last executing test programs: 1m31.079639254s ago: executing program 3 (id=1635): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb}, {}, {0xc, 0x430991500cd27e2b}}}, 0x24}}, 0x2000400c) 1m30.836478068s ago: executing program 3 (id=1637): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x20, 0x0, 0x9, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x2f, 0x0, @empty, @private=0xa010101}}}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1m30.453714798s ago: executing program 3 (id=1639): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0xbc, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x81ba}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x80}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x82}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_DATA={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 1m30.105130953s ago: executing program 3 (id=1642): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 1m29.861298247s ago: executing program 3 (id=1644): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x0, 0x720d, 0x148, 0xd0, 0x148, 0x178, 0x240, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x0, 0x0, 0x7], 0x2}, {0xffffffffffffffff, [0x5, 0xb2cc575b459b5b35, 0x4, 0x2, 0x0, 0x6]}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x3, 0x7}, {0x1, 0x0, 0x2}, {0x1, 0xff, 0x3}, 0x2, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 1m29.458157937s ago: executing program 3 (id=1648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xec0e6354091f16ff) 1m24.584300588s ago: executing program 1 (id=1698): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 1m24.394294612s ago: executing program 1 (id=1699): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000204c05d50300000000000109022400010000000909040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000300)={0x0, 0x21, 0x5, {0x5, 0x23, "820027"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m22.866363206s ago: executing program 4 (id=1706): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_UID={0x8, 0x19, 0xee01}]}, 0x24}}, 0x0) 1m22.794647483s ago: executing program 4 (id=1707): add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r0) 1m22.69612035s ago: executing program 4 (id=1708): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x34, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0xd0}, [@NDA_DST_MAC={0xa}, @NDA_LLADDR={0xa, 0x2, @random="1580d3665237"}]}, 0x34}, 0x1, 0x0, 0x0, 0x28154}, 0x20024090) 1m22.49945124s ago: executing program 1 (id=1710): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [{0x2, 0x1}], {}, [], {0x10, 0x5}}, 0x2c, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 1m22.407666175s ago: executing program 4 (id=1711): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) 1m22.044223368s ago: executing program 1 (id=1713): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x201, 0x180000, @empty, 0x1000}, 0x1c) 1m21.921114774s ago: executing program 4 (id=1714): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0xfffc, 0x41, 0x2}, {0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x80000000000000}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1c) 1m21.627451117s ago: executing program 1 (id=1715): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_RESET(r0, 0x5514) 1m21.287119572s ago: executing program 1 (id=1717): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="080004000001000008000a00", @ANYRES32], 0x4c}}, 0x0) 1m20.8008623s ago: executing program 4 (id=1721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 1m20.669294989s ago: executing program 2 (id=1722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c00028008000140000000000800034000ff00010500025a380000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 1m20.364225831s ago: executing program 2 (id=1725): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSSOFTCAR(r0, 0x40085500, &(0x7f0000000080)=0x5) 1m20.149988849s ago: executing program 2 (id=1727): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1m19.709617844s ago: executing program 2 (id=1728): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x6, 0x1, {0xf1ffffff, 0x7, 0x2}}}}]}, 0x40}}, 0x0) 1m19.555567749s ago: executing program 2 (id=1729): r0 = socket(0x1e, 0x1, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10, &(0x7f0000000000)=[{&(0x7f00000004c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4800) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/79, 0x4f}], 0x1, &(0x7f0000000840)=""/70, 0x18}, 0x0) 1m19.465688885s ago: executing program 2 (id=1730): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x200000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m14.292802109s ago: executing program 32 (id=1648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xec0e6354091f16ff) 1m6.166834048s ago: executing program 33 (id=1717): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="080004000001000008000a00", @ANYRES32], 0x4c}}, 0x0) 1m5.551558237s ago: executing program 34 (id=1721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 1m4.074385629s ago: executing program 35 (id=1730): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x200000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m1.132750406s ago: executing program 5 (id=1789): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 1m0.849453996s ago: executing program 5 (id=1790): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)="da") 1m0.473983917s ago: executing program 5 (id=1791): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 1m0.024157035s ago: executing program 5 (id=1794): r0 = socket$inet(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) 59.701459484s ago: executing program 5 (id=1796): io_setup(0xbab, &(0x7f0000000000)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x8, &(0x7f00000019c0)) io_destroy(r0) 59.037778824s ago: executing program 5 (id=1798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000, 0x4000000}) 58.03036314s ago: executing program 0 (id=1802): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 57.490571334s ago: executing program 0 (id=1803): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000001800)={0x48, 0xb, r1}) 57.291427543s ago: executing program 0 (id=1804): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="2016ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 54.103613719s ago: executing program 0 (id=1805): r0 = syz_io_uring_setup(0x18c0, &(0x7f0000000140)={0x0, 0x4f22, 0x1000, 0x3, 0x37c}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r0, 0x16c7, 0x7c73, 0x9, 0x0, 0x0) 53.583156637s ago: executing program 0 (id=1806): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) unshare(0x22020600) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) 53.287465173s ago: executing program 0 (id=1807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)={@val={0x1c, 0xf5}, @val={0x1, 0x0, 0x2}, @mpls={[], @ipv6=@gre_packet={0x7, 0x6, "9ce7c1", 0x44, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x4}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0xea7, {{0x6, 0x1, 0xa0, 0x0, 0x0, 0x1, 0x3, 0x4}, 0x1, {0x5ad}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x9, 0x3, 0x1, 0x0, 0x2, 0x2}, 0x2, {0x3, 0x3, 0x2, 0x1c, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x7a) 43.523882159s ago: executing program 36 (id=1798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000, 0x4000000}) 38.089172677s ago: executing program 37 (id=1807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)={@val={0x1c, 0xf5}, @val={0x1, 0x0, 0x2}, @mpls={[], @ipv6=@gre_packet={0x7, 0x6, "9ce7c1", 0x44, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x4}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0xea7, {{0x6, 0x1, 0xa0, 0x0, 0x0, 0x1, 0x3, 0x4}, 0x1, {0x5ad}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x9, 0x3, 0x1, 0x0, 0x2, 0x2}, 0x2, {0x3, 0x3, 0x2, 0x1c, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x7a) 36.543441388s ago: executing program 8 (id=1831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 35.937726356s ago: executing program 8 (id=1832): r0 = syz_io_uring_setup(0x5c1, &(0x7f00000006c0)={0x0, 0xc493, 0x10001, 0x4000002, 0x25}, &(0x7f00000000c0)=0x0, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r0, 0x219, 0x0, 0x7, 0x0, 0x0) 35.359668308s ago: executing program 8 (id=1834): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) 34.506585324s ago: executing program 8 (id=1839): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x4e20, 0xffff, 0xa}, {0x0, 0x100000000, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40000000000000}, {0x0, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1502, 0x4, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 34.139476715s ago: executing program 8 (id=1841): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 33.45074876s ago: executing program 7 (id=1843): r0 = fanotify_init(0x200, 0x0) unshare(0x2c020400) fanotify_mark(r0, 0x80, 0x8, 0xffffffffffffffff, 0x0) 32.866173632s ago: executing program 7 (id=1844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000017c0)={0x28, r1, 0x7, 0x70bd28, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48050}, 0x8000) 32.675585717s ago: executing program 8 (id=1845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x7c6b) 32.287056184s ago: executing program 7 (id=1846): r0 = io_uring_setup(0x6b3, &(0x7f0000000000)={0x0, 0xf324, 0x800, 0x2, 0xb9}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000075c0)={0x0}, 0x1) 31.986077944s ago: executing program 7 (id=1848): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x64, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0xe, 0x94, &(0x7f00000000c0)=""/148, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 31.786314234s ago: executing program 7 (id=1849): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) syz_io_uring_setup(0x3163, &(0x7f0000000540)={0x0, 0xaefa, 0x2, 0xffffffff, 0x0, 0x0, r0}, 0x0, 0x0) 31.413678032s ago: executing program 7 (id=1850): unshare(0x62040200) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) unshare(0x42040200) 23.709395729s ago: executing program 9 (id=1808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x3, 0x3, 0xfffffffe}, {}, {0x0, 0x0, 0x2}, {}, {0x6, 0x0, 0x10, 0x20bc7}]}) 18.156478301s ago: executing program 6 (id=1876): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) 17.968233737s ago: executing program 6 (id=1877): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x400000ff, 0x2, 0x4, 0x0, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x0, 0x10001, 0x2}) 17.783811289s ago: executing program 6 (id=1878): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)=' -', 0x3fffff}]) 17.550888252s ago: executing program 38 (id=1845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x7c6b) 17.056576382s ago: executing program 6 (id=1880): io_setup(0x6, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 16.508633533s ago: executing program 6 (id=1881): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x7, 0xa3, 0x20b, 0x7, 0x81, 0x0, 0x3ff0, 0x7}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200, 0x0, 0x1}}, {0x6, 0x2, [0x6]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 16.190583718s ago: executing program 6 (id=1882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) 351.402584ms ago: executing program 39 (id=1850): unshare(0x62040200) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) unshare(0x42040200) 132.025371ms ago: executing program 40 (id=1882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) 0s ago: executing program 41 (id=1808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x3, 0x3, 0xfffffffe}, {}, {0x0, 0x0, 0x2}, {}, {0x6, 0x0, 0x10, 0x20bc7}]}) kernel console output (not intermixed with test programs): USB device number 19 using dummy_hcd [ 173.568138][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 173.601765][ T52] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 173.624995][ T52] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 173.639814][ T52] usb 3-1: Product: syz [ 173.647551][ T52] usb 3-1: Manufacturer: syz [ 173.660040][ T52] usb 3-1: SerialNumber: syz [ 173.696432][ T52] usb 3-1: config 0 descriptor?? [ 173.915121][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1166'. [ 173.960815][ T52] usb 3-1: USB disconnect, device number 19 [ 174.696134][ T8433] process 'syz.2.1185' launched '/dev/fd/3' with NULL argv: empty string added [ 174.832213][ T5893] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 174.902204][ T52] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 175.014421][ T5893] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 175.024164][ T5893] usb 2-1: config 0 has no interface number 0 [ 175.031001][ T5893] usb 2-1: config 0 interface 29 has no altsetting 0 [ 175.041420][ T5893] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 175.053977][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 175.056387][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.069476][ T5893] usb 2-1: Product: syz [ 175.074498][ T5893] usb 2-1: Manufacturer: syz [ 175.075949][ T52] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 175.079247][ T5893] usb 2-1: SerialNumber: syz [ 175.097503][ T5893] usb 2-1: config 0 descriptor?? [ 175.112677][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.120881][ T5957] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 175.134810][ T52] usb 5-1: Product: syz [ 175.139221][ T52] usb 5-1: Manufacturer: syz [ 175.147609][ T52] usb 5-1: SerialNumber: syz [ 175.158720][ T52] usb 5-1: config 0 descriptor?? [ 175.171032][ T52] gspca_main: se401-2.14.0 probing 047d:5003 [ 175.307477][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.320288][ T5893] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 175.325199][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.345648][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.360998][ T5957] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.384588][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.405403][ T5957] usb 4-1: config 0 descriptor?? [ 175.521281][ T5893] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 175.528914][ T5893] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 175.536427][ T5893] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 175.605809][ T5893] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -22 [ 175.618304][ T52] gspca_se401: Wrong descriptor type [ 175.763517][ T52] usb 2-1: USB disconnect, device number 20 [ 175.844431][ T5894] usb 5-1: USB disconnect, device number 12 [ 175.864757][ T5957] plantronics 0003:047F:FFFF.0025: item 0 4 0 9 parsing failed [ 175.887941][ T5957] plantronics 0003:047F:FFFF.0025: parse failed [ 175.897012][ T5957] plantronics 0003:047F:FFFF.0025: probe with driver plantronics failed with error -22 [ 176.090420][ T5893] usb 4-1: USB disconnect, device number 16 [ 177.059986][ T8503] IPv6: Can't replace route, no match found [ 178.362207][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 178.532528][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 178.539456][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1253'. [ 178.544583][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.572922][ T9] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 178.601839][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.639196][ T9] usb 3-1: config 0 descriptor?? [ 178.766320][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'. [ 178.777031][ T8587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1258'. [ 179.068338][ T9] holtek_mouse 0003:04D9:A081.0026: item fetching failed at offset 3/5 [ 179.087351][ T9] holtek_mouse 0003:04D9:A081.0026: hid parse failed: -22 [ 179.096202][ T9] holtek_mouse 0003:04D9:A081.0026: probe with driver holtek_mouse failed with error -22 [ 179.125656][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 179.292328][ T9] usb 3-1: USB disconnect, device number 20 [ 179.316249][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 179.316269][ T30] audit: type=1400 audit(1743628167.418:54): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8607 comm="syz.0.1269" [ 179.611293][ T8622] pim6reg: entered allmulticast mode [ 179.822600][ T5893] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 179.996426][ T5893] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 180.003082][ T5894] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 180.012129][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.031692][ T5893] usb 4-1: Product: syz [ 180.036907][ T5893] usb 4-1: Manufacturer: syz [ 180.062396][ T5893] usb 4-1: SerialNumber: syz [ 180.082270][ T10] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 180.096007][ T5893] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 180.177310][ T5893] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 180.183225][ T5894] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 180.215060][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.228647][ T5894] usb 2-1: Product: syz [ 180.237918][ T5894] usb 2-1: Manufacturer: syz [ 180.254534][ T5894] usb 2-1: SerialNumber: syz [ 180.274864][ T5894] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 180.289999][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 180.297480][ T5957] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 180.302064][ T10] usb 5-1: config 0 has no interface number 0 [ 180.360569][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 180.417167][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 180.427534][ T8620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.462108][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 180.477306][ T8620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.500906][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.543149][ T10] usb 5-1: config 0 descriptor?? [ 180.558478][ T8632] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 180.586982][ T10] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 180.778892][ T52] usb 4-1: USB disconnect, device number 17 [ 180.858689][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 180.883860][ T10] usb 5-1: USB disconnect, device number 13 [ 181.018121][ T5894] usb 2-1: USB disconnect, device number 21 [ 181.602381][ T5893] usb 4-1: Service connection timeout for: 256 [ 181.605722][ T5957] usb 2-1: Service connection timeout for: 256 [ 181.608603][ T5893] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 181.640238][ T5957] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 181.663799][ T5893] ath9k_htc: Failed to initialize the device [ 181.671756][ T5957] ath9k_htc: Failed to initialize the device [ 181.680448][ T52] usb 4-1: ath9k_htc: USB layer deinitialized [ 181.691659][ T5894] usb 2-1: ath9k_htc: USB layer deinitialized [ 182.005616][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 182.033745][ T52] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 182.218025][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.256948][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.293298][ T52] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 182.333842][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.383630][ T52] usb 4-1: config 0 descriptor?? [ 182.682848][ T5957] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 182.810600][ T52] arvo 0003:1E7D:30D4.0027: item fetching failed at offset 5/7 [ 182.844726][ T52] arvo 0003:1E7D:30D4.0027: parse failed [ 182.850594][ T52] arvo 0003:1E7D:30D4.0027: probe with driver arvo failed with error -22 [ 182.883836][ T5957] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 182.903792][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.943423][ T5957] usb 5-1: config 0 descriptor?? [ 182.963253][ T5957] cp210x 5-1:0.0: cp210x converter detected [ 182.987669][ T8727] sg_write: data in/out 268435436/14 bytes for SCSI command 0x0-- guessing data in; [ 182.987669][ T8727] program syz.1.1326 not setting count and/or reply_len properly [ 183.026106][ T5893] usb 4-1: USB disconnect, device number 18 [ 183.365068][ T5957] usb 5-1: cp210x converter now attached to ttyUSB0 [ 183.562711][ T10] usb 5-1: USB disconnect, device number 14 [ 183.582549][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 183.603386][ T10] cp210x 5-1:0.0: device disconnected [ 183.945836][ T8745] sctp: [Deprecated]: syz.2.1335 (pid 8745) Use of int in max_burst socket option. [ 183.945836][ T8745] Use struct sctp_assoc_value instead [ 185.908655][ T8833] netlink: 61 bytes leftover after parsing attributes in process `syz.0.1378'. [ 186.370129][ T8843] [U]  [ 186.373181][ T8843] [U] K{ [ 186.403798][ T8843] [U] t 1ŠFfˊ`GJgo/mC [ 186.410858][ T8843] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 186.432747][ T8843] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 186.463868][ T8843] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 186.517307][ T8843] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 186.588414][ T8843] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 186.621736][ T8843] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 186.670711][ T8843] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 186.865801][ T8843] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 186.908315][ T8843] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 186.930844][ T8843] [U] 22Ʃx?0;3u [ 186.956304][ T8843] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 186.997868][ T8843] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 187.011666][ T8843] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 187.022717][ T8843] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 187.051929][ T8843] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 187.083361][ T8843] [U] ec [ 187.086571][ T8843] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 187.258065][ T8842] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 187.474827][ T8873] veth1_macvtap: left promiscuous mode [ 187.480426][ T8873] macsec0: entered allmulticast mode [ 187.529662][ T8873] veth1_macvtap: entered promiscuous mode [ 187.542379][ T8873] veth1_macvtap: entered allmulticast mode [ 187.558724][ T8873] macsec0: left allmulticast mode [ 187.571942][ T8873] veth1_macvtap: left allmulticast mode [ 187.637937][ T8880] program syz.3.1400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.292141][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 188.466667][ T10] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 188.481541][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.505653][ T10] usb 5-1: Product: syz [ 188.510140][ T10] usb 5-1: Manufacturer: syz [ 188.519746][ T10] usb 5-1: SerialNumber: syz [ 188.533495][ T10] usb 5-1: config 0 descriptor?? [ 188.556970][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 188.902772][ T8927] netlink: 'syz.2.1423': attribute type 4 has an invalid length. [ 189.199514][ T5957] usb 5-1: USB disconnect, device number 15 [ 189.238805][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 189.522190][ T5893] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 189.692445][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 189.716594][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.747469][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 189.778262][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 189.806836][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 189.826513][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.863168][ T5893] usb 4-1: config 0 descriptor?? [ 189.870295][ T8945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 189.898569][ T5893] hub 4-1:0.0: USB hub found [ 190.105664][ T5893] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 190.116664][ T8974] netlink: 'syz.2.1445': attribute type 6 has an invalid length. [ 190.125906][ T8974] netlink: 'syz.2.1445': attribute type 3 has an invalid length. [ 190.134540][ T8974] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.1445'. [ 190.242438][ T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 190.292468][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 190.332385][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 190.339808][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 190.394689][ T5893] usb 4-1: USB disconnect, device number 19 [ 190.425518][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.451649][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.464671][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 190.477897][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 190.489472][ T9] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 190.502032][ T10] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 190.511219][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.522384][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 190.536028][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 190.547717][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.558853][ T9] usb 2-1: Product: syz [ 190.566470][ T10] usb 5-1: config 0 descriptor?? [ 190.576815][ T9] usb 2-1: Manufacturer: syz [ 190.581562][ T9] usb 2-1: SerialNumber: syz [ 190.805803][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 190.820906][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 190.837887][ T9] usb 2-1: USB disconnect, device number 22 [ 190.968809][ T8993] fuse: Unknown parameter 'no' [ 190.992923][ T10] topre 0003:0853:0148.0028: unknown main item tag 0x0 [ 191.012160][ T10] topre 0003:0853:0148.0028: unknown main item tag 0x0 [ 191.019191][ T10] topre 0003:0853:0148.0028: unknown main item tag 0x0 [ 191.032195][ T10] topre 0003:0853:0148.0028: unknown main item tag 0x0 [ 191.050128][ T10] topre 0003:0853:0148.0028: unknown main item tag 0x0 [ 191.063456][ T10] topre 0003:0853:0148.0028: hidraw0: USB HID v0.00 Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0 [ 191.088679][ T8997] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 191.095298][ T8997] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 191.107961][ T8997] vhci_hcd vhci_hcd.0: Device attached [ 191.197932][ T5957] usb 5-1: USB disconnect, device number 16 [ 191.283789][ T52] vhci_hcd: vhci_device speed not set [ 191.343863][ T52] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 191.373943][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 191.552118][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 191.563717][ T10] usb 4-1: config 0 has no interfaces? [ 191.579769][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 191.602200][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.610249][ T10] usb 4-1: Product: syz [ 191.614622][ T10] usb 4-1: Manufacturer: syz [ 191.619254][ T10] usb 4-1: SerialNumber: syz [ 191.629504][ T10] usb 4-1: config 0 descriptor?? [ 191.857607][ T838] usb 4-1: USB disconnect, device number 20 [ 191.871355][ T8998] vhci_hcd: connection reset by peer [ 191.886607][ T3019] vhci_hcd: stop threads [ 191.906786][ T3019] vhci_hcd: release socket [ 191.924220][ T52] vhci_hcd: vhci_device speed not set [ 191.929907][ T3019] vhci_hcd: disconnect device [ 192.933241][ T5957] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 193.095523][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 193.119606][ T5957] usb 4-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 193.143985][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.175271][ T5957] usb 4-1: config 0 descriptor?? [ 193.610838][ T5957] hid (null): usage index exceeded [ 193.646742][ T5957] wacom 0003:056A:0333.0029: ignoring exceeding usage max [ 193.698120][ T5957] wacom 0003:056A:0333.0029: ignoring exceeding usage max [ 193.735832][ T5957] wacom 0003:056A:0333.0029: usage index exceeded [ 193.749904][ T5957] wacom 0003:056A:0333.0029: item 0 0 2 2 parsing failed [ 193.780340][ T5957] wacom 0003:056A:0333.0029: parse failed [ 193.795487][ T5957] wacom 0003:056A:0333.0029: probe with driver wacom failed with error -22 [ 193.838315][ T5957] usb 4-1: USB disconnect, device number 21 [ 193.886749][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'. [ 193.962441][ T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 194.002482][ T838] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 194.052819][ T30] audit: type=1326 audit(1743628182.158:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9089 comm="syz.1.1498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0636b8d169 code=0x0 [ 194.134627][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.155717][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 194.172547][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 194.181751][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.190803][ T838] usb 5-1: Using ep0 maxpacket: 16 [ 194.200893][ T838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.213186][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.225167][ T10] usb 3-1: config 0 descriptor?? [ 194.237278][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 194.244091][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.256884][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 194.266230][ T838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.280497][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 194.289228][ T838] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 194.298906][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 194.306125][ T10] usb 3-1: media controller created [ 194.313118][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.324383][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.336389][ T838] usb 5-1: config 0 descriptor?? [ 194.354100][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 194.360229][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 194.370659][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 194.387702][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 194.395385][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 194.517737][ T9078] dvb-usb: bulk message failed: -22 (2/0) [ 194.530823][ T5957] usb 3-1: USB disconnect, device number 21 [ 194.579710][ T5957] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 194.762293][ T838] wacom 0003:056A:00F8.002A: unbalanced collection at end of report description [ 194.782921][ T838] wacom 0003:056A:00F8.002A: parse failed [ 194.790292][ T838] wacom 0003:056A:00F8.002A: probe with driver wacom failed with error -22 [ 194.989885][ T5894] usb 5-1: USB disconnect, device number 17 [ 197.472513][ T9209] tipc: Enabled bearer , priority 0 [ 197.728523][ T9223] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1561'. [ 198.194398][ T838] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 198.364658][ T838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.378372][ T838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 198.401075][ T838] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 198.413782][ T838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.438796][ T9254] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1577'. [ 198.441231][ T838] usb 4-1: config 0 descriptor?? [ 198.461075][ T838] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 198.468444][ T838] dvb-usb: bulk message failed: -22 (3/0) [ 198.483487][ T838] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 198.494370][ T838] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 198.507647][ T838] usb 4-1: media controller created [ 198.520230][ T838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.546432][ T838] dvb-usb: bulk message failed: -22 (6/0) [ 198.552475][ T838] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 198.563975][ T838] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 198.580391][ T838] dvb-usb: schedule remote query interval to 150 msecs. [ 198.591152][ T838] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 198.600932][ T10] tipc: Node number set to 4278206465 [ 198.711621][ T838] usb 4-1: USB disconnect, device number 22 [ 198.764762][ T838] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 198.839338][ T9265] random: crng reseeded on system resumption [ 199.409368][ T9286] loop2: detected capacity change from 0 to 7 [ 199.487364][ T9286] Dev loop2: unable to read RDB block 7 [ 199.497279][ T9286] loop2: unable to read partition table [ 199.517341][ T9286] loop2: partition table beyond EOD, truncated [ 199.548700][ T9286] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 200.214081][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.257058][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.827888][ T10] IPVS: starting estimator thread 0... [ 200.841890][ T9322] IPVS: ip_vs_edit_dest(): server weight less than zero [ 200.982161][ T9323] IPVS: using max 23 ests per chain, 55200 per kthread [ 203.213163][ T9366] dlm: plock device version mismatch: kernel (1.2.0), user (1.4294967295.0) [ 203.433778][ T30] audit: type=1326 audit(1743628191.518:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9367 comm="syz.1.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0636b8d169 code=0x7ffc0000 [ 203.654176][ T30] audit: type=1326 audit(1743628191.568:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9367 comm="syz.1.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0636b8d169 code=0x7ffc0000 [ 203.839970][ T30] audit: type=1326 audit(1743628191.568:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9367 comm="syz.1.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0636b8bad0 code=0x7ffc0000 [ 203.862292][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.980770][ T30] audit: type=1326 audit(1743628191.568:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9367 comm="syz.1.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0636b8d169 code=0x7ffc0000 [ 204.081753][ T30] audit: type=1326 audit(1743628191.568:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9367 comm="syz.1.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0636b8d169 code=0x7ffc0000 [ 204.164418][ T5893] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 204.214359][ T30] audit: type=1326 audit(1743628191.588:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9367 comm="syz.1.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0636b8d169 code=0x7ffc0000 [ 204.341610][ T30] audit: type=1326 audit(1743628191.598:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9367 comm="syz.1.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0636b8d169 code=0x7ffc0000 [ 204.363855][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.384271][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 204.400799][ T9387] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 204.425730][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.491114][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.507188][ T30] audit: type=1326 audit(1743628191.598:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9367 comm="syz.1.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0636b8d169 code=0x7ffc0000 [ 204.529413][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.572200][ T5893] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 204.607304][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.673417][ T5893] usb 2-1: config 0 descriptor?? [ 204.792260][ T9391] program syz.3.1639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.156245][ T5893] redragon 0003:0C45:760B.002B: hidraw0: USB HID v0.02 Device [HID 0c45:760b] on usb-dummy_hcd.1-1/input0 [ 205.340686][ T838] usb 2-1: USB disconnect, device number 23 [ 205.724873][ T5893] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 205.909186][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.924092][ T5893] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 205.972218][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.026814][ T5893] usb 5-1: config 0 descriptor?? [ 206.514633][ T5893] lg-g15 0003:046D:C222.002C: unbalanced collection at end of report description [ 206.563051][ T5893] lg-g15 0003:046D:C222.002C: probe with driver lg-g15 failed with error -22 [ 206.642010][ C1] sched: DL replenish lagged too much [ 206.781253][ T5893] usb 5-1: USB disconnect, device number 18 [ 207.521319][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1665'. [ 208.062840][ T9457] syz.0.1672 uses obsolete (PF_INET,SOCK_PACKET) [ 208.360099][ T9463] netlink: 'syz.1.1676': attribute type 3 has an invalid length. [ 208.373780][ T9463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1676'. [ 208.388776][ T9463] tipc: Enabling of bearer rejected, failed to enable media [ 208.776377][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1679'. [ 208.800338][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1679'. [ 208.821755][ T9471] netlink: 'syz.1.1679': attribute type 6 has an invalid length. [ 210.322851][ T838] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 210.447021][ T9509] vivid-003: disconnect [ 210.459126][ T9508] vivid-003: reconnect [ 210.507365][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.532123][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.559690][ T838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.591507][ T838] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 210.604479][ T9511] netlink: 'syz.1.1698': attribute type 3 has an invalid length. [ 210.617726][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.645252][ T838] usb 5-1: config 0 descriptor?? [ 210.992369][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 211.079969][ T838] betop 0003:11C0:5506.002D: item 0 4 0 11 parsing failed [ 211.092940][ T838] betop 0003:11C0:5506.002D: parse failed [ 211.100037][ T838] betop 0003:11C0:5506.002D: probe with driver betop failed with error -22 [ 211.162356][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 211.173581][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.191001][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.212755][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 211.226269][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.252803][ T9] usb 2-1: config 0 descriptor?? [ 211.280807][ T838] usb 5-1: USB disconnect, device number 19 [ 211.748017][ T9] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.002E/input/input18 [ 211.873612][ T9] sony 0003:054C:03D5.002E: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 211.922440][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 211.929814][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 211.966347][ T9] usb 2-1: USB disconnect, device number 24 [ 212.005695][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 212.011855][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 212.018563][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 212.173824][ T9526] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1705'. [ 212.337486][ T9530] PKCS8: Unsupported PKCS#8 version [ 221.422409][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.437170][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.448656][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.458979][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.467944][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.890933][ T9636] chnl_net:caif_netlink_parms(): no params data found [ 222.327365][ T9636] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.342184][ T9636] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.365187][ T9636] bridge_slave_0: entered allmulticast mode [ 222.400008][ T9636] bridge_slave_0: entered promiscuous mode [ 222.428297][ T9636] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.449681][ T9636] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.463728][ T9636] bridge_slave_1: entered allmulticast mode [ 222.490457][ T9636] bridge_slave_1: entered promiscuous mode [ 222.765586][ T9636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.810710][ T9636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.215865][ T9636] team0: Port device team_slave_0 added [ 223.259950][ T9636] team0: Port device team_slave_1 added [ 223.529320][ T9636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.536802][ T5844] Bluetooth: hci5: command tx timeout [ 223.553869][ T9636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.580078][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.594287][ T9636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.615168][ T9636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.682127][ T9636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.756886][ T9636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.306506][ T9636] hsr_slave_0: entered promiscuous mode [ 224.328472][ T9636] hsr_slave_1: entered promiscuous mode [ 224.359996][ T9636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.381852][ T9636] Cannot create hsr debugfs directory [ 224.976954][ T9636] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 225.006318][ T9636] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 225.048479][ T9636] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 225.082063][ T9636] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 225.353954][ T9636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.388762][ T9636] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.414274][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.421835][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.460622][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.468350][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.612659][ T5844] Bluetooth: hci5: command tx timeout [ 225.640597][ T9636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.746568][ T9636] veth0_vlan: entered promiscuous mode [ 225.770600][ T9636] veth1_vlan: entered promiscuous mode [ 225.834871][ T9636] veth0_macvtap: entered promiscuous mode [ 225.870490][ T9636] veth1_macvtap: entered promiscuous mode [ 225.901093][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.917476][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.937600][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.955638][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.974944][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.988634][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.003379][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.020607][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.040119][ T9636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.069321][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.097871][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.112605][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.129078][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.140428][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.160998][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.171780][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.187717][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.203187][ T9636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.226779][ T9636] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.244035][ T9636] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.263227][ T9636] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.278206][ T9636] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.499820][ T3019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.532301][ T3019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.611249][ T3019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.620625][ T3019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.682285][ T5844] Bluetooth: hci5: command tx timeout [ 229.773061][ T5844] Bluetooth: hci5: command tx timeout [ 230.579454][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.589385][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.602313][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.619385][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.631220][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.612819][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 231.623994][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.633044][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.645840][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.655360][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 232.567929][ T9708] chnl_net:caif_netlink_parms(): no params data found [ 232.728879][ T55] Bluetooth: hci0: command tx timeout [ 233.132626][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 233.148992][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 233.159733][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 233.172975][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 233.183517][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 233.762783][ T5844] Bluetooth: hci6: command tx timeout [ 233.810874][ T9708] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.831573][ T9708] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.880031][ T9708] bridge_slave_0: entered allmulticast mode [ 233.918841][ T9708] bridge_slave_0: entered promiscuous mode [ 234.039438][ T9708] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.080627][ T9708] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.109948][ T9708] bridge_slave_1: entered allmulticast mode [ 234.136426][ T9708] bridge_slave_1: entered promiscuous mode [ 234.198382][ T9715] chnl_net:caif_netlink_parms(): no params data found [ 234.582640][ T9708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.650070][ T9708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.812368][ T5844] Bluetooth: hci0: command tx timeout [ 234.881460][ T30] audit: type=1326 audit(1743628222.978:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9746 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef91f8d169 code=0x7ffc0000 [ 235.008340][ T30] audit: type=1326 audit(1743628223.008:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9746 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef91f8d169 code=0x7ffc0000 [ 235.030538][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.189098][ T30] audit: type=1326 audit(1743628223.018:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9746 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef91f8d169 code=0x7ffc0000 [ 235.211460][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.282492][ T5844] Bluetooth: hci7: command tx timeout [ 235.327534][ T30] audit: type=1326 audit(1743628223.018:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9746 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef91f8d169 code=0x7ffc0000 [ 235.469846][ T30] audit: type=1326 audit(1743628223.018:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9746 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef91f8d169 code=0x7ffc0000 [ 235.574334][ T9708] team0: Port device team_slave_0 added [ 235.614212][ T30] audit: type=1326 audit(1743628223.028:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9746 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fef91f8d169 code=0x7ffc0000 [ 235.651537][ T9708] team0: Port device team_slave_1 added [ 235.735600][ T30] audit: type=1326 audit(1743628223.028:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9746 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef91f8d169 code=0x7ffc0000 [ 235.776223][ T30] audit: type=1326 audit(1743628223.028:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9746 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef91f8d169 code=0x7ffc0000 [ 235.798420][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.842807][ T5844] Bluetooth: hci6: command tx timeout [ 235.957817][ T9708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.970232][ T9708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.996385][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.088341][ T9708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.421517][ T9708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.457665][ T9708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.483642][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.555887][ T9708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.618762][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.646233][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.674847][ T9715] bridge_slave_0: entered allmulticast mode [ 236.708824][ T9715] bridge_slave_0: entered promiscuous mode [ 236.738340][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.769496][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.787404][ T9715] bridge_slave_1: entered allmulticast mode [ 236.815157][ T9715] bridge_slave_1: entered promiscuous mode [ 236.884634][ T5844] Bluetooth: hci0: command tx timeout [ 237.130665][ T9771] loop2: detected capacity change from 0 to 524287999 [ 237.157336][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.166836][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 237.176386][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.185676][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 237.196404][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.205846][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 237.232385][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.241652][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 237.252125][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.261411][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 237.270860][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.280252][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 237.289368][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.298658][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 237.308031][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.317298][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 237.327581][ T9771] ldm_validate_partition_table(): Disk read failed. [ 237.346458][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.355762][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 237.365381][ T5844] Bluetooth: hci7: command tx timeout [ 237.373437][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.382735][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 237.393848][ T9771] Dev loop2: unable to read RDB block 0 [ 237.404857][ T9771] loop2: unable to read partition table [ 237.432804][ T9771] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 237.594003][ T9708] hsr_slave_0: entered promiscuous mode [ 237.621443][ T9708] hsr_slave_1: entered promiscuous mode [ 237.648765][ T9708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.677679][ T9708] Cannot create hsr debugfs directory [ 237.714834][ T9715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.768766][ T9715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.923649][ T5844] Bluetooth: hci6: command tx timeout [ 238.288670][ T9715] team0: Port device team_slave_0 added [ 238.369410][ T9715] team0: Port device team_slave_1 added [ 238.751056][ T9730] chnl_net:caif_netlink_parms(): no params data found [ 238.791704][ T9715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.801267][ T9715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.827397][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.845185][ T9715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.904001][ T9715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.918506][ T9715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.945142][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.962179][ T5844] Bluetooth: hci0: command tx timeout [ 238.977049][ T9715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.442914][ T5844] Bluetooth: hci7: command tx timeout [ 239.624074][ T9715] hsr_slave_0: entered promiscuous mode [ 239.631217][ T9715] hsr_slave_1: entered promiscuous mode [ 239.647802][ T9715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.661495][ T9715] Cannot create hsr debugfs directory [ 240.004704][ T5844] Bluetooth: hci6: command tx timeout [ 240.055940][ T9730] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.071591][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.079653][ T9730] bridge_slave_0: entered allmulticast mode [ 240.101169][ T9730] bridge_slave_0: entered promiscuous mode [ 240.159167][ T9730] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.171449][ T9730] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.189697][ T9730] bridge_slave_1: entered allmulticast mode [ 240.207591][ T9730] bridge_slave_1: entered promiscuous mode [ 240.539147][ T9730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.561889][ T9730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.869873][ T9708] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 240.941301][ T9708] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 241.125849][ T9730] team0: Port device team_slave_0 added [ 241.150117][ T9708] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 241.273446][ T9730] team0: Port device team_slave_1 added [ 241.440774][ T9708] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 241.524590][ T5844] Bluetooth: hci7: command tx timeout [ 241.844261][ T9730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.851276][ T9730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.877512][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.024596][ T9730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.170392][ T9730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.202516][ T9730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.228462][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.319197][ T9730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.989970][ T9730] hsr_slave_0: entered promiscuous mode [ 242.999910][ T9730] hsr_slave_1: entered promiscuous mode [ 243.017397][ T9730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.037931][ T9730] Cannot create hsr debugfs directory [ 243.049693][ T9715] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 243.196176][ T9715] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 243.250967][ T9715] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 243.298721][ T9715] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 243.876928][ T9708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.111742][ T9708] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.175586][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.183397][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.274988][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.282285][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.317665][ T9730] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 244.368139][ T9730] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 244.437861][ T9730] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 244.507878][ T9730] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 244.651349][ T9715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.778818][ T9715] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.879004][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.886249][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.928413][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.935661][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.041526][ T9708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.327535][ T9730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.471892][ T9730] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.528812][ T9715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.563882][ T9708] veth0_vlan: entered promiscuous mode [ 245.599920][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.607196][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.698696][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.706049][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.779496][ T9708] veth1_vlan: entered promiscuous mode [ 245.910045][ T9715] veth0_vlan: entered promiscuous mode [ 245.981848][ T9730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.057974][ T9715] veth1_vlan: entered promiscuous mode [ 246.096381][ T9708] veth0_macvtap: entered promiscuous mode [ 246.205433][ T9708] veth1_macvtap: entered promiscuous mode [ 246.537352][ T9730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.628028][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.760092][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.822110][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.913017][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.972503][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.037869][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.142607][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.212198][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.262194][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.352273][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.436288][ T9708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.584948][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.692233][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.782155][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.837159][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.871790][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.892140][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.914476][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.937706][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.951343][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.973163][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.030328][ T9708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.086826][ T9715] veth0_macvtap: entered promiscuous mode [ 248.456673][ T9715] veth1_macvtap: entered promiscuous mode [ 249.056834][ T9708] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.074613][ T9708] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.089086][ T9708] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.114116][ T9708] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.290261][ T9730] veth0_vlan: entered promiscuous mode [ 249.335848][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.358721][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.371071][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.389343][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.399683][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.422650][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.462621][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.480720][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.499688][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.513820][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.536362][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.560634][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.604673][ T9715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.707045][ T9730] veth1_vlan: entered promiscuous mode [ 249.730902][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.749130][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.761456][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.786331][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.806285][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.828136][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.840808][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.861893][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.892510][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.927425][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.941441][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.959872][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.980932][ T9715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.058120][ T9715] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.075046][ T9715] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.101081][ T9715] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.127361][ T9715] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.338148][ T9730] veth0_macvtap: entered promiscuous mode [ 250.366627][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.414334][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.460738][ T9730] veth1_macvtap: entered promiscuous mode [ 250.622854][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.647846][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.665317][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.687087][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.700665][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.715963][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.735053][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.757610][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.775298][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.796255][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.818481][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.830307][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.852226][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.872380][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.899691][ T9730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.935424][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.958088][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.018192][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.038408][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.063073][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.080589][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.092643][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.115324][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.145912][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.162164][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.181397][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.200047][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.226137][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.242164][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.266728][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.283389][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.304756][ T9730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.358968][ T9730] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.371879][ T9730] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.394687][ T9730] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.410607][ T9730] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.463009][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.470975][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.909124][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.972147][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.366832][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.462079][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.746804][ T9802] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1809'. [ 252.756344][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.813063][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.310533][ T9807] tipc: Started in network mode [ 253.366681][ T9807] tipc: Node identity e65f9bee151b, cluster identity 4711 [ 253.402993][ T9807] tipc: Enabled bearer , priority 10 [ 253.760425][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.771753][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.788010][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.800195][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.870701][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.525609][ T5839] tipc: Node number set to 4081359854 [ 254.632437][ T838] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 254.832185][ T838] usb 9-1: Using ep0 maxpacket: 32 [ 254.858867][ T838] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 254.913347][ T838] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 254.979687][ T838] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 255.046370][ T838] usb 9-1: config 1 has no interface number 0 [ 255.092568][ T838] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.191819][ T838] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 255.246887][ T838] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 255.316989][ T838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.441371][ T838] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 255.692172][ T838] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 255.808536][ T9817] chnl_net:caif_netlink_parms(): no params data found [ 255.933636][ T5844] Bluetooth: hci2: command tx timeout [ 256.225745][ T5839] usb 9-1: USB disconnect, device number 2 [ 256.260806][ T5839] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 256.855856][ T9817] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.932829][ T9817] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.971549][ T9817] bridge_slave_0: entered allmulticast mode [ 257.092634][ T9817] bridge_slave_0: entered promiscuous mode [ 257.159284][ T9817] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.226850][ T9817] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.305379][ T9817] bridge_slave_1: entered allmulticast mode [ 257.354377][ T9817] bridge_slave_1: entered promiscuous mode [ 257.870903][ T9817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.932594][ T5839] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 257.973724][ T9817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.011036][ T55] Bluetooth: hci2: command tx timeout [ 258.153644][ T5839] usb 7-1: Using ep0 maxpacket: 8 [ 258.195235][ T5839] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 258.263456][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.271616][ T5839] usb 7-1: Product: syz [ 258.327062][ T5839] usb 7-1: Manufacturer: syz [ 258.331805][ T5839] usb 7-1: SerialNumber: syz [ 258.385984][ T5839] usb 7-1: config 0 descriptor?? [ 258.420635][ T9817] team0: Port device team_slave_0 added [ 258.441245][ T5839] gspca_main: se401-2.14.0 probing 047d:5003 [ 258.552386][ T9817] team0: Port device team_slave_1 added [ 258.847068][ T5839] gspca_se401: Bayer format not supported! [ 259.000038][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.017029][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.034535][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.053937][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.066331][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.076056][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.160831][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.208881][ T838] usb 7-1: USB disconnect, device number 2 [ 259.375886][ T9817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.521593][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.581752][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.786089][ T9817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.086691][ T5844] Bluetooth: hci2: command tx timeout [ 260.608263][ T9817] hsr_slave_0: entered promiscuous mode [ 260.651658][ T9817] hsr_slave_1: entered promiscuous mode [ 260.710723][ T9817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.764240][ T5839] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 260.786781][ T9817] Cannot create hsr debugfs directory [ 260.984038][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1840'. [ 261.013629][ T5839] usb 7-1: Using ep0 maxpacket: 32 [ 261.061267][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.068205][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.103039][ T5839] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 261.162164][ T5839] usb 7-1: config 0 has no interface number 0 [ 261.202580][ T5844] Bluetooth: hci3: command tx timeout [ 261.219474][ T5839] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 261.275357][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.332153][ T5839] usb 7-1: Product: syz [ 261.372155][ T5839] usb 7-1: Manufacturer: syz [ 261.396770][ T5839] usb 7-1: SerialNumber: syz [ 261.436114][ T5839] usb 7-1: config 0 descriptor?? [ 261.475118][ T5839] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 261.775561][ T5839] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 261.865328][ T5839] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 262.175881][ T5844] Bluetooth: hci2: command tx timeout [ 262.250215][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 262.272231][ T5839] usb 7-1: USB disconnect, device number 3 [ 262.359148][ T5839] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 262.527970][ T5839] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 262.640692][ T5839] quatech2 7-1:0.51: device disconnected [ 263.283416][ T5844] Bluetooth: hci3: command tx timeout [ 263.468728][ T9907] cgroup: fork rejected by pids controller in /syz7 [ 263.632344][ T9817] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 263.724210][ T9817] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 263.804534][ T9864] chnl_net:caif_netlink_parms(): no params data found [ 263.869229][ T9817] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 264.069790][ T9817] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 264.906214][ T9864] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.929016][ T9864] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.942264][ T9864] bridge_slave_0: entered allmulticast mode [ 264.951273][ T9864] bridge_slave_0: entered promiscuous mode [ 264.975333][ T9864] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.992197][ T5893] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 265.014774][ T9864] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.032422][ T9864] bridge_slave_1: entered allmulticast mode [ 265.043043][ T9864] bridge_slave_1: entered promiscuous mode [ 265.176091][ T5893] usb 7-1: Using ep0 maxpacket: 16 [ 265.196276][ T5893] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 265.223271][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.260903][ T5893] usb 7-1: config 0 descriptor?? [ 265.291429][ T5893] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 265.335697][ T9864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.364311][ T5844] Bluetooth: hci3: command tx timeout [ 265.401749][ T9864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.659310][ T9864] team0: Port device team_slave_0 added [ 265.781199][ T9864] team0: Port device team_slave_1 added [ 265.942961][ T5893] gspca_sonixj: reg_w1 err -71 [ 265.947996][ T5893] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 265.999962][ T5893] usb 7-1: USB disconnect, device number 4 [ 266.072633][ T9864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.101327][ T9864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.127672][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.145576][ T9864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.235445][ T9864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.252508][ T9864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.278591][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.318903][ T9864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.570671][ T9817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.694830][ T9864] hsr_slave_0: entered promiscuous mode [ 266.727486][ T9864] hsr_slave_1: entered promiscuous mode [ 266.753338][ T9864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.761189][ T9864] Cannot create hsr debugfs directory [ 267.155133][ T9817] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.240563][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.247852][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.304907][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.312220][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.459203][ T5844] Bluetooth: hci3: command tx timeout [ 268.209435][ T9864] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.281476][ T9864] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.488092][ T9817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.747320][ T9817] veth0_vlan: entered promiscuous mode [ 268.805133][ T9817] veth1_vlan: entered promiscuous mode [ 268.930320][ T9817] veth0_macvtap: entered promiscuous mode [ 269.035498][ T9817] veth1_macvtap: entered promiscuous mode [ 269.147889][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.211728][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.261681][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.333528][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.368143][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.416427][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.442088][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.466307][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.492421][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.519733][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.547992][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.568108][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.594335][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.616328][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.642029][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.666045][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.696511][ T9817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.741060][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.771594][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.809605][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.825899][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.842250][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.865966][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.899808][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.913657][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.936287][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.956064][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.977047][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.010511][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.032585][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.055216][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.075706][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.101203][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.135092][ T9817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.215415][ T9817] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.261190][ T9817] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.322653][ T9817] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.375218][ T9817] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.812571][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.820454][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.969589][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.996188][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.603291][ T5839] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 274.772716][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.794497][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.825968][ T5839] usb 7-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 274.843541][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.865930][ T5839] usb 7-1: config 0 descriptor?? [ 275.330637][ T5839] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:0909.002F/input/input19 [ 275.438152][ T5839] uclogic 0003:28BD:0909.002F: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.6-1/input0 [ 275.569582][ T5839] usb 7-1: USB disconnect, device number 5 [ 278.421857][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.431884][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.442050][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.452269][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.460745][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.562504][ T5152] Bluetooth: hci4: command tx timeout [ 282.642304][ T5152] Bluetooth: hci4: command tx timeout [ 284.733416][ T5152] Bluetooth: hci4: command tx timeout [ 286.802358][ T5152] Bluetooth: hci4: command tx timeout [ 296.866953][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.876786][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.891750][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.913246][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.926050][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.038484][ T5152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.052758][ T5152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.063627][ T5152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.072906][ T5152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.092618][ T5152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.190785][ T9989] chnl_net:caif_netlink_parms(): no params data found [ 297.369458][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 297.380941][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 297.389888][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 297.403306][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 297.411229][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.202176][ T9989] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.209418][ T9989] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.237735][ T9989] bridge_slave_0: entered allmulticast mode [ 298.264235][ T9989] bridge_slave_0: entered promiscuous mode [ 298.301313][ T9989] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.330641][ T9989] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.348116][ T9989] bridge_slave_1: entered allmulticast mode [ 298.375890][ T9989] bridge_slave_1: entered promiscuous mode [ 298.617064][ T9989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.698911][ T9989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.962560][ T5844] Bluetooth: hci1: command tx timeout [ 299.038505][ T9989] team0: Port device team_slave_0 added [ 299.115262][ T9989] team0: Port device team_slave_1 added [ 299.202776][ T5844] Bluetooth: hci5: command tx timeout [ 299.443911][ T9989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.450924][ T9989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.477200][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.522386][ T5844] Bluetooth: hci6: command tx timeout [ 299.540426][ T9989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.663789][ T9989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.670793][ T9989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.696772][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.737784][ T9989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.428823][T10006] chnl_net:caif_netlink_parms(): no params data found [ 300.554897][T10008] chnl_net:caif_netlink_parms(): no params data found [ 300.579189][T10003] chnl_net:caif_netlink_parms(): no params data found [ 300.733341][ T9989] hsr_slave_0: entered promiscuous mode [ 300.764977][ T9989] hsr_slave_1: entered promiscuous mode [ 300.782298][ T9989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.789959][ T9989] Cannot create hsr debugfs directory [ 301.053029][ T5844] Bluetooth: hci1: command tx timeout [ 301.283258][ T5844] Bluetooth: hci5: command tx timeout [ 301.602481][ T5844] Bluetooth: hci6: command tx timeout [ 301.995187][T10003] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.023167][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.030588][T10003] bridge_slave_0: entered allmulticast mode [ 302.063507][T10003] bridge_slave_0: entered promiscuous mode [ 302.084262][T10003] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.091693][T10003] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.122501][T10003] bridge_slave_1: entered allmulticast mode [ 302.130543][T10003] bridge_slave_1: entered promiscuous mode [ 302.542972][T10006] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.572375][T10006] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.580052][T10006] bridge_slave_0: entered allmulticast mode [ 302.604504][T10006] bridge_slave_0: entered promiscuous mode [ 302.624316][T10006] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.631506][T10006] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.659742][T10006] bridge_slave_1: entered allmulticast mode [ 302.703325][T10006] bridge_slave_1: entered promiscuous mode [ 302.739992][T10008] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.763350][T10008] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.770708][T10008] bridge_slave_0: entered allmulticast mode [ 302.797338][T10008] bridge_slave_0: entered promiscuous mode [ 302.912645][T10003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.124624][ T5844] Bluetooth: hci1: command tx timeout [ 303.169045][T10008] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.182667][T10008] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.190095][T10008] bridge_slave_1: entered allmulticast mode [ 303.220844][T10008] bridge_slave_1: entered promiscuous mode [ 303.247394][T10003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.363227][ T5844] Bluetooth: hci5: command tx timeout [ 303.393174][T10006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.682789][ T5844] Bluetooth: hci6: command tx timeout [ 303.888617][T10006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.139800][T10008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.181852][T10008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.216930][T10003] team0: Port device team_slave_0 added [ 304.243186][T10003] team0: Port device team_slave_1 added [ 304.360411][T10006] team0: Port device team_slave_0 added [ 304.711601][T10006] team0: Port device team_slave_1 added [ 304.828773][T10008] team0: Port device team_slave_0 added [ 304.850686][T10003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.872565][T10003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.928839][T10003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.040799][T10008] team0: Port device team_slave_1 added [ 305.067440][T10003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.091563][T10003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.144855][T10003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.205839][ T5844] Bluetooth: hci1: command tx timeout [ 305.442946][ T5844] Bluetooth: hci5: command tx timeout [ 305.773200][ T5844] Bluetooth: hci6: command tx timeout [ 318.428001][ T5152] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 318.437333][ T5152] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 318.446532][ T5152] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 318.456363][ T5152] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 318.464791][ T5152] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 318.882317][T10006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.889362][T10006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.976707][T10006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.008089][T10006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.023261][T10006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.082307][T10006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.108765][T10008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.124811][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.172034][T10008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.338544][T10008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.368664][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.394602][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.425782][T10008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.694030][T10003] hsr_slave_0: entered promiscuous mode [ 319.712697][T10003] hsr_slave_1: entered promiscuous mode [ 319.719704][T10003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.746151][T10003] Cannot create hsr debugfs directory [ 320.126299][T10006] hsr_slave_0: entered promiscuous mode [ 320.145419][T10006] hsr_slave_1: entered promiscuous mode [ 320.166746][T10006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.182025][T10006] Cannot create hsr debugfs directory [ 320.304008][T10008] hsr_slave_0: entered promiscuous mode [ 320.322945][T10008] hsr_slave_1: entered promiscuous mode [ 320.342307][T10008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.362128][T10008] Cannot create hsr debugfs directory [ 320.482607][ T5844] Bluetooth: hci8: command tx timeout [ 322.400956][T10035] chnl_net:caif_netlink_parms(): no params data found [ 322.513762][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.527047][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.564642][ T5844] Bluetooth: hci8: command tx timeout [ 322.935198][T10035] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.952258][T10035] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.960078][T10035] bridge_slave_0: entered allmulticast mode [ 322.984722][T10035] bridge_slave_0: entered promiscuous mode [ 323.001304][T10035] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.019085][T10035] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.055411][T10035] bridge_slave_1: entered allmulticast mode [ 323.074584][T10035] bridge_slave_1: entered promiscuous mode [ 323.305435][T10035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.341619][T10035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.608676][T10035] team0: Port device team_slave_0 added [ 323.637674][T10035] team0: Port device team_slave_1 added [ 324.024330][T10035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.031708][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.057834][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.096597][T10035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.123951][T10035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.131051][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.157095][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.208920][T10035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.505731][T10035] hsr_slave_0: entered promiscuous mode [ 324.526570][T10035] hsr_slave_1: entered promiscuous mode [ 324.541376][T10035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.562486][T10035] Cannot create hsr debugfs directory [ 324.642515][ T5844] Bluetooth: hci8: command tx timeout [ 326.723024][ T5844] Bluetooth: hci8: command tx timeout [ 339.077205][ T5152] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 339.096235][ T5152] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 339.114435][ T5152] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 339.126206][ T5152] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 339.136233][ T5152] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 339.870622][T10048] chnl_net:caif_netlink_parms(): no params data found [ 340.300882][T10048] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.323872][T10048] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.331338][T10048] bridge_slave_0: entered allmulticast mode [ 340.371021][T10048] bridge_slave_0: entered promiscuous mode [ 340.396241][T10048] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.422370][T10048] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.430215][T10048] bridge_slave_1: entered allmulticast mode [ 340.464340][T10048] bridge_slave_1: entered promiscuous mode [ 340.685467][T10048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.721865][T10048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.062737][T10048] team0: Port device team_slave_0 added [ 341.093130][T10048] team0: Port device team_slave_1 added [ 341.202661][ T5844] Bluetooth: hci9: command tx timeout [ 341.299712][T10048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.312199][T10048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.338220][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.379771][T10048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.400629][T10048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.426488][T10048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.472642][T10048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.688655][T10048] hsr_slave_0: entered promiscuous mode [ 341.703600][T10048] hsr_slave_1: entered promiscuous mode [ 341.722214][T10048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.729856][T10048] Cannot create hsr debugfs directory [ 343.283843][ T5844] Bluetooth: hci9: command tx timeout [ 345.362937][ T5844] Bluetooth: hci9: command tx timeout [ 347.442951][ T5844] Bluetooth: hci9: command tx timeout [ 355.292038][ T5152] Bluetooth: hci0: command 0x0406 tx timeout [ 357.052964][ T5152] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 357.083841][ T5152] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 357.093376][ T5152] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 357.103369][ T5152] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 357.111376][ T5152] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 357.218629][ T5844] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 357.242360][ T5844] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 357.251518][ T5844] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 357.271083][ T5844] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 357.281548][ T5844] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 357.490838][ T5152] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 357.513645][ T5152] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 357.525482][ T5152] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 357.534035][ T5152] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 357.550101][ T5152] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 358.677457][T10062] chnl_net:caif_netlink_parms(): no params data found [ 358.944691][T10063] chnl_net:caif_netlink_parms(): no params data found [ 359.205679][ T5152] Bluetooth: hci10: command tx timeout [ 359.362985][ T5152] Bluetooth: hci11: command tx timeout [ 359.374391][T10065] chnl_net:caif_netlink_parms(): no params data found [ 359.602552][ T55] Bluetooth: hci12: command tx timeout [ 359.868521][T10063] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.898082][T10063] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.907599][T10063] bridge_slave_0: entered allmulticast mode [ 359.934462][T10063] bridge_slave_0: entered promiscuous mode [ 360.046605][T10062] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.062339][T10062] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.069861][T10062] bridge_slave_0: entered allmulticast mode [ 360.115597][T10062] bridge_slave_0: entered promiscuous mode [ 360.142863][T10063] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.150342][T10063] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.170732][T10063] bridge_slave_1: entered allmulticast mode [ 360.207700][T10063] bridge_slave_1: entered promiscuous mode [ 360.338378][T10062] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.356744][T10062] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.372470][T10062] bridge_slave_1: entered allmulticast mode [ 360.392849][T10062] bridge_slave_1: entered promiscuous mode [ 360.402626][ T5152] Bluetooth: hci7: command 0x0406 tx timeout [ 360.838534][T10063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.876994][T10063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.081578][T10062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.117684][T10062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.282789][ T5844] Bluetooth: hci10: command tx timeout [ 361.330187][T10065] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.356660][T10065] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.372470][T10065] bridge_slave_0: entered allmulticast mode [ 361.392345][T10065] bridge_slave_0: entered promiscuous mode [ 361.442587][ T5844] Bluetooth: hci11: command tx timeout [ 361.580754][T10065] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.603120][T10065] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.610534][T10065] bridge_slave_1: entered allmulticast mode [ 361.640407][T10065] bridge_slave_1: entered promiscuous mode [ 361.693252][ T5844] Bluetooth: hci12: command tx timeout [ 361.880886][T10062] team0: Port device team_slave_0 added [ 361.946556][T10063] team0: Port device team_slave_0 added [ 362.113333][T10065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.154214][T10062] team0: Port device team_slave_1 added [ 362.170575][T10063] team0: Port device team_slave_1 added [ 362.515798][T10065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.949613][T10062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.972385][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.039558][T10062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.090675][T10063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.101954][T10063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.160394][T10063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.196154][T10063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.212400][T10063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.238339][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.302490][T10063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.367630][ T5844] Bluetooth: hci10: command tx timeout [ 363.432906][T10062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.439958][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.541979][ T5844] Bluetooth: hci11: command tx timeout [ 363.584111][T10062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.654028][T10065] team0: Port device team_slave_0 added [ 363.762801][ T5844] Bluetooth: hci12: command tx timeout [ 363.803770][T10065] team0: Port device team_slave_1 added [ 363.934643][T10063] hsr_slave_0: entered promiscuous mode [ 363.953814][T10063] hsr_slave_1: entered promiscuous mode [ 363.976989][T10063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.993791][T10063] Cannot create hsr debugfs directory [ 364.344165][T10065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.351177][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.377159][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.420260][T10065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.720302][T10065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.742253][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.788711][T10065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.861719][T10062] hsr_slave_0: entered promiscuous mode [ 364.885380][T10062] hsr_slave_1: entered promiscuous mode [ 364.902307][T10062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.936642][T10062] Cannot create hsr debugfs directory [ 365.442435][ T5844] Bluetooth: hci10: command tx timeout [ 365.557499][T10065] hsr_slave_0: entered promiscuous mode [ 365.581876][T10065] hsr_slave_1: entered promiscuous mode [ 365.589147][T10065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.613605][ T5844] Bluetooth: hci11: command tx timeout [ 365.643295][T10065] Cannot create hsr debugfs directory [ 365.843220][ T5844] Bluetooth: hci12: command tx timeout [ 374.490045][ T9864] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.547104][ T9864] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.034450][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.056766][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.065543][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.082290][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.090411][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.790888][T10096] chnl_net:caif_netlink_parms(): no params data found [ 380.286989][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.307763][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.334949][T10096] bridge_slave_0: entered allmulticast mode [ 380.356409][T10096] bridge_slave_0: entered promiscuous mode [ 380.380247][T10096] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.413090][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.420533][T10096] bridge_slave_1: entered allmulticast mode [ 380.446498][T10096] bridge_slave_1: entered promiscuous mode [ 380.710047][T10096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.778078][T10096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.015055][T10096] team0: Port device team_slave_0 added [ 381.044864][T10096] team0: Port device team_slave_1 added [ 381.122872][ T5844] Bluetooth: hci2: command tx timeout [ 381.288765][T10096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.321754][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.389832][T10096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.428727][T10096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.451965][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.512024][T10096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.784745][T10096] hsr_slave_0: entered promiscuous mode [ 381.830904][T10096] hsr_slave_1: entered promiscuous mode [ 381.856799][T10096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.871983][T10096] Cannot create hsr debugfs directory [ 383.212737][ T5844] Bluetooth: hci2: command tx timeout [ 383.968055][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.977692][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.283129][ T5844] Bluetooth: hci2: command tx timeout [ 386.015278][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 387.362698][ T5152] Bluetooth: hci2: command tx timeout [ 399.424454][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 399.445025][ T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 399.456674][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 399.468236][ T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 399.476599][ T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 400.178789][T10108] chnl_net:caif_netlink_parms(): no params data found [ 401.367081][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 401.533096][ T55] Bluetooth: hci7: command tx timeout [ 403.602990][ T55] Bluetooth: hci7: command tx timeout [ 403.996517][T10108] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.023956][T10108] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.052285][T10108] bridge_slave_0: entered allmulticast mode [ 404.072197][T10108] bridge_slave_0: entered promiscuous mode [ 404.081425][T10108] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.103163][T10108] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.110588][T10108] bridge_slave_1: entered allmulticast mode [ 404.153256][T10108] bridge_slave_1: entered promiscuous mode [ 404.367387][T10108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.404935][T10108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.657160][T10108] team0: Port device team_slave_0 added [ 404.684916][T10108] team0: Port device team_slave_1 added [ 405.059864][T10108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.087272][T10108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.141955][T10108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.187717][T10108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.212865][T10108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.238890][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.277205][T10108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.585912][T10108] hsr_slave_0: entered promiscuous mode [ 405.606924][T10108] hsr_slave_1: entered promiscuous mode [ 405.632212][T10108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.639891][T10108] Cannot create hsr debugfs directory [ 405.683918][ T5152] Bluetooth: hci7: command tx timeout [ 407.763302][ T5152] Bluetooth: hci7: command tx timeout [ 417.761344][ T55] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 417.777966][ T55] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 417.787676][ T55] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 417.796418][ T55] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 417.805015][ T55] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 417.902716][ T55] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 417.913857][ T55] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 417.922750][ T55] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 417.937149][ T55] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 417.948987][ T55] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 418.117543][ T5152] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 418.135282][ T5152] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 418.144177][ T5152] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 418.155439][ T5152] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 418.171276][ T5152] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 419.485064][T10122] chnl_net:caif_netlink_parms(): no params data found [ 419.528741][T10124] chnl_net:caif_netlink_parms(): no params data found [ 419.922912][ T5848] Bluetooth: hci13: command tx timeout [ 420.004641][ T5848] Bluetooth: hci14: command tx timeout [ 420.243412][ T5848] Bluetooth: hci15: command tx timeout [ 421.791225][T10128] chnl_net:caif_netlink_parms(): no params data found [ 421.865799][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 421.873288][ T5850] Bluetooth: hci5: command 0x0406 tx timeout [ 421.879368][ T5850] Bluetooth: hci6: command 0x0406 tx timeout [ 422.002555][ T55] Bluetooth: hci13: command tx timeout [ 422.084610][ T5152] Bluetooth: hci14: command tx timeout [ 422.324340][ T5844] Bluetooth: hci15: command tx timeout [ 422.567726][T10122] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.593734][T10122] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.601506][T10122] bridge_slave_0: entered allmulticast mode [ 422.624848][T10122] bridge_slave_0: entered promiscuous mode [ 422.668623][T10124] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.682039][T10124] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.689468][T10124] bridge_slave_0: entered allmulticast mode [ 422.724238][T10124] bridge_slave_0: entered promiscuous mode [ 422.760817][T10124] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.792095][T10124] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.799561][T10124] bridge_slave_1: entered allmulticast mode [ 422.842894][T10124] bridge_slave_1: entered promiscuous mode [ 422.852806][T10122] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.860006][T10122] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.892274][T10122] bridge_slave_1: entered allmulticast mode [ 422.912191][T10122] bridge_slave_1: entered promiscuous mode [ 423.383636][T10122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.580746][T10124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.633285][T10122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.781854][T10128] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.802272][T10128] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.809686][T10128] bridge_slave_0: entered allmulticast mode [ 423.836582][T10128] bridge_slave_0: entered promiscuous mode [ 423.855981][T10128] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.872076][T10128] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.896872][T10128] bridge_slave_1: entered allmulticast mode [ 423.925168][T10128] bridge_slave_1: entered promiscuous mode [ 423.945911][T10124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.093331][ T5844] Bluetooth: hci13: command tx timeout [ 424.173257][ T5844] Bluetooth: hci14: command tx timeout [ 424.414252][ T5844] Bluetooth: hci15: command tx timeout [ 424.511417][T10122] team0: Port device team_slave_0 added [ 424.531282][T10122] team0: Port device team_slave_1 added [ 424.663480][T10124] team0: Port device team_slave_0 added [ 424.923791][T10128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.963867][T10124] team0: Port device team_slave_1 added [ 424.980235][T10122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.002585][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.064110][T10122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.098324][T10122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.112278][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.138222][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.202045][T10122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.243528][T10128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.772828][T10128] team0: Port device team_slave_0 added [ 425.780195][T10124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.797742][T10124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.823672][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.871977][T10124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.905186][T10124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.921950][T10124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.947881][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.003997][T10124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.139606][T10128] team0: Port device team_slave_1 added [ 426.162786][ T5844] Bluetooth: hci13: command tx timeout [ 426.243255][ T5844] Bluetooth: hci14: command tx timeout [ 426.482823][ T5844] Bluetooth: hci15: command tx timeout [ 426.815080][T10122] hsr_slave_0: entered promiscuous mode [ 426.832944][T10122] hsr_slave_1: entered promiscuous mode [ 426.853771][T10122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.882447][T10122] Cannot create hsr debugfs directory [ 426.905977][T10128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.934176][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.005665][T10128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.054516][T10128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.061533][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.087484][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.141971][T10128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.194686][T10124] hsr_slave_0: entered promiscuous mode [ 427.218770][T10124] hsr_slave_1: entered promiscuous mode [ 427.231023][T10124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.252596][T10124] Cannot create hsr debugfs directory [ 427.759603][T10128] hsr_slave_0: entered promiscuous mode [ 427.792276][T10128] hsr_slave_1: entered promiscuous mode [ 427.799604][T10128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.822325][T10128] Cannot create hsr debugfs directory [ 439.702782][ T5152] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 439.722187][ T5152] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 439.737110][ T5152] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 439.752565][ T5152] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 439.761001][ T5152] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 440.458584][T10152] chnl_net:caif_netlink_parms(): no params data found [ 440.913496][T10152] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.931993][T10152] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.939458][T10152] bridge_slave_0: entered allmulticast mode [ 440.966165][T10152] bridge_slave_0: entered promiscuous mode [ 441.002971][T10152] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.010257][T10152] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.034767][T10152] bridge_slave_1: entered allmulticast mode [ 441.054780][T10152] bridge_slave_1: entered promiscuous mode [ 441.316175][T10152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.361653][T10152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.729436][T10152] team0: Port device team_slave_0 added [ 441.757077][T10152] team0: Port device team_slave_1 added [ 441.845602][ T5844] Bluetooth: hci16: command tx timeout [ 442.033030][T10152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.040049][T10152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.066204][ C0] vkms_vblank_simulate: vblank timer overrun [ 442.124815][T10152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.162265][T10152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.169402][T10152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.249434][T10152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.336403][ T5844] Bluetooth: hci8: command 0x0406 tx timeout [ 442.656749][T10152] hsr_slave_0: entered promiscuous mode [ 442.687485][T10152] hsr_slave_1: entered promiscuous mode [ 442.703158][T10152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.710780][T10152] Cannot create hsr debugfs directory [ 443.923406][ T5152] Bluetooth: hci16: command tx timeout [ 445.406549][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.421976][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.015130][ T5152] Bluetooth: hci16: command tx timeout [ 448.093332][ T5152] Bluetooth: hci16: command tx timeout [ 449.213345][ T31] INFO: task kworker/u8:2:36 blocked for more than 143 seconds. [ 449.221068][ T31] Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 [ 449.266974][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 449.333147][ T31] task:kworker/u8:2 state:D stack:21720 pid:36 tgid:36 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 449.369705][ T31] Workqueue: netns cleanup_net [ 449.395027][ T31] Call Trace: [ 449.398415][ T31] [ 449.401390][ T31] __schedule+0x1b88/0x5240 [ 449.548851][ T31] ? schedule+0x163/0x360 [ 449.570590][ T31] ? __pfx___schedule+0x10/0x10 [ 449.586795][ T31] ? schedule+0x90/0x360 [ 449.591134][ T31] ? schedule+0x90/0x360 [ 449.621965][ T31] schedule+0x163/0x360 [ 449.626221][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 449.631068][ T31] schedule_preempt_disabled+0x13/0x30 [ 449.652373][ T31] __mutex_lock+0x805/0x10c0 [ 449.657080][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 449.672709][ T31] ? devlink_pernet_pre_exit+0x13d/0x450 [ 449.678436][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 449.711954][ T31] ? devlinks_xa_find_get+0x2b/0x310 [ 449.718088][ T31] ? devlinks_xa_find_get+0x2ed/0x310 [ 449.742386][ T31] ? devlinks_xa_find_get+0x2b/0x310 [ 449.747808][ T31] devlink_pernet_pre_exit+0x13d/0x450 [ 449.762375][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 449.768487][ T31] ? class_remove_file_ns+0x121/0x160 [ 449.794766][ T31] cleanup_net+0x627/0xd60 [ 449.821943][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 449.826989][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 449.853194][ T31] process_scheduled_works+0xac3/0x18e0 [ 449.858867][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 449.871948][ T31] ? assign_work+0x367/0x3d0 [ 449.876627][ T31] worker_thread+0x870/0xd50 [ 449.881337][ T31] ? __kthread_parkme+0x1a8/0x200 [ 449.909021][ T31] ? __pfx_worker_thread+0x10/0x10 [ 449.923864][ T31] kthread+0x7b7/0x940 [ 449.928022][ T31] ? __pfx_worker_thread+0x10/0x10 [ 449.955875][ T31] ? __pfx_kthread+0x10/0x10 [ 449.960555][ T31] ? __pfx_kthread+0x10/0x10 [ 449.971937][ T31] ? __pfx_kthread+0x10/0x10 [ 449.976699][ T31] ? __pfx_kthread+0x10/0x10 [ 449.981462][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 450.009008][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 450.025607][ T31] ? __pfx_kthread+0x10/0x10 [ 450.030419][ T31] ret_from_fork+0x4b/0x80 [ 450.053969][ T31] ? __pfx_kthread+0x10/0x10 [ 450.058656][ T31] ret_from_fork_asm+0x1a/0x30 [ 450.082853][ T31] [ 450.086121][ T31] INFO: task syz.5.1798:9761 blocked for more than 144 seconds. [ 450.101975][ T31] Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 [ 450.134555][ T31] Blocked by coredump. [ 450.139341][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 450.191951][ T31] task:syz.5.1798 state:D stack:24456 pid:9761 tgid:9761 ppid:9636 task_flags:0x40044c flags:0x00004006 [ 450.231929][ T31] Call Trace: [ 450.235282][ T31] [ 450.238302][ T31] __schedule+0x1b88/0x5240 [ 450.264904][ T31] ? schedule+0x163/0x360 [ 450.269394][ T31] ? __pfx___schedule+0x10/0x10 [ 450.281953][ T31] ? schedule+0x90/0x360 [ 450.286411][ T31] ? schedule+0x90/0x360 [ 450.290713][ T31] schedule+0x163/0x360 [ 450.319545][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 450.326021][ T31] schedule_preempt_disabled+0x13/0x30 [ 450.331596][ T31] __mutex_lock+0x805/0x10c0 [ 450.354728][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 450.359584][ T31] ? rcu_barrier+0x4c/0x530 [ 450.373839][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 450.379030][ T31] ? __mutex_unlock_slowpath+0x79a/0x800 [ 450.403861][ T31] ? do_group_exit+0x207/0x2c0 [ 450.408723][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 450.441985][ T31] rcu_barrier+0x4c/0x530 [ 450.446508][ T31] netdev_run_todo+0x380/0xf30 [ 450.451327][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 450.474815][ T31] ? netdev_state_change+0xa9/0x1a0 [ 450.480137][ T31] ? __pfx_netdev_state_change+0x10/0x10 [ 450.505430][ T31] ? kfree+0x198/0x430 [ 450.509593][ T31] ? tun_chr_close+0x105/0x1b0 [ 450.541943][ T31] tun_chr_close+0x137/0x1b0 [ 450.546670][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 450.551827][ T31] __fput+0x3e9/0x9f0 [ 450.573011][ T31] task_work_run+0x251/0x310 [ 450.577739][ T31] ? __pfx_task_work_run+0x10/0x10 [ 450.602738][ T31] ? do_exit+0xa0c/0x28c0 [ 450.607161][ T31] ? do_exit+0xa0c/0x28c0 [ 450.611574][ T31] do_exit+0xa11/0x28c0 [ 450.639800][ T31] ? do_raw_spin_lock+0x151/0x370 [ 450.652317][ T31] ? __pfx_do_exit+0x10/0x10 [ 450.656989][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 450.682556][ T31] do_group_exit+0x207/0x2c0 [ 450.687245][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 450.703876][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 450.709310][ T31] get_signal+0x1696/0x1730 [ 450.735818][ T31] ? __pfx_get_signal+0x10/0x10 [ 450.740761][ T31] ? __phys_addr+0xba/0x170 [ 450.755741][ T31] arch_do_signal_or_restart+0x98/0x840 [ 450.761400][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 450.785827][ T31] ? task_work_run+0x2c9/0x310 [ 450.790704][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 450.815427][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 450.821069][ T31] do_syscall_64+0x100/0x230 [ 450.844917][ T31] ? clear_bhb_loop+0x45/0xa0 [ 450.863844][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.869821][ T31] RIP: 0033:0x7fef91f8d169 [ 450.882456][ T31] RSP: 002b:00007fef922cfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 450.891039][ T31] RAX: 0000000000000000 RBX: 0000000000039a33 RCX: 00007fef91f8d169 [ 450.921936][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 450.954979][ T31] RBP: 00007fef921a7ba0 R08: 0000000000000001 R09: 00000003922cfe7f [ 450.964397][ T31] R10: 00007fef91e00000 R11: 0000000000000246 R12: 00007fef921a5fac [ 450.992431][ T31] R13: 00007fef921a5fa0 R14: ffffffffffffffff R15: 00007fef922cfca0 [ 451.000547][ T31] [ 451.020135][ T31] INFO: task syz.0.1807:9785 blocked for more than 145 seconds. [ 451.045553][ T31] Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 [ 451.062343][ T31] Blocked by coredump. [ 451.067031][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.095669][ T31] task:syz.0.1807 state:D stack:24264 pid:9785 tgid:9785 ppid:5855 task_flags:0x40044c flags:0x00004006 [ 451.125278][ T31] Call Trace: [ 451.128623][ T31] [ 451.162508][ T31] __schedule+0x1b88/0x5240 [ 451.167160][ T31] ? schedule+0x163/0x360 [ 451.171549][ T31] ? __pfx___schedule+0x10/0x10 [ 451.196860][ T31] ? schedule+0x90/0x360 [ 451.201206][ T31] ? schedule+0x90/0x360 [ 451.211928][ T31] schedule+0x163/0x360 [ 451.216206][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 451.221008][ T31] schedule_preempt_disabled+0x13/0x30 [ 451.251953][ T31] __mutex_lock+0x805/0x10c0 [ 451.256650][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 451.261469][ T31] ? rcu_barrier+0x4c/0x530 [ 451.289013][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 451.301965][ T31] ? __mutex_unlock_slowpath+0x79a/0x800 [ 451.307706][ T31] ? do_group_exit+0x207/0x2c0 [ 451.328358][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 451.353676][ T31] rcu_barrier+0x4c/0x530 [ 451.358101][ T31] netdev_run_todo+0x380/0xf30 [ 451.371961][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 451.377346][ T31] ? netdev_state_change+0xa9/0x1a0 [ 451.404380][ T31] ? __pfx_netdev_state_change+0x10/0x10 [ 451.410112][ T31] ? kfree+0x198/0x430 [ 451.422377][ T31] ? tun_chr_close+0x105/0x1b0 [ 451.427248][ T31] tun_chr_close+0x137/0x1b0 [ 451.453045][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 451.458281][ T31] __fput+0x3e9/0x9f0 [ 451.482459][ T31] task_work_run+0x251/0x310 [ 451.487157][ T31] ? __pfx_task_work_run+0x10/0x10 [ 451.502448][ T31] ? do_exit+0xa0c/0x28c0 [ 451.506862][ T31] ? do_exit+0xa0c/0x28c0 [ 451.511243][ T31] do_exit+0xa11/0x28c0 [ 451.533352][ T31] ? do_raw_spin_lock+0x151/0x370 [ 451.546477][ T31] ? __pfx_do_exit+0x10/0x10 [ 451.551199][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 451.575496][ T31] do_group_exit+0x207/0x2c0 [ 451.580216][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.604867][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 451.610152][ T31] get_signal+0x1696/0x1730 [ 451.623658][ T31] ? __pfx_get_signal+0x10/0x10 [ 451.628598][ T31] arch_do_signal_or_restart+0x98/0x840 [ 451.652436][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 451.658772][ T31] ? task_work_run+0x2c9/0x310 [ 451.684194][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 451.690012][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 451.714513][ T31] do_syscall_64+0x100/0x230 [ 451.719190][ T31] ? clear_bhb_loop+0x45/0xa0 [ 451.731936][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.738001][ T31] RIP: 0033:0x7f68ae38d169 [ 451.768365][ T31] RSP: 002b:00007f68ae6cfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 451.794551][ T31] RAX: 0000000000000000 RBX: 00007f68ae5a7ba0 RCX: 00007f68ae38d169 [ 451.811941][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 451.820025][ T31] RBP: 00007f68ae5a7ba0 R08: 0000000000006414 R09: 00000003ae6cfe7f [ 451.852200][ T31] R10: 00000000005f5bfc R11: 0000000000000246 R12: 000000000003b434 [ 451.860343][ T31] R13: 00007f68ae5a6080 R14: ffffffffffffffff R15: 00007f68ae6cfca0 [ 451.903933][ T31] [ 451.907130][ T31] INFO: task syz-executor:9989 blocked for more than 146 seconds. [ 451.935159][ T31] Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 [ 451.943269][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.982019][ T31] task:syz-executor state:D stack:21448 pid:9989 tgid:9989 ppid:1 task_flags:0x400140 flags:0x00000004 [ 452.014013][ T31] Call Trace: [ 452.017455][ T31] [ 452.020598][ T31] __schedule+0x1b88/0x5240 [ 452.044704][ T31] ? is_bpf_text_address+0x288/0x2a0 [ 452.050127][ T31] ? _parse_integer_limit+0x1b4/0x200 [ 452.072628][ T31] ? schedule+0x163/0x360 [ 452.077059][ T31] ? __pfx___schedule+0x10/0x10 [ 452.091964][ T31] ? schedule+0x90/0x360 [ 452.096331][ T31] ? schedule+0x90/0x360 [ 452.100714][ T31] schedule+0x163/0x360 [ 452.123691][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 452.128541][ T31] schedule_preempt_disabled+0x13/0x30 [ 452.161362][ T31] __mutex_lock+0x805/0x10c0 [ 452.171956][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 452.176811][ T31] ? del_device_store+0xfe/0x490 [ 452.181838][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 452.197111][ T31] ? sysfs_kf_write+0x158/0x260 [ 452.225745][ T31] del_device_store+0xfe/0x490 [ 452.230658][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 452.241975][ T31] ? __pfx_del_device_store+0x10/0x10 [ 452.261732][ T31] ? sysfs_file_kobj+0x1e5/0x230 [ 452.282962][ T31] ? sysfs_kf_write+0x166/0x260 [ 452.287914][ T31] ? bus_attr_store+0x4f/0xb0 [ 452.302413][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 452.307703][ T31] kernfs_fop_write_iter+0x398/0x510 [ 452.322406][ T31] vfs_write+0x70f/0xd10 [ 452.326740][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 452.353968][ T31] ? __pfx_vfs_write+0x10/0x10 [ 452.374762][ T31] ? do_sys_openat2+0x165/0x1d0 [ 452.379754][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 452.402921][ T31] ? blkcg_maybe_throttle_current+0x1ad/0xbb0 [ 452.409096][ T31] ksys_write+0x19d/0x2d0 [ 452.422051][ T31] ? __pfx_ksys_write+0x10/0x10 [ 452.427007][ T31] ? do_syscall_64+0xb6/0x230 [ 452.431775][ T31] do_syscall_64+0xf3/0x230 [ 452.455754][ T31] ? clear_bhb_loop+0x45/0xa0 [ 452.476297][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.491949][ T31] RIP: 0033:0x7f369678bc1f [ 452.496512][ T31] RSP: 002b:00007f3696acf220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 452.521117][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f369678bc1f [ 452.541805][ T31] RDX: 0000000000000001 RSI: 00007f3696acf270 RDI: 0000000000000005 [ 452.559166][ T31] RBP: 00007f369680f4fd R08: 0000000000000000 R09: 00007f3696acf077 [ 452.591934][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 452.600162][ T31] R13: 00007f3696acf270 R14: 00007f36974d4620 R15: 0000000000000003 [ 452.631949][ T31] [ 452.635171][ T31] [ 452.635171][ T31] Showing all locks held in the system: [ 452.651933][ T31] 1 lock held by khungtaskd/31: [ 452.656845][ T31] #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 452.709455][ T31] 4 locks held by kworker/u8:2/36: [ 452.721935][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 452.746505][ T31] #1: ffffc90000ad7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 452.774611][ T31] #2: ffffffff900ef690 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 452.807817][ T31] #3: ffff88805b6450e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x13d/0x450 [ 452.834571][ T31] 3 locks held by kworker/u8:4/62: [ 452.839776][ T31] 5 locks held by kworker/1:2/919: [ 452.852209][ T31] 2 locks held by getty/5595: [ 452.856949][ T31] #0: ffff88814cee70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 452.891931][ T31] #1: ffffc900036e32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x53d/0x16b0 [ 452.927601][ T31] 1 lock held by syz.5.1798/9761: [ 452.934936][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 452.963265][ T31] 1 lock held by syz.0.1807/9785: [ 452.968365][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 453.001963][ T31] 7 locks held by syz-executor/9864: [ 453.007322][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 453.040031][ T31] #1: ffff888064f94488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 453.071939][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 453.102334][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 453.121945][ T31] #4: ffff88805b6450e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 [ 453.157415][ T31] #5: ffff88805b646250 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 453.185738][ T31] #6: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 453.212624][ T31] 1 lock held by syz.8.1845/9895: [ 453.217759][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 453.248375][ T31] 2 locks held by kworker/1:10/9937: [ 453.261958][ T31] 3 locks held by kworker/1:12/9945: [ 453.267355][ T31] 1 lock held by syz.9.1808/9949: [ 453.291057][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 453.321938][ T31] 2 locks held by kworker/1:13/9968: [ 453.327383][ T31] 4 locks held by syz-executor/9989: [ 453.341942][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 453.351252][ T31] #1: ffff88806105dc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 453.388609][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 453.421938][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 453.442257][ T31] 1 lock held by syz.6.1882/9992: [ 453.447385][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 453.480777][ T31] 4 locks held by syz-executor/10003: [ 453.504001][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 453.534651][ T31] #1: ffff88803d754488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 453.551935][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 453.571938][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 453.602541][ T31] 4 locks held by syz-executor/10006: [ 453.608097][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 453.638138][ T31] #1: ffff88803c715888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 453.662615][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 453.700360][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 453.723868][ T31] 4 locks held by syz-executor/10008: [ 453.729390][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 453.758143][ T31] #1: ffff88803dabec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 453.782779][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 453.821934][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 453.841951][ T31] 4 locks held by syz-executor/10035: [ 453.847510][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 453.878782][ T31] #1: ffff88808048c888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 453.911960][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 453.931925][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 453.962434][ T31] 4 locks held by syz-executor/10048: [ 453.967916][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 454.005108][ T31] #1: ffff8880796a6488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 454.034220][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 454.052244][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 454.083606][ T31] 4 locks held by syz-executor/10062: [ 454.089048][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 454.121934][ T31] #1: ffff8880543c5888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 454.131848][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 454.171935][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 454.209138][ T31] 4 locks held by syz-executor/10063: [ 454.215065][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 454.243965][ T31] #1: ffff88805200dc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 454.262266][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 454.288723][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 454.321954][ T31] 4 locks held by syz-executor/10065: [ 454.327406][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 454.366265][ T31] #1: ffff888051da6088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 454.394570][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 454.422482][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 454.442304][ T31] 4 locks held by syz-executor/10096: [ 454.447787][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 454.479985][ T31] #1: ffff88809108bc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 454.504819][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 454.541947][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 454.561948][ T31] 4 locks held by syz-executor/10108: [ 454.567440][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 454.602106][ T31] #1: ffff8880832d6488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 454.639487][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 454.662475][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 454.681931][ T31] 4 locks held by syz-executor/10122: [ 454.687376][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 454.719137][ T31] #1: ffff888099915488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 454.747229][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 454.772577][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 454.792244][ T31] 4 locks held by syz-executor/10124: [ 454.797721][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 454.844672][ T31] #1: ffff88809fe9c888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 454.861926][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 454.892885][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 454.911963][ T31] 4 locks held by syz-executor/10128: [ 454.917432][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 454.960814][ T31] #1: ffff888034765088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 454.992140][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 455.011968][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 455.046456][ T31] 4 locks held by syz-executor/10152: [ 455.060043][ T31] #0: ffff888024412420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 455.085936][ T31] #1: ffff88809a262088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 455.112444][ T31] #2: ffff888027b8a008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 455.142306][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 455.172316][ T31] [ 455.174729][ T31] ============================================= [ 455.174729][ T31] [ 455.198792][ T31] NMI backtrace for cpu 0 [ 455.198825][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 455.198850][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 455.198863][ T31] Call Trace: [ 455.198871][ T31] [ 455.198880][ T31] dump_stack_lvl+0x241/0x360 [ 455.198919][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.198949][ T31] ? __pfx__printk+0x10/0x10 [ 455.198991][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 455.199027][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 455.199053][ T31] ? _printk+0xd5/0x120 [ 455.199081][ T31] ? __wake_up_klogd+0xcc/0x110 [ 455.199113][ T31] ? __pfx__printk+0x10/0x10 [ 455.199145][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 455.199168][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 455.199200][ T31] watchdog+0x1058/0x10a0 [ 455.199225][ T31] ? watchdog+0x1ea/0x10a0 [ 455.199251][ T31] ? __pfx_watchdog+0x10/0x10 [ 455.199272][ T31] kthread+0x7b7/0x940 [ 455.199303][ T31] ? __pfx_watchdog+0x10/0x10 [ 455.199325][ T31] ? __pfx_kthread+0x10/0x10 [ 455.199351][ T31] ? __pfx_kthread+0x10/0x10 [ 455.199378][ T31] ? __pfx_kthread+0x10/0x10 [ 455.199405][ T31] ? __pfx_kthread+0x10/0x10 [ 455.199432][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.199460][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 455.199480][ T31] ? __pfx_kthread+0x10/0x10 [ 455.199510][ T31] ret_from_fork+0x4b/0x80 [ 455.199532][ T31] ? __pfx_kthread+0x10/0x10 [ 455.199561][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.199597][ T31] [ 455.199605][ T31] Sending NMI from CPU 0 to CPUs 1: [ 455.373478][ C1] NMI backtrace for cpu 1 [ 455.373497][ C1] CPU: 1 UID: 0 PID: 919 Comm: kworker/1:2 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 455.373518][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 455.373530][ C1] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 455.373565][ C1] RIP: 0010:ip_rcv_finish_core+0xb8f/0x1b60 [ 455.373589][ C1] Code: 46 f7 4d 85 ed 0f 84 97 00 00 00 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 8a 38 b0 f7 bd 08 01 00 00 49 03 6d 00 fc 85 b2 01 48 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 ef [ 455.373604][ C1] RSP: 0018:ffffc90000a08798 EFLAGS: 00000282 [ 455.373618][ C1] RAX: 1ffff110062d8000 RBX: 0000000000000001 RCX: ffff888025babc00 [ 455.373631][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 455.373642][ C1] RBP: ffff88805dae0108 R08: ffffffff8a7d3c3b R09: ffffffff8a362cfc [ 455.373654][ C1] R10: 0000000000000004 R11: ffffffff8a7d2090 R12: dffffc0000000000 [ 455.373672][ C1] R13: ffff8880316c0000 R14: ffff8880a3a06418 R15: ffff8880a3a063c0 [ 455.373685][ C1] FS: 0000000000000000(0000) GS:ffff888125099000(0000) knlGS:0000000000000000 [ 455.373698][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.373710][ C1] CR2: 0000001b30c0dff8 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 455.373725][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 455.373735][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 455.373745][ C1] Call Trace: [ 455.373751][ C1] [ 455.373765][ C1] ip_rcv_finish+0x14a/0x560 [ 455.373784][ C1] ? NF_HOOK+0x38c/0x450 [ 455.373803][ C1] NF_HOOK+0x3a0/0x450 [ 455.373820][ C1] ? skb_orphan+0xae/0xd0 [ 455.373843][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 455.373861][ C1] ? NF_HOOK+0x9e/0x450 [ 455.373879][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 455.373895][ C1] ? ip_rcv_core+0x80c/0xd20 [ 455.373922][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 455.373946][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 455.373965][ C1] __netif_receive_skb+0x2c9/0x670 [ 455.373990][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 455.374020][ C1] process_backlog+0x664/0x15c0 [ 455.374044][ C1] ? process_backlog+0x33d/0x15c0 [ 455.374070][ C1] ? __pfx_process_backlog+0x10/0x10 [ 455.374097][ C1] __napi_poll+0xcb/0x480 [ 455.374119][ C1] net_rx_action+0x89d/0x1240 [ 455.374152][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 455.374174][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 455.374211][ C1] handle_softirqs+0x2d6/0x9b0 [ 455.374233][ C1] ? do_softirq+0x11f/0x1e0 [ 455.374250][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 455.374272][ C1] do_softirq+0x11f/0x1e0 [ 455.374287][ C1] [ 455.374293][ C1] [ 455.374299][ C1] ? __pfx_do_softirq+0x10/0x10 [ 455.374314][ C1] ? send6+0x2d4/0xbf0 [ 455.374339][ C1] ? wg_socket_send_skb_to_peer+0x176/0x1d0 [ 455.374365][ C1] ? lockdep_softirqs_on+0x144/0x1d0 [ 455.374384][ C1] __local_bh_enable_ip+0x1be/0x200 [ 455.374401][ C1] ? wg_socket_send_skb_to_peer+0x176/0x1d0 [ 455.374426][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 455.374449][ C1] wg_socket_send_skb_to_peer+0x176/0x1d0 [ 455.374477][ C1] wg_packet_tx_worker+0x1bf/0x810 [ 455.374504][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 455.374523][ C1] process_scheduled_works+0xac3/0x18e0 [ 455.374556][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 455.374580][ C1] ? assign_work+0x367/0x3d0 [ 455.374600][ C1] worker_thread+0x870/0xd50 [ 455.374627][ C1] ? __kthread_parkme+0x1a8/0x200 [ 455.374649][ C1] ? __pfx_worker_thread+0x10/0x10 [ 455.374675][ C1] kthread+0x7b7/0x940 [ 455.374699][ C1] ? __pfx_worker_thread+0x10/0x10 [ 455.374719][ C1] ? __pfx_kthread+0x10/0x10 [ 455.374740][ C1] ? __pfx_kthread+0x10/0x10 [ 455.374763][ C1] ? __pfx_kthread+0x10/0x10 [ 455.374784][ C1] ? __pfx_kthread+0x10/0x10 [ 455.374806][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.374830][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 455.374845][ C1] ? __pfx_kthread+0x10/0x10 [ 455.374868][ C1] ret_from_fork+0x4b/0x80 [ 455.374885][ C1] ? __pfx_kthread+0x10/0x10 [ 455.374908][ C1] ret_from_fork_asm+0x1a/0x30 [ 455.374933][ C1] [ 455.822190][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 455.822217][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 455.822244][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 455.822258][ T31] Call Trace: [ 455.822268][ T31] [ 455.822278][ T31] dump_stack_lvl+0x241/0x360 [ 455.822318][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.822349][ T31] ? __pfx__printk+0x10/0x10 [ 455.822384][ T31] ? vscnprintf+0x5d/0x90 [ 455.822415][ T31] panic+0x349/0x880 [ 455.822442][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 455.822475][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 455.822507][ T31] ? __pfx_panic+0x10/0x10 [ 455.822532][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 455.822567][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 455.822592][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 455.822621][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 455.822653][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 455.822686][ T31] watchdog+0x1097/0x10a0 [ 455.822711][ T31] ? watchdog+0x1ea/0x10a0 [ 455.822739][ T31] ? __pfx_watchdog+0x10/0x10 [ 455.822761][ T31] kthread+0x7b7/0x940 [ 455.822794][ T31] ? __pfx_watchdog+0x10/0x10 [ 455.822816][ T31] ? __pfx_kthread+0x10/0x10 [ 455.822844][ T31] ? __pfx_kthread+0x10/0x10 [ 455.822884][ T31] ? __pfx_kthread+0x10/0x10 [ 455.822914][ T31] ? __pfx_kthread+0x10/0x10 [ 455.822943][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.822970][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 455.822991][ T31] ? __pfx_kthread+0x10/0x10 [ 455.823022][ T31] ret_from_fork+0x4b/0x80 [ 455.823044][ T31] ? __pfx_kthread+0x10/0x10 [ 455.823073][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.823110][ T31] [ 455.823403][ T31] Kernel Offset: disabled