: failed to restore interface 255 altsetting 255 (error=-71) [ 394.934469][ T42] ueagle-atm 5-1:157.255: usbatm_usb_probe: bind failed: -19! [ 394.961395][ T42] usb 5-1: USB disconnect, device number 35 [ 395.000870][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.000904][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.000941][ T5895] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 395.000964][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.056302][ T5895] usb 2-1: config 0 descriptor?? [ 395.454284][T19889] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6693'. [ 395.454372][T19889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6693'. [ 395.454390][T19889] netlink: 23 bytes leftover after parsing attributes in process `syz.0.6693'. [ 395.454405][T19889] netlink: 'syz.0.6693': attribute type 2 has an invalid length. [ 395.454418][T19889] netlink: 'syz.0.6693': attribute type 3 has an invalid length. [ 395.454431][T19889] netlink: 23 bytes leftover after parsing attributes in process `syz.0.6693'. [ 395.748545][ T5895] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -71 [ 395.758113][T19891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6694'. [ 395.834332][ T5895] usb 2-1: USB disconnect, device number 26 [ 395.984415][T19896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6696'. [ 396.025158][T19896] batadv_slave_1: entered promiscuous mode [ 396.025317][T19896] macsec1: entered promiscuous mode [ 396.025517][T19896] macsec1: entered allmulticast mode [ 396.025531][T19896] batadv_slave_1: entered allmulticast mode [ 396.878077][ T5895] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 396.970605][T19896] batadv_slave_1: left allmulticast mode [ 396.970867][T19896] batadv_slave_1: left promiscuous mode [ 397.038071][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 397.040567][ T5895] usb 2-1: config index 0 descriptor too short (expected 67, got 36) [ 397.040620][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.040647][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.040683][ T5895] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 397.040705][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.105129][ T5895] usb 2-1: config 0 descriptor?? [ 397.615535][ T5895] hid_parser_main: 30 callbacks suppressed [ 397.615559][ T5895] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 397.615589][ T5895] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 397.615615][ T5895] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 397.615640][ T5895] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 397.615665][ T5895] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 397.615690][ T5895] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 397.615715][ T5895] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 397.615741][ T5895] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 397.615766][ T5895] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 397.615791][ T5895] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 397.731108][ T5895] apple 0003:05AC:0247.0005: hidraw0: USB HID v0.00 Device [HID 05ac:0247] on usb-dummy_hcd.1-1/input0 [ 397.833605][ T5895] usb 2-1: USB disconnect, device number 27 [ 398.047715][T19911] fido_id[19911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 398.768457][ T5895] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 398.922837][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 398.934744][ T5895] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 398.934874][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.934895][ T5895] usb 4-1: Product: syz [ 398.935031][ T5895] usb 4-1: Manufacturer: syz [ 398.935046][ T5895] usb 4-1: SerialNumber: syz [ 399.012643][ T5895] usb 4-1: config 0 descriptor?? [ 399.034122][ T5895] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 399.422681][ T5895] usb 4-1: clie_3_5_startup: get interface number bad return length: 0 [ 399.422842][ T5895] visor 4-1:0.0: probe with driver visor failed with error -5 [ 399.648827][ T5895] usb 4-1: USB disconnect, device number 36 [ 399.805778][ T9] hid-generic 0001:2E76778F:0076.0006: hidraw0: HID v0.04 Device [syz0] on syz1 [ 399.883822][T19930] fido_id[19930]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 400.231048][T19936] tmpfs: Unknown parameter 'no' [ 401.358471][ T5895] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 401.447406][T19966] netlink: 'syz.1.6727': attribute type 1 has an invalid length. [ 401.447428][T19966] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6727'. [ 401.447443][T19966] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6727'. [ 401.447457][T19966] netlink: 'syz.1.6727': attribute type 1 has an invalid length. [ 401.447470][T19966] netlink: 634 bytes leftover after parsing attributes in process `syz.1.6727'. [ 401.601273][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.601301][ T5895] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 401.604907][ T5895] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 401.604937][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.604956][ T5895] usb 4-1: Product: syz [ 401.604970][ T5895] usb 4-1: Manufacturer: syz [ 401.604984][ T5895] usb 4-1: SerialNumber: syz [ 401.660586][ T5895] usb 4-1: config 0 descriptor?? [ 401.886581][T19964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.887305][T19964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.888743][ T5801] Bluetooth: hci1: unknown advertising packet type: 0x17 [ 401.888786][ T5801] Bluetooth: hci1: Malformed LE Event: 0x02 [ 401.919151][ T5895] usb 4-1: USB disconnect, device number 37 [ 402.329317][ T5895] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 402.488926][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 402.491484][ T5895] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 402.491510][ T5895] usb 2-1: config 0 has no interface number 0 [ 402.491553][ T5895] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.491579][ T5895] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.491616][ T5895] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 402.491638][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.562995][ T5895] usb 2-1: config 0 descriptor?? [ 402.922447][ T42] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 403.128176][ T42] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 403.128207][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.128228][ T42] usb 4-1: Product: syz [ 403.128242][ T42] usb 4-1: Manufacturer: syz [ 403.128256][ T42] usb 4-1: SerialNumber: syz [ 403.197977][ T5895] uclogic 0003:28BD:0071.0007: failed retrieving string descriptor #100: -71 [ 403.198036][ T5895] uclogic 0003:28BD:0071.0007: failed retrieving pen parameters: -71 [ 403.198069][ T5895] uclogic 0003:28BD:0071.0007: pen probing failed: -71 [ 403.198085][ T5895] uclogic 0003:28BD:0071.0007: failed probing parameters: -71 [ 403.198195][ T5895] uclogic 0003:28BD:0071.0007: probe with driver uclogic failed with error -71 [ 403.248084][ T42] usb 4-1: config 0 descriptor?? [ 403.276498][ T42] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 403.291035][ T5895] usb 2-1: USB disconnect, device number 28 [ 403.327702][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 403.340686][ T42] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 403.340788][ T42] usb 4-1: media controller created [ 403.388506][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 403.490525][ T42] DVB: Unable to find symbol mt352_attach() [ 403.497101][T19980] dvb-usb: bulk message failed: -22 (7/0) [ 403.551012][ T42] DVB: Unable to find symbol nxt6000_attach() [ 403.551038][ T42] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 403.581224][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 403.585107][ T42] dvb-usb: schedule remote query interval to 1000 msecs. [ 403.585128][ T42] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 403.585144][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 403.585160][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 403.637500][ T42] usb 4-1: USB disconnect, device number 38 [ 404.406837][T20001] xt_policy: too many policy elements [ 404.794101][T20009] autofs: Bad value for 'fd' [ 406.153314][T20021] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 406.582909][ T42] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 406.833189][T20032] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.6758'. [ 411.089637][ T993] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 411.202374][ T42] IPVS: starting estimator thread 0... [ 411.239590][ T993] usb 2-1: Using ep0 maxpacket: 16 [ 411.241997][ T993] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.242028][ T993] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.242050][ T993] usb 2-1: config 0 interface 0 has no altsetting 0 [ 411.242084][ T993] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 411.242106][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.247355][ T993] usb 2-1: config 0 descriptor?? [ 411.290071][T20110] IPVS: using max 8 ests per chain, 19200 per kthread [ 411.559099][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.585821][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.598277][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.623321][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.626873][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.718614][ T993] hid_parser_main: 381 callbacks suppressed [ 411.718639][ T993] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 411.718669][ T993] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 411.718694][ T993] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 411.718719][ T993] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 411.718744][ T993] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 411.718769][ T993] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 411.718794][ T993] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 411.718819][ T993] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 411.718845][ T993] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 411.718870][ T993] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 411.812263][ T993] kye 0003:0458:0138.0008: unexpected long global item [ 411.813070][ T993] kye 0003:0458:0138.0008: parse failed [ 411.813147][ T993] kye 0003:0458:0138.0008: probe with driver kye failed with error -22 [ 411.953444][ T993] usb 2-1: USB disconnect, device number 29 [ 412.095045][T20111] hsr0 speed is unknown, defaulting to 1000 [ 412.402391][T20111] chnl_net:caif_netlink_parms(): no params data found [ 412.634386][T20111] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.648890][T20111] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.649132][T20111] bridge_slave_0: entered allmulticast mode [ 412.651935][T20111] bridge_slave_0: entered promiscuous mode [ 412.688937][T20111] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.699791][T20111] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.700032][T20111] bridge_slave_1: entered allmulticast mode [ 412.706134][T20111] bridge_slave_1: entered promiscuous mode [ 412.873311][T20111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.878457][T20111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.985451][T20111] team0: Port device team_slave_0 added [ 412.989046][T20111] team0: Port device team_slave_1 added [ 413.057213][T20111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.057230][T20111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.057256][T20111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.130100][T20111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.130125][T20111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.130155][T20111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.251994][T20111] hsr_slave_0: entered promiscuous mode [ 413.253317][T20111] hsr_slave_1: entered promiscuous mode [ 413.254328][T20111] debugfs: 'hsr0' already exists in 'hsr' [ 413.254351][T20111] Cannot create hsr debugfs directory [ 413.860064][ T5801] Bluetooth: hci5: command tx timeout [ 413.985319][ T5806] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 413.988575][ T5806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 414.023506][ T5806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 414.026175][ T5806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 414.027344][ T5806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 414.130064][ T993] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 414.280031][ T993] usb 2-1: Using ep0 maxpacket: 16 [ 414.282498][ T993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.282602][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 414.282637][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 414.282658][ T993] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 414.282682][ T993] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.284253][ T993] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 414.284279][ T993] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 414.284299][ T993] usb 2-1: Manufacturer: syz [ 414.289366][ T993] usb 2-1: config 0 descriptor?? [ 414.880236][ T993] rc_core: IR keymap rc-hauppauge not found [ 414.880257][ T993] Registered IR keymap rc-empty [ 414.880690][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.900263][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.921855][ T993] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 414.924795][ T993] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input35 [ 414.974879][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.993904][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 415.010228][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 415.040123][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 415.070272][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 415.092928][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 415.110402][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 415.140425][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 415.160134][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 415.180178][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 415.243548][ T993] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 415.243572][ T993] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 415.249148][ T993] usb 2-1: USB disconnect, device number 30 [ 415.941600][ T5801] Bluetooth: hci5: command tx timeout [ 416.100328][ T5801] Bluetooth: hci6: command tx timeout [ 417.185805][T20134] hsr0 speed is unknown, defaulting to 1000 [ 417.726469][T20111] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 418.020646][ T5801] Bluetooth: hci5: command tx timeout [ 418.190726][ T5801] Bluetooth: hci6: command tx timeout [ 418.217381][T20111] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 418.873032][T20111] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 418.940633][ T5895] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 419.104922][ T5895] usb 2-1: unable to get BOS descriptor or descriptor too short [ 419.105646][ T5895] usb 2-1: not running at top speed; connect to a high speed hub [ 419.157028][ T5895] usb 2-1: config 6 has an invalid interface number: 22 but max is 1 [ 419.157064][ T5895] usb 2-1: config 6 has an invalid interface number: 100 but max is 1 [ 419.157085][ T5895] usb 2-1: config 6 has no interface number 0 [ 419.157101][ T5895] usb 2-1: config 6 has no interface number 1 [ 419.157156][ T5895] usb 2-1: config 6 interface 22 has no altsetting 0 [ 419.157174][ T5895] usb 2-1: config 6 interface 100 has no altsetting 0 [ 419.159878][ T5895] usb 2-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=ec.ab [ 419.159905][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.159925][ T5895] usb 2-1: Product: syz [ 419.159939][ T5895] usb 2-1: Manufacturer: syz [ 419.159954][ T5895] usb 2-1: SerialNumber: syz [ 419.244655][T20111] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 419.511102][ T5895] uvcvideo 2-1:6.22: Found UVC 0.00 device syz (174f:8a33) [ 419.511182][ T5895] uvcvideo 2-1:6.22: No valid video chain found. [ 419.553348][ T5895] usb 2-1: USB disconnect, device number 31 [ 420.101111][ T5801] Bluetooth: hci5: command tx timeout [ 420.147725][T20134] chnl_net:caif_netlink_parms(): no params data found [ 420.260735][ T5806] Bluetooth: hci6: command tx timeout [ 420.502341][T20134] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.502470][T20134] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.502713][T20134] bridge_slave_0: entered allmulticast mode [ 420.505431][T20134] bridge_slave_0: entered promiscuous mode [ 420.543386][T20111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.544488][T20134] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.544671][T20134] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.544867][T20134] bridge_slave_1: entered allmulticast mode [ 420.547541][T20134] bridge_slave_1: entered promiscuous mode [ 420.645460][T20134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.647233][T20111] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.681519][T20134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.235204][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.246201][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.299797][T20134] team0: Port device team_slave_0 added [ 421.376264][T20134] team0: Port device team_slave_1 added [ 421.425435][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.502239][ T6602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.617428][T20134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.617449][T20134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.617474][T20134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.669748][T20134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.669765][T20134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.669802][T20134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.266912][T20134] hsr_slave_0: entered promiscuous mode [ 422.268341][T20134] hsr_slave_1: entered promiscuous mode [ 422.269298][T20134] debugfs: 'hsr0' already exists in 'hsr' [ 422.269321][T20134] Cannot create hsr debugfs directory [ 422.344258][ T5806] Bluetooth: hci6: command tx timeout [ 423.052410][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.079778][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.090971][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.098761][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.116726][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 423.748788][T20240] hsr0 speed is unknown, defaulting to 1000 [ 424.328995][T20134] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 424.612103][T20134] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 424.628346][ T42] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 424.785668][ T42] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 424.785701][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 424.785725][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 424.785858][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 424.785901][ T42] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.785924][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.836683][T20134] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 424.866888][ T42] usb 2-1: config 0 descriptor?? [ 424.943856][T20134] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 425.221374][ T5801] Bluetooth: hci2: command tx timeout [ 425.318154][ T42] hid_parser_main: 74 callbacks suppressed [ 425.318177][ T42] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 425.398033][ T42] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 425.518694][ T993] usb 2-1: USB disconnect, device number 32 [ 425.848522][T20111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.152987][T20240] chnl_net:caif_netlink_parms(): no params data found [ 426.538542][T20134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.809761][T20240] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.809893][T20240] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.810438][T20240] bridge_slave_0: entered allmulticast mode [ 426.854083][T20240] bridge_slave_0: entered promiscuous mode [ 426.927468][T20240] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.930742][T20240] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.955753][T20240] bridge_slave_1: entered allmulticast mode [ 426.982381][T20240] bridge_slave_1: entered promiscuous mode [ 427.012851][T20134] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.304922][ T5801] Bluetooth: hci2: command tx timeout [ 427.368516][ T6595] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.368706][ T6595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.406459][T20240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.587942][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.600206][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.625821][T20240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.715334][T20240] team0: Port device team_slave_0 added [ 428.737236][T20240] team0: Port device team_slave_1 added [ 428.857536][T20240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.857553][T20240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.857580][T20240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.941665][T20240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.941681][T20240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.941706][T20240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.391940][ T5801] Bluetooth: hci2: command tx timeout [ 431.462274][ T5801] Bluetooth: hci2: command tx timeout [ 433.557259][T20240] hsr_slave_0: entered promiscuous mode [ 433.558591][T20240] hsr_slave_1: entered promiscuous mode [ 433.559559][T20240] debugfs: 'hsr0' already exists in 'hsr' [ 433.559583][T20240] Cannot create hsr debugfs directory [ 433.982313][T20111] veth0_vlan: entered promiscuous mode [ 435.121434][T20111] veth1_vlan: entered promiscuous mode [ 435.452879][T20134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.661193][T20111] veth0_macvtap: entered promiscuous mode [ 435.851250][T20111] veth1_macvtap: entered promiscuous mode [ 435.987764][T20111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.044354][T20111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.158795][T20321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6850'. [ 436.424335][T20240] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 436.494373][ T1233] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.617290][ T1233] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.619286][T20240] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 438.586026][ T1233] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.587084][ T1233] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.620366][T20240] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 439.436165][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 439.475417][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 439.478009][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 439.479487][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 439.512552][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 439.771559][T20240] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 441.623209][ T5806] Bluetooth: hci0: command tx timeout [ 443.709656][ T5806] Bluetooth: hci0: command tx timeout [ 445.793967][ T5806] Bluetooth: hci0: command tx timeout [ 446.817661][T20352] hsr0 speed is unknown, defaulting to 1000 [ 447.554224][T20346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.863878][ T5806] Bluetooth: hci0: command tx timeout [ 448.096428][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.096448][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.172535][T20134] veth0_vlan: entered promiscuous mode [ 448.327710][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.327730][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.384745][T20134] veth1_vlan: entered promiscuous mode [ 448.717043][T20134] veth0_macvtap: entered promiscuous mode [ 448.790550][T20134] veth1_macvtap: entered promiscuous mode [ 448.809625][T20240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.810281][T20352] chnl_net:caif_netlink_parms(): no params data found [ 449.146790][T20240] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.165587][T20134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.166949][T20352] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.167136][T20352] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.167327][T20352] bridge_slave_0: entered allmulticast mode [ 449.169751][T20352] bridge_slave_0: entered promiscuous mode [ 449.220013][T20352] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.220118][T20352] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.220289][T20352] bridge_slave_1: entered allmulticast mode [ 449.222976][T20352] bridge_slave_1: entered promiscuous mode [ 449.282012][T20134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.643998][ T5987] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 449.796693][ T5987] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 449.800155][ T5987] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 449.800184][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.800203][ T5987] usb 6-1: Product: syz [ 449.800217][ T5987] usb 6-1: Manufacturer: syz [ 449.800231][ T5987] usb 6-1: SerialNumber: syz [ 449.804049][ T6599] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.804191][ T6599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.881370][ T5987] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 449.997782][T20352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.332768][ T5987] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 451.814377][T20352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.855062][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.855283][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.899883][ T6599] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.903334][ T6599] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.016776][ T6599] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.023361][T20352] team0: Port device team_slave_0 added [ 452.058153][ T6599] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.396173][ T9811] usb 6-1: USB disconnect, device number 2 [ 452.702494][T20352] team0: Port device team_slave_1 added [ 453.494174][T20352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.494191][T20352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.494227][T20352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.575125][T20352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.575141][T20352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.575166][T20352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.513337][T20352] hsr_slave_0: entered promiscuous mode [ 454.526428][T20352] hsr_slave_1: entered promiscuous mode [ 454.527432][T20352] debugfs: 'hsr0' already exists in 'hsr' [ 454.527455][T20352] Cannot create hsr debugfs directory [ 455.114846][ T5895] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 455.238101][ T295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.238122][ T295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.277269][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 455.281907][ T5895] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 455.281932][ T5895] usb 6-1: config 0 has no interface number 0 [ 455.332927][ T5895] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 455.332957][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.332976][ T5895] usb 6-1: Product: syz [ 455.332990][ T5895] usb 6-1: Manufacturer: syz [ 455.333004][ T5895] usb 6-1: SerialNumber: syz [ 455.381083][ T5895] usb 6-1: config 0 descriptor?? [ 455.408740][ T5895] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 455.408843][ T5895] usb 6-1: selecting invalid altsetting 1 [ 455.408859][ T5895] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 455.446302][ T5895] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 455.446748][ T5895] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 455.446845][ T5895] usb 6-1: media controller created [ 455.490570][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 456.013402][ T6595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.013423][ T6595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.592462][ T5895] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 456.592607][ T5895] zl10353_read_register: readreg error (reg=127, ret==-110) [ 456.634993][T20409] usb 6-1: dvb_usb_ce6230: I2C read not implemented [ 456.795271][ T5895] usb 6-1: USB disconnect, device number 3 [ 457.431607][T20352] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 457.979699][T20352] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 458.095765][T20352] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 458.185340][T20352] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 458.788092][T20240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.304194][T20352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.412400][T20352] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.473221][ T6595] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.492375][ T6595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.533892][ T6595] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.534136][ T6595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.805106][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 459.995077][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 460.010604][ T9] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 460.010631][ T9] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 460.010651][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 460.010707][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 460.010728][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 460.010751][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 460.010772][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 460.010795][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 460.010837][ T9] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 460.010859][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.080336][ T9] usb 7-1: config 0 descriptor?? [ 460.104657][T20240] veth0_vlan: entered promiscuous mode [ 460.167129][T20240] veth1_vlan: entered promiscuous mode [ 460.332101][T20240] veth0_macvtap: entered promiscuous mode [ 460.381524][T20240] veth1_macvtap: entered promiscuous mode [ 460.471840][T20240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.509516][T20240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.561940][ T6599] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.563847][ T6599] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.596474][T20352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.598178][ T6599] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.599185][ T6599] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.961123][ T9] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 461.036240][ T9] usb 7-1: USB disconnect, device number 2 [ 461.063774][ T9] usblp0: removed [ 462.552394][ T1220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.552416][ T1220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.958433][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 462.980451][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 463.016090][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 463.018152][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 463.019533][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 464.207482][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.207503][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.258279][T20468] hsr0 speed is unknown, defaulting to 1000 [ 464.410490][T20352] veth0_vlan: entered promiscuous mode [ 464.447130][T20352] veth1_vlan: entered promiscuous mode [ 464.573514][T20352] veth0_macvtap: entered promiscuous mode [ 464.624593][T20352] veth1_macvtap: entered promiscuous mode [ 464.744879][T20352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.822447][T20352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.883227][ T6599] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.883279][ T6599] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.883315][ T6599] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.883349][ T6599] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.146706][ T5801] Bluetooth: hci1: command tx timeout [ 465.241774][T20468] chnl_net:caif_netlink_parms(): no params data found [ 465.896770][T20497] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6902'. [ 466.931434][T20468] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.931557][T20468] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.931808][T20468] bridge_slave_0: entered allmulticast mode [ 466.964240][T20468] bridge_slave_0: entered promiscuous mode [ 466.975564][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.975583][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.000866][T20468] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.001059][T20468] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.001388][T20468] bridge_slave_1: entered allmulticast mode [ 467.084318][T20468] bridge_slave_1: entered promiscuous mode [ 467.236319][ T5806] Bluetooth: hci1: command tx timeout [ 467.611783][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6912'. [ 467.900358][T20522] vlan2: entered allmulticast mode [ 467.900389][T20522] team0: entered allmulticast mode [ 467.900402][T20522] team_slave_0: entered allmulticast mode [ 467.900418][T20522] team_slave_1: entered allmulticast mode [ 468.971108][T20468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.977361][T20468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.316982][ T5806] Bluetooth: hci1: command 0x040f tx timeout [ 469.421587][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.421608][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.482620][T20468] team0: Port device team_slave_0 added [ 469.495378][T20468] team0: Port device team_slave_1 added [ 469.661414][T20468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.661431][T20468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.661457][T20468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.665349][T20468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.665363][T20468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.665395][T20468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.765256][T20468] hsr_slave_0: entered promiscuous mode [ 470.782480][T20468] hsr_slave_1: entered promiscuous mode [ 470.785358][T20468] debugfs: 'hsr0' already exists in 'hsr' [ 470.785383][T20468] Cannot create hsr debugfs directory [ 470.786080][T20536] veth0_to_bridge: default FDB implementation only supports local addresses [ 471.393779][ T5801] Bluetooth: hci1: command 0x040f tx timeout [ 471.558840][T20468] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 471.834841][T20468] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 472.069502][T20468] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 472.402708][T20468] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 473.467664][ T5801] Bluetooth: hci1: command 0x040f tx timeout [ 473.971861][T20468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.082152][T20468] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.105991][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.106192][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.183110][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.184729][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.072340][T20468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.512601][T20468] veth0_vlan: entered promiscuous mode [ 475.531770][T20468] veth1_vlan: entered promiscuous mode [ 475.601348][T20468] veth0_macvtap: entered promiscuous mode [ 475.626045][T20468] veth1_macvtap: entered promiscuous mode [ 475.675469][T20468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.708905][T20468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.766345][T20490] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.778899][T20490] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.779878][T20490] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.779920][T20490] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.008258][T20601] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.6939'. [ 477.010468][T20602] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.6939'. [ 477.417653][T20606] bridge_slave_1: default FDB implementation only supports local addresses [ 478.140221][T20612] tipc: Invalid UDP bearer configuration [ 478.140267][T20612] tipc: Enabling of bearer rejected, failed to enable media [ 478.140497][ T6599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.140514][ T6599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.366258][ T36] audit: type=1326 audit(1772499833.555:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20618 comm=1F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488f72c799 code=0x7ffc0000 [ 478.366516][ T36] audit: type=1326 audit(1772499833.555:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20618 comm=1F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488f72c799 code=0x7ffc0000 [ 478.366811][ T36] audit: type=1326 audit(1772499833.555:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20618 comm="syz.8.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488f72c799 code=0x7ffc0000 [ 478.499274][ T36] audit: type=1326 audit(1772499833.695:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20618 comm="syz.8.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488f72c799 code=0x7ffc0000 [ 478.499322][ T36] audit: type=1326 audit(1772499833.695:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20618 comm=1F exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f488f72c799 code=0x7ffc0000 [ 478.499358][ T36] audit: type=1326 audit(1772499833.695:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20618 comm=1F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488f72c799 code=0x7ffc0000 [ 478.499398][ T36] audit: type=1326 audit(1772499833.695:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20618 comm=1F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488f72c799 code=0x7ffc0000 [ 478.499436][ T36] audit: type=1326 audit(1772499833.695:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20618 comm="syz.8.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488f72c799 code=0x7ffc0000 [ 478.499473][ T36] audit: type=1326 audit(1772499833.695:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20618 comm="syz.8.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f488f72c799 code=0x7ffc0000 [ 478.507328][ T36] audit: type=1326 audit(1772499833.695:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20618 comm="syz.8.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f488f72c799 code=0x7ffc0000 [ 479.028046][ T993] libceph: connect (1)[c::]:6789 error -101 [ 479.028759][ T993] libceph: mon0 (1)[c::]:6789 connect error [ 479.101292][ T993] libceph: connect (1)[c::]:6789 error -101 [ 479.101489][ T993] libceph: mon0 (1)[c::]:6789 connect error [ 479.129005][ T1220] tipc: Subscription rejected, illegal request [ 479.377937][ T993] libceph: connect (1)[c::]:6789 error -101 [ 479.378139][ T993] libceph: mon0 (1)[c::]:6789 connect error [ 479.576980][T20622] ceph: No mds server is up or the cluster is laggy [ 479.899082][ T993] libceph: connect (1)[c::]:6789 error -101 [ 479.899280][ T993] libceph: mon0 (1)[c::]:6789 connect error [ 480.343650][ T295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.343678][ T295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.630555][ T5987] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 481.839361][ T5987] usb 7-1: Using ep0 maxpacket: 32 [ 481.842039][ T5987] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 481.842072][ T5987] usb 7-1: config 0 interface 0 has no altsetting 0 [ 481.842105][ T5987] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 481.842127][ T5987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.907637][ T5987] usb 7-1: config 0 descriptor?? [ 482.408100][ T5987] corsair-cpro 0003:1B1C:0C10.000A: unknown main item tag 0x0 [ 482.408137][ T5987] corsair-cpro 0003:1B1C:0C10.000A: unknown main item tag 0x0 [ 482.408164][ T5987] corsair-cpro 0003:1B1C:0C10.000A: unknown main item tag 0x0 [ 482.408190][ T5987] corsair-cpro 0003:1B1C:0C10.000A: unknown main item tag 0x0 [ 482.408216][ T5987] corsair-cpro 0003:1B1C:0C10.000A: unknown main item tag 0x0 [ 482.483989][ T5987] corsair-cpro 0003:1B1C:0C10.000A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.6-1/input0 [ 482.741520][ T5987] corsair-cpro 0003:1B1C:0C10.000A: probe with driver corsair-cpro failed with error -71 [ 482.814499][ T5987] usb 7-1: USB disconnect, device number 3 [ 483.134068][T20656] fido_id[20656]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 484.325282][T20673] netlink: 'syz.9.6970': attribute type 11 has an invalid length. [ 484.820290][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 484.845584][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 484.857208][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 484.895476][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 484.896426][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.989594][ T5801] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 485.133776][T20664] hsr0 speed is unknown, defaulting to 1000 [ 485.148012][ T5801] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 485.153590][ T5801] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 485.154829][ T5801] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 485.155594][ T5801] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 485.598342][T20680] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6972'. [ 485.980195][T20680] veth0_macvtap: left promiscuous mode [ 486.101537][T20687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6974'. [ 486.988363][ T5801] Bluetooth: hci4: command tx timeout [ 487.325365][ T5801] Bluetooth: hci7: command tx timeout [ 487.524419][T20675] hsr0 speed is unknown, defaulting to 1000 [ 487.692372][T20689] netlink: 136 bytes leftover after parsing attributes in process `syz.8.6975'. [ 488.228558][ T993] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 488.385520][ T993] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 488.385550][ T993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.385569][ T993] usb 9-1: Product: syz [ 488.385584][ T993] usb 9-1: Manufacturer: syz [ 488.385598][ T993] usb 9-1: SerialNumber: syz [ 488.440026][ T993] usb 9-1: config 0 descriptor?? [ 488.446362][ T993] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 488.474257][ T993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 488.475394][ T993] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 488.475455][ T993] usb 9-1: media controller created [ 488.540583][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.654233][T20703] dvb-usb: bulk message failed: -22 (7/0) [ 488.666898][ T993] DVB: Unable to find symbol mt352_attach() [ 488.743477][ T993] DVB: Unable to find symbol nxt6000_attach() [ 488.743493][ T993] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 488.764011][ T993] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input38 [ 488.767569][ T993] dvb-usb: schedule remote query interval to 1000 msecs. [ 488.767590][ T993] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 488.767605][ T993] dvb-usb: bulk message failed: -22 (7/0) [ 488.767621][ T993] dvb-usb: bulk message failed: -22 (7/0) [ 488.818940][ T993] usb 9-1: USB disconnect, device number 2 [ 489.078573][ T5801] Bluetooth: hci4: command tx timeout [ 489.099401][ T993] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 489.398781][ T5801] Bluetooth: hci7: command tx timeout [ 490.494899][T20346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.161898][ T5801] Bluetooth: hci4: command tx timeout [ 491.478893][ T5801] Bluetooth: hci7: command tx timeout [ 493.214382][T20736] kthread_run failed with err -4 [ 493.230309][ T5801] Bluetooth: hci4: command tx timeout [ 493.559067][ T5801] Bluetooth: hci7: command tx timeout [ 493.825873][ T993] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 493.898878][ T993] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 494.040923][T20748] fido_id[20748]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 494.057665][T20664] chnl_net:caif_netlink_parms(): no params data found [ 494.246285][T20750] sp0: Synchronizing with TNC [ 495.284954][T20675] chnl_net:caif_netlink_parms(): no params data found [ 495.599326][T20664] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.599444][T20664] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.600022][T20664] bridge_slave_0: entered allmulticast mode [ 495.602688][T20664] bridge_slave_0: entered promiscuous mode [ 495.678490][T20664] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.678611][T20664] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.678878][T20664] bridge_slave_1: entered allmulticast mode [ 495.725302][T20664] bridge_slave_1: entered promiscuous mode [ 495.895711][T20664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.940068][T20664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.070817][T20664] team0: Port device team_slave_0 added [ 496.074555][T20664] team0: Port device team_slave_1 added [ 497.659696][T20664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.659713][T20664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.659739][T20664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.779831][T20664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.779848][T20664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.779874][T20664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.268691][T20675] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.268882][T20675] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.269108][T20675] bridge_slave_0: entered allmulticast mode [ 498.292614][T20675] bridge_slave_0: entered promiscuous mode [ 498.327055][T20675] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.327181][T20675] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.327398][T20675] bridge_slave_1: entered allmulticast mode [ 498.350904][T20675] bridge_slave_1: entered promiscuous mode [ 498.524488][T20664] hsr_slave_0: entered promiscuous mode [ 498.550694][T20664] hsr_slave_1: entered promiscuous mode [ 498.551706][T20664] debugfs: 'hsr0' already exists in 'hsr' [ 498.551731][T20664] Cannot create hsr debugfs directory [ 498.638018][T20675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.681572][T20675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.030051][T20675] team0: Port device team_slave_0 added [ 500.055449][T20675] team0: Port device team_slave_1 added [ 500.176994][T20675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.177012][T20675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.177038][T20675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.198116][T20675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.198135][T20675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.198163][T20675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.377693][T20675] hsr_slave_0: entered promiscuous mode [ 500.379135][T20675] hsr_slave_1: entered promiscuous mode [ 500.400502][T20675] debugfs: 'hsr0' already exists in 'hsr' [ 500.400529][T20675] Cannot create hsr debugfs directory [ 501.112442][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 501.134926][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 501.136303][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 501.139107][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 501.166957][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 502.547732][T20664] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 503.230392][ T5806] Bluetooth: hci3: command tx timeout [ 504.253940][T20794] hsr0 speed is unknown, defaulting to 1000 [ 504.589712][T20794] chnl_net:caif_netlink_parms(): no params data found [ 504.764709][T20794] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.764907][T20794] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.765128][T20794] bridge_slave_0: entered allmulticast mode [ 504.767890][T20794] bridge_slave_0: entered promiscuous mode [ 504.817654][T20794] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.817851][T20794] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.818092][T20794] bridge_slave_1: entered allmulticast mode [ 504.841859][T20794] bridge_slave_1: entered promiscuous mode [ 504.903351][T20794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.907817][T20794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.967391][T20794] team0: Port device team_slave_0 added [ 504.984639][T20794] team0: Port device team_slave_1 added [ 505.030636][T20794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.030652][T20794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.030678][T20794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.032914][T20794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.032927][T20794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.032952][T20794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.203982][T20794] hsr_slave_0: entered promiscuous mode [ 505.205485][T20794] hsr_slave_1: entered promiscuous mode [ 505.206500][T20794] debugfs: 'hsr0' already exists in 'hsr' [ 505.206524][T20794] Cannot create hsr debugfs directory [ 505.310833][ T5806] Bluetooth: hci3: command tx timeout [ 507.390772][ T5806] Bluetooth: hci3: command tx timeout [ 509.471138][ T5806] Bluetooth: hci3: command tx timeout [ 509.618751][ T5801] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 509.648576][ T5801] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 509.668411][ T5801] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 509.670365][ T5801] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 509.681550][ T5801] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 510.675383][T20806] hsr0 speed is unknown, defaulting to 1000 [ 511.016384][T20806] chnl_net:caif_netlink_parms(): no params data found [ 511.236348][T20806] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.236559][T20806] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.237097][T20806] bridge_slave_0: entered allmulticast mode [ 511.239871][T20806] bridge_slave_0: entered promiscuous mode [ 511.274488][T20806] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.274693][T20806] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.274940][T20806] bridge_slave_1: entered allmulticast mode [ 511.277639][T20806] bridge_slave_1: entered promiscuous mode [ 511.386543][T20806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.418564][T20806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.482520][T20806] team0: Port device team_slave_0 added [ 511.486815][T20806] team0: Port device team_slave_1 added [ 511.574829][T20806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.574847][T20806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.574873][T20806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.577227][T20806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.577241][T20806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.577266][T20806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.791076][ T5801] Bluetooth: hci8: command tx timeout [ 513.143076][T20806] hsr_slave_0: entered promiscuous mode [ 513.144598][T20806] hsr_slave_1: entered promiscuous mode [ 513.145618][T20806] debugfs: 'hsr0' already exists in 'hsr' [ 513.145641][T20806] Cannot create hsr debugfs directory [ 513.248263][ T5806] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 513.292782][ T5806] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 513.296793][ T5806] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 513.297926][ T5806] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 513.298982][ T5806] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 513.487663][T20818] hsr0 speed is unknown, defaulting to 1000 [ 513.871287][ T5801] Bluetooth: hci8: command tx timeout [ 513.985084][T20818] chnl_net:caif_netlink_parms(): no params data found [ 514.589018][T20818] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.589221][T20818] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.589451][T20818] bridge_slave_0: entered allmulticast mode [ 514.628188][T20818] bridge_slave_0: entered promiscuous mode [ 514.639409][T20818] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.639608][T20818] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.639901][T20818] bridge_slave_1: entered allmulticast mode [ 514.663692][T20818] bridge_slave_1: entered promiscuous mode [ 514.959355][T20818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.974149][T20818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.032554][T20818] team0: Port device team_slave_0 added [ 515.037559][T20818] team0: Port device team_slave_1 added [ 515.124793][T20818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.124804][T20818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.124821][T20818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.126173][T20818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.126181][T20818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.126195][T20818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.391627][ T5801] Bluetooth: hci9: command tx timeout [ 515.848378][T20818] hsr_slave_0: entered promiscuous mode [ 515.849872][T20818] hsr_slave_1: entered promiscuous mode [ 515.850869][T20818] debugfs: 'hsr0' already exists in 'hsr' [ 515.850892][T20818] Cannot create hsr debugfs directory [ 515.961734][ T5801] Bluetooth: hci8: command tx timeout [ 517.475111][ T5801] Bluetooth: hci9: command tx timeout [ 518.033261][ T5806] Bluetooth: hci8: command tx timeout [ 519.591963][ T5806] Bluetooth: hci9: command tx timeout [ 521.632466][ T5806] Bluetooth: hci9: command tx timeout [ 539.314524][T20827] Bluetooth: hci6: command 0x0406 tx timeout [ 542.673844][T20827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 542.686737][T20827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 542.701466][T20827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 542.734439][T20827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 542.735311][T20827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 542.897004][T20830] hsr0 speed is unknown, defaulting to 1000 [ 543.184884][T20830] chnl_net:caif_netlink_parms(): no params data found [ 543.419619][T20830] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.419820][T20830] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.420134][T20830] bridge_slave_0: entered allmulticast mode [ 543.422908][T20830] bridge_slave_0: entered promiscuous mode [ 543.437256][T20830] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.437375][T20830] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.437622][T20830] bridge_slave_1: entered allmulticast mode [ 543.440146][T20830] bridge_slave_1: entered promiscuous mode [ 543.551622][T20830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.595604][T20830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.709226][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.713739][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.740752][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 543.757873][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 543.759418][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.810744][T20830] team0: Port device team_slave_0 added [ 543.856537][T20830] team0: Port device team_slave_1 added [ 543.956814][T20830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.956832][T20830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.956857][T20830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.961345][T20830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.961361][T20830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.961387][T20830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.094134][T20840] hsr0 speed is unknown, defaulting to 1000 [ 544.754707][ T5806] Bluetooth: hci1: command tx timeout [ 545.794823][ T5806] Bluetooth: hci2: command tx timeout [ 546.120256][T20830] hsr_slave_0: entered promiscuous mode [ 546.121835][T20830] hsr_slave_1: entered promiscuous mode [ 546.122889][T20830] debugfs: 'hsr0' already exists in 'hsr' [ 546.122913][T20830] Cannot create hsr debugfs directory [ 546.472664][T20840] chnl_net:caif_netlink_parms(): no params data found [ 546.651382][T20840] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.651587][T20840] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.651821][T20840] bridge_slave_0: entered allmulticast mode [ 546.654534][T20840] bridge_slave_0: entered promiscuous mode [ 546.717030][T20840] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.717212][T20840] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.717480][T20840] bridge_slave_1: entered allmulticast mode [ 546.723594][T20840] bridge_slave_1: entered promiscuous mode [ 546.823834][T20840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.834831][ T5806] Bluetooth: hci1: command tx timeout [ 546.855551][T20840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.953435][T20840] team0: Port device team_slave_0 added [ 546.963716][T20840] team0: Port device team_slave_1 added [ 547.030631][T20840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.030649][T20840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.030674][T20840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.033017][T20840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.033031][T20840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.033057][T20840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.874869][ T5806] Bluetooth: hci2: command tx timeout [ 548.723570][T20840] hsr_slave_0: entered promiscuous mode [ 548.731680][T20840] hsr_slave_1: entered promiscuous mode [ 548.732774][T20840] debugfs: 'hsr0' already exists in 'hsr' [ 548.732799][T20840] Cannot create hsr debugfs directory [ 548.914991][ T5806] Bluetooth: hci1: command tx timeout [ 549.955097][ T5806] Bluetooth: hci2: command tx timeout [ 550.995224][ T5806] Bluetooth: hci1: command tx timeout [ 552.065335][ T5806] Bluetooth: hci2: command tx timeout [ 556.327752][T20664] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 557.908119][T20346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.347687][T20827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 561.388309][T20827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 561.402588][T20827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 561.622946][T20827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 561.623776][T20827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 563.716705][T20827] Bluetooth: hci0: command tx timeout [ 564.114023][T20857] hsr0 speed is unknown, defaulting to 1000 [ 564.392517][T20857] chnl_net:caif_netlink_parms(): no params data found [ 564.538320][T20857] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.538582][T20857] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.538810][T20857] bridge_slave_0: entered allmulticast mode [ 564.541453][T20857] bridge_slave_0: entered promiscuous mode [ 564.579972][T20857] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.583891][T20857] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.584222][T20857] bridge_slave_1: entered allmulticast mode [ 564.608327][T20857] bridge_slave_1: entered promiscuous mode [ 564.670703][T20857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.675088][T20857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.738612][T20857] team0: Port device team_slave_0 added [ 564.758628][T20857] team0: Port device team_slave_1 added [ 564.809325][T20857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.809341][T20857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.809368][T20857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.811675][T20857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.811688][T20857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.811713][T20857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.977982][T20857] hsr_slave_0: entered promiscuous mode [ 564.984868][T20857] hsr_slave_1: entered promiscuous mode [ 564.985989][T20857] debugfs: 'hsr0' already exists in 'hsr' [ 564.986012][T20857] Cannot create hsr debugfs directory [ 565.797163][T20827] Bluetooth: hci0: command tx timeout [ 567.877205][T20827] Bluetooth: hci0: command tx timeout [ 569.957501][T20827] Bluetooth: hci0: command tx timeout [ 570.253763][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 570.281403][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 570.294997][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 570.296661][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 570.307942][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 570.475738][T20869] hsr0 speed is unknown, defaulting to 1000 [ 571.256471][T20869] chnl_net:caif_netlink_parms(): no params data found [ 571.794490][T20869] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.794702][T20869] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.794949][T20869] bridge_slave_0: entered allmulticast mode [ 571.828415][T20869] bridge_slave_0: entered promiscuous mode [ 571.834236][T20869] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.834449][T20869] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.834710][T20869] bridge_slave_1: entered allmulticast mode [ 571.877683][T20869] bridge_slave_1: entered promiscuous mode [ 571.947828][T20869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.952453][T20869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.014840][T20869] team0: Port device team_slave_0 added [ 572.026288][T20869] team0: Port device team_slave_1 added [ 572.123818][T20869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.123834][T20869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.123860][T20869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.126459][T20869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.126472][T20869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.126497][T20869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.357688][ T5806] Bluetooth: hci5: command tx timeout [ 573.604079][T20869] hsr_slave_0: entered promiscuous mode [ 573.614536][T20869] hsr_slave_1: entered promiscuous mode [ 573.624204][T20869] debugfs: 'hsr0' already exists in 'hsr' [ 573.624231][T20869] Cannot create hsr debugfs directory [ 573.932148][T20827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 573.961731][T20827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 573.963310][T20827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 573.964555][T20827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 573.965382][T20827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 574.286911][T20879] hsr0 speed is unknown, defaulting to 1000 [ 574.437904][T20827] Bluetooth: hci5: command tx timeout [ 575.971411][T20879] chnl_net:caif_netlink_parms(): no params data found [ 576.128255][T20827] Bluetooth: hci6: command tx timeout [ 576.189298][T20879] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.189496][T20879] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.190102][T20879] bridge_slave_0: entered allmulticast mode [ 576.192873][T20879] bridge_slave_0: entered promiscuous mode [ 576.236108][T20879] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.236346][T20879] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.236697][T20879] bridge_slave_1: entered allmulticast mode [ 576.263985][T20879] bridge_slave_1: entered promiscuous mode [ 576.456707][T20879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.478222][T20879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.519456][T20827] Bluetooth: hci5: command tx timeout [ 576.561309][T20879] team0: Port device team_slave_0 added [ 576.583132][T20879] team0: Port device team_slave_1 added [ 576.658485][T20879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.658501][T20879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.658526][T20879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.661015][T20879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.661028][T20879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.661054][T20879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.863230][T20879] hsr_slave_0: entered promiscuous mode [ 576.864844][T20879] hsr_slave_1: entered promiscuous mode [ 576.866011][T20879] debugfs: 'hsr0' already exists in 'hsr' [ 576.866036][T20879] Cannot create hsr debugfs directory [ 578.218226][ T5806] Bluetooth: hci6: command tx timeout [ 578.598751][T20827] Bluetooth: hci5: command tx timeout [ 580.278543][T20827] Bluetooth: hci6: command tx timeout [ 582.358635][T20827] Bluetooth: hci6: command tx timeout [ 603.801380][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 604.529602][ T5806] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 604.555016][ T5806] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 604.557891][ T5806] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 604.599593][ T5806] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 604.620735][ T5806] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 604.796461][T20892] hsr0 speed is unknown, defaulting to 1000 [ 605.157366][T20892] chnl_net:caif_netlink_parms(): no params data found [ 605.376036][T20892] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.376262][T20892] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.376525][T20892] bridge_slave_0: entered allmulticast mode [ 605.379229][T20892] bridge_slave_0: entered promiscuous mode [ 605.415733][T20892] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.415934][T20892] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.416556][T20892] bridge_slave_1: entered allmulticast mode [ 605.419382][T20892] bridge_slave_1: entered promiscuous mode [ 605.593703][T20892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.598837][T20892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.784244][T20892] team0: Port device team_slave_0 added [ 605.788884][T20892] team0: Port device team_slave_1 added [ 605.883539][ T5806] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 605.920826][ T5806] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 605.940647][ T5806] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 605.950036][ T5806] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 605.967170][ T5806] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 606.761925][ T5806] Bluetooth: hci10: command tx timeout [ 607.997792][T20892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.997809][T20892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.997834][T20892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.048417][ T5806] Bluetooth: hci11: command tx timeout [ 608.072461][T20892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.072478][T20892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.072504][T20892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.307600][T20902] hsr0 speed is unknown, defaulting to 1000 [ 608.375081][T20892] hsr_slave_0: entered promiscuous mode [ 608.376638][T20892] hsr_slave_1: entered promiscuous mode [ 608.377657][T20892] debugfs: 'hsr0' already exists in 'hsr' [ 608.377681][T20892] Cannot create hsr debugfs directory [ 608.852238][ T5806] Bluetooth: hci10: command tx timeout [ 608.986407][T20902] chnl_net:caif_netlink_parms(): no params data found [ 609.841797][T20902] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.841947][T20902] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.842207][T20902] bridge_slave_0: entered allmulticast mode [ 609.844327][T20902] bridge_slave_0: entered promiscuous mode [ 609.881777][T20902] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.881928][T20902] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.882295][T20902] bridge_slave_1: entered allmulticast mode [ 609.885122][T20902] bridge_slave_1: entered promiscuous mode [ 610.004328][T20902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.009021][T20902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.085599][T20902] team0: Port device team_slave_0 added [ 610.097435][T20902] team0: Port device team_slave_1 added [ 610.122419][ T5801] Bluetooth: hci11: command tx timeout [ 610.930229][ T5801] Bluetooth: hci10: command tx timeout [ 611.050011][T20902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.050029][T20902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.050055][T20902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.124392][T20902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.124409][T20902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.124436][T20902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.171789][ T5801] Bluetooth: hci7: command 0x0406 tx timeout [ 611.171830][ T5801] Bluetooth: hci4: command 0x0406 tx timeout [ 611.309831][T20902] hsr_slave_0: entered promiscuous mode [ 611.311216][T20902] hsr_slave_1: entered promiscuous mode [ 611.324257][T20902] debugfs: 'hsr0' already exists in 'hsr' [ 611.324283][T20902] Cannot create hsr debugfs directory [ 612.212388][T20827] Bluetooth: hci11: command tx timeout [ 612.772787][T20680] syz.9.6972 (20680) used greatest stack depth: 17152 bytes left [ 612.773250][T20240] syz-executor (20240) used greatest stack depth: 16768 bytes left [ 612.773400][T20468] syz-executor (20468) used greatest stack depth: 16576 bytes left [ 613.003060][T20827] Bluetooth: hci10: command tx timeout [ 614.282752][T20827] Bluetooth: hci11: command tx timeout [ 622.013564][ T5806] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 622.019861][ T5806] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 622.021177][ T5806] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 622.022197][ T5806] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 622.053688][ T5806] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 622.172871][T20914] hsr0 speed is unknown, defaulting to 1000 [ 622.535404][T20914] chnl_net:caif_netlink_parms(): no params data found [ 622.730431][T20914] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.730646][T20914] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.731135][T20914] bridge_slave_0: entered allmulticast mode [ 622.769331][T20914] bridge_slave_0: entered promiscuous mode [ 622.779943][T20914] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.780153][T20914] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.780521][T20914] bridge_slave_1: entered allmulticast mode [ 622.808168][T20914] bridge_slave_1: entered promiscuous mode [ 622.899509][T20914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.915311][T20914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.995575][T20914] team0: Port device team_slave_0 added [ 622.999879][T20914] team0: Port device team_slave_1 added [ 623.094208][T20914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.094226][T20914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.094252][T20914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.101133][T20914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.101151][T20914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.101176][T20914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.123419][T20827] Bluetooth: hci12: command tx timeout [ 626.035994][T20914] hsr_slave_0: entered promiscuous mode [ 626.037721][T20914] hsr_slave_1: entered promiscuous mode [ 626.038846][T20914] debugfs: 'hsr0' already exists in 'hsr' [ 626.038869][T20914] Cannot create hsr debugfs directory [ 626.203855][T20827] Bluetooth: hci12: command tx timeout [ 626.363625][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 628.284040][ T5806] Bluetooth: hci12: command tx timeout [ 630.364226][ T5806] Bluetooth: hci12: command tx timeout [ 630.790057][ T5797] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 630.829909][ T5797] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 630.832996][ T5797] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 630.859067][ T5797] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 630.859968][ T5797] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 631.040418][T20931] hsr0 speed is unknown, defaulting to 1000 [ 631.393669][T20931] chnl_net:caif_netlink_parms(): no params data found [ 631.580140][T20931] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.580338][T20931] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.580613][T20931] bridge_slave_0: entered allmulticast mode [ 631.583519][T20931] bridge_slave_0: entered promiscuous mode [ 631.619050][T20931] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.619260][T20931] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.619613][T20931] bridge_slave_1: entered allmulticast mode [ 631.622445][T20931] bridge_slave_1: entered promiscuous mode [ 631.723296][T20931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.754714][T20931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.811854][T20931] team0: Port device team_slave_0 added [ 631.822638][T20931] team0: Port device team_slave_1 added [ 631.917645][T20931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.917662][T20931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.917688][T20931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.920159][T20931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.920173][T20931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.920199][T20931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.120811][T20931] hsr_slave_0: entered promiscuous mode [ 632.122548][T20931] hsr_slave_1: entered promiscuous mode [ 632.123667][T20931] debugfs: 'hsr0' already exists in 'hsr' [ 632.123690][T20931] Cannot create hsr debugfs directory [ 633.004123][ T5797] Bluetooth: hci13: command tx timeout [ 634.271741][ T5806] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 634.296285][ T5806] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 634.297699][ T5806] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 634.298779][ T5806] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 634.299518][ T5806] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 635.085635][ T5806] Bluetooth: hci13: command tx timeout [ 635.889078][T20940] hsr0 speed is unknown, defaulting to 1000 [ 636.315375][T20940] chnl_net:caif_netlink_parms(): no params data found [ 636.365104][ T5806] Bluetooth: hci14: command tx timeout [ 636.590757][T20940] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.590963][T20940] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.591259][T20940] bridge_slave_0: entered allmulticast mode [ 636.594087][T20940] bridge_slave_0: entered promiscuous mode [ 636.604935][ T5806] Bluetooth: hci8: command 0x0406 tx timeout [ 636.605990][ T5806] Bluetooth: hci9: command 0x0406 tx timeout [ 636.668916][T20940] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.669042][T20940] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.669386][T20940] bridge_slave_1: entered allmulticast mode [ 636.672405][T20940] bridge_slave_1: entered promiscuous mode [ 636.812006][T20940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.827936][T20940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.165200][ T5801] Bluetooth: hci13: command tx timeout [ 638.086565][T20940] team0: Port device team_slave_0 added [ 638.090795][T20940] team0: Port device team_slave_1 added [ 638.171915][T20940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.171933][T20940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.171959][T20940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.223075][T20940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.223094][T20940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.223121][T20940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.400111][T20940] hsr_slave_0: entered promiscuous mode [ 638.401812][T20940] hsr_slave_1: entered promiscuous mode [ 638.402943][T20940] debugfs: 'hsr0' already exists in 'hsr' [ 638.402965][T20940] Cannot create hsr debugfs directory [ 638.448453][ T5797] Bluetooth: hci14: command tx timeout [ 639.245684][ T5797] Bluetooth: hci13: command tx timeout [ 640.524942][ T5797] Bluetooth: hci14: command tx timeout [ 642.605086][ T5797] Bluetooth: hci14: command tx timeout [ 661.408071][ T37] INFO: task syz-executor:20675 blocked for more than 143 seconds. [ 661.408098][ T37] Tainted: G L syzkaller #0 [ 661.408109][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.408119][ T37] task:syz-executor state:D stack:18480 pid:20675 tgid:20675 ppid:1 task_flags:0x400140 flags:0x00080002 [ 661.408183][ T37] Call Trace: [ 661.408194][ T37] [ 661.408208][ T37] __schedule+0x1553/0x5240 [ 661.408387][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.408444][ T37] ? rt_mutex_adjust_prio_chain+0x21fd/0x23f0 [ 661.408467][ T37] ? __pfx___schedule+0x10/0x10 [ 661.408503][ T37] rt_mutex_schedule+0x76/0xf0 [ 661.408567][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 661.408599][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 661.408622][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 661.408645][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 661.408666][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 661.408712][ T37] ? del_device_store+0xd7/0x370 [ 661.408819][ T37] ? del_device_store+0xd7/0x370 [ 661.408839][ T37] mutex_lock_nested+0x168/0x1d0 [ 661.408865][ T37] del_device_store+0xd7/0x370 [ 661.408887][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 661.408997][ T37] ? __pfx_del_device_store+0x10/0x10 [ 661.409020][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 661.409047][ T37] ? sysfs_kf_write+0x166/0x260 [ 661.409068][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 661.409085][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 661.409117][ T37] vfs_write+0x629/0xba0 [ 661.409210][ T37] ? __pfx_vfs_write+0x10/0x10 [ 661.409237][ T37] ? kmem_cache_free+0x185/0x6b0 [ 661.409321][ T37] ? do_sys_openat2+0x14c/0x200 [ 661.409356][ T37] ksys_write+0x156/0x270 [ 661.409384][ T37] ? __pfx_ksys_write+0x10/0x10 [ 661.409419][ T37] do_syscall_64+0x14d/0xf80 [ 661.409504][ T37] ? trace_irq_disable+0x3b/0x150 [ 661.409542][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.409584][ T37] ? clear_bhb_loop+0x40/0x90 [ 661.409607][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.409626][ T37] RIP: 0033:0x7f26c9d3cfce [ 661.409643][ T37] RSP: 002b:00007fffb322fe08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 661.409664][ T37] RAX: ffffffffffffffda RBX: 0000555582154500 RCX: 00007f26c9d3cfce SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 661.409685][ T37] RDX: 0000000000000001 RSI: 00007fffb322fe90 RDI: 0000000000000005 [ 661.409697][ T37] RBP: 00007f26c9e1345c R08: 0000000000000000 R09: 0000000000000000 [ 661.409709][ T37] R10: 0000000000000000 R11: 00000000000002[ 661.409709][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.409720][ T37] R13: 00007fffb322fe90 R14: 00007f26cab24620 R15: 0000000000000003 [ 661.409750][ T37] [ 661.409766][ T37] INFO: task syz-executor:20794 blocked for more than 143 seconds. [ 661.409782][ T37] Tainted: G L syzkaller #0 [ 661.409793][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.409802][ T37] task:syz-executor state:D stack:22848 pid:20794 tgid:20794 ppid:1 task_flags:0x400140 flags:0x00080002 [ 661.409852][ T37] Call Trace: [ 661.409859][ T37] [ 661.409870][ T37] __schedule+0x1553/0x5240 [ 661.409897][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 661.409934][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.409963][ T37] ? rt_mutex_adjust_prio_chain+0x21fd/0x23f0 [ 661.409985][ T37] ? __pfx___schedule+0x10/0x10 [ 661.410023][ T37] rt_mutex_schedule+0x76/0xf0 [ 661.410045][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 661.410083][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 661.410105][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 661.410126][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 661.410164][ T37] ? del_device_store+0xd7/0x370 [ 661.410192][ T37] ? del_device_store+0xd7/0x370 [ 661.410212][ T37] mutex_lock_nested+0x168/0x1d0 [ 661.410237][ T37] del_device_store+0xd7/0x370 [ 661.410258][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 661.410286][ T37] ? __pfx_del_device_store+0x10/0x10 [ 661.410309][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 661.410336][ T37] ? sysfs_kf_write+0x166/0x260 [ 661.410358][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 661.410376][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 661.410409][ T37] vfs_write+0x629/0xba0 [ 661.410441][ T37] ? __pfx_vfs_write+0x10/0x10 [ 661.410469][ T37] ? kmem_cache_free+0x185/0x6b0 [ 661.410493][ T37] ? do_sys_openat2+0x14c/0x200 [ 661.410528][ T37] ksys_write+0x156/0x270 [ 661.410556][ T37] ? __pfx_ksys_write+0x10/0x10 [ 661.410591][ T37] do_syscall_64+0x14d/0xf80 [ 661.410614][ T37] ? trace_irq_disable+0x3b/0x150 [ 661.410633][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.410652][ T37] ? clear_bhb_loop+0x40/0x90 [ 661.410682][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.410701][ T37] RIP: 0033:0x7fab91bccfce [ 661.410718][ T37] RSP: 002b:00007ffe65174f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 661.410736][ T37] RAX: ffffffffffffffda RBX: 000055557549b500 RCX: 00007fab91bccfce [ 661.410750][ T37] RDX: 0000000000000001 RSI: 00007ffe65174ff0 RDI: 0000000000000005 [ 661.410762][ T37] RBP: 00007fab91ca345c R08: 0000000000000000 R09: 0000000000000000 [ 661.410775][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.410787][ T37] R13: 00007ffe65174ff0 R14: 00007fab929b4620 R15: 0000000000000003 [ 661.410817][ T37] [ 661.410828][ T37] INFO: task syz-executor:20806 blocked for more than 143 seconds. [ 661.410844][ T37] Tainted: G L syzkaller #0 [ 661.410854][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.410863][ T37] task:syz-executor state:D stack:22504 pid:20806 tgid:20806 ppid:1 task_flags:0x400140 flags:0x00080002 [ 661.410912][ T37] Call Trace: [ 661.410918][ T37] [ 661.410929][ T37] __schedule+0x1553/0x5240 [ 661.410957][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 661.410985][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.411013][ T37] ? rt_mutex_adjust_prio_chain+0x21fd/0x23f0 [ 661.411035][ T37] ? __pfx___schedule+0x10/0x10 [ 661.411072][ T37] rt_mutex_schedule+0x76/0xf0 [ 661.411094][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 661.411133][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 661.411155][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 661.411176][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 661.411214][ T37] ? del_device_store+0xd7/0x370 [ 661.411243][ T37] ? del_device_store+0xd7/0x370 [ 661.411264][ T37] mutex_lock_nested+0x168/0x1d0 [ 661.411288][ T37] del_device_store+0xd7/0x370 [ 661.411309][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 661.411336][ T37] ? __pfx_del_device_store+0x10/0x10 [ 661.411358][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 661.411385][ T37] ? sysfs_kf_write+0x166/0x260 [ 661.411408][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 661.411425][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 661.411457][ T37] vfs_write+0x629/0xba0 [ 661.411490][ T37] ? __pfx_vfs_write+0x10/0x10 [ 661.411517][ T37] ? kmem_cache_free+0x185/0x6b0 [ 661.411541][ T37] ? do_sys_openat2+0x14c/0x200 [ 661.411577][ T37] ksys_write+0x156/0x270 [ 661.411604][ T37] ? __pfx_ksys_write+0x10/0x10 [ 661.411640][ T37] do_syscall_64+0x14d/0xf80 [ 661.411662][ T37] ? trace_irq_disable+0x3b/0x150 [ 661.411688][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.411707][ T37] ? clear_bhb_loop+0x40/0x90 [ 661.411729][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.411748][ T37] RIP: 0033:0x7f9c513ecfce [ 661.411765][ T37] RSP: 002b:00007fffd562d828 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 661.411784][ T37] RAX: ffffffffffffffda RBX: 000055558189d500 RCX: 00007f9c513ecfce [ 661.411798][ T37] RDX: 0000000000000001 RSI: 00007fffd562d8b0 RDI: 0000000000000005 [ 661.411810][ T37] RBP: 00007f9c514c345c R08: 0000000000000000 R09: 0000000000000000 [ 661.411822][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.411834][ T37] R13: 00007fffd562d8b0 R14: 00007f9c521d4620 R15: 0000000000000003 [ 661.411864][ T37] [ 661.411874][ T37] INFO: task syz-executor:20818 blocked for more than 143 seconds. [ 661.411889][ T37] Tainted: G L syzkaller #0 [ 661.411898][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.411907][ T37] task:syz-executor state:D stack:19360 pid:20818 tgid:20818 ppid:1 task_flags:0x400140 flags:0x00080002 [ 661.411954][ T37] Call Trace: [ 661.411960][ T37] [ 661.411972][ T37] __schedule+0x1553/0x5240 [ 661.411999][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 661.412028][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.412055][ T37] ? rt_mutex_adjust_prio_chain+0x21fd/0x23f0 [ 661.412077][ T37] ? __pfx___schedule+0x10/0x10 [ 661.412115][ T37] rt_mutex_schedule+0x76/0xf0 [ 661.412136][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 661.412173][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 661.412196][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 661.412217][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 661.412255][ T37] ? del_device_store+0xd7/0x370 [ 661.412283][ T37] ? del_device_store+0xd7/0x370 [ 661.412303][ T37] mutex_lock_nested+0x168/0x1d0 [ 661.412328][ T37] del_device_store+0xd7/0x370 [ 661.412350][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 661.412378][ T37] ? __pfx_del_device_store+0x10/0x10 [ 661.412400][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 661.412427][ T37] ? sysfs_kf_write+0x166/0x260 [ 661.412449][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 661.412466][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 661.412498][ T37] vfs_write+0x629/0xba0 [ 661.412531][ T37] ? __pfx_vfs_write+0x10/0x10 [ 661.412559][ T37] ? kmem_cache_free+0x185/0x6b0 [ 661.412583][ T37] ? do_sys_openat2+0x14c/0x200 [ 661.412618][ T37] ksys_write+0x156/0x270 [ 661.412646][ T37] ? __pfx_ksys_write+0x10/0x10 [ 661.412688][ T37] do_syscall_64+0x14d/0xf80 [ 661.412711][ T37] ? trace_irq_disable+0x3b/0x150 [ 661.412731][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.412750][ T37] ? clear_bhb_loop+0x40/0x90 [ 661.412772][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.412790][ T37] RIP: 0033:0x7fec85bccfce [ 661.412807][ T37] RSP: 002b:00007ffcb924d748 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 661.412825][ T37] RAX: ffffffffffffffda RBX: 0000555584468500 RCX: 00007fec85bccfce [ 661.412839][ T37] RDX: 0000000000000001 RSI: 00007ffcb924d7d0 RDI: 0000000000000005 [ 661.412851][ T37] RBP: 00007fec85ca345c R08: 0000000000000000 R09: 0000000000000000 [ 661.412863][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.412875][ T37] R13: 00007ffcb924d7d0 R14: 00007fec869b4620 R15: 0000000000000003 [ 661.412905][ T37] [ 661.412955][ T37] [ 661.412955][ T37] Showing all locks held in the system: [ 661.412965][ T37] 3 locks held by rcuc/0/20: [ 661.412979][ T37] 1 lock held by khungtaskd/37: [ 661.412988][ T37] #0: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 661.413087][ T37] 2 locks held by getty/5557: [ 661.413098][ T37] #0: ffff888028a1d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 661.413213][ T37] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 661.413299][ T37] 6 locks held by kworker/u8:0/20346: [ 661.413310][ T37] #0: ffff88801aed9138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 661.413360][ T37] #1: ffffc900060dfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 661.413408][ T37] #2: ffffffff8f14bb80 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 661.413522][ T37] #3: ffff88803ba580d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x117/0x3f0 [ 661.413614][ T37] #4: ffff88803bf7a300 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x3f0 [ 661.413662][ T37] #5: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 661.413726][ T37] 7 locks held by syz-executor/20664: [ 661.413737][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.413789][ T37] #1: ffff88803a0d9c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.413837][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.413890][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.413937][ T37] #4: ffff888020e940d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 661.414027][ T37] #5: ffff88801ff64300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 661.414082][ T37] #6: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 661.414128][ T37] 4 locks held by syz-executor/20675: [ 661.414139][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.414190][ T37] #1: ffff88803d625c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.414237][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.414291][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.414339][ T37] 1 lock held by syz.8.6999/20749: [ 661.414350][ T37] #0: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 661.414397][ T37] 1 lock held by syz.6.7012/20788: [ 661.414408][ T37] #0: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 661.414452][ T37] 4 locks held by syz-executor/20794: [ 661.414463][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.414515][ T37] #1: ffff88806d8b5c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.414563][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.414615][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.414663][ T37] 4 locks held by syz-executor/20806: [ 661.414681][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.414733][ T37] #1: ffff888077799878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.414780][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.414831][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.414879][ T37] 4 locks held by syz-executor/20818: [ 661.414889][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.414939][ T37] #1: ffff8880566d4478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.414987][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.415039][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.415086][ T37] 4 locks held by syz-executor/20830: [ 661.415097][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.415147][ T37] #1: ffff88807366d078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.415195][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.415246][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.415294][ T37] 4 locks held by syz-executor/20840: [ 661.415305][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.415356][ T37] #1: ffff88804ce99c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.415404][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.415457][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.415505][ T37] 4 locks held by syz-executor/20857: [ 661.415513][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.415556][ T37] #1: ffff8880430ef478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.415602][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.415656][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.415711][ T37] 4 locks held by syz-executor/20869: [ 661.415723][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.415768][ T37] #1: ffff88807c790478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.415813][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.415859][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.415899][ T37] 4 locks held by syz-executor/20879: [ 661.415908][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.730144][ T37] #1: ffff888036806c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.730198][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.730259][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.730316][ T37] 4 locks held by syz-executor/20892: [ 661.730328][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.730379][ T37] #1: ffff88805e5f5c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.730428][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.730480][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.730528][ T37] 4 locks held by syz-executor/20902: [ 661.730539][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.730590][ T37] #1: ffff88809a452478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.730638][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.730697][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.730744][ T37] 4 locks held by syz-executor/20914: [ 661.730754][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.730805][ T37] #1: ffff888044e15478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.730853][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.730906][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.730954][ T37] 4 locks held by syz-executor/20931: [ 661.730964][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.731015][ T37] #1: ffff888055c3ac78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.731063][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.731115][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.731164][ T37] 4 locks held by syz-executor/20940: [ 661.731175][ T37] #0: ffff8880379b2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 661.731225][ T37] #1: ffff888039c0d478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 661.731273][ T37] #2: ffff88802897e0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 661.731325][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 661.731376][ T37] [ 661.731380][ T37] ============================================= [ 661.731380][ T37] [ 661.731404][ T37] NMI backtrace for cpu 1 [ 661.731425][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 661.731451][ T37] Tainted: [L]=SOFTLOCKUP [ 661.731458][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 661.731470][ T37] Call Trace: [ 661.731477][ T37] [ 661.731485][ T37] dump_stack_lvl+0xe8/0x150 [ 661.731535][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 661.731614][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 661.731652][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 661.731674][ T37] sys_info+0x135/0x170 [ 661.731706][ T37] watchdog+0xfd9/0x1030 [ 661.731733][ T37] ? watchdog+0x21a/0x1030 [ 661.731761][ T37] kthread+0x388/0x470 [ 661.731780][ T37] ? __pfx_watchdog+0x10/0x10 [ 661.731798][ T37] ? __pfx_kthread+0x10/0x10 [ 661.731819][ T37] ret_from_fork+0x51e/0xb90 [ 661.731852][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 661.731874][ T37] ? __switch_to+0xc7d/0x1450 [ 661.731908][ T37] ? __pfx_kthread+0x10/0x10 [ 661.731928][ T37] ret_from_fork_asm+0x1a/0x30 [ 661.731961][ T37] [ 661.731969][ T37] Sending NMI from CPU 1 to CPUs 0: [ 661.731999][ C0] NMI backtrace for cpu 0 [ 661.732016][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 661.732037][ C0] Tainted: [L]=SOFTLOCKUP [ 661.732042][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 661.732051][ C0] RIP: 0010:__lock_acquire+0x482/0x2cf0 [ 661.732069][ C0] Code: 41 8d 5c 24 01 49 ff cc 89 d9 83 c1 fe 78 40 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d 4b 8d 0c bf 41 8b 8c ce d8 0b 00 00 <31> c1 ff cb 49 ff cc f7 c1 00 60 00 00 74 cf eb 17 48 c7 c7 d0 ab [ 661.732082][ C0] RSP: 0018:ffffc900001961b8 EFLAGS: 00000083 [ 661.732096][ C0] RAX: 000000000002000b RBX: 0000000000000003 RCX: 000000000002000b [ 661.732107][ C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.732116][ C0] RBP: ffff88801cae8c30 R08: ffffffff81765a15 R09: ffffffff8ddcd780 [ 661.732127][ C0] R10: ffffc900001964f8 R11: fffff52000032ca1 R12: 0000000000000001 [ 661.732138][ C0] R13: 0000000000000000 R14: ffff88801cae8000 R15: 0000000000000001 [ 661.732148][ C0] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 661.732160][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.732170][ C0] CR2: 00007f93a1932bda CR3: 000000000dbba000 CR4: 00000000003526f0 [ 661.732191][ C0] Call Trace: [ 661.732197][ C0] [ 661.732205][ C0] ? veth_xmit+0x9c7/0xd90 [ 661.732283][ C0] ? skb_network_protocol+0x23d/0x3f0 [ 661.732334][ C0] ? veth_xmit+0x60/0xd90 [ 661.732353][ C0] lock_acquire+0xf0/0x2e0 [ 661.732366][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 661.732391][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 661.732404][ C0] ? arch_stack_walk+0xe3/0x150 [ 661.732418][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 661.732431][ C0] unwind_next_frame+0xc2/0x23c0 [ 661.732444][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 661.732460][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 661.732473][ C0] ? __unwind_start+0xf7/0x760 [ 661.732489][ C0] __unwind_start+0x5b8/0x760 [ 661.732503][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 661.732527][ C0] arch_stack_walk+0xe3/0x150 [ 661.732542][ C0] ? arch_stack_walk+0xe3/0x150 [ 661.732557][ C0] stack_trace_save+0xa9/0x100 [ 661.732574][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 661.732595][ C0] save_stack+0x124/0x230 [ 661.732669][ C0] ? __pfx_save_stack+0x10/0x10 [ 661.732696][ C0] __set_page_owner+0x8d/0x4b0 [ 661.732715][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 661.732733][ C0] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 661.732776][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 661.732797][ C0] post_alloc_hook+0x231/0x280 [ 661.732840][ C0] get_page_from_freelist+0x28bb/0x2950 [ 661.732870][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 661.732886][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 661.732903][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 661.732967][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 661.732986][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 661.733003][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 661.733023][ C0] alloc_pages_mpol+0xd1/0x380 [ 661.733044][ C0] allocate_slab+0x83/0x660 [ 661.733061][ C0] ? skb_ext_add+0x1b6/0x8f0 [ 661.733102][ C0] ___slab_alloc+0x152/0x660 [ 661.733118][ C0] ? skb_ext_add+0x1b6/0x8f0 [ 661.733136][ C0] kmem_cache_alloc_noprof+0xea/0x680 [ 661.733156][ C0] ? skb_ext_add+0x1b6/0x8f0 [ 661.733174][ C0] skb_ext_add+0x1b6/0x8f0 [ 661.733201][ C0] br_nf_forward_ip+0xc3/0xa30 [ 661.733244][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 661.733258][ C0] nf_hook_slow+0xc5/0x220 [ 661.733331][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 661.733406][ C0] NF_HOOK+0x23e/0x3f0 [ 661.733426][ C0] ? NF_HOOK+0xa2/0x3f0 [ 661.733444][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 661.733465][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 661.733484][ C0] ? br_flood+0x8e0/0xb80 [ 661.733504][ C0] ? br_handle_vlan+0x61/0x530 [ 661.733548][ C0] __br_forward+0x397/0x540 [ 661.733567][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 661.733588][ C0] br_handle_frame_finish+0x1492/0x1b40 [ 661.733607][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 661.733623][ C0] ? stack_depot_save_flags+0x33/0x810 [ 661.733678][ C0] ? kasan_save_track+0x4f/0x80 [ 661.733738][ C0] ? kasan_save_track+0x3e/0x80 [ 661.733755][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 661.733773][ C0] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 661.733792][ C0] ? nf_hook_slow+0x176/0x220 [ 661.733809][ C0] br_nf_pre_routing_finish+0x13d7/0x1a90 [ 661.733829][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 661.733845][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 661.733861][ C0] ? NF_HOOK+0xa2/0x6e0 [ 661.733874][ C0] ? NF_HOOK+0xa2/0x6e0 [ 661.733887][ C0] NF_HOOK+0x64e/0x6e0 [ 661.733899][ C0] ? net_generic+0x1e/0x240 [ 661.733913][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 661.733927][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 661.733943][ C0] ? setup_pre_routing+0x4f1/0x6f0 [ 661.733987][ C0] br_nf_pre_routing+0xeb7/0x1470 [ 661.734001][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 661.734018][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 661.734032][ C0] br_handle_frame+0x127a/0x1510 [ 661.734049][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 661.734065][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 661.734083][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 661.734097][ C0] __netif_receive_skb_core+0x98f/0x31a0 [ 661.734159][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 661.734174][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 661.734195][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 661.734213][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 661.734231][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 661.734256][ C0] ? process_backlog+0x271/0xc60 [ 661.734271][ C0] ? process_backlog+0x271/0xc60 [ 661.734287][ C0] process_backlog+0x35e/0xc60 [ 661.734302][ C0] ? stack_trace_save+0xa9/0x100 [ 661.734324][ C0] __napi_poll+0xaf/0x580 [ 661.734337][ C0] ? skb_defer_free_flush+0x233/0x260 [ 661.734354][ C0] net_rx_action+0x696/0xe00 [ 661.734374][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 661.734388][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 661.734408][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 661.734431][ C0] handle_softirqs+0x1de/0x6f0 [ 661.734454][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 661.734472][ C0] ? rcu_cpu_kthread+0x205/0x1470 [ 661.734487][ C0] rcu_cpu_kthread+0x9e8/0x1470 [ 661.734503][ C0] ? rcu_cpu_kthread+0x205/0x1470 [ 661.734520][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 661.734533][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 661.734550][ C0] ? preempt_schedule_common+0x82/0xd0 [ 661.734570][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 661.734590][ C0] smpboot_thread_fn+0x541/0xa50 [ 661.734610][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 661.734632][ C0] kthread+0x388/0x470 [ 661.734647][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 661.734666][ C0] ? __pfx_kthread+0x10/0x10 [ 661.734680][ C0] ret_from_fork+0x51e/0xb90 [ 661.734700][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 661.734717][ C0] ? __switch_to+0xc7d/0x1450 [ 661.734735][ C0] ? __pfx_kthread+0x10/0x10 [ 661.734749][ C0] ret_from_fork_asm+0x1a/0x30 [ 661.734769][ C0] [ 661.735007][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 661.735024][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 661.735049][ T37] Tainted: [L]=SOFTLOCKUP [ 661.735056][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 661.735065][ T37] Call Trace: [ 661.735073][ T37] [ 661.735081][ T37] vpanic+0x56c/0xa60 [ 661.735111][ T37] ? __pfx_vpanic+0x10/0x10 [ 661.735144][ T37] panic+0xc5/0xd0 [ 661.735168][ T37] ? __pfx_panic+0x10/0x10 [ 661.735189][ T37] ? printk_trigger_flush+0x117/0x180 [ 661.735214][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 661.735243][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 661.735266][ T37] watchdog+0x1023/0x1030 [ 661.735293][ T37] ? watchdog+0x21a/0x1030 [ 661.735321][ T37] kthread+0x388/0x470 [ 661.735340][ T37] ? __pfx_watchdog+0x10/0x10 [ 661.735359][ T37] ? __pfx_kthread+0x10/0x10 [ 661.735379][ T37] ret_from_fork+0x51e/0xb90 [ 661.735406][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 661.735428][ T37] ? __switch_to+0xc7d/0x1450 [ 661.735452][ T37] ? __pfx_kthread+0x10/0x10 [ 661.735472][ T37] ret_from_fork_asm+0x1a/0x30 [ 661.735505][ T37] [ 661.735765][ T37] Kernel Offset: disabled