last executing test programs: 7.525189381s ago: executing program 4 (id=2179): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) 5.971974047s ago: executing program 4 (id=2188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x5, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000020000008100000008000300", @ANYRES32=r2, @ANYBLOB="060066008e88000020003300088100000802110000000802110000010802110000010000000000000a0006"], 0x50}}, 0x0) 5.856182822s ago: executing program 3 (id=2189): open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 5.680327367s ago: executing program 4 (id=2191): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)='m', 0x2}, {&(0x7f0000000500)="603c1b39a7", 0x5}], 0x2}, 0x0) 5.679839564s ago: executing program 3 (id=2192): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0x2}, 0x8) 5.617506305s ago: executing program 2 (id=2099): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc66", 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) 5.514134056s ago: executing program 3 (id=2193): io_setup(0xff, &(0x7f0000000000)=0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 5.499726113s ago: executing program 4 (id=2194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000002006000000000000000a38000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x60}}, 0x0) 5.207832043s ago: executing program 4 (id=2196): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) 5.207469105s ago: executing program 2 (id=2197): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 4.950451892s ago: executing program 3 (id=2198): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) 4.773569869s ago: executing program 4 (id=2201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)={0x0, 0x6, [@dev, @broadcast, @dev, @link_local, @random="68c1d3668c34", @empty]}) 4.52388695s ago: executing program 2 (id=2202): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x1002, @empty}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @broadcast}], 0x10) 4.27320735s ago: executing program 3 (id=2205): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0xffff, &(0x7f0000000740)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 4.186400701s ago: executing program 2 (id=2206): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000180)=[{0x50}, {0x28, 0x0, 0x0, 0xffffe038}, {0x6}]}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[], 0x0) 3.866267569s ago: executing program 3 (id=2209): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@setlink={0x30, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3424, 0x8001}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6592}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x50ff9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 3.845688268s ago: executing program 2 (id=2211): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000002c0)={0x1d, r1, 0x3, {0x0, 0x1, 0x1}, 0x2}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xff, 0x1}, 0xff}, 0x18) 3.803051094s ago: executing program 0 (id=2212): io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x3, "420600753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a0400", 0xffffffffffffffff}) io_submit(r0, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 3.529661661s ago: executing program 2 (id=2214): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000200000000000000080006000100000004000b"], 0x24}}, 0x0) 3.278504692s ago: executing program 1 (id=2215): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffffd, 0x0, 0x0, "00df7152c0261000"}) r1 = syz_open_pts(r0, 0x0) fchmod(r1, 0x0) 3.269862642s ago: executing program 0 (id=2216): r0 = epoll_create1(0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)) 3.041172094s ago: executing program 0 (id=2217): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80015b18, &(0x7f0000000040)) 3.02825538s ago: executing program 1 (id=2218): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.232274797s ago: executing program 0 (id=2219): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.171993135s ago: executing program 1 (id=2220): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000401000/0x3000)=nil) munlockall() 835.597132ms ago: executing program 0 (id=2221): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x6d58, &(0x7f0000000380)={0x0, 0x2f7c, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) 486.200976ms ago: executing program 0 (id=2222): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a000000003a0000400000000000402d00000000200002000a00000000000000fc010000000000000000000000000000000000000d0001007564703a"], 0x6c}}, 0x0) 341.275133ms ago: executing program 1 (id=2223): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) 173.468521ms ago: executing program 1 (id=2224): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) 0s ago: executing program 1 (id=2225): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): VLAN 0 to HW filter on device batadv0 [ 174.415621][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.432170][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.484986][ T8989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.507037][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.514664][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.571677][ T8989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.605610][ T12] bridge_slave_1: left allmulticast mode [ 174.614251][ T12] bridge_slave_1: left promiscuous mode [ 174.635681][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.664791][ T12] bridge_slave_0: left allmulticast mode [ 174.682583][ T12] bridge_slave_0: left promiscuous mode [ 174.688644][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.315030][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.329519][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.341701][ T12] bond0 (unregistering): Released all slaves [ 175.539626][ T8989] hsr_slave_0: entered promiscuous mode [ 175.553435][ T8989] hsr_slave_1: entered promiscuous mode [ 175.561869][ T8989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.583313][ T8989] Cannot create hsr debugfs directory [ 175.785351][ T9073] chnl_net:caif_netlink_parms(): no params data found [ 175.847984][ T8781] veth0_vlan: entered promiscuous mode [ 175.932327][ T8781] veth1_vlan: entered promiscuous mode [ 175.986700][ T5238] Bluetooth: hci1: command tx timeout [ 175.987378][ T12] hsr_slave_0: left promiscuous mode [ 175.992781][ T5238] Bluetooth: hci4: command tx timeout [ 176.023227][ T12] hsr_slave_1: left promiscuous mode [ 176.051449][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.064636][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.075442][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.093104][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.138303][ T12] veth1_macvtap: left promiscuous mode [ 176.162550][ T12] veth0_macvtap: left promiscuous mode [ 176.176408][ T12] veth1_vlan: left promiscuous mode [ 176.182002][ T12] veth0_vlan: left promiscuous mode [ 177.117500][ T12] team0 (unregistering): Port device team_slave_1 removed [ 177.198960][ T12] team0 (unregistering): Port device team_slave_0 removed [ 177.875600][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 177.892485][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 178.040686][ T9156] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 178.066055][ T5227] Bluetooth: hci4: command tx timeout [ 178.066118][ T5238] Bluetooth: hci1: command tx timeout [ 178.347361][ T8781] veth0_macvtap: entered promiscuous mode [ 178.367396][ T8781] veth1_macvtap: entered promiscuous mode [ 178.391643][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.428849][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.436730][ T9073] bridge_slave_0: entered allmulticast mode [ 178.457008][ T9073] bridge_slave_0: entered promiscuous mode [ 178.477162][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.496267][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.516728][ T9073] bridge_slave_1: entered allmulticast mode [ 178.523616][ T9073] bridge_slave_1: entered promiscuous mode [ 178.584055][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.615959][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.625791][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.656119][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.676206][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.707015][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.727737][ T8781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.829010][ T9073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.847647][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.860497][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.870960][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.881618][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.891591][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.902509][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.913409][ T8781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.972794][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1354'. [ 178.983871][ T9073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.023329][ T8781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.032878][ T8781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.042010][ T8781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.064939][ T8781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.132006][ T9073] team0: Port device team_slave_0 added [ 179.178398][ T9073] team0: Port device team_slave_1 added [ 179.273140][ T9073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.284988][ T9073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.326286][ T5285] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 179.329587][ T9073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.363176][ T9073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.390662][ T9073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.416601][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.453424][ T9073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.526185][ T5285] usb 3-1: Using ep0 maxpacket: 16 [ 179.538824][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.556078][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.565834][ T5285] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.579952][ T5285] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 179.590351][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.612957][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.616208][ T5285] usb 3-1: config 0 descriptor?? [ 179.688159][ T935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.704781][ T935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.793435][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.867090][ T9073] hsr_slave_0: entered promiscuous mode [ 179.873802][ T9073] hsr_slave_1: entered promiscuous mode [ 179.940139][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.984480][ T8989] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.986157][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.013310][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.029481][ T8989] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 180.058508][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.076345][ T5285] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 180.083578][ T5285] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 180.104257][ T5285] koneplus 0003:1E7D:2E22.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 180.150096][ T8989] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.165542][ T5227] Bluetooth: hci1: command tx timeout [ 180.165542][ T5238] Bluetooth: hci4: command tx timeout [ 180.214245][ T8989] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 180.440030][ T12] bridge_slave_1: left allmulticast mode [ 180.445712][ T12] bridge_slave_1: left promiscuous mode [ 180.465603][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.490135][ T9289] kvm: kvm [9286]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000040) = 0x0 [ 180.507925][ T12] bridge_slave_0: left allmulticast mode [ 180.523792][ T12] bridge_slave_0: left promiscuous mode [ 180.534040][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.542192][ T8] usb 3-1: USB disconnect, device number 18 [ 181.241040][ T9320] CUSE: unknown device info "ju|:i|l [ 181.241040][ T9320] D ^M`ESP2EQxy;vأ+:yGY2z& [ 181.241040][ T9320] Z9,vu3~cY r(%o)jWe-7#"j-h0u}߻oLx-XzAT " [ 181.273226][ T9320] CUSE: DEVNAME unspecified [ 181.452441][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.502377][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.526759][ T12] bond0 (unregistering): Released all slaves [ 181.571554][ T9316] tun0: tun_chr_ioctl cmd 1074025677 [ 181.577132][ T9316] tun0: linktype set to 769 [ 181.789567][ T29] audit: type=1804 audit(1727501417.642:30): pid=9333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1380" name="/" dev="pidfs" ino=9632 res=1 errno=0 [ 182.253329][ T5238] Bluetooth: hci1: command tx timeout [ 182.283537][ T12] hsr_slave_0: left promiscuous mode [ 182.302468][ T12] hsr_slave_1: left promiscuous mode [ 182.346520][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.353933][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.362284][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.374743][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.450043][ T12] veth1_macvtap: left promiscuous mode [ 182.455592][ T12] veth0_macvtap: left promiscuous mode [ 182.476681][ T12] veth1_vlan: left promiscuous mode [ 182.496704][ T12] veth0_vlan: left promiscuous mode [ 183.151477][ T12] team0 (unregistering): Port device team_slave_1 removed [ 183.181908][ T12] team0 (unregistering): Port device team_slave_0 removed [ 183.614323][ T9392] netlink: 'syz.1.1401': attribute type 6 has an invalid length. [ 183.644395][ T8989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.680305][ T9073] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.714342][ T9073] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.735904][ T8989] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.758157][ T9073] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.773285][ T9073] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.806971][ T935] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.814142][ T935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.891111][ T935] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.898266][ T935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.237678][ T8989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.261484][ T9073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.360258][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.372398][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.393050][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.402293][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.411711][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.422657][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 184.430155][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.480492][ T9413] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1408'. [ 184.484463][ T8989] veth0_vlan: entered promiscuous mode [ 184.524270][ T8989] veth1_vlan: entered promiscuous mode [ 184.601726][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.662406][ T9073] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.780797][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.821732][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.828880][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.922972][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.022748][ T8989] veth0_macvtap: entered promiscuous mode [ 185.069113][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.076257][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.139661][ T8989] veth1_macvtap: entered promiscuous mode [ 185.559105][ T12] bridge_slave_1: left allmulticast mode [ 185.564799][ T12] bridge_slave_1: left promiscuous mode [ 185.575191][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.615116][ T12] bridge_slave_0: left allmulticast mode [ 185.621292][ T12] bridge_slave_0: left promiscuous mode [ 185.633750][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.164727][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.183924][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.202479][ T12] bond0 (unregistering): Released all slaves [ 186.225552][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.239734][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.267878][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.299459][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.330428][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.359406][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.389358][ T8989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.423971][ T9440] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.431166][ T9440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.547357][ T5227] Bluetooth: hci3: command tx timeout [ 186.731588][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.765579][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.803040][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.826679][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.870114][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.916015][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.978061][ T8989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.064396][ T8989] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.100322][ T8989] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.133513][ T8989] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.167665][ T8989] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.280526][ T9073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.639814][ T12] hsr_slave_0: left promiscuous mode [ 187.683184][ T12] hsr_slave_1: left promiscuous mode [ 187.706229][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.756257][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.789723][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.826698][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.905638][ T12] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 187.943638][ T12] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 187.962162][ T12] veth1_macvtap: left promiscuous mode [ 187.975845][ T12] veth0_macvtap: left promiscuous mode [ 188.001756][ T12] veth1_vlan: left promiscuous mode [ 188.014323][ T12] veth0_vlan: left promiscuous mode [ 188.429235][ T12] team0 (unregistering): Port device vlan2 removed [ 188.627098][ T5227] Bluetooth: hci3: command tx timeout [ 189.871307][ T9414] chnl_net:caif_netlink_parms(): no params data found [ 190.127325][ T935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.135165][ T935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.159451][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.169083][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.185616][ T9073] veth0_vlan: entered promiscuous mode [ 190.201663][ T9073] veth1_vlan: entered promiscuous mode [ 190.224111][ T9073] veth0_macvtap: entered promiscuous mode [ 190.233286][ T9073] veth1_macvtap: entered promiscuous mode [ 190.247743][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.258287][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.268191][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.278727][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.288645][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.299413][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.310677][ T9073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.326183][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.336909][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.347055][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.357595][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.367512][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.378400][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.389626][ T9073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.399823][ T9073] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.408587][ T9073] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.417372][ T9073] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.426154][ T9073] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.586327][ T9414] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.600806][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.623188][ T9414] bridge_slave_0: entered allmulticast mode [ 190.656391][ T9414] bridge_slave_0: entered promiscuous mode [ 190.766300][ T5227] Bluetooth: hci3: command tx timeout [ 190.928137][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.935276][ T9414] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.977038][ T9414] bridge_slave_1: entered allmulticast mode [ 191.005119][ T9414] bridge_slave_1: entered promiscuous mode [ 191.172221][ T9414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.225478][ T9414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.302104][ T3027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.322456][ T3027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.394147][ T9414] team0: Port device team_slave_0 added [ 191.413092][ T9414] team0: Port device team_slave_1 added [ 191.453604][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.484538][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.532488][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.585056][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.655163][ T9414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.708008][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.731548][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.805422][ T9537] MPI: mpi too large (181568 bits) [ 191.810760][ T9414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.130321][ T9414] hsr_slave_0: entered promiscuous mode [ 192.159786][ T9414] hsr_slave_1: entered promiscuous mode [ 192.175195][ T9414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.190770][ T9414] Cannot create hsr debugfs directory [ 192.386374][ T5281] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 192.556032][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 192.584218][ T5281] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 192.592817][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 192.758971][ T5281] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 192.781233][ T5281] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 192.790537][ T5227] Bluetooth: hci3: command tx timeout [ 192.817456][ T5281] usb 2-1: Product: syz [ 192.827646][ T5281] usb 2-1: Manufacturer: syz [ 192.832731][ T5281] usb 2-1: SerialNumber: syz [ 192.878686][ T5281] usb 2-1: config 0 descriptor?? [ 192.899732][ T5281] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 192.941939][ T5281] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 193.169501][ T5228] usb 2-1: USB disconnect, device number 17 [ 193.169566][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 193.296517][ T5228] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 193.544135][ T9544] ldusb: No device or device unplugged -19 [ 194.406330][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.412695][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.969605][ T9414] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.058050][ T9414] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.184403][ T9414] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.289452][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.304917][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.313934][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.324154][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.332455][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 195.340125][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.561838][ T9414] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.882582][ T3027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.933553][ T9614] @: renamed from vlan0 (while UP) [ 196.048854][ T3027] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.187842][ T3027] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.338637][ T3027] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.402229][ T9414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.488335][ T9414] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.503202][ T9600] chnl_net:caif_netlink_parms(): no params data found [ 196.674567][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.681757][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.767294][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.774395][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.102677][ T9600] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.111532][ T9600] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.126337][ T9600] bridge_slave_0: entered allmulticast mode [ 197.140632][ T9600] bridge_slave_0: entered promiscuous mode [ 197.164678][ T3027] bridge_slave_1: left allmulticast mode [ 197.170932][ T3027] bridge_slave_1: left promiscuous mode [ 197.182595][ T3027] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.205290][ T3027] bridge_slave_0: left allmulticast mode [ 197.220929][ T5285] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 197.235634][ T3027] bridge_slave_0: left promiscuous mode [ 197.247989][ T3027] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.426641][ T5238] Bluetooth: hci0: command tx timeout [ 197.437604][ T5285] usb 2-1: Using ep0 maxpacket: 8 [ 197.447848][ T5285] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 197.457117][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.465689][ T5285] usb 2-1: Product: syz [ 197.470393][ T5285] usb 2-1: Manufacturer: syz [ 197.475020][ T5285] usb 2-1: SerialNumber: syz [ 197.486694][ T5285] usb 2-1: config 0 descriptor?? [ 197.497407][ T5285] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 197.786218][ T5304] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 197.914844][ T3027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.931749][ T3027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.949315][ T3027] bond0 (unregistering): Released all slaves [ 197.966062][ T5304] usb 4-1: Using ep0 maxpacket: 32 [ 197.979153][ T9600] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.993158][ T5304] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 198.007020][ T9600] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.019787][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.025897][ T9600] bridge_slave_1: entered allmulticast mode [ 198.044065][ T5304] usb 4-1: config 0 descriptor?? [ 198.050196][ T9600] bridge_slave_1: entered promiscuous mode [ 198.063671][ T5304] gspca_main: sq930x-2.14.0 probing 041e:403c [ 198.174688][ T9600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.236214][ T9600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.316813][ T5285] gspca_vc032x: reg_w err -71 [ 198.321617][ T5285] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 198.340655][ T9600] team0: Port device team_slave_0 added [ 198.343648][ T5285] usb 2-1: USB disconnect, device number 18 [ 198.385124][ T9414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.413443][ T9414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.514330][ T9600] team0: Port device team_slave_1 added [ 198.592425][ T9600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.615011][ T9600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.641762][ T9600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.701918][ T3027] hsr_slave_0: left promiscuous mode [ 198.710651][ T3027] hsr_slave_1: left promiscuous mode [ 198.720104][ T3027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.727634][ T3027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.735757][ T3027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.743503][ T3027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.767799][ T3027] veth1_macvtap: left promiscuous mode [ 198.773437][ T3027] veth0_macvtap: left promiscuous mode [ 198.779804][ T3027] veth1_vlan: left promiscuous mode [ 198.785261][ T3027] veth0_vlan: left promiscuous mode [ 198.926284][ T5304] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 198.992613][ T5304] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 199.018774][ T5304] usb 4-1: USB disconnect, device number 16 [ 199.313886][ T9749] random: crng reseeded on system resumption [ 199.509040][ T5238] Bluetooth: hci0: command tx timeout [ 199.520652][ T3027] team0 (unregistering): Port device team_slave_1 removed [ 199.601750][ T3027] team0 (unregistering): Port device team_slave_0 removed [ 199.980863][ T9600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.988891][ T9600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.019037][ T9600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.037039][ T9414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.150425][ T9600] hsr_slave_0: entered promiscuous mode [ 200.157668][ T9600] hsr_slave_1: entered promiscuous mode [ 200.166157][ T9600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.173740][ T9600] Cannot create hsr debugfs directory [ 200.185598][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'. [ 200.291891][ T9414] veth0_vlan: entered promiscuous mode [ 200.356317][ T5285] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 200.402054][ T9414] veth1_vlan: entered promiscuous mode [ 200.509110][ T5285] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.558589][ T5285] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.580724][ T5285] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.590069][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.624493][ T9758] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 200.644188][ T5285] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.766440][ T9414] veth0_macvtap: entered promiscuous mode [ 200.794055][ T9414] veth1_macvtap: entered promiscuous mode [ 200.854228][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.865665][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.882811][ T5285] usb 4-1: USB disconnect, device number 17 [ 200.892359][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.924217][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.955558][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.982231][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.007997][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.063513][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.083428][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.103938][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.137409][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.152421][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.163347][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.174673][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.213553][ T9414] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.225083][ T9414] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.234396][ T9414] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.246058][ T9414] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.465706][ T935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.494455][ T935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.525208][ T9600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.534779][ T9600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.549707][ T9600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.581213][ T9600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.588097][ T5238] Bluetooth: hci0: command tx timeout [ 201.626132][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.634029][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.844607][ T9600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.924946][ T9600] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.945658][ T9830] netlink: 'syz.3.1517': attribute type 1 has an invalid length. [ 201.995439][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.002594][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.042096][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.049238][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.211850][ T9600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.288834][ T9600] veth0_vlan: entered promiscuous mode [ 202.304342][ T9600] veth1_vlan: entered promiscuous mode [ 202.371974][ T9600] veth0_macvtap: entered promiscuous mode [ 202.396397][ T9600] veth1_macvtap: entered promiscuous mode [ 202.423052][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.443532][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.465604][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.484316][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.495590][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.507074][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.517312][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.528814][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.540881][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.578189][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.600176][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.610520][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.621494][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.632964][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.655320][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.665520][ T5228] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 202.673696][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.686936][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.698288][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.713025][ T9600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.721794][ T9600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.746044][ T9600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.754764][ T9600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.853004][ T9866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1534'. [ 202.898986][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.920527][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.939473][ T5228] usb 3-1: unable to get BOS descriptor or descriptor too short [ 202.958373][ T5228] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 202.976543][ T5228] usb 3-1: can't read configurations, error -71 [ 203.012896][ T935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.022964][ T935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.666887][ T5238] Bluetooth: hci0: command tx timeout [ 203.733399][ T9914] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1556'. [ 203.763020][ T9914] net_ratelimit: 147 callbacks suppressed [ 203.763036][ T9914] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 204.210187][ T9947] netlink: 'syz.0.1572': attribute type 10 has an invalid length. [ 204.242731][ T9947] team0: Port device netdevsim0 added [ 204.262009][ T9947] netlink: 'syz.0.1572': attribute type 10 has an invalid length. [ 204.285821][ T9947] team0: Port device netdevsim0 removed [ 204.294918][ T9947] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 204.537686][ T5285] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 204.706315][ T5285] usb 5-1: Using ep0 maxpacket: 8 [ 204.714728][ T5285] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 204.728631][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.757366][ T5285] usb 5-1: Product: syz [ 204.761562][ T5285] usb 5-1: Manufacturer: syz [ 204.790325][ T5285] usb 5-1: SerialNumber: syz [ 204.807109][ T5285] usb 5-1: config 0 descriptor?? [ 204.863680][ T9945] syz.2.1571 (9945): drop_caches: 2 [ 205.022220][ T5285] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 205.035131][ T5285] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 205.072257][ T5285] usb 5-1: USB disconnect, device number 12 [ 205.646600][T10009] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1600'. [ 205.663864][T10009] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1600'. [ 205.777189][T10019] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 205.834676][T10022] misc userio: Can't change port type on an already running userio instance [ 206.646540][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 206.817782][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.846246][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.866474][ T8] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 206.876024][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.893777][ T8] usb 2-1: config 0 descriptor?? [ 206.957249][ T5285] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 207.136239][ T5285] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.151094][ T5285] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.167501][ T5285] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.176811][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.184824][ T5285] usb 1-1: SerialNumber: syz [ 207.426977][ T8] uclogic 0003:2179:0053.0013: interface is invalid, ignoring [ 207.466562][ T5285] usb 1-1: 0:2 : does not exist [ 207.502994][ T5285] usb 1-1: USB disconnect, device number 20 [ 207.561194][ T5246] udevd[5246]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.661594][ T9] usb 2-1: USB disconnect, device number 19 [ 208.146355][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 208.176217][ T5279] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 208.308615][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 208.325108][ T9] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 208.344247][ T9] usb 3-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 208.346801][ T29] audit: type=1326 audit(1727501444.212:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.0.1646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc5237dff9 code=0x0 [ 208.363757][ T9] usb 3-1: config 0 has no interface number 0 [ 208.363876][ T5279] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 208.395987][ T9] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 208.429874][ T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 11 [ 208.442668][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.450843][ T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x82 has invalid maxpacket 25303, setting to 1024 [ 208.474675][ T5279] usb 5-1: config 0 descriptor?? [ 208.479941][ T9] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.499941][ T5279] cp210x 5-1:0.0: cp210x converter detected [ 208.508311][ T9] usb 3-1: config 0 interface 52 has no altsetting 0 [ 208.517323][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 208.527558][ T9] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 208.536048][ T9] usb 3-1: Product: syz [ 208.540471][ T9] usb 3-1: SerialNumber: syz [ 208.549814][ T9] usb 3-1: config 0 descriptor?? [ 208.620540][T10119] could not allocate digest TFM handle sha256-arm64-neon [ 208.765139][ T9] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input22 [ 208.905132][ T5279] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 208.924214][ T5279] usb 5-1: cp210x converter now attached to ttyUSB0 [ 208.936107][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 208.999910][ T5285] usb 3-1: USB disconnect, device number 21 [ 209.109510][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 209.117859][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.145968][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.164910][ T9] usb 5-1: USB disconnect, device number 13 [ 209.171925][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 209.183787][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 209.192931][ T8] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 209.204176][ T9] cp210x 5-1:0.0: device disconnected [ 209.210551][ T8] usb 2-1: Product: syz [ 209.215155][ T8] usb 2-1: Manufacturer: syz [ 209.247234][ T8] usb 2-1: config 0 descriptor?? [ 209.667121][ T8] kovaplus 0003:1E7D:2D50.0014: unknown main item tag 0xd [ 209.687134][ T8] kovaplus 0003:1E7D:2D50.0014: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 209.767280][T10158] use of bytesused == 0 is deprecated and will be removed in the future, [ 209.776751][T10158] use the actual size instead. [ 209.876023][ T5283] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 210.053207][ T5283] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 210.068866][ T8] kovaplus 0003:1E7D:2D50.0014: couldn't init struct kovaplus_device [ 210.080604][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.086143][ T8] kovaplus 0003:1E7D:2D50.0014: couldn't install mouse [ 210.120310][ T5283] usb 3-1: Product: syz [ 210.124507][ T5283] usb 3-1: Manufacturer: syz [ 210.126894][ T8] kovaplus 0003:1E7D:2D50.0014: probe with driver kovaplus failed with error -71 [ 210.145044][ T5283] usb 3-1: SerialNumber: syz [ 210.169109][ T8] usb 2-1: USB disconnect, device number 20 [ 210.171971][ T5283] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 210.223956][ T5285] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 210.322842][T10179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1675'. [ 210.555580][T10189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1679'. [ 210.566955][T10189] netem: change failed [ 210.922004][T10206] netlink: 'syz.3.1686': attribute type 1 has an invalid length. [ 210.930093][T10206] netlink: 'syz.3.1686': attribute type 2 has an invalid length. [ 210.946043][T10206] netlink: 16074 bytes leftover after parsing attributes in process `syz.3.1686'. [ 210.997768][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 211.014393][T10199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.050416][T10199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.156949][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 211.173724][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.202158][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.233467][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 211.283828][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.347365][ T5285] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 211.349500][ T8] usb 2-1: config 0 descriptor?? [ 211.375179][ T5285] ath9k_htc: Failed to initialize the device [ 211.425068][T10217] binder: 10216:10217 ioctl c0306201 20000940 returned -14 [ 211.425225][ T5285] usb 3-1: ath9k_htc: USB layer deinitialized [ 211.481241][ T5285] usb 3-1: USB disconnect, device number 22 [ 211.534673][T10225] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.813566][ T8] wacom 0003:056A:00E5.0015: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.1-1/input0 [ 211.976130][ T5285] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 212.027080][ T5279] usb 2-1: USB disconnect, device number 21 [ 212.114448][T10251] Zero length message leads to an empty skb [ 212.137704][ T5285] usb 4-1: Using ep0 maxpacket: 16 [ 212.146750][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.168733][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.179271][T10251] team0: Port device team_slave_0 removed [ 212.193447][T10251] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 212.211876][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 212.229510][ T5285] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 212.239298][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.256300][ T5285] usb 4-1: config 0 descriptor?? [ 212.456560][ T8] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 212.615588][ T8] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 212.624053][ T5279] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 212.639551][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.652943][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.665072][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.677229][ T5285] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 212.683870][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.686339][ T5285] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 212.703044][ T5285] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 212.714878][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.714912][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.715756][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.728750][ T5285] microsoft 0003:045E:07DA.0016: no inputs found [ 212.741947][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.748823][ T5285] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 212.775878][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.784295][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.813579][ T5279] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 212.826015][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.842205][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.854586][ T5279] usb 1-1: config 0 descriptor?? [ 212.864531][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.874153][ T5279] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 212.883158][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.892930][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.906685][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.914645][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.926036][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.937449][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.945425][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.964191][ T5228] usb 4-1: USB disconnect, device number 18 [ 212.984979][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.001597][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.011956][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.022163][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.036430][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.045710][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 213.055236][ T8] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 213.063772][ T8] usb 3-1: Product: syz [ 213.068109][ T8] usb 3-1: Manufacturer: syz [ 213.073130][ T8] usb 3-1: SerialNumber: syz [ 213.080902][ T8] usb 3-1: config 0 descriptor?? [ 213.091183][ T8] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 213.491095][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 213.501896][ T5228] usb 3-1: USB disconnect, device number 23 [ 213.512675][ T5228] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 213.691145][ T5279] gspca_cpia1: usb_control_msg 02, error -71 [ 213.708007][ T5279] gspca_cpia1: usb_control_msg 05, error -71 [ 213.724255][ T5279] gspca_cpia1: usb_control_msg 04, error -71 [ 213.734770][ T5279] cpia1 1-1:0.0: probe with driver cpia1 failed with error -71 [ 213.756327][ T5279] usb 1-1: USB disconnect, device number 21 [ 213.876126][ T5285] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 213.976062][ T5228] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 214.036005][ T5285] usb 4-1: Using ep0 maxpacket: 8 [ 214.042397][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.054571][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.064363][ T5285] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 214.073485][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.082817][ T5285] usb 4-1: config 0 descriptor?? [ 214.128228][ T5228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.138690][ T5228] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 214.147985][ T5228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.158595][ T5228] usb 2-1: config 0 descriptor?? [ 214.166293][ T5228] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 214.173210][ T5228] usb 2-1: No valid video chain found. [ 214.351476][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'. [ 214.392100][ T5228] usb 2-1: USB disconnect, device number 22 [ 214.498744][T10323] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 214.515856][ T5285] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0 [ 214.543924][ T5285] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0 [ 214.553601][ T5285] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0 [ 214.572381][ T5285] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0 [ 214.592139][ T5285] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0 [ 214.606618][ T5285] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0 [ 214.624263][ T5285] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0 [ 214.646157][ T5285] playstation 0003:054C:0CE6.0017: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 214.689827][T10329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.727668][ T5285] playstation 0003:054C:0CE6.0017: Invalid reportID received, expected 9 got 0 [ 214.746863][ T5285] playstation 0003:054C:0CE6.0017: Failed to retrieve DualSense pairing info: -22 [ 214.765493][ T5285] playstation 0003:054C:0CE6.0017: Failed to get MAC address from DualSense [ 214.782651][ T5285] playstation 0003:054C:0CE6.0017: Failed to create dualsense. [ 214.793828][T10333] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 214.796099][ T5285] playstation 0003:054C:0CE6.0017: probe with driver playstation failed with error -22 [ 214.801766][T10333] dvmrp1: linktype set to 6 [ 215.009207][ T5285] usb 4-1: USB disconnect, device number 19 [ 215.300765][T10350] unknown channel width for channel at 925000KHz? [ 215.517463][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 215.541769][T10365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1759'. [ 215.642347][ T5283] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 215.824592][ T5283] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.842150][ T5283] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 215.862407][ T5283] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.886193][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.918773][T10356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 215.946213][ T5283] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.148541][ T5285] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 216.315795][ T5285] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 216.322819][ T5228] usb 1-1: USB disconnect, device number 22 [ 216.331228][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 216.354727][ T5285] usb 4-1: Product: syz [ 216.378215][ T5285] usb 4-1: Manufacturer: syz [ 216.400580][ T5285] usb 4-1: SerialNumber: syz [ 216.420439][ T5285] usb 4-1: config 0 descriptor?? [ 216.438669][ T5285] ch341 4-1:0.0: ch341-uart converter detected [ 216.573440][T10411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1780'. [ 216.628832][T10411] veth1_macvtap: left promiscuous mode [ 216.658084][T10411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1780'. [ 217.244035][ T5285] usb 4-1: failed to send control message: -71 [ 217.250541][ T5285] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 217.276089][ T5285] usb 4-1: USB disconnect, device number 20 [ 217.289684][ T5285] ch341 4-1:0.0: device disconnected [ 217.336593][T10441] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 217.753388][ T5228] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 217.918143][ T5228] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 217.936074][ T5228] usb 3-1: config 0 has no interface number 0 [ 217.956624][ T5228] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.972765][ T5228] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.985677][ T5228] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 218.004348][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.014440][T10465] bond0: option min_links: invalid value (18446744073709551615) [ 218.016376][ T5228] usb 3-1: config 0 descriptor?? [ 218.052211][T10465] bond0: option min_links: allowed values 0 - 2147483647 [ 218.292200][T10479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1811'. [ 218.460525][ T5228] logitech-djreceiver 0003:046D:C71B.0018: unknown main item tag 0x0 [ 218.482140][ T5228] logitech-djreceiver 0003:046D:C71B.0018: unknown main item tag 0x0 [ 218.507169][ T5228] logitech-djreceiver 0003:046D:C71B.0018: unknown main item tag 0x0 [ 218.549990][ T5228] logitech-djreceiver 0003:046D:C71B.0018: unknown main item tag 0x0 [ 218.581690][ T5228] logitech-djreceiver 0003:046D:C71B.0018: unknown main item tag 0x0 [ 218.606062][ T5228] logitech-djreceiver 0003:046D:C71B.0018: unknown main item tag 0x0 [ 218.642675][ T5228] logitech-djreceiver 0003:046D:C71B.0018: unknown main item tag 0x0 [ 218.700017][ T5228] logitech-djreceiver 0003:046D:C71B.0018: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.2-1/input32 [ 218.769439][ T5228] usb 3-1: USB disconnect, device number 24 [ 219.869456][T10551] sch_tbf: burst 0 is lower than device netdevsim0 mtu (1514) ! [ 220.068703][ T3027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.194995][ T3027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.246072][ T5285] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 220.340263][ T3027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.406103][ T5285] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.437259][ T5285] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 220.447220][ T5227] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.456562][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.466843][ T5227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.476069][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.491889][ T5285] usb 3-1: config 0 descriptor?? [ 220.498343][ T5227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.516192][ T5227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.525858][ T5227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.605848][ T3027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.730236][ T5228] usb 3-1: USB disconnect, device number 25 [ 221.028983][ T3027] bridge_slave_1: left allmulticast mode [ 221.034676][ T3027] bridge_slave_1: left promiscuous mode [ 221.071688][ T3027] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.101554][ T3027] bridge_slave_0: left allmulticast mode [ 221.122907][ T3027] bridge_slave_0: left promiscuous mode [ 221.142621][ T3027] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.294523][T10615] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1868'. [ 222.049494][ T3027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.060582][ T3027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.071446][ T3027] bond0 (unregistering): Released all slaves [ 222.083757][T10615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1868'. [ 222.221772][T10581] chnl_net:caif_netlink_parms(): no params data found [ 222.497359][T10659] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1880'. [ 222.547307][ T5238] Bluetooth: hci1: command tx timeout [ 222.613510][T10659] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1880'. [ 222.614543][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.630111][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.637425][T10581] bridge_slave_0: entered allmulticast mode [ 222.644219][T10581] bridge_slave_0: entered promiscuous mode [ 222.653767][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.660917][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.668098][T10581] bridge_slave_1: entered allmulticast mode [ 222.675040][T10581] bridge_slave_1: entered promiscuous mode [ 222.748632][T10581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.830966][ T3027] hsr_slave_0: left promiscuous mode [ 222.869883][ T3027] hsr_slave_1: left promiscuous mode [ 222.888638][ T3027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.899538][ T3027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.907762][ T3027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.926003][ T3027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.955160][ T3027] veth0_macvtap: left promiscuous mode [ 222.965611][ T3027] veth1_vlan: left promiscuous mode [ 222.975813][ T3027] veth0_vlan: left promiscuous mode [ 223.437152][ T3027] team0 (unregistering): Port device team_slave_1 removed [ 223.866717][T10581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.905992][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 223.979610][T10690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1888'. [ 223.995065][T10581] team0: Port device team_slave_0 added [ 224.010655][T10581] team0: Port device team_slave_1 added [ 224.034013][T10694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.142924][T10581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.164922][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.197428][T10581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.220233][T10581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.227584][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.254249][T10581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.386211][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 224.479189][T10581] hsr_slave_0: entered promiscuous mode [ 224.506254][T10581] hsr_slave_1: entered promiscuous mode [ 224.549335][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 224.572486][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 224.613492][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 224.627687][ T5238] Bluetooth: hci1: command tx timeout [ 224.649489][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 224.668954][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.716784][ T8] usb 4-1: Product: syz [ 224.720979][ T8] usb 4-1: Manufacturer: syz [ 224.725587][ T8] usb 4-1: SerialNumber: syz [ 224.766527][ T8] usb 4-1: config 0 descriptor?? [ 224.804356][ T8] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 224.834284][ T8] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 225.341984][ T5228] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 225.406305][T10581] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 225.409058][ T8] em28xx 4-1:0.0: chip ID is em2840 [ 225.428452][T10581] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 225.478016][T10581] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 225.500773][T10581] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.528330][ T5228] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 225.538429][ T5228] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.547578][ T5228] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.601279][ T5228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.619737][ T8] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 225.629150][ T8] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 225.637462][ T8] em28xx 4-1:0.0: No AC97 audio processor [ 225.637574][ T5228] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.657225][ T8] usb 4-1: USB disconnect, device number 21 [ 225.663293][ T5228] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.691201][ T8] em28xx 4-1:0.0: Disconnecting em28xx [ 225.721637][ T5228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.734361][T10581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.749587][ T8] em28xx 4-1:0.0: Freeing device [ 225.765812][ T5228] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.783151][ T5228] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.814404][T10581] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.814766][ T5228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.842766][ T5228] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.861006][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.868137][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.887317][ T5228] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.914182][ T5228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.919604][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.927950][ T9243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.935006][ T5228] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.945233][ T5228] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.972004][ T5228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.991545][ T5228] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.003015][ T5228] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.025075][ T5228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.040017][T10581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.051719][ T5228] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.071392][ T5228] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.126090][ T5228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.146872][ T5228] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.164635][ T5228] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.164793][T10581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.195850][ T5228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.214713][ T5228] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 226.241613][ T5228] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 226.260344][ T5228] usb 2-1: Product: syz [ 226.264555][ T5228] usb 2-1: Manufacturer: syz [ 226.282886][T10581] veth0_vlan: entered promiscuous mode [ 226.312497][T10581] veth1_vlan: entered promiscuous mode [ 226.316976][ T5228] usb 2-1: SerialNumber: syz [ 226.343186][ T5228] usb 2-1: config 0 descriptor?? [ 226.384089][ T5228] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 226.396543][T10581] veth0_macvtap: entered promiscuous mode [ 226.411251][T10581] veth1_macvtap: entered promiscuous mode [ 226.448262][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.458764][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.468688][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.480073][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.489942][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.500433][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.510468][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.520995][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.532079][T10581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.541494][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.552611][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.563128][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.573613][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.583489][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.594004][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.603912][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.614407][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.625347][T10581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.649913][T10581] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.659183][T10581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.667946][T10581] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.703266][T10581] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.712490][ T5238] Bluetooth: hci1: command tx timeout [ 226.877522][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 226.885046][ T5228] usb 2-1: USB disconnect, device number 23 [ 226.918073][ T5228] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 226.938677][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.980441][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.062095][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.097279][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.590388][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'. [ 227.687194][ T5228] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 227.694882][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 227.706930][ T5279] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 227.859105][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.870312][ T5228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 227.898033][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.914601][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.917795][T10854] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1936'. [ 227.924664][ T5228] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 227.947309][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.963520][ T8] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 227.972884][ T5279] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 227.992091][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.006866][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.023661][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.040109][ T5228] usb 3-1: config 0 descriptor?? [ 228.051494][ T8] usb 5-1: config 0 descriptor?? [ 228.089485][ T5279] usb 4-1: config 0 descriptor?? [ 228.484500][ T5228] elecom 0003:056E:00E6.0019: unknown main item tag 0x0 [ 228.510351][ T5228] elecom 0003:056E:00E6.0019: unknown main item tag 0x0 [ 228.529573][ T8] isku 0003:1E7D:319C.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 228.540950][ T5228] elecom 0003:056E:00E6.0019: unknown main item tag 0x1 [ 228.554638][ T5228] elecom 0003:056E:00E6.0019: unexpected long global item [ 228.563929][ T5228] elecom 0003:056E:00E6.0019: probe with driver elecom failed with error -22 [ 228.689822][ T5228] usb 3-1: USB disconnect, device number 26 [ 228.796865][ T5238] Bluetooth: hci1: command tx timeout [ 228.867892][T10879] bridge0: port 3(vlan2) entered blocking state [ 228.875124][T10879] bridge0: port 3(vlan2) entered disabled state [ 228.888872][T10879] vlan2: entered allmulticast mode [ 228.896689][T10879] vlan2: left allmulticast mode [ 228.928569][ T8] usb 5-1: USB disconnect, device number 14 [ 228.956675][ T5279] hid-led 0003:27B8:01ED.001B: probe with driver hid-led failed with error -71 [ 228.977659][ T5279] usb 4-1: USB disconnect, device number 22 [ 229.617079][ T5285] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 229.776185][ T5285] usb 3-1: Using ep0 maxpacket: 8 [ 229.813661][ T5285] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0xC has invalid wMaxPacketSize 0 [ 229.831686][ T5285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 229.862220][T10924] netlink: 'syz.3.1962': attribute type 1 has an invalid length. [ 229.880650][ T5285] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 229.897337][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.905353][ T5285] usb 3-1: Product: syz [ 229.915659][T10924] netlink: 'syz.3.1962': attribute type 2 has an invalid length. [ 229.925427][ T5285] usb 3-1: Manufacturer: syz [ 229.940211][ T5285] usb 3-1: SerialNumber: syz [ 229.954942][ T5285] usb 3-1: config 0 descriptor?? [ 229.978482][ T5285] hub 3-1:0.0: bad descriptor, ignoring hub [ 229.996865][ T5285] hub 3-1:0.0: probe with driver hub failed with error -5 [ 230.017452][ T5285] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 230.085234][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1967'. [ 230.205546][ T5285] gspca_zc3xx: reg_w_i err -71 [ 230.246452][T10941] netlink: 'syz.4.1970': attribute type 32 has an invalid length. [ 230.446037][ T5304] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 230.615998][ T5304] usb 4-1: Using ep0 maxpacket: 8 [ 230.632206][ T5304] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.647994][ T5304] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.664833][ T5304] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.681815][ T5304] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.695232][ T5304] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.710383][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.726159][ T5279] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 230.816111][ T5285] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 230.822478][ T5285] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 230.922307][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 230.928927][ T5279] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.938369][T10974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.947738][ T5279] usb 5-1: config 0 has no interfaces? [ 230.960075][ T5279] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 230.969227][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.987674][ T5279] usb 5-1: config 0 descriptor?? [ 231.015348][ T5304] usb 4-1: GET_CAPABILITIES returned 0 [ 231.025303][ T5304] usbtmc 4-1:16.0: can't read capabilities [ 231.076357][ T5285] usb 3-1: reset high-speed USB device number 27 using dummy_hcd [ 231.262960][ T938] usb 5-1: USB disconnect, device number 15 [ 231.271453][T10944] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 231.306570][ T5304] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 231.310004][ T5279] usb 4-1: USB disconnect, device number 23 [ 231.394891][T10982] netlink: 'syz.1.1988': attribute type 3 has an invalid length. [ 231.476425][ T5304] usb 1-1: Using ep0 maxpacket: 8 [ 231.484778][ T5304] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.509509][ T5304] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.513152][T10986] netpci0: tun_chr_ioctl cmd 1074025677 [ 231.526260][ T5304] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.528053][T10986] netpci0: linktype set to 804 [ 231.541410][ T5304] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.555177][ T5304] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.567112][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.777007][ T5279] usb 3-1: USB disconnect, device number 27 [ 231.787692][ T5304] usb 1-1: GET_CAPABILITIES returned 0 [ 231.799077][ T5304] usbtmc 1-1:16.0: can't read capabilities [ 231.861960][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1993'. [ 231.996653][ T3027] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.018298][ T5285] usb 1-1: USB disconnect, device number 23 [ 232.116851][ T3027] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.247830][ T3027] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.484013][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.522130][ T3027] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.591192][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.604815][T11007] bridge_slave_1: left allmulticast mode [ 232.605170][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.623474][T11007] bridge_slave_1: left promiscuous mode [ 232.623525][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.637390][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.644670][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.653521][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.691987][T11007] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 232.766849][ T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 232.909772][ T3027] bridge_slave_1: left allmulticast mode [ 232.915500][ T3027] bridge_slave_1: left promiscuous mode [ 232.921505][ T3027] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.933089][ T3027] bridge_slave_0: left allmulticast mode [ 232.956647][ T3027] bridge_slave_0: left promiscuous mode [ 232.975658][ T3027] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.986150][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 232.992871][ T8] usb 3-1: config 0 has no interfaces? [ 233.004919][ T8] usb 3-1: config 0 has no interfaces? [ 233.012031][ T8] usb 3-1: config 0 has no interfaces? [ 233.022077][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 233.034250][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.042774][ T8] usb 3-1: Product: syz [ 233.049973][ T8] usb 3-1: Manufacturer: syz [ 233.054594][ T8] usb 3-1: SerialNumber: syz [ 233.067016][ T8] usb 3-1: config 0 descriptor?? [ 233.126109][ T5279] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 233.216417][ T938] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 233.288017][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.302836][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.306054][ T5279] usb 1-1: Using ep0 maxpacket: 8 [ 233.324152][ T5279] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=29.8c [ 233.335302][ T5304] usb 3-1: USB disconnect, device number 28 [ 233.342476][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.364854][ T5279] usb 1-1: Product: syz [ 233.387919][ T5279] usb 1-1: Manufacturer: syz [ 233.392523][ T5279] usb 1-1: SerialNumber: syz [ 233.411311][ T938] usb 5-1: Using ep0 maxpacket: 8 [ 233.414276][ T5279] usb 1-1: config 0 descriptor?? [ 233.425292][ T938] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 233.437197][ T5279] gspca_main: se401-2.14.0 probing 047d:5003 [ 233.441736][ T938] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.453749][ T938] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.469614][ T938] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.487565][ T938] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.512159][ T938] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.524807][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.625055][ T3027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.638231][ T3027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.664838][ T3027] bond0 (unregistering): Released all slaves [ 233.756979][ T938] usb 5-1: GET_CAPABILITIES returned 0 [ 233.769247][ T938] usbtmc 5-1:16.0: can't read capabilities [ 233.816075][ T5304] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 233.987973][ T5304] usb 3-1: config index 0 descriptor too short (expected 72, got 36) [ 234.008934][T11010] chnl_net:caif_netlink_parms(): no params data found [ 234.033752][ T5304] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 234.048028][ T938] usb 5-1: USB disconnect, device number 16 [ 234.080035][ T5304] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 234.093822][ T5304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.132743][ T5304] usb 3-1: Product: syz [ 234.148220][ T5304] usb 3-1: Manufacturer: syz [ 234.152840][ T5304] usb 3-1: SerialNumber: syz [ 234.156374][ T3027] hsr_slave_0: left promiscuous mode [ 234.179845][ T3027] hsr_slave_1: left promiscuous mode [ 234.182907][ T5304] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 234.207307][ T3027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.214718][ T3027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.236813][ T3027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.255986][ T3027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.277451][ T5279] usb 1-1: reset high-speed USB device number 24 using dummy_hcd [ 234.293590][ T5279] usb 1-1: device reset changed ep0 maxpacket size! [ 234.302191][ T3027] veth1_macvtap: left promiscuous mode [ 234.316041][ T3027] veth0_macvtap: left promiscuous mode [ 234.319059][ T5279] gspca_se401: read req failed req 0x06 error -19 [ 234.322088][ T3027] veth1_vlan: left promiscuous mode [ 234.344881][ T3027] veth0_vlan: left promiscuous mode [ 234.356309][ T5279] usb 1-1: USB disconnect, device number 24 [ 234.406425][ T938] usb 3-1: USB disconnect, device number 29 [ 234.506072][ T5279] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 234.656158][ T5279] usb 1-1: Using ep0 maxpacket: 32 [ 234.667748][ T5279] usb 1-1: config 0 has no interfaces? [ 234.675789][ T5279] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 234.692379][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.701946][ T5279] usb 1-1: Product: syz [ 234.710197][ T5227] Bluetooth: hci2: command tx timeout [ 234.727785][ T5279] usb 1-1: Manufacturer: syz [ 234.732508][ T5279] usb 1-1: SerialNumber: syz [ 234.743419][ T5279] usb 1-1: config 0 descriptor?? [ 234.885629][ T3027] team0 (unregistering): Port device team_slave_1 removed [ 234.924051][ T3027] team0 (unregistering): Port device team_slave_0 removed [ 234.971075][ T938] usb 1-1: USB disconnect, device number 25 [ 235.787561][T11074] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2020'. [ 235.838621][T11074] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 235.871144][T11010] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.905060][T11010] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.921987][T11010] bridge_slave_0: entered allmulticast mode [ 235.943519][T11010] bridge_slave_0: entered promiscuous mode [ 235.961941][T11010] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.993161][T11010] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.004201][T11010] bridge_slave_1: entered allmulticast mode [ 236.037334][T11010] bridge_slave_1: entered promiscuous mode [ 236.170768][T11010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.210398][T11010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.286706][T11010] team0: Port device team_slave_0 added [ 236.294697][T11010] team0: Port device team_slave_1 added [ 236.620196][T11010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.634269][T11010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.660191][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.666406][T11010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.697110][T11010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.704076][T11010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.729948][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.786591][ T5227] Bluetooth: hci2: command tx timeout [ 236.822843][T11010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.159117][T11010] hsr_slave_0: entered promiscuous mode [ 237.177031][T11010] hsr_slave_1: entered promiscuous mode [ 237.194787][T11010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.203051][T11010] Cannot create hsr debugfs directory [ 237.317984][T11142] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 237.836103][ T8] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 238.030404][ T8] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 238.046029][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.070447][ T8] usb 5-1: Product: syz [ 238.100398][ T8] usb 5-1: Manufacturer: syz [ 238.105025][ T8] usb 5-1: SerialNumber: syz [ 238.128309][T11167] netem: incorrect ge model size [ 238.133580][T11167] netem: change failed [ 238.147479][ T8] usb 5-1: config 0 descriptor?? [ 238.385384][ T8] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 238.426466][T11183] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 238.583797][ T8] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 238.596065][ T8] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 238.627318][ T8] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 238.756554][ T8] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 238.772841][T11010] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.794411][ T8] usb 5-1: USB disconnect, device number 17 [ 238.797120][T11010] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.834408][T11010] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.857467][T11010] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.867702][ T5227] Bluetooth: hci2: command tx timeout [ 238.889522][T11198] IPv6: Can't replace route, no match found [ 238.966960][ T5228] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 239.006545][T11010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.033355][T11010] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.044521][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.051665][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.115171][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.122328][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.146386][ T5228] usb 4-1: Using ep0 maxpacket: 8 [ 239.158067][ T5228] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 239.184581][ T5228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.211619][ T5228] usb 4-1: Product: syz [ 239.223669][ T5228] usb 4-1: Manufacturer: syz [ 239.232906][T11010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.244594][ T5228] usb 4-1: SerialNumber: syz [ 239.255191][ T5228] usb 4-1: config 0 descriptor?? [ 239.285599][ T5228] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 239.305460][T11010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.404277][T11010] veth0_vlan: entered promiscuous mode [ 239.448078][T11010] veth1_vlan: entered promiscuous mode [ 239.502562][ T5228] gspca_sn9c2028: read1 error -32 [ 239.536007][ T5228] gspca_sn9c2028: read1 error -32 [ 239.543542][T11010] veth0_macvtap: entered promiscuous mode [ 239.583766][T11010] veth1_macvtap: entered promiscuous mode [ 239.624152][T11227] raw_sendmsg: syz.2.2067 forgot to set AF_INET. Fix it! [ 239.653486][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.710283][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.741826][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.777896][ T5228] usb 4-1: USB disconnect, device number 24 [ 239.796615][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.848787][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.866010][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.880079][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.893103][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.922164][T11010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.938116][T11230] netlink: 'syz.4.2068': attribute type 1 has an invalid length. [ 239.961837][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.981193][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.022190][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.066676][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.086109][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.105695][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.116120][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.127173][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.139396][T11010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.195565][T11010] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.248362][T11010] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.286144][T11010] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.322430][T11010] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.496280][ T3027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.504133][ T3027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.642253][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.680880][T11266] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2079'. [ 240.698777][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.811055][T11271] netlink: 'syz.2.2080': attribute type 10 has an invalid length. [ 240.861114][T11271] netlink: 'syz.2.2080': attribute type 4 has an invalid length. [ 240.883817][T11271] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2080'. [ 240.946708][ T5227] Bluetooth: hci2: command tx timeout [ 241.002662][T11271] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 241.375977][ T938] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 241.526650][T11313] binder: 11311:11313 ioctl 40046205 0 returned -22 [ 241.589772][ T938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.601880][ T938] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 178 [ 241.613518][ T938] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 241.636987][ T938] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=31.c9 [ 241.650017][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.706220][ T938] usb 5-1: config 0 descriptor?? [ 241.726418][T11287] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 241.852068][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.978541][ T938] ath6kl: Failed to submit usb control message: -71 [ 241.985267][ T938] ath6kl: unable to send the bmi data to the device: -71 [ 241.992914][ T938] ath6kl: Unable to send get target info: -71 [ 242.006375][ T938] ath6kl: Failed to init ath6kl core: -71 [ 242.012867][ T938] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 242.043791][ T938] usb 5-1: USB disconnect, device number 18 [ 242.219591][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.402622][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.586906][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.604316][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.614744][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.633227][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.649422][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.658546][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 242.667134][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.750632][T11358] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 243.068581][T11354] chnl_net:caif_netlink_parms(): no params data found [ 243.140777][ T12] bridge_slave_1: left allmulticast mode [ 243.160686][ T12] bridge_slave_1: left promiscuous mode [ 243.186925][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.418168][ T12] bridge_slave_0: left allmulticast mode [ 243.423891][ T12] bridge_slave_0: left promiscuous mode [ 243.430056][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.257083][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.271425][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.289432][ T12] bond0 (unregistering): Released all slaves [ 244.445319][T11354] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.492255][T11354] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.516724][T11354] bridge_slave_0: entered allmulticast mode [ 244.546280][T11354] bridge_slave_0: entered promiscuous mode [ 244.578212][T11354] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.585323][T11354] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.608661][T11354] bridge_slave_1: entered allmulticast mode [ 244.641526][T11354] bridge_slave_1: entered promiscuous mode [ 244.706387][ T5238] Bluetooth: hci3: command tx timeout [ 244.879619][T11354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.915802][T11354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.157044][T11354] team0: Port device team_slave_0 added [ 245.229428][ T12] hsr_slave_0: left promiscuous mode [ 245.316204][ T12] hsr_slave_1: left promiscuous mode [ 245.373887][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.419108][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.445300][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.466112][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.522793][ T12] veth1_macvtap: left promiscuous mode [ 245.560468][ T12] veth0_macvtap: left promiscuous mode [ 245.583523][ T12] veth1_vlan: left promiscuous mode [ 245.600834][ T12] veth0_vlan: left promiscuous mode [ 246.050102][T11493] input: syz1 as /devices/virtual/input/input26 [ 246.066447][ T938] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 246.228405][ T938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 246.243220][ T938] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 246.263090][ T938] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.289739][ T938] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 246.299801][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.314750][ T938] usb 2-1: Product: syz [ 246.331386][ T938] usb 2-1: Manufacturer: syz [ 246.356405][ T938] usb 2-1: SerialNumber: syz [ 246.575195][ T938] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 246.783609][ T938] usb 2-1: USB disconnect, device number 24 [ 246.786003][ T5238] Bluetooth: hci3: command tx timeout [ 246.807161][ T938] usblp0: removed [ 246.860577][ T12] team0 (unregistering): Port device team_slave_1 removed [ 246.911843][ T12] team0 (unregistering): Port device team_slave_0 removed [ 247.293088][T11354] team0: Port device team_slave_1 added [ 247.312523][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2144'. [ 247.463698][T11354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.493000][T11354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.576077][T11354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.621622][T11354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.644826][T11354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.714682][T11354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.952047][T11354] hsr_slave_0: entered promiscuous mode [ 247.985810][T11354] hsr_slave_1: entered promiscuous mode [ 248.032673][T11354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.083304][T11354] Cannot create hsr debugfs directory [ 248.867733][ T5238] Bluetooth: hci3: command tx timeout [ 249.189008][T11581] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 249.363651][T11586] Option ' ' to dns_resolver key: bad/missing value [ 249.635738][T11354] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.689048][T11354] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.728401][T11354] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.767984][T11354] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.058784][T11354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.141544][T11354] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.169835][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.177237][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.266211][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.273321][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.395331][T11354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.416136][T11354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.442562][T11354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.471669][T11354] veth0_vlan: entered promiscuous mode [ 250.512552][T11354] veth1_vlan: entered promiscuous mode [ 250.532937][T11354] veth0_macvtap: entered promiscuous mode [ 250.545391][T11354] veth1_macvtap: entered promiscuous mode [ 250.584110][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.595663][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.605832][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.616918][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.627340][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.637854][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.647727][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.658288][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.669333][T11354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.679022][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.689549][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.699605][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.711159][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.721771][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.732258][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.742141][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.752688][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.764676][T11354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.775739][T11354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.784627][T11354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.793612][T11354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.802378][T11354] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.946115][ T5238] Bluetooth: hci3: command tx timeout [ 251.139193][ T3027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.175710][ T3027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.260238][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.285988][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.807314][T11662] netlink: 'syz.1.2195': attribute type 25 has an invalid length. [ 251.815438][T11662] netlink: 'syz.1.2195': attribute type 7 has an invalid length. [ 252.333296][T11674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2200'. [ 254.356102][ T5228] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 254.366010][ T5279] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 254.538379][ T5279] usb 1-1: Using ep0 maxpacket: 8 [ 254.554337][ T5228] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 254.575233][ T5228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.584959][ T5279] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 254.609831][ T5228] usb 2-1: config 0 descriptor?? [ 254.622201][ T5279] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 254.642316][ T5228] cp210x 2-1:0.0: cp210x converter detected [ 254.654671][ T5279] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 254.672645][ T5279] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.698791][ T5279] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.717375][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.971418][ T5279] usb 1-1: GET_CAPABILITIES returned 0 [ 254.982697][ T5279] usbtmc 1-1:16.0: can't read capabilities [ 255.223431][ T8] usb 1-1: USB disconnect, device number 26 [ 255.242163][ T5228] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 255.264307][ T5228] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 255.300894][ T5228] usb 2-1: cp210x converter now attached to ttyUSB0 [ 255.323592][ T5228] usb 2-1: USB disconnect, device number 25 [ 255.357823][ T5228] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 255.386387][ T5228] cp210x 2-1:0.0: device disconnected [ 255.832704][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.839208][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.389603][ T5227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.398686][ T5227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.408152][ T5227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.427069][ T5227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.434616][ T5227] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 263.442417][ T5227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.873575][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.887828][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.895816][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.904227][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.911958][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 263.922436][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 264.250022][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 264.266938][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 264.276759][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 264.284572][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 264.292239][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 264.299541][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 265.507407][ T5238] Bluetooth: hci5: command tx timeout [ 265.986153][ T5238] Bluetooth: hci6: command tx timeout [ 266.387206][ T5238] Bluetooth: hci7: command tx timeout [ 267.087515][ T5227] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 267.098187][ T5227] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 267.106132][ T5227] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 267.119321][ T5227] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 267.126974][ T5227] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 267.136838][ T5227] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 267.549855][ T5238] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 267.558830][ T5238] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 267.570500][ T5238] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 267.578943][ T5238] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 267.586300][ T54] Bluetooth: hci5: command tx timeout [ 267.592551][ T5238] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 267.600190][ T5238] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 268.066061][ T5238] Bluetooth: hci6: command tx timeout [ 268.466035][ T5238] Bluetooth: hci7: command tx timeout [ 269.186069][ T5238] Bluetooth: hci8: command tx timeout [ 269.667386][ T5227] Bluetooth: hci5: command tx timeout [ 269.674493][ T5238] Bluetooth: hci9: command tx timeout [ 270.146084][ T5238] Bluetooth: hci6: command tx timeout [ 270.185895][ C1] sched: DL replenish lagged too much [ 270.547079][ T5238] Bluetooth: hci7: command tx timeout [ 271.266045][ T5238] Bluetooth: hci8: command tx timeout [ 271.746756][ T5238] Bluetooth: hci9: command tx timeout [ 271.752209][ T5238] Bluetooth: hci5: command tx timeout [ 272.226080][ T5238] Bluetooth: hci6: command tx timeout [ 272.626210][ T5238] Bluetooth: hci7: command tx timeout [ 273.346079][ T5238] Bluetooth: hci8: command tx timeout [ 273.826117][ T5238] Bluetooth: hci9: command tx timeout [ 275.426066][ T5238] Bluetooth: hci8: command tx timeout [ 275.906047][ T5238] Bluetooth: hci9: command tx timeout [ 298.876054][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 299.440283][T11700] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.706075][T11741] tipc: Started in network mode [ 299.717364][T11741] tipc: Node identity :, cluster identity 4711 [ 299.723586][T11741] tipc: Enabling of bearer rejected, failed to enable media [ 317.271608][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.278099][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.856928][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.886411][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 324.896884][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.905787][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.915056][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.923235][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.930905][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 324.938617][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 324.947695][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.957823][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 324.965644][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.001870][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.085179][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.103344][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.113613][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.124304][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.132443][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 325.140039][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 327.026333][ T54] Bluetooth: hci0: command tx timeout [ 327.106274][ T54] Bluetooth: hci1: command tx timeout [ 327.266145][ T54] Bluetooth: hci2: command tx timeout [ 327.886640][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.897611][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.905429][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.913420][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.921925][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 327.929284][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 328.014130][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.023878][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.034013][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.043161][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.051140][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 328.058806][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.106237][ T5238] Bluetooth: hci0: command tx timeout [ 329.186292][ T5238] Bluetooth: hci1: command tx timeout [ 329.346243][ T5238] Bluetooth: hci2: command tx timeout [ 329.986185][ T5238] Bluetooth: hci3: command tx timeout [ 330.146060][ T5238] Bluetooth: hci4: command tx timeout [ 331.186233][ T5238] Bluetooth: hci0: command tx timeout [ 331.266393][ T5238] Bluetooth: hci1: command tx timeout [ 331.426099][ T5238] Bluetooth: hci2: command tx timeout [ 332.065955][ T5238] Bluetooth: hci3: command tx timeout [ 332.225989][ T5238] Bluetooth: hci4: command tx timeout [ 333.266269][ T5238] Bluetooth: hci0: command tx timeout [ 333.356307][ T5238] Bluetooth: hci1: command tx timeout [ 333.506103][ T5238] Bluetooth: hci2: command tx timeout [ 334.146161][ T5238] Bluetooth: hci3: command tx timeout [ 334.306057][ T5238] Bluetooth: hci4: command tx timeout [ 336.225982][ T5238] Bluetooth: hci3: command tx timeout [ 336.386299][ T5238] Bluetooth: hci4: command tx timeout [ 378.712985][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.725911][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.915896][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 386.753359][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 386.766166][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 386.774042][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 386.785652][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 386.795869][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 386.804155][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 387.102662][ T5238] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 387.113673][ T5238] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 387.121972][ T5238] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 387.130448][ T5238] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 387.140838][ T5238] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 387.148478][ T5238] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 387.462118][ T5238] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 387.481042][ T5238] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 387.489468][ T5238] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 387.497767][ T5238] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 387.506259][ T5238] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 387.519477][ T5238] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 387.826227][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 387.837517][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 387.846048][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 387.854285][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 387.862833][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 387.876039][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 388.240671][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 388.251354][ T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 388.261777][ T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 388.269749][ T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 388.277796][ T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 388.285314][ T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 388.867344][ T54] Bluetooth: hci10: command tx timeout [ 389.186015][T11811] Bluetooth: hci11: command tx timeout [ 389.586172][T11811] Bluetooth: hci12: command tx timeout [ 389.906285][T11811] Bluetooth: hci13: command tx timeout [ 390.313993][T11811] Bluetooth: hci14: command tx timeout [ 390.945992][T11811] Bluetooth: hci10: command tx timeout [ 391.026321][T11811] Bluetooth: hci9: command 0x0406 tx timeout [ 391.032449][T11811] Bluetooth: hci6: command 0x0406 tx timeout [ 391.044079][T11811] Bluetooth: hci7: command 0x0406 tx timeout [ 391.050169][T11811] Bluetooth: hci8: command 0x0406 tx timeout [ 391.345942][T11810] Bluetooth: hci11: command tx timeout [ 391.666033][T11810] Bluetooth: hci12: command tx timeout [ 391.986135][T11810] Bluetooth: hci13: command tx timeout [ 392.385913][T11810] Bluetooth: hci14: command tx timeout [ 393.028557][T11810] Bluetooth: hci10: command tx timeout [ 393.426069][T11810] Bluetooth: hci11: command tx timeout [ 393.745997][ T54] Bluetooth: hci12: command tx timeout [ 394.066752][ T54] Bluetooth: hci13: command tx timeout [ 394.466108][ T54] Bluetooth: hci14: command tx timeout [ 395.106099][ T54] Bluetooth: hci10: command tx timeout [ 395.505979][ T54] Bluetooth: hci11: command tx timeout [ 395.825984][ T54] Bluetooth: hci12: command tx timeout [ 396.146058][ T54] Bluetooth: hci13: command tx timeout [ 396.545950][ T54] Bluetooth: hci14: command tx timeout [ 440.151253][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.164679][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.510094][T11809] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 445.520475][T11809] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 445.528652][T11809] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 445.539442][T11809] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 445.547136][T11809] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 445.554493][T11809] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 445.849115][T11809] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 445.858387][T11809] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 445.866582][T11809] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 445.874493][T11809] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 445.885905][T11809] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 445.893299][T11809] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 446.172063][T11812] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 446.192608][T11812] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 446.205397][T11812] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 446.215366][T11812] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 446.230636][T11812] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 446.242354][T11812] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 447.363558][T11809] Bluetooth: hci1: command 0x0406 tx timeout [ 447.369734][ T5227] Bluetooth: hci2: command 0x0406 tx timeout [ 447.375894][T11812] Bluetooth: hci0: command 0x0406 tx timeout [ 447.586127][ T5238] Bluetooth: hci15: command tx timeout [ 447.950898][ T54] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 447.960777][ T54] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 447.969118][ T54] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 447.977437][ T54] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 447.994238][T11810] Bluetooth: hci16: command tx timeout [ 448.002865][ T54] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 448.010401][ T54] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 448.306342][ T54] Bluetooth: hci17: command tx timeout [ 448.461123][ T5238] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 448.476253][ T5238] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 448.487887][ T5238] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 448.496533][ T5238] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 448.504211][ T5238] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 448.512962][ T5238] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 449.666059][ T5238] Bluetooth: hci15: command tx timeout [ 450.066220][ T5238] Bluetooth: hci18: command tx timeout [ 450.072932][ T5238] Bluetooth: hci16: command tx timeout [ 450.395153][ T54] Bluetooth: hci17: command tx timeout [ 450.546105][ T5238] Bluetooth: hci19: command tx timeout [ 451.746193][ T5238] Bluetooth: hci15: command tx timeout [ 452.146279][ T5238] Bluetooth: hci16: command tx timeout [ 452.151819][ T5238] Bluetooth: hci18: command tx timeout [ 452.466002][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 452.472120][ T5238] Bluetooth: hci3: command 0x0406 tx timeout [ 452.481279][T11812] Bluetooth: hci17: command tx timeout [ 452.626251][ T54] Bluetooth: hci19: command tx timeout [ 453.826079][ T54] Bluetooth: hci15: command tx timeout [ 454.232205][T11810] Bluetooth: hci18: command tx timeout [ 454.237777][ T5238] Bluetooth: hci16: command tx timeout [ 454.453447][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.545939][T11810] Bluetooth: hci17: command tx timeout [ 454.706219][T11810] Bluetooth: hci19: command tx timeout [ 456.306168][T11810] Bluetooth: hci18: command tx timeout [ 456.786178][T11810] Bluetooth: hci19: command tx timeout [ 479.826289][ T30] INFO: task syz-executor:11752 blocked for more than 143 seconds. [ 479.834251][ T30] Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 479.882516][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 479.925179][ T30] task:syz-executor state:D stack:24888 pid:11752 tgid:11752 ppid:1 flags:0x00004006 [ 480.024741][ T30] Call Trace: [ 480.055939][ T30] [ 480.058919][ T30] __schedule+0x1895/0x4b30 [ 480.063472][ T30] ? __pfx___schedule+0x10/0x10 [ 480.117322][ T30] ? __pfx_lock_release+0x10/0x10 [ 480.122402][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 480.137474][ T30] ? schedule+0x90/0x320 [ 480.141765][ T30] schedule+0x14b/0x320 [ 480.154679][ T30] schedule_preempt_disabled+0x13/0x30 [ 480.160453][ T30] __mutex_lock+0x6a7/0xd70 [ 480.164994][ T30] ? __mutex_lock+0x52a/0xd70 [ 480.177228][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 480.182468][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 480.196133][ T30] ip_tunnel_init_net+0x20e/0x720 [ 480.201205][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 480.213293][ T30] ? ops_init+0x75/0x590 [ 480.218982][ T30] ops_init+0x31e/0x590 [ 480.223176][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 480.235676][ T30] setup_net+0x287/0x9e0 [ 480.240247][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 480.252013][ T30] ? __pfx_setup_net+0x10/0x10 [ 480.257053][ T30] copy_net_ns+0x33f/0x570 [ 480.261506][ T30] create_new_namespaces+0x425/0x7b0 [ 480.275866][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 480.281624][ T30] ksys_unshare+0x619/0xc10 [ 480.286548][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 480.293172][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 480.302683][ T30] ? do_syscall_64+0x100/0x230 [ 480.324076][ T30] __x64_sys_unshare+0x38/0x40 [ 480.335845][ T30] do_syscall_64+0xf3/0x230 [ 480.340389][ T30] ? clear_bhb_loop+0x35/0x90 [ 480.345082][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.358778][ T30] RIP: 0033:0x7f4e9757f7f7 [ 480.363234][ T30] RSP: 002b:00007f4e9785ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 480.380422][ T30] RAX: ffffffffffffffda RBX: 00007f4e975f1a85 RCX: 00007f4e9757f7f7 [ 480.390949][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 480.404789][ T30] RBP: 0000000000000000 R08: 00007f4e98267d60 R09: 0000000000000000 [ 480.423606][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 480.434122][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 480.445864][ T30] [ 480.451456][ T30] INFO: task syz-executor:11779 blocked for more than 143 seconds. [ 480.462957][ T30] Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 480.480747][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 480.491898][ T30] task:syz-executor state:D stack:26384 pid:11779 tgid:11779 ppid:1 flags:0x00004004 [ 480.509240][ T30] Call Trace: [ 480.512549][ T30] [ 480.515501][ T30] __schedule+0x1895/0x4b30 [ 480.523248][ T30] ? __pfx___schedule+0x10/0x10 [ 480.533649][ T30] ? __pfx_lock_release+0x10/0x10 [ 480.541040][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 480.551229][ T30] ? schedule+0x90/0x320 [ 480.555510][ T30] schedule+0x14b/0x320 [ 480.562230][ T30] schedule_preempt_disabled+0x13/0x30 [ 480.572391][ T30] __mutex_lock+0x6a7/0xd70 [ 480.579648][ T30] ? __mutex_lock+0x52a/0xd70 [ 480.584358][ T30] ? register_nexthop_notifier+0x84/0x290 [ 480.595654][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 480.605148][ T30] ? __asan_memset+0x23/0x50 [ 480.615069][ T30] register_nexthop_notifier+0x84/0x290 [ 480.622102][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 480.636385][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 480.642671][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 480.658847][ T30] ? __asan_memset+0x23/0x50 [ 480.663486][ T30] ops_init+0x31e/0x590 [ 480.673675][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 480.679423][ T30] setup_net+0x287/0x9e0 [ 480.683701][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 480.695568][ T30] ? __pfx_setup_net+0x10/0x10 [ 480.704142][ T30] copy_net_ns+0x33f/0x570 [ 480.714370][ T30] create_new_namespaces+0x425/0x7b0 [ 480.721593][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 480.733073][ T30] ksys_unshare+0x619/0xc10 [ 480.737958][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 480.743019][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 480.756170][ T30] ? do_syscall_64+0x100/0x230 [ 480.760983][ T30] __x64_sys_unshare+0x38/0x40 [ 480.774122][ T30] do_syscall_64+0xf3/0x230 [ 480.778975][ T30] ? clear_bhb_loop+0x35/0x90 [ 480.783680][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.796437][ T30] RIP: 0033:0x7f920417f7f7 [ 480.800885][ T30] RSP: 002b:00007f920445ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 480.816693][ T30] RAX: ffffffffffffffda RBX: 00007f92041f1a85 RCX: 00007f920417f7f7 [ 480.825318][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 480.841148][ T30] RBP: 0000000000000000 R08: 00007f9204e67d60 R09: 0000000000000000 [ 480.851594][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 480.875885][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 480.883906][ T30] [ 480.925030][ T30] INFO: task syz-executor:11787 blocked for more than 144 seconds. [ 480.964205][ T30] Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 480.987062][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 480.995762][ T30] task:syz-executor state:R stack:24784 pid:11787 tgid:11787 ppid:1 flags:0x00004006 [ 481.052069][ T30] Call Trace: [ 481.055381][ T30] [ 481.082308][ T30] __schedule+0x1895/0x4b30 [ 481.102159][ T30] ? __pfx___schedule+0x10/0x10 [ 481.124179][ T30] ? __pfx_lock_release+0x10/0x10 [ 481.133422][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 481.144679][ T30] ? schedule+0x90/0x320 [ 481.149281][ T30] schedule+0x14b/0x320 [ 481.153474][ T30] schedule_preempt_disabled+0x13/0x30 [ 481.165172][ T30] __mutex_lock+0x6a7/0xd70 [ 481.171384][ T30] ? __mutex_lock+0x52a/0xd70 [ 481.181653][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 481.191227][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 481.200884][ T30] ? read_word_at_a_time+0xe/0x20 [ 481.208045][ T30] ? sized_strscpy+0x8d/0x220 [ 481.214202][ T30] ip_tunnel_init_net+0x20e/0x720 [ 481.225873][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 481.231459][ T30] ? ops_init+0x75/0x590 [ 481.235738][ T30] ops_init+0x31e/0x590 [ 481.246847][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 481.252252][ T30] setup_net+0x287/0x9e0 [ 481.264303][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 481.270685][ T30] ? __pfx_setup_net+0x10/0x10 [ 481.275497][ T30] copy_net_ns+0x33f/0x570 [ 481.285851][ T30] create_new_namespaces+0x425/0x7b0 [ 481.291185][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 481.304105][ T30] ksys_unshare+0x619/0xc10 [ 481.309945][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 481.322343][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 481.329071][ T30] ? do_syscall_64+0x100/0x230 [ 481.334421][ T30] __x64_sys_unshare+0x38/0x40 [ 481.356004][ T30] do_syscall_64+0xf3/0x230 [ 481.360550][ T30] ? clear_bhb_loop+0x35/0x90 [ 481.365246][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.379421][ T30] RIP: 0033:0x7f1c2437f7f7 [ 481.383866][ T30] RSP: 002b:00007f1c2465ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 481.399613][ T30] RAX: ffffffffffffffda RBX: 00007f1c243f1a85 RCX: 00007f1c2437f7f7 [ 481.410078][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 481.422961][ T30] RBP: 0000000000000000 R08: 00007f1c25067d60 R09: 0000000000000000 [ 481.434823][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 481.451624][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 481.462130][ T30] [ 481.469899][ T30] [ 481.469899][ T30] Showing all locks held in the system: [ 481.480300][ T30] 6 locks held by kworker/u8:1/12: [ 481.485430][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 481.503742][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 481.525455][ T30] #2: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 481.536404][ T30] #3: ffff88802c86c0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 481.552988][ T30] #4: ffff88802c86d250 (&devlink->lock_key#15){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 481.564224][ T30] #5: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 481.581366][ T30] 1 lock held by khungtaskd/30: [ 481.588974][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 481.602600][ T30] 3 locks held by kworker/1:1/46: [ 481.610148][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 481.630204][ T30] #1: ffffc90000b67d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 481.644748][ T30] #2: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 481.662379][ T30] 3 locks held by kworker/1:2/938: [ 481.668934][ T30] 4 locks held by kworker/u8:7/3027: [ 481.674277][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 481.694085][ T30] #1: ffffc900099f7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 481.705383][ T30] #2: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 481.721413][ T30] #3: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 481.742703][ T30] 2 locks held by getty/4986: [ 481.748838][ T30] #0: ffff8880327820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 481.764572][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 481.783218][ T30] 7 locks held by kworker/1:5/5285: [ 481.788756][ T30] 1 lock held by syz.2.2214/11714: [ 481.793901][ T30] #0: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x89e/0x1000 [ 481.805875][ T30] 2 locks held by syz-executor/11752: [ 481.811274][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 481.830816][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 481.847133][ T30] 2 locks held by syz-executor/11757: [ 481.852533][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 481.866067][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 481.875441][ T30] 2 locks held by syz-executor/11759: [ 481.888274][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 481.902361][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 481.914722][ T30] 2 locks held by syz-executor/11762: [ 481.924728][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 481.937024][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 481.955189][ T30] 2 locks held by syz-executor/11765: [ 481.961971][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 481.976040][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 481.985586][ T30] 2 locks held by syz-executor/11779: [ 482.000104][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.014352][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 482.025338][ T30] 2 locks held by syz-executor/11780: [ 482.036093][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.045555][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 482.063466][ T30] 2 locks held by syz-executor/11781: [ 482.071597][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.086922][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 482.102847][ T30] 2 locks held by syz-executor/11785: [ 482.109598][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.123781][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 482.142578][ T30] 2 locks held by syz-executor/11787: [ 482.150377][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.168515][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 482.182023][ T30] 2 locks held by syz-executor/11798: [ 482.192377][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.205651][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 482.218562][ T30] 2 locks held by syz-executor/11800: [ 482.223954][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.244721][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 482.261749][ T30] 2 locks held by syz-executor/11803: [ 482.267506][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.283785][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 482.294940][ T30] 2 locks held by syz-executor/11805: [ 482.306385][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.320572][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 482.332941][ T30] 2 locks held by syz-executor/11808: [ 482.345392][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.362555][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 482.372451][ T30] 2 locks held by syz-executor/11818: [ 482.385664][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.403576][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 482.424983][ T30] 2 locks held by syz-executor/11821: [ 482.432648][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.449362][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 482.460822][ T30] 2 locks held by syz-executor/11823: [ 482.472282][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.484911][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 482.500902][ T30] 2 locks held by syz-executor/11826: [ 482.507698][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.523353][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 482.540281][ T30] 2 locks held by syz-executor/11829: [ 482.549439][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 482.563495][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 482.593647][ T30] [ 482.605202][ T30] ============================================= [ 482.605202][ T30] [ 482.631898][ T30] NMI backtrace for cpu 0 [ 482.636256][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 482.646430][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 482.656502][ T30] Call Trace: [ 482.659790][ T30] [ 482.662731][ T30] dump_stack_lvl+0x241/0x360 [ 482.667433][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.672652][ T30] ? __pfx__printk+0x10/0x10 [ 482.677274][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 482.682233][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 482.687706][ T30] ? _printk+0xd5/0x120 [ 482.691878][ T30] ? __pfx__printk+0x10/0x10 [ 482.696488][ T30] ? __wake_up_klogd+0xcc/0x110 [ 482.701353][ T30] ? __pfx__printk+0x10/0x10 [ 482.705961][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 482.711004][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 482.717003][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 482.723005][ T30] watchdog+0xff4/0x1040 [ 482.727269][ T30] ? watchdog+0x1ea/0x1040 [ 482.731708][ T30] ? __pfx_watchdog+0x10/0x10 [ 482.736401][ T30] kthread+0x2f0/0x390 [ 482.740484][ T30] ? __pfx_watchdog+0x10/0x10 [ 482.745179][ T30] ? __pfx_kthread+0x10/0x10 [ 482.749781][ T30] ret_from_fork+0x4b/0x80 [ 482.754214][ T30] ? __pfx_kthread+0x10/0x10 [ 482.758817][ T30] ret_from_fork_asm+0x1a/0x30 [ 482.763611][ T30] [ 482.767381][ T30] Sending NMI from CPU 0 to CPUs 1: [ 482.772619][ C1] NMI backtrace for cpu 1 [ 482.772634][ C1] CPU: 1 UID: 0 PID: 5285 Comm: kworker/1:5 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 482.772653][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 482.772665][ C1] Workqueue: events nsim_dev_trap_report_work [ 482.772686][ C1] RIP: 0010:unwind_next_frame+0xb/0x22d0 [ 482.772712][ C1] Code: 38 c1 7c 91 4c 89 f7 e8 03 40 bd 00 eb 87 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 <41> 54 53 48 81 ec 98 00 00 00 49 89 fd 49 bc 00 00 00 00 00 fc ff [ 482.772732][ C1] RSP: 0018:ffffc90000a17cb8 EFLAGS: 00000283 [ 482.772746][ C1] RAX: ffffc90000a17dd0 RBX: ffffc90000a17d78 RCX: 0000000080000102 [ 482.772758][ C1] RDX: dffffc0000000000 RSI: ffffc90000a11000 RDI: ffffc90000a17d40 [ 482.772771][ C1] RBP: 1ffff92000142fa9 R08: ffffc90000a17d30 R09: 0000000000000000 [ 482.772783][ C1] R10: ffffc90000a17d90 R11: fffff52000142fb4 R12: 1ffff92000142faa [ 482.772795][ C1] R13: ffffc90000a17d50 R14: ffffc90000a17d40 R15: ffffc90000a17d48 [ 482.772808][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 482.772821][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.772833][ C1] CR2: 00007f539145e6a8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 482.772847][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 482.772857][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 482.772868][ C1] Call Trace: [ 482.772874][ C1] [ 482.772880][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 482.772899][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 482.772931][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 482.772949][ C1] ? nmi_handle+0x2a/0x5a0 [ 482.772971][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 482.772991][ C1] ? nmi_handle+0x14f/0x5a0 [ 482.773006][ C1] ? nmi_handle+0x2a/0x5a0 [ 482.773023][ C1] ? unwind_next_frame+0xb/0x22d0 [ 482.773045][ C1] ? default_do_nmi+0x63/0x160 [ 482.773063][ C1] ? exc_nmi+0x123/0x1f0 [ 482.773080][ C1] ? end_repeat_nmi+0xf/0x53 [ 482.773108][ C1] ? unwind_next_frame+0xb/0x22d0 [ 482.773130][ C1] ? unwind_next_frame+0xb/0x22d0 [ 482.773153][ C1] ? unwind_next_frame+0xb/0x22d0 [ 482.773175][ C1] [ 482.773180][ C1] [ 482.773187][ C1] __unwind_start+0x59a/0x740 [ 482.773210][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 482.773230][ C1] arch_stack_walk+0xe5/0x150 [ 482.773247][ C1] ? arch_stack_walk+0xe5/0x150 [ 482.773266][ C1] stack_trace_save+0x118/0x1d0 [ 482.773284][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 482.773303][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 482.773328][ C1] kasan_save_track+0x3f/0x80 [ 482.773365][ C1] ? skb_release_data+0x6a0/0x8a0 [ 482.773382][ C1] kasan_save_free_info+0x40/0x50 [ 482.773403][ C1] __kasan_slab_free+0x59/0x70 [ 482.773418][ C1] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 482.773440][ C1] kmem_cache_free+0x1a2/0x420 [ 482.773459][ C1] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 482.773482][ C1] nft_synproxy_eval_v4+0x3d2/0x610 [ 482.773506][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 482.773529][ C1] ? nf_ip_checksum+0x13a/0x500 [ 482.773552][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 482.773576][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 482.773600][ C1] ? __pfx_validate_chain+0x10/0x10 [ 482.773621][ C1] nft_do_chain+0x4ad/0x1da0 [ 482.773649][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 482.773670][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 482.773702][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 482.773727][ C1] nft_do_chain_inet+0x418/0x6b0 [ 482.773750][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 482.773771][ C1] ? ipt_do_table+0x312/0x1860 [ 482.773799][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 482.773819][ C1] nf_hook_slow+0xc3/0x220 [ 482.773838][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 482.773856][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 482.773873][ C1] NF_HOOK+0x29e/0x450 [ 482.773890][ C1] ? NF_HOOK+0x9a/0x450 [ 482.773905][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 482.773927][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 482.773947][ C1] ? ip_rcv_finish+0x406/0x560 [ 482.773965][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 482.773981][ C1] NF_HOOK+0x3a4/0x450 [ 482.773997][ C1] ? __lock_acquire+0x1384/0x2050 [ 482.774019][ C1] ? NF_HOOK+0x9a/0x450 [ 482.774035][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 482.774050][ C1] ? ip_rcv_core+0x801/0xd10 [ 482.774067][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 482.774087][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 482.774103][ C1] __netif_receive_skb+0x2bf/0x650 [ 482.774123][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 482.774144][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 482.774162][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 482.774184][ C1] ? __pfx_lock_release+0x10/0x10 [ 482.774206][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 482.774232][ C1] process_backlog+0x662/0x15b0 [ 482.774253][ C1] ? process_backlog+0x33b/0x15b0 [ 482.774276][ C1] ? __pfx_process_backlog+0x10/0x10 [ 482.774295][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 482.774318][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 482.774342][ C1] __napi_poll+0xcb/0x490 [ 482.774361][ C1] net_rx_action+0x89b/0x1240 [ 482.774389][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 482.774409][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 482.774445][ C1] handle_softirqs+0x2c5/0x980 [ 482.774466][ C1] ? do_softirq+0x11b/0x1e0 [ 482.774486][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 482.774507][ C1] ? rcu_is_watching+0x15/0xb0 [ 482.774525][ C1] do_softirq+0x11b/0x1e0 [ 482.774543][ C1] [ 482.774548][ C1] [ 482.774554][ C1] ? __pfx_do_softirq+0x10/0x10 [ 482.774573][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 482.774596][ C1] ? rcu_is_watching+0x15/0xb0 [ 482.774613][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 482.774633][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 482.774650][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 482.774670][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 482.774690][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 482.774709][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 482.774733][ C1] ? process_scheduled_works+0x976/0x1850 [ 482.774754][ C1] process_scheduled_works+0xa63/0x1850 [ 482.774787][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 482.774811][ C1] ? assign_work+0x364/0x3d0 [ 482.774833][ C1] worker_thread+0x870/0xd30 [ 482.774857][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 482.774879][ C1] ? __kthread_parkme+0x169/0x1d0 [ 482.774902][ C1] ? __pfx_worker_thread+0x10/0x10 [ 482.774926][ C1] kthread+0x2f0/0x390 [ 482.774940][ C1] ? __pfx_worker_thread+0x10/0x10 [ 482.774959][ C1] ? __pfx_kthread+0x10/0x10 [ 482.774974][ C1] ret_from_fork+0x4b/0x80 [ 482.774995][ C1] ? __pfx_kthread+0x10/0x10 [ 482.775009][ C1] ret_from_fork_asm+0x1a/0x30 [ 482.775037][ C1] [ 483.511463][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 483.518348][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 483.528601][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 483.538665][ T30] Call Trace: [ 483.541951][ T30] [ 483.544888][ T30] dump_stack_lvl+0x241/0x360 [ 483.549588][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.554807][ T30] ? __pfx__printk+0x10/0x10 [ 483.559412][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 483.565418][ T30] ? vscnprintf+0x5d/0x90 [ 483.569765][ T30] panic+0x349/0x880 [ 483.573678][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 483.579851][ T30] ? __pfx_panic+0x10/0x10 [ 483.584286][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 483.589676][ T30] ? __irq_work_queue_local+0x137/0x410 [ 483.595239][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 483.600626][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 483.606798][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 483.612968][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 483.619138][ T30] watchdog+0x1033/0x1040 [ 483.623481][ T30] ? watchdog+0x1ea/0x1040 [ 483.627918][ T30] ? __pfx_watchdog+0x10/0x10 [ 483.632611][ T30] kthread+0x2f0/0x390 [ 483.636696][ T30] ? __pfx_watchdog+0x10/0x10 [ 483.641389][ T30] ? __pfx_kthread+0x10/0x10 [ 483.645992][ T30] ret_from_fork+0x4b/0x80 [ 483.650423][ T30] ? __pfx_kthread+0x10/0x10 [ 483.655023][ T30] ret_from_fork_asm+0x1a/0x30 [ 483.659816][ T30] [ 483.663059][ T30] Kernel Offset: disabled [ 483.667383][ T30] Rebooting in 86400 seconds..