last executing test programs: 10.769682072s ago: executing program 3 (id=1579): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x3, 0xffffffff, 0x3, 0x0, 0x1000}) 10.443414137s ago: executing program 4 (id=1580): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) 10.319983464s ago: executing program 4 (id=1581): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x2000141a) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) 10.125655309s ago: executing program 4 (id=1583): r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) recvmsg(r0, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000025c0)=""/60, 0x3c}], 0x1, 0x0, 0xfffffffffffffcdf}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x8000) 9.156866959s ago: executing program 4 (id=1588): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x6}}]}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 8.217066908s ago: executing program 4 (id=1591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)=@arm64={0x2, 0x9, 0x2, '\x00', 0x5}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) 7.77704077s ago: executing program 3 (id=1594): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b10b5103a09222689b5010203010902240001000000000904000002f46479000905ff47"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.448981986s ago: executing program 1 (id=1597): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_io_uring_setup(0x6563, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 7.240050321s ago: executing program 1 (id=1598): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x18, 0x1}) 6.328908614s ago: executing program 4 (id=1602): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x0, 'e'}, @main=@item_012={0x2, 0x0, 0x0, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) 4.885083105s ago: executing program 3 (id=1610): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.138165615s ago: executing program 2 (id=1614): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.047166088s ago: executing program 1 (id=1615): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x1, 0x9, 0x1, 0x5}) 3.73490361s ago: executing program 2 (id=1617): syz_open_dev$usbmon(&(0x7f0000000140), 0x5a2, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x0) 3.694486994s ago: executing program 1 (id=1618): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000000c0)=""/8) 3.33197094s ago: executing program 1 (id=1620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000073000040"]) 3.271842408s ago: executing program 2 (id=1621): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 3.113255709s ago: executing program 0 (id=1622): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x38, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "56a8965337bc2bc2a6e5"}}}}}}, 0x0) 2.833515682s ago: executing program 0 (id=1623): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001480), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000011500), 0x0, 0x0) 2.578706729s ago: executing program 0 (id=1624): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)='I', 0x1}], 0x1}}], 0x1, 0x4008095) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000080)) 2.547903588s ago: executing program 2 (id=1625): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000180)={0x0, @sdr}) 2.524952738s ago: executing program 3 (id=1626): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "c9c0e2f5"}, @local=@item_4={0x3, 0x2, 0x0, "71b9a7ab"}, @main=@item_4={0x3, 0x0, 0x0, "1000090e"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000140)={0x3, 0xffffffff}) 2.295176885s ago: executing program 0 (id=1627): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000002140)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [], [0x0, 0x0, 0xfffffffe, 0x4], [], [0x8000000000000000]}) 2.257727978s ago: executing program 2 (id=1628): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001c00000014000180080003000100000008000100", @ANYRES32=r3], 0x28}}, 0x0) 2.073127519s ago: executing program 0 (id=1629): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1020, 0x0) 1.896941427s ago: executing program 2 (id=1630): capset(0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 1.817589837s ago: executing program 0 (id=1631): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000100)=0x57bb, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000000c0), 0x4) 275.103276ms ago: executing program 3 (id=1632): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="b5", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200), &(0x7f0000000300)=0x8) 272.367701ms ago: executing program 1 (id=1641): syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[]) 0s ago: executing program 3 (id=1633): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x28c, 0x0, 0x10}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[]) kernel console output (not intermixed with test programs): _1: entered allmulticast mode [ 203.604514][ T8672] bridge_slave_1: entered promiscuous mode [ 203.610582][ T55] Bluetooth: hci5: command tx timeout [ 203.682743][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.747882][ T8672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.789953][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.833430][ T8672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.005891][ T55] Bluetooth: hci6: command tx timeout [ 204.042631][ T8662] team0: Port device team_slave_0 added [ 204.061497][ T8662] team0: Port device team_slave_1 added [ 204.075000][ T8672] team0: Port device team_slave_0 added [ 204.133097][ T8672] team0: Port device team_slave_1 added [ 204.305573][ T71] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.353364][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.382513][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.475997][ T8662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.520285][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.530250][ T8737] input: syz1 as /devices/virtual/input/input29 [ 204.545821][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.572139][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 204.573342][ T9] gspca_sonixj: reg_w1 err -71 [ 204.615249][ T8662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.695888][ T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 204.728877][ T71] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.743663][ T9] usb 4-1: USB disconnect, device number 11 [ 204.777511][ T8739] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 204.831567][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.855787][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.881815][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.910446][ T8672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.932199][ T8744] vlan2: entered allmulticast mode [ 204.938935][ T8744] bond0: entered allmulticast mode [ 204.944087][ T8744] bond_slave_0: entered allmulticast mode [ 204.971427][ T8744] bond_slave_1: entered allmulticast mode [ 204.990154][ T8744] bond0: left allmulticast mode [ 204.995247][ T8744] bond_slave_0: left allmulticast mode [ 205.002410][ T8744] bond_slave_1: left allmulticast mode [ 205.065852][ T71] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.130445][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.140279][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.180965][ T8672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.343091][ T8662] hsr_slave_0: entered promiscuous mode [ 205.375985][ T8662] hsr_slave_1: entered promiscuous mode [ 205.382267][ T8662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.415746][ T8662] Cannot create hsr debugfs directory [ 205.460944][ T71] team0: Port device netdevsim0 removed [ 205.473038][ T71] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.605786][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 205.670543][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 205.686273][ T55] Bluetooth: hci5: command tx timeout [ 205.704925][ T8672] hsr_slave_0: entered promiscuous mode [ 205.716810][ T8672] hsr_slave_1: entered promiscuous mode [ 205.726122][ T8672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.735695][ T8672] Cannot create hsr debugfs directory [ 205.846221][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 205.857569][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.883840][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 205.896047][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 205.938355][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 205.956762][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 205.966756][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.052518][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 206.073794][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 206.082355][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 206.086474][ T55] Bluetooth: hci6: command tx timeout [ 206.091331][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 206.110389][ T71] bridge_slave_1: left allmulticast mode [ 206.134282][ T71] bridge_slave_1: left promiscuous mode [ 206.156096][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.163709][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 206.178073][ T71] bridge_slave_0: left allmulticast mode [ 206.183771][ T71] bridge_slave_0: left promiscuous mode [ 206.196049][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 206.225104][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.263475][ T71] macvlan4: left allmulticast mode [ 206.271605][ T71] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 206.280776][ T71] macvlan4: left promiscuous mode [ 206.302106][ T71] bridge0: port 3(macvlan4) entered disabled state [ 206.356418][ T71] bridge_slave_1: left allmulticast mode [ 206.362165][ T71] bridge_slave_1: left promiscuous mode [ 206.383284][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.402686][ T71] bridge_slave_0: left allmulticast mode [ 206.410516][ T71] bridge_slave_0: left promiscuous mode [ 206.426911][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.645847][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 206.748454][ T8761] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 206.762883][ T8761] usb 5-1: device reset changed ep0 maxpacket size! [ 206.781712][ T8761] cdc_wdm 5-1:1.0: Error autopm - -16 [ 206.781884][ T5287] usb 5-1: USB disconnect, device number 10 [ 206.959562][ T5287] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 207.063194][ T71] dvmrp1 (unregistering): left allmulticast mode [ 207.123808][ T5287] usb 5-1: Using ep0 maxpacket: 16 [ 207.135546][ T5287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.148583][ T5287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 207.157657][ T5287] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 207.179196][ T5287] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 207.190697][ T5287] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 207.201849][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.215258][ T5287] cdc_wdm 5-1:1.0: skipping garbage [ 207.221830][ T5287] cdc_wdm 5-1:1.0: skipping garbage [ 207.229446][ T5287] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 207.235388][ T5287] cdc_wdm 5-1:1.0: Unknown control protocol [ 207.388748][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.402346][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.413699][ T71] bond0 (unregistering): Released all slaves [ 207.458796][ T5287] usb 5-1: USB disconnect, device number 11 [ 207.583640][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.598752][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.611133][ T71] bond0 (unregistering): (slave macvlan3): Releasing backup interface [ 207.622224][ T71] team0: left promiscuous mode [ 207.628546][ T71] team_slave_0: left promiscuous mode [ 207.634251][ T71] team_slave_1: left promiscuous mode [ 207.642336][ T71] bond0 (unregistering): Released all slaves [ 207.685792][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 207.766026][ T55] Bluetooth: hci5: command tx timeout [ 207.767055][ T71] tipc: Disabling bearer [ 207.778799][ T71] tipc: Left network mode [ 208.166153][ T55] Bluetooth: hci6: command tx timeout [ 208.354983][ T71] batadv_slave_0: left promiscuous mode [ 208.378591][ T71] hsr_slave_0: left promiscuous mode [ 208.384361][ T71] hsr_slave_1: left promiscuous mode [ 208.390915][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.398774][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.407538][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.414981][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.425385][ T71] hsr_slave_0: left promiscuous mode [ 208.431360][ T71] hsr_slave_1: left promiscuous mode [ 208.438862][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.446453][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.454631][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.462334][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.494631][ T71] veth1_macvtap: left promiscuous mode [ 208.500241][ T71] veth0_macvtap: left promiscuous mode [ 208.505967][ T71] veth1_vlan: left promiscuous mode [ 208.511266][ T71] veth0_vlan: left promiscuous mode [ 208.517654][ T71] veth1_macvtap: left promiscuous mode [ 208.523158][ T71] veth0_macvtap: left promiscuous mode [ 208.528774][ T71] veth1_vlan: left promiscuous mode [ 208.534041][ T71] veth0_vlan: left promiscuous mode [ 209.051522][ T71] team0 (unregistering): Port device team_slave_1 removed [ 209.104753][ T71] team0 (unregistering): Port device team_slave_0 removed [ 209.845995][ T55] Bluetooth: hci5: command tx timeout [ 209.943634][ T71] team0 (unregistering): Port device team_slave_1 removed [ 209.995542][ T71] team0 (unregistering): Port device team_slave_0 removed [ 210.245989][ T55] Bluetooth: hci6: command tx timeout [ 210.868898][ T8672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.899716][ T8672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.936234][ T8672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.954881][ T8672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.072388][ T8662] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.089985][ T8662] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.129277][ T8662] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.162723][ T8662] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.226928][ T71] IPVS: stop unused estimator thread 0... [ 211.310057][ T8662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.324911][ T8672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.380500][ T8672] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.400812][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.407980][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.419379][ T8662] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.441501][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.448663][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.525252][ T8672] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.536285][ T8672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.572832][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.580032][ T8583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.640210][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.647491][ T8583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.717608][ T8672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.789492][ T8662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.824549][ T8672] veth0_vlan: entered promiscuous mode [ 211.856853][ T8672] veth1_vlan: entered promiscuous mode [ 211.905309][ T8662] veth0_vlan: entered promiscuous mode [ 211.948908][ T8662] veth1_vlan: entered promiscuous mode [ 211.962394][ T8672] veth0_macvtap: entered promiscuous mode [ 212.008180][ T8672] veth1_macvtap: entered promiscuous mode [ 212.059166][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.071579][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.082744][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.102012][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.114730][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.133961][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.144303][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.163682][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.174214][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.185260][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.198026][ T8672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.215346][ T8662] veth0_macvtap: entered promiscuous mode [ 212.237015][ T8662] veth1_macvtap: entered promiscuous mode [ 212.262532][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.281173][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.294601][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.312715][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.322656][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.335042][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.345321][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.356311][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.366189][ T8672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.377035][ T8672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.389098][ T8672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.410997][ T8672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.424127][ T8672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.442507][ T8672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.453062][ T8672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.478472][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.510520][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.526482][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.544317][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.556064][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.575452][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.586012][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.604625][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.614821][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.633542][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.644079][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.663026][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.686430][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.727095][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.749490][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.764737][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.778848][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.790917][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.801579][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.812156][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.823062][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.833459][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.844789][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.855330][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.867062][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.879979][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.919034][ T8662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.933824][ T8662] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.943521][ T8662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.954114][ T8662] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.038627][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.053936][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.143084][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.144258][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.168052][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.175919][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.267498][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.316020][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.322326][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 214.356449][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 214.537876][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 214.674425][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 214.697358][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 214.709146][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 214.720264][ T9] usb 4-1: config 0 has no interfaces? [ 214.756410][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 214.795339][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.824336][ T9] usb 4-1: Product: syz [ 214.854727][ T9] usb 4-1: Manufacturer: syz [ 214.871565][ T9] usb 4-1: SerialNumber: syz [ 214.902896][ T9] usb 4-1: config 0 descriptor?? [ 214.939455][ T1174] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 215.137486][ T1174] usb 2-1: Using ep0 maxpacket: 16 [ 215.158604][ T1853] usb 4-1: USB disconnect, device number 12 [ 215.159019][ T1174] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 215.183813][ T1174] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 215.209860][ T1174] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 215.230757][ T1174] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 215.239546][ T1174] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 215.250421][ T1174] usb 2-1: config 0 has no interface number 0 [ 215.256877][ T1174] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 215.268488][ T1174] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 215.283134][ T1174] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.305520][ T1174] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.320793][ T1174] usb 2-1: config 0 interface 125 has no altsetting 0 [ 215.328120][ T1174] usb 2-1: config 0 interface 125 has no altsetting 2 [ 215.337403][ T1174] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 215.353290][ T1174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.374877][ T1174] usb 2-1: Product: syz [ 215.379218][ T1174] usb 2-1: Manufacturer: syz [ 215.383839][ T1174] usb 2-1: SerialNumber: syz [ 215.392118][ T1174] usb 2-1: config 0 descriptor?? [ 215.405756][ T1174] usb 2-1: selecting invalid altsetting 2 [ 215.415835][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 215.549197][ T145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.567396][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 215.585824][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 215.605593][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 215.629088][ T8936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.637774][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 54 [ 215.648279][ T8936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.674465][ T25] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 215.684167][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.702563][ T25] usb 5-1: config 0 descriptor?? [ 215.738954][ T8952] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 215.756988][ T145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.963737][ T145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.027719][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 216.081440][ T25] ath6kl: Failed to submit usb control message: -71 [ 216.094003][ T4624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.105307][ T4624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.105327][ T25] ath6kl: unable to send the bmi data to the device: -71 [ 216.105346][ T25] ath6kl: Unable to send get target info: -71 [ 216.132915][ T4624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.153125][ T4624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.168398][ T4624] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.187761][ T4624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.202144][ T25] ath6kl: Failed to init ath6kl core: -71 [ 216.232323][ T25] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 216.256232][ T145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.276244][ C0] usb 2-1: async_complete: urb error -71 [ 216.282060][ C0] usb 2-1: async_complete: urb error -71 [ 216.287807][ C0] usb 2-1: async_complete: urb error -71 [ 216.293545][ C0] usb 2-1: async_complete: urb error -71 [ 216.301088][ T1174] get_1284_register: usb error -71 [ 216.306372][ T1174] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 216.314427][ T25] usb 5-1: USB disconnect, device number 12 [ 216.318124][ T1174] usb 2-1: USB disconnect, device number 20 [ 216.616733][ T8974] input: syz0 as /devices/virtual/input/input30 [ 216.676184][ T145] bridge_slave_1: left allmulticast mode [ 216.681972][ T145] bridge_slave_1: left promiscuous mode [ 216.688039][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.700921][ T145] bridge_slave_0: left allmulticast mode [ 216.718597][ T145] bridge_slave_0: left promiscuous mode [ 216.749694][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.372847][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.384481][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.401819][ T145] bond0 (unregistering): Released all slaves [ 217.415351][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'. [ 217.531879][ T8970] chnl_net:caif_netlink_parms(): no params data found [ 217.534774][ T1174] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 217.725795][ T1174] usb 5-1: Using ep0 maxpacket: 8 [ 217.746643][ T1174] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 217.766503][ T1174] usb 5-1: config 0 has no interface number 0 [ 217.818759][ T1174] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.852847][ T1174] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.873479][ T1174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.896046][ T1174] usb 5-1: config 0 descriptor?? [ 217.913682][ T1174] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 218.179040][ T8970] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.196018][ T8970] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.196259][ T1174] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 218.203452][ T8970] bridge_slave_0: entered allmulticast mode [ 218.218651][ T8970] bridge_slave_0: entered promiscuous mode [ 218.246938][ T55] Bluetooth: hci1: command tx timeout [ 218.254700][ T145] hsr_slave_0: left promiscuous mode [ 218.262937][ T145] hsr_slave_1: left promiscuous mode [ 218.327756][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.364866][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.387897][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.406247][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.418866][ T1174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.438411][ T1174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.458501][ T1174] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.487038][ T145] veth1_macvtap: left promiscuous mode [ 218.502514][ T145] veth0_macvtap: left promiscuous mode [ 218.506938][ T1174] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.512067][ T145] veth1_vlan: left promiscuous mode [ 218.531940][ T1174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.547078][ T145] veth0_vlan: left promiscuous mode [ 218.570500][ T1174] usb 3-1: config 0 descriptor?? [ 219.021343][ T1174] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 219.039338][ T1174] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 219.054753][ T1174] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 219.080632][ T1174] plantronics 0003:047F:FFFF.0011: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 219.146176][ T1174] usb 5-1: USB disconnect, device number 13 [ 219.164733][ T1174] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 219.227632][ T9] usb 3-1: USB disconnect, device number 20 [ 219.718751][ T145] team0 (unregistering): Port device team_slave_1 removed [ 219.868512][ T145] team0 (unregistering): Port device team_slave_0 removed [ 220.336180][ T55] Bluetooth: hci1: command tx timeout [ 221.059976][ T8970] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.067455][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.074732][ T8970] bridge_slave_1: entered allmulticast mode [ 221.084076][ T8970] bridge_slave_1: entered promiscuous mode [ 221.257055][ T8970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.283621][ T8970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.436683][ T8970] team0: Port device team_slave_0 added [ 221.473760][ T9093] tipc: Started in network mode [ 221.487096][ T9093] tipc: Node identity 7ff, cluster identity 4711 [ 221.493845][ T9093] tipc: Node number set to 2047 [ 221.511349][ T8970] team0: Port device team_slave_1 added [ 221.667556][ T8970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.683212][ T8970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.713843][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.727298][ T8970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.756866][ T8970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.765160][ T8970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.795288][ T8970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.932984][ T8970] hsr_slave_0: entered promiscuous mode [ 221.956513][ T8970] hsr_slave_1: entered promiscuous mode [ 221.966476][ T8970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.974773][ T8970] Cannot create hsr debugfs directory [ 222.029485][ T9107] pim6reg: entered allmulticast mode [ 222.130289][ T9111] pim6reg: left allmulticast mode [ 222.237501][ T9110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1236'. [ 222.406529][ T55] Bluetooth: hci1: command tx timeout [ 223.114818][ T9153] sctp: [Deprecated]: syz.3.1249 (pid 9153) Use of int in max_burst socket option deprecated. [ 223.114818][ T9153] Use struct sctp_assoc_value instead [ 223.395796][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 223.502692][ T1060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.530242][ T8970] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.542462][ T8970] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.565565][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.582393][ T8970] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.595878][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.618290][ T25] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 223.634121][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.649913][ T25] usb 5-1: config 0 descriptor?? [ 223.735237][ T1060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.789409][ T8970] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.917954][ T1060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.048786][ T1060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.080915][ T25] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 224.100383][ T25] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 224.113352][ T25] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 224.129759][ T25] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 224.145022][ T25] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 224.209360][ T25] hid-thrustmaster 0003:044F:B65D.0012: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 224.212088][ T8970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.232432][ T25] hid-thrustmaster 0003:044F:B65D.0012: Wrong number of endpoints? [ 224.238560][ T8970] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.245594][ T4624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.272680][ T8970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.283133][ T8970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.303382][ T4624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.313424][ T4624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.323336][ T4624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.342862][ T4624] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 224.350664][ T4624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.399693][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.406910][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.436458][ C1] hid-thrustmaster 0003:044F:B65D.0012: Unknown packet type 0x0, unable to proceed further with wheel init [ 224.449705][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.456901][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.486278][ T4624] Bluetooth: hci1: command tx timeout [ 224.651482][ T25] usb 5-1: USB disconnect, device number 14 [ 224.673630][ T8970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.764921][ T1060] bridge_slave_1: left allmulticast mode [ 224.781458][ T1060] bridge_slave_1: left promiscuous mode [ 224.800525][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.818505][ T1060] bridge_slave_0: left allmulticast mode [ 224.824392][ T1060] bridge_slave_0: left promiscuous mode [ 224.839214][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.167107][ T9201] trusted_key: syz.1.1258 sent an empty control message without MSG_MORE. [ 225.410695][ T9212] vivid-003: disconnect [ 225.445250][ T9211] vivid-003: reconnect [ 226.076003][ T1853] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 226.130238][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.156542][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.182009][ T1060] bond0 (unregistering): Released all slaves [ 226.241150][ T1853] usb 2-1: Using ep0 maxpacket: 16 [ 226.267172][ T1853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.267274][ T9232] pimreg: entered allmulticast mode [ 226.311205][ T1853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.354082][ T1853] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 226.401525][ T9234] pimreg: left allmulticast mode [ 226.407432][ T4624] Bluetooth: hci4: command tx timeout [ 226.424467][ T1853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.469681][ T1853] usb 2-1: config 0 descriptor?? [ 226.642597][ T8970] veth0_vlan: entered promiscuous mode [ 226.722447][ T8970] veth1_vlan: entered promiscuous mode [ 226.770996][ T1060] hsr_slave_0: left promiscuous mode [ 226.909224][ T1853] playstation 0003:054C:05C4.0013: unknown main item tag 0x0 [ 226.921747][ T1853] playstation 0003:054C:05C4.0013: unknown main item tag 0x0 [ 226.937596][ T1853] playstation 0003:054C:05C4.0013: unknown main item tag 0x0 [ 226.945144][ T1853] playstation 0003:054C:05C4.0013: unknown main item tag 0x0 [ 226.955263][ T1853] playstation 0003:054C:05C4.0013: unknown main item tag 0x0 [ 226.974135][ T1853] playstation 0003:054C:05C4.0013: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 227.000984][ T1060] hsr_slave_1: left promiscuous mode [ 227.012230][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.029067][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.055244][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.085011][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.107958][ T1853] playstation 0003:054C:05C4.0013: Invalid reportID received, expected 18 got 0 [ 227.122169][ T1853] playstation 0003:054C:05C4.0013: Failed to retrieve DualShock4 pairing info: -22 [ 227.155861][ T1853] playstation 0003:054C:05C4.0013: Failed to get MAC address from DualShock4 [ 227.195355][ T1853] playstation 0003:054C:05C4.0013: Failed to create dualshock4. [ 227.217760][ T1060] veth1_macvtap: left promiscuous mode [ 227.223379][ T1060] veth0_macvtap: left promiscuous mode [ 227.241042][ T1853] playstation 0003:054C:05C4.0013: probe with driver playstation failed with error -22 [ 227.266480][ T1060] veth1_vlan: left promiscuous mode [ 227.286815][ T1060] veth0_vlan: left promiscuous mode [ 227.315829][ T1853] usb 2-1: USB disconnect, device number 21 [ 228.489474][ T4624] Bluetooth: hci4: command tx timeout [ 228.630196][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 228.723553][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 229.588294][ T9187] chnl_net:caif_netlink_parms(): no params data found [ 229.715999][ T29] audit: type=1326 audit(1728898638.075:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.3.1278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 229.741981][ T29] audit: type=1326 audit(1728898638.075:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.3.1278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 229.799413][ T29] audit: type=1326 audit(1728898638.075:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.3.1278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 229.805210][ T8970] veth0_macvtap: entered promiscuous mode [ 229.844635][ T29] audit: type=1326 audit(1728898638.075:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.3.1278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 229.866645][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.875311][ T29] audit: type=1326 audit(1728898638.075:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.3.1278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 229.897338][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.908223][ T8970] veth1_macvtap: entered promiscuous mode [ 229.924236][ T29] audit: type=1326 audit(1728898638.075:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.3.1278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 229.940043][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.946255][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.954480][ T29] audit: type=1326 audit(1728898638.075:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.3.1278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 229.986021][ T29] audit: type=1326 audit(1728898638.075:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.3.1278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7ffc0000 [ 230.054558][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.085397][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.120008][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.134427][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.145107][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.166380][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.194559][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.234780][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.265759][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.301903][ T8970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.406434][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.413579][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.439630][ T9187] bridge_slave_0: entered allmulticast mode [ 230.464377][ T9187] bridge_slave_0: entered promiscuous mode [ 230.476228][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.512180][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.548898][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.568258][ T4624] Bluetooth: hci4: command tx timeout [ 230.589042][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.615757][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.655778][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.693690][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.725228][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.750179][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.770003][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.801879][ T8970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.824666][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.843595][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.865981][ T9187] bridge_slave_1: entered allmulticast mode [ 230.881056][ T9187] bridge_slave_1: entered promiscuous mode [ 230.881305][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.918046][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.937568][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.948328][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.950532][ T8970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.972254][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 230.974526][ T8970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.989144][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.007974][ T8970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.035832][ T8970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.093174][ T9187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.164650][ T9187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.273862][ T9187] team0: Port device team_slave_0 added [ 231.309743][ T9187] team0: Port device team_slave_1 added [ 231.414088][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.422107][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.455694][ T9187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.562540][ T1060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.627582][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.636266][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.662575][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.675727][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.689848][ T9187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.901434][ T1060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.011931][ T1060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.061404][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.077582][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.079447][ T9187] hsr_slave_0: entered promiscuous mode [ 232.096130][ T9187] hsr_slave_1: entered promiscuous mode [ 232.102521][ T9187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.110548][ T9187] Cannot create hsr debugfs directory [ 232.184927][ T1060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.388008][ T9310] chnl_net:caif_netlink_parms(): no params data found [ 232.646414][ T55] Bluetooth: hci4: command tx timeout [ 232.694370][ T1060] bridge_slave_1: left allmulticast mode [ 232.701676][ T1060] bridge_slave_1: left promiscuous mode [ 232.716046][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.852817][ T1060] bridge_slave_0: left allmulticast mode [ 232.869276][ T1060] bridge_slave_0: left promiscuous mode [ 232.875066][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.892093][ T1060] bridge_slave_1: left allmulticast mode [ 232.904059][ T1060] bridge_slave_1: left promiscuous mode [ 232.938032][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.952664][ T1060] bridge_slave_0: left allmulticast mode [ 232.970832][ T1060] bridge_slave_0: left promiscuous mode [ 232.992249][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.046390][ T55] Bluetooth: hci0: command tx timeout [ 233.836490][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.851264][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.862562][ T1060] bond0 (unregistering): Released all slaves [ 233.996236][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.009677][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.020889][ T1060] bond0 (unregistering): Released all slaves [ 234.056555][ T9364] vlan2: entered promiscuous mode [ 234.401564][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.412736][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.423338][ T9310] bridge_slave_0: entered allmulticast mode [ 234.448608][ T9310] bridge_slave_0: entered promiscuous mode [ 234.458304][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.465504][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.474022][ T9310] bridge_slave_1: entered allmulticast mode [ 234.481228][ T9310] bridge_slave_1: entered promiscuous mode [ 234.606722][ T9310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.998106][ T9310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.116708][ T5285] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 235.126020][ T55] Bluetooth: hci0: command tx timeout [ 235.150882][ T9310] team0: Port device team_slave_0 added [ 235.173132][ T9310] team0: Port device team_slave_1 added [ 235.286105][ T5285] usb 5-1: Using ep0 maxpacket: 8 [ 235.302706][ T5285] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 235.311830][ T5285] usb 5-1: config 179 has no interface number 0 [ 235.312234][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.318939][ T5285] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 235.333698][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.354799][ T5285] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 235.362787][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.372397][ T9310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.395515][ T5285] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 235.403918][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.414070][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.420281][ T5285] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 235.462949][ T9310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.465546][ T5285] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 235.487267][ T5285] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 235.501316][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.527024][ T9404] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 235.663942][ T9310] hsr_slave_0: entered promiscuous mode [ 235.684412][ T9310] hsr_slave_1: entered promiscuous mode [ 235.704540][ T9310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.721835][ T9310] Cannot create hsr debugfs directory [ 235.793504][ T1060] hsr_slave_0: left promiscuous mode [ 235.806740][ T1060] hsr_slave_1: left promiscuous mode [ 235.820397][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.836759][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.854712][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.866211][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.902692][ T1060] hsr_slave_0: left promiscuous mode [ 235.926476][ T1060] hsr_slave_1: left promiscuous mode [ 235.956007][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.963532][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.994812][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.006674][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.107698][ T1060] veth1_macvtap: left promiscuous mode [ 236.113301][ T1060] veth0_macvtap: left promiscuous mode [ 236.119031][ T1060] veth1_vlan: left promiscuous mode [ 236.124380][ T1060] veth0_vlan: left promiscuous mode [ 236.152121][ T1060] veth1_macvtap: left promiscuous mode [ 236.162251][ T1060] veth0_macvtap: left promiscuous mode [ 236.180113][ T1060] veth1_vlan: left promiscuous mode [ 236.185499][ T1060] veth0_vlan: left promiscuous mode [ 236.298542][ T5287] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 236.476273][ T5287] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.511144][ T5287] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 236.547758][ T5287] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.567444][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.605374][ T9429] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 236.636694][ T5287] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.928734][ T5286] usb 4-1: USB disconnect, device number 13 [ 237.110051][ T1060] hsr0 (unregistering): left allmulticast mode [ 237.205954][ T55] Bluetooth: hci0: command tx timeout [ 237.371827][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 237.426787][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 238.842833][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 238.917946][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 239.294610][ T55] Bluetooth: hci0: command tx timeout [ 239.670477][ T5286] usb 5-1: USB disconnect, device number 15 [ 239.670477][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 239.715878][ T9442] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1319'. [ 239.881587][ T9187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.912588][ T9187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.984817][ T9187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.080351][ T9479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1336'. [ 240.155952][ T9187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.674266][ T9187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.867724][ T9187] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.951775][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.958983][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.082124][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.089315][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.168216][ T9310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.227880][ T9310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.264559][ T9310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.292407][ T9310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.315970][ T5287] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 241.358150][ T9529] batman_adv: batadv0: Adding interface: macvlan2 [ 241.366929][ T9529] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.393996][ T9529] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 241.488092][ T5287] usb 5-1: Using ep0 maxpacket: 32 [ 241.498973][ T5287] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 241.537964][ T5287] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 241.579514][ T5287] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.596568][ T9187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.610308][ T5287] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 241.646043][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 241.660325][ T9310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.676080][ T5287] usb 5-1: Product: syz [ 241.680314][ T5287] usb 5-1: Manufacturer: syz [ 241.695322][ T5287] usb 5-1: SerialNumber: syz [ 241.712789][ T9520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 241.734501][ T5287] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input32 [ 241.766090][ T9187] veth0_vlan: entered promiscuous mode [ 241.788701][ T9538] netlink: 4272 bytes leftover after parsing attributes in process `syz.3.1356'. [ 241.809562][ T9310] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.817558][ T9538] netlink: 'syz.3.1356': attribute type 1 has an invalid length. [ 241.825334][ T9538] netlink: 'syz.3.1356': attribute type 2 has an invalid length. [ 241.842991][ T9187] veth1_vlan: entered promiscuous mode [ 241.897321][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.904548][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.981178][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.988392][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.030245][ T9] usb 5-1: USB disconnect, device number 16 [ 242.097042][ T9] appletouch 5-1:1.0: input: appletouch disconnected [ 242.148196][ T9187] veth0_macvtap: entered promiscuous mode [ 242.199855][ T9187] veth1_macvtap: entered promiscuous mode [ 242.279120][ T9310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.299192][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.316750][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.335789][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.355777][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.376022][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.385708][ T9554] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 242.395779][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.415825][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.452525][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.481111][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.511506][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.531323][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.584650][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.612980][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.653776][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.687842][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.715121][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.785808][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.808803][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.883945][ T9187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.905028][ T9187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.914145][ T9187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.923758][ T9187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.021906][ T9577] IPVS: Scheduler module ip_vs_ not found [ 243.144535][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.165781][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.191578][ T9310] veth0_vlan: entered promiscuous mode [ 243.247317][ T9310] veth1_vlan: entered promiscuous mode [ 243.269525][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.308471][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.323123][ T9310] veth0_macvtap: entered promiscuous mode [ 243.357368][ T9310] veth1_macvtap: entered promiscuous mode [ 243.437477][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.475740][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.503090][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.523938][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.545320][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.578678][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.596705][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.624614][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.645293][ T47] IPVS: starting estimator thread 0... [ 243.660292][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.670992][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.682763][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.692861][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.703739][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.713954][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.725735][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.736204][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.746929][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.757032][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.767837][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.778006][ T9310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.789028][ T9310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.800351][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.812111][ T9605] IPVS: using max 24 ests per chain, 57600 per kthread [ 243.844961][ T9310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.865728][ T9310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.874491][ T9310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.934426][ T9310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.213063][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.247843][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.357501][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.397151][ T9638] loop0: detected capacity change from 0 to 7 [ 244.404237][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.461768][ T9638] Dev loop0: unable to read RDB block 7 [ 244.468564][ T9638] loop0: AHDI p2 [ 244.472261][ T9638] loop0: partition table partially beyond EOD, truncated [ 245.115764][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 245.133177][ T29] audit: type=1326 audit(1728898653.485:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9665 comm="syz.0.1389" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x0 [ 245.139972][ T9668] loop2: detected capacity change from 0 to 7 [ 245.218067][ T9668] Dev loop2: unable to read RDB block 7 [ 245.240244][ T9668] loop2: unable to read partition table [ 245.251223][ T9668] loop2: partition table beyond EOD, truncated [ 245.260190][ T9668] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 245.325795][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 245.343715][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.353039][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.364047][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.387003][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.396403][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.407357][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.431235][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.440480][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.455884][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.486210][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.495185][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.506286][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.522472][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.532396][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.543880][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.565919][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.574910][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.586031][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.596755][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.606237][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.617328][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.652563][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.661772][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.673025][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.682363][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 245.692650][ T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 245.703761][ T9] usb 2-1: Product: syz [ 245.709046][ T9] usb 2-1: Manufacturer: syz [ 245.714335][ T9] usb 2-1: SerialNumber: syz [ 245.721320][ T9] usb 2-1: config 0 descriptor?? [ 245.738720][ T9] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 246.188067][ T5285] usb 2-1: USB disconnect, device number 22 [ 246.190188][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 246.226677][ T5285] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 246.870127][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 247.000962][ T9752] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1413'. [ 247.024902][ T9752] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1413'. [ 247.081349][ T9752] Zero length message leads to an empty skb [ 247.286146][ T5286] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 247.385229][ T9762] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 247.433269][ T9762] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 247.450399][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.476113][ T9762] gretap1: entered promiscuous mode [ 247.481449][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.493537][ T9762] gretap1: entered allmulticast mode [ 247.508392][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.552492][ T5286] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.577718][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.604824][ T5286] usb 2-1: config 0 descriptor?? [ 247.680011][ T1060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.743694][ T4624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.755283][ T4624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.764414][ T4624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.874599][ T4624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.914278][ T4624] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 247.922289][ T4624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.250409][ T5286] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 248.258890][ T5286] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 248.279399][ T1060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.280516][ T5286] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 248.355948][ T5285] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 248.418550][ T1060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.517421][ T5285] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.531619][ T1060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.535757][ T5285] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 248.564351][ T25] usb 2-1: USB disconnect, device number 23 [ 248.578378][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.622786][ T5285] usb 4-1: config 0 descriptor?? [ 248.872822][ T1060] bridge_slave_1: left allmulticast mode [ 248.902932][ T1060] bridge_slave_1: left promiscuous mode [ 248.915972][ T25] usb 4-1: USB disconnect, device number 14 [ 248.928757][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.965603][ T1060] bridge_slave_0: left allmulticast mode [ 248.971977][ T1060] bridge_slave_0: left promiscuous mode [ 248.986460][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.571353][ T5285] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 249.662366][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.673993][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.685053][ T1060] bond0 (unregistering): Released all slaves [ 249.702427][ T9795] chnl_net:caif_netlink_parms(): no params data found [ 249.712319][ T9825] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1433'. [ 249.735744][ T5285] usb 2-1: Using ep0 maxpacket: 32 [ 249.747908][ T5285] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.786244][ T5285] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.829923][ T5285] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 249.856358][ T5285] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 249.864764][ T5285] usb 2-1: Product: syz [ 249.894570][ T5285] usb 2-1: Manufacturer: syz [ 249.937389][ T5285] hub 2-1:4.0: USB hub found [ 250.076057][ T9795] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.087664][ T9795] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.110040][ T9795] bridge_slave_0: entered allmulticast mode [ 250.135081][ T9795] bridge_slave_0: entered promiscuous mode [ 250.143692][ T5285] hub 2-1:4.0: 2 ports detected [ 250.167044][ T55] Bluetooth: hci4: command tx timeout [ 250.363609][ T5285] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 250.370358][ T5285] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 250.396839][ T5285] usb 2-1: USB disconnect, device number 24 [ 250.466007][ T9795] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.473159][ T9795] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.487624][ T9795] bridge_slave_1: entered allmulticast mode [ 250.524529][ T9795] bridge_slave_1: entered promiscuous mode [ 250.611024][ T9795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.632423][ T1060] hsr_slave_0: left promiscuous mode [ 250.644866][ T1060] hsr_slave_1: left promiscuous mode [ 250.652501][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.660877][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.670916][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.678959][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.696154][ T47] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 250.705935][ T1060] veth1_macvtap: left promiscuous mode [ 250.714451][ T1060] veth0_macvtap: left promiscuous mode [ 250.720367][ T1060] veth1_vlan: left promiscuous mode [ 250.726291][ T1060] veth0_vlan: left promiscuous mode [ 250.863729][ T47] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 250.873246][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.921647][ T47] usb 5-1: config 0 descriptor?? [ 251.346750][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 251.373464][ T47] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 251.421299][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 251.950944][ T9795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.115329][ T9795] team0: Port device team_slave_0 added [ 252.130128][ T9795] team0: Port device team_slave_1 added [ 252.238760][ T5286] usb 5-1: USB disconnect, device number 17 [ 252.247064][ T55] Bluetooth: hci4: command tx timeout [ 252.285120][ T9795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.320215][ T9795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.371551][ T9795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.384996][ T9795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.392953][ T9795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.426014][ T5287] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 252.451654][ T9795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.549488][ T9795] hsr_slave_0: entered promiscuous mode [ 252.585482][ T9795] hsr_slave_1: entered promiscuous mode [ 252.593250][ T9795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.605779][ T5287] usb 2-1: Using ep0 maxpacket: 32 [ 252.612683][ T5287] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 252.613087][ T9795] Cannot create hsr debugfs directory [ 252.642080][ T5287] usb 2-1: config 0 has no interface number 0 [ 252.654217][ T5287] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 252.683957][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.705502][ T5287] usb 2-1: Product: syz [ 252.712088][ T5287] usb 2-1: Manufacturer: syz [ 252.740330][ T5287] usb 2-1: SerialNumber: syz [ 252.795334][ T5287] usb 2-1: config 0 descriptor?? [ 252.809551][ T4624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.820677][ T4624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.831961][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.835560][ T5287] smsc95xx v2.0.0 [ 252.855214][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.865829][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 252.873543][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.606932][ T25] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 253.631927][ T25] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 253.648441][ T25] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 253.683252][ T5287] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 253.694282][ T25] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 253.737150][ T25] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 253.815514][ T9887] chnl_net:caif_netlink_parms(): no params data found [ 253.894749][ T5287] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 253.896560][ T47] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 253.916895][ T5287] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 253.943495][ T5287] usb 2-1: USB disconnect, device number 25 [ 253.983267][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.994533][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.002946][ T9887] bridge_slave_0: entered allmulticast mode [ 254.010252][ T9887] bridge_slave_0: entered promiscuous mode [ 254.034644][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.044966][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.053620][ T9887] bridge_slave_1: entered allmulticast mode [ 254.060885][ T9887] bridge_slave_1: entered promiscuous mode [ 254.099175][ T47] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 254.115893][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.124151][ T47] usb 5-1: Product: syz [ 254.130195][ T47] usb 5-1: Manufacturer: syz [ 254.130714][ T9795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 254.134955][ T47] usb 5-1: SerialNumber: syz [ 254.153238][ T47] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 254.158375][ T9887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.182370][ T9887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.190930][ T25] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 254.199632][ T9795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 254.224779][ T9795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 254.257526][ T9795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 254.291768][ T9887] team0: Port device team_slave_0 added [ 254.320521][ T9887] team0: Port device team_slave_1 added [ 254.326070][ T4624] Bluetooth: hci4: command tx timeout [ 254.390901][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.398866][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.427212][ T9887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.452562][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.463828][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.511161][ T9887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.594537][ T5286] usb 5-1: USB disconnect, device number 18 [ 254.770948][ T9938] input: syz0 as /devices/virtual/input/input33 [ 254.783116][ T9887] hsr_slave_0: entered promiscuous mode [ 254.828748][ T9887] hsr_slave_1: entered promiscuous mode [ 254.844694][ T9887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.856200][ T9887] Cannot create hsr debugfs directory [ 254.902934][ T9795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.965880][ T4624] Bluetooth: hci2: command tx timeout [ 254.995119][ T9795] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.085665][ T8592] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.092885][ T8592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.137521][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.144668][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.286745][ T25] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 255.295424][ T25] ath9k_htc: Failed to initialize the device [ 255.341805][ T9795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.352366][ T9795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.383663][ T5286] usb 5-1: ath9k_htc: USB layer deinitialized [ 255.514471][ T9887] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.601147][ T9795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.728427][ T9887] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.814064][ T9795] veth0_vlan: entered promiscuous mode [ 255.856817][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 255.897656][ T9887] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.929440][ T9795] veth1_vlan: entered promiscuous mode [ 256.015775][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 256.016108][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.027298][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 256.027935][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.046365][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 256.066084][ T25] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 256.086923][ T9887] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.098415][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.144753][ T25] usb 2-1: config 0 descriptor?? [ 256.148544][ T9795] veth0_macvtap: entered promiscuous mode [ 256.183804][ T9795] veth1_macvtap: entered promiscuous mode [ 256.263350][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.294643][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.334449][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.370647][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.386990][ T9971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.405997][ T4624] Bluetooth: hci4: command tx timeout [ 256.412153][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.435841][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.445839][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.456426][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.466461][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.477394][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.489700][ T9971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.522379][ T9795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.548831][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.569957][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.596723][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.625719][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.647694][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.665748][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.695935][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.716345][ T25] hid (null): bogus close delimiter [ 256.722033][ T25] hid (null): invalid report_size 59136 [ 256.735905][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.757687][ T25] hid (null): report_id 48035 is invalid [ 256.765729][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.796732][ T25] hid-generic 0003:0158:0100.0016: unknown main item tag 0x0 [ 256.804210][ T25] hid-generic 0003:0158:0100.0016: unknown main item tag 0x0 [ 256.814837][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.836806][ T9795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.846534][ T25] hid-generic 0003:0158:0100.0016: bogus close delimiter [ 256.862198][ T25] hid-generic 0003:0158:0100.0016: item 0 0 2 10 parsing failed [ 256.906190][ T25] hid-generic 0003:0158:0100.0016: probe with driver hid-generic failed with error -22 [ 256.934235][ T9795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.977410][ T25] usb 2-1: USB disconnect, device number 26 [ 256.985732][ T9795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.994478][ T9795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.009908][ T9795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.046974][ T4624] Bluetooth: hci2: command tx timeout [ 257.107273][ T9887] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 257.120263][ T9887] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.130680][ T9887] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 257.142045][ T9887] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.289895][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.346477][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.453635][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.478317][ T9887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.496030][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.571692][ T9887] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.599038][ T8592] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.606208][ T8592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.644392][ T8592] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.651587][ T8592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.708561][ T9887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.738108][T10018] netlink: 194264 bytes leftover after parsing attributes in process `syz.1.1473'. [ 257.739524][ T9887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.768366][T10018] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.1473'. [ 257.823130][ T9887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.856073][ T9887] veth0_vlan: entered promiscuous mode [ 257.868970][ T9887] veth1_vlan: entered promiscuous mode [ 257.881735][ T5286] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 257.892966][ T9887] veth0_macvtap: entered promiscuous mode [ 257.902388][ T9887] veth1_macvtap: entered promiscuous mode [ 257.940663][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.964033][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.976034][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 257.976158][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.014390][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.035994][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.048817][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.057439][ T5286] usb 5-1: Using ep0 maxpacket: 8 [ 258.059521][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.074343][ T5286] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 258.074802][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.096637][ T5286] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 258.102512][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.117369][ T5286] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.128959][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.133522][ T5286] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.144749][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.154517][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 258.173649][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.195068][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.203643][ T5286] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.209887][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.227085][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.234595][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.252937][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.265398][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.274872][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 258.276402][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.288321][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.303017][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.317967][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.329875][ T9] usb 3-1: config 0 descriptor?? [ 258.332014][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.352992][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.364876][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.382423][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.392977][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.403014][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.414321][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.427224][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.464329][ T9887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.474964][ T9887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.484282][ T9887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.494069][ T9887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.517782][ T5286] usb 5-1: GET_CAPABILITIES returned 0 [ 258.523378][ T5286] usbtmc 5-1:16.0: can't read capabilities [ 258.623947][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.652333][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.703493][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.738274][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 258.748126][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.767258][ T5286] usb 5-1: USB disconnect, device number 19 [ 258.773730][ T9] savu 0003:1E7D:2D5A.0017: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 258.971606][ T25] usb 3-1: USB disconnect, device number 21 [ 259.126093][ T4624] Bluetooth: hci2: command tx timeout [ 259.553543][T10062] tipc: Started in network mode [ 259.576032][T10062] tipc: Node identity 7f000001, cluster identity 4711 [ 259.616716][T10062] tipc: Enabled bearer , priority 10 [ 259.750962][T10072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.270765][T10095] loop2: detected capacity change from 0 to 7 [ 260.284423][T10095] Dev loop2: unable to read RDB block 7 [ 260.293877][T10095] loop2: unable to read partition table [ 260.307479][T10095] loop2: partition table beyond EOD, truncated [ 260.313769][T10095] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 260.520422][T10112] team0: entered promiscuous mode [ 260.525511][T10112] team_slave_0: entered promiscuous mode [ 260.532760][T10112] team_slave_1: entered promiscuous mode [ 260.556536][T10110] team0: left promiscuous mode [ 260.561628][T10110] team_slave_0: left promiscuous mode [ 260.596821][T10110] team_slave_1: left promiscuous mode [ 260.641756][T10117] xt_nat: multiple ranges no longer supported [ 260.698340][T10121] CUSE: unknown device info "âN0­ý" [ 260.703684][T10121] CUSE: DEVNAME unspecified [ 260.757111][ T47] tipc: Node number set to 2130706433 [ 260.887207][ T47] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 261.046375][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 261.054043][ T47] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 261.068050][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.079327][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 261.079752][T10131] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 261.089273][ T47] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 261.089303][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.093540][ T47] usb 2-1: config 0 descriptor?? [ 261.105402][T10131] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 261.106624][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 261.206727][ T4624] Bluetooth: hci2: command tx timeout [ 261.264645][ T29] audit: type=1326 audit(1728898669.625:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.0.1522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 261.296621][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 261.303476][ T25] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 261.305901][ T29] audit: type=1326 audit(1728898669.625:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.0.1522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 261.330172][ T25] usb 4-1: config 179 has no interface number 0 [ 261.352857][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 261.364181][ T29] audit: type=1326 audit(1728898669.635:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.0.1522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=344 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 261.364223][ T29] audit: type=1326 audit(1728898669.635:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.0.1522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 261.410603][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 261.433157][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.448381][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 261.459976][ T25] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 261.473461][ T25] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 261.483552][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.495062][T10128] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 261.563166][T10119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.577473][T10119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.647685][ T47] input: HID 0458:5005 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5005.0018/input/input34 [ 261.719774][ T47] input: HID 0458:5005 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5005.0018/input/input35 [ 261.817086][ T47] kye 0003:0458:5005.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 261.877287][ T47] usb 2-1: USB disconnect, device number 27 [ 262.044483][ T1853] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input36 [ 262.243881][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.254707][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.259361][T10153] binder: 10152:10153 ioctl 4018620d 0 returned -22 [ 262.275016][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1530'. [ 262.498212][ T1853] usb 4-1: USB disconnect, device number 15 [ 262.504203][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 262.504254][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 262.543181][ T1853] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 262.893251][ T29] audit: type=1326 audit(1728898671.255:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 262.925066][ T29] audit: type=1326 audit(1728898671.255:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 262.958779][ T29] audit: type=1326 audit(1728898671.285:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 262.983033][ T29] audit: type=1326 audit(1728898671.285:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 263.025572][ T29] audit: type=1326 audit(1728898671.285:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 263.973660][T10218] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.1558'. [ 264.025811][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 264.036952][T10220] netlink: 'syz.3.1559': attribute type 11 has an invalid length. [ 264.086998][ T1853] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 264.197966][ T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 264.215590][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.230902][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.240188][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.254993][ T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 264.264381][ T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.273411][ T25] usb 5-1: Product: syz [ 264.279874][ T1853] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.290242][ T1853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.301664][ T25] usb 5-1: Manufacturer: syz [ 264.307062][ T1853] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x71, changing to 0x1 [ 264.327030][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 264.343231][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 264.348922][ T1853] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 264.366701][ T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 264.373747][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 264.385856][ T1853] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.427863][ T1853] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.453259][ T1853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.461838][ T1853] usb 2-1: Product: syz [ 264.478882][ T1853] usb 2-1: Manufacturer: syz [ 264.483525][ T1853] usb 2-1: SerialNumber: syz [ 264.592944][ T8592] bridge_slave_1: left allmulticast mode [ 264.613223][ T8592] bridge_slave_1: left promiscuous mode [ 264.627288][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 264.630093][ T8592] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.633928][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 264.647909][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 264.654549][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 264.661003][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 264.667642][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 264.674175][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 264.680808][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 264.687644][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 264.694275][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 264.701109][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 264.707747][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 264.715822][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 264.722561][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 264.729307][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 264.730179][ T8592] bridge_slave_0: left allmulticast mode [ 264.736002][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 264.736427][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 264.736448][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 264.736656][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 264.764073][ T8592] bridge_slave_0: left promiscuous mode [ 264.767422][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 264.783020][ T9] usb 5-1: USB disconnect, device number 20 [ 264.783023][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 264.805239][ T8592] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.395902][ T47] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 265.500346][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 265.546704][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 265.575971][ T47] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 265.584250][ T47] usb 3-1: config 0 has no interface number 0 [ 265.591641][ T8592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.615184][ T47] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 265.635128][ T8592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.644881][ T1853] cdc_ncm 2-1:1.0: bind() failure [ 265.650403][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.662736][ T47] usb 3-1: Product: syz [ 265.662862][ T1853] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 265.677667][ T47] usb 3-1: Manufacturer: syz [ 265.684978][ T8592] bond0 (unregistering): Released all slaves [ 265.691295][ T47] usb 3-1: SerialNumber: syz [ 265.696777][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.713583][ T47] usb 3-1: config 0 descriptor?? [ 265.719693][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.731141][ T1853] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 265.759176][ T47] radio-usb-si4713 3-1:0.128: Si4713 development board discovered: (10C4:8244) [ 265.775769][ T1853] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 265.784148][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.808837][ T1853] usb 2-1: USB disconnect, device number 28 [ 265.814901][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.839203][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.878577][ T25] usb 4-1: config 0 descriptor?? [ 266.131775][ T8592] hsr_slave_0: left promiscuous mode [ 266.141844][ T8592] hsr_slave_1: left promiscuous mode [ 266.151933][ T8592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.168523][ T8592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.182597][ T8592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.195258][ T8592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.269213][ T8592] veth1_macvtap: left promiscuous mode [ 266.274988][ T8592] veth0_macvtap: left promiscuous mode [ 266.291782][ T8592] veth1_vlan: left promiscuous mode [ 266.298617][ T25] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 266.302881][ T8592] veth0_vlan: left promiscuous mode [ 266.315341][ T25] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 266.581730][ T47] radio-usb-si4713 3-1:0.128: probe with driver radio-usb-si4713 failed with error -71 [ 266.598424][ T47] usbhid 3-1:0.128: couldn't find an input interrupt endpoint [ 266.619296][ T47] usb 3-1: USB disconnect, device number 22 [ 267.012655][ T8592] team0 (unregistering): Port device team_slave_1 removed [ 267.068063][ T8592] team0 (unregistering): Port device team_slave_0 removed [ 267.621720][T10289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1589'. [ 267.641568][T10289] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 267.655423][T10289] team0: Port device batadv1 added [ 267.709580][T10290] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 268.042624][T10295] netlink: 'syz.1.1592': attribute type 7 has an invalid length. [ 268.075563][T10295] netlink: 'syz.1.1592': attribute type 8 has an invalid length. [ 268.085016][T10295] netlink: 4244 bytes leftover after parsing attributes in process `syz.1.1592'. [ 268.635954][ T25] usb 4-1: reset high-speed USB device number 16 using dummy_hcd [ 268.659500][ T25] usb 4-1: device reset changed ep0 maxpacket size! [ 268.703857][ T47] usb 4-1: USB disconnect, device number 16 [ 268.895829][ T47] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 269.085833][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 269.102801][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.131153][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.178437][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 269.213528][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 269.245956][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.288126][ T47] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 269.317814][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.345820][ T47] usb 4-1: Product: syz [ 269.357373][ T47] usb 4-1: Manufacturer: syz [ 269.382481][ T47] usb 4-1: SerialNumber: syz [ 269.396848][ T47] usb 4-1: config 0 descriptor?? [ 269.422469][ T47] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 269.451490][T10313] tipc: Started in network mode [ 269.465953][T10313] tipc: Node identity 5f00000000004c3a0000400000000001, cluster identity 4711 [ 269.485590][T10313] tipc: Enabling of bearer rejected, failed to enable media [ 269.941071][T10318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1603'. [ 270.242344][ T47] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 270.363477][T10321] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.1604'. [ 270.422050][T10321] openvswitch: netlink: IP tunnel dst address not specified [ 270.465056][ T47] usb 4-1: USB disconnect, device number 17 [ 271.218631][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.230269][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.239873][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.248465][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.256464][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.267158][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.435897][ T1853] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 271.616522][ T1853] usb 4-1: Using ep0 maxpacket: 16 [ 271.634641][ T1853] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 271.689770][ T1853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.736652][ T1853] usb 4-1: config 0 descriptor?? [ 271.778308][ T1853] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 272.008361][T10335] chnl_net:caif_netlink_parms(): no params data found [ 272.551543][T10335] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.581916][T10335] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.633057][T10335] bridge_slave_0: entered allmulticast mode [ 272.682587][T10335] bridge_slave_0: entered promiscuous mode [ 272.737972][T10335] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.784619][T10335] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.827296][ T47] usb 4-1: USB disconnect, device number 18 [ 272.836156][T10335] bridge_slave_1: entered allmulticast mode [ 272.885873][T10335] bridge_slave_1: entered promiscuous mode [ 273.076393][T10335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.129442][T10335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.309744][T10335] team0: Port device team_slave_0 added [ 273.350393][T10335] team0: Port device team_slave_1 added [ 273.368425][ T55] Bluetooth: hci3: command tx timeout [ 273.576076][T10335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.613642][T10335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.743001][T10335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.837637][T10335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.847794][T10335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.935089][T10335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.946148][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 274.117523][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.155351][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.207588][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.222650][T10335] hsr_slave_0: entered promiscuous mode [ 274.246521][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.267481][T10335] hsr_slave_1: entered promiscuous mode [ 274.294039][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.324032][ T25] usb 4-1: config 0 descriptor?? [ 274.781815][ T25] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 274.824937][ T25] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 274.866946][ T25] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 275.119864][ T25] usb 4-1: USB disconnect, device number 19 [ 275.445805][ T55] Bluetooth: hci3: command tx timeout [ 277.534103][ T55] Bluetooth: hci3: command tx timeout [ 279.605807][ T55] Bluetooth: hci3: command tx timeout [ 285.660590][ T4624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.678453][ T4624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.688034][ T4624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.696974][ T4624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.706261][ T4624] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.714902][ T4624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 286.945824][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.957126][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.967320][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.975355][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.986277][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 286.995309][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.772441][ T55] Bluetooth: hci1: command tx timeout [ 289.046215][ T55] Bluetooth: hci5: command tx timeout [ 289.845970][ T55] Bluetooth: hci1: command tx timeout [ 291.125926][ T55] Bluetooth: hci5: command tx timeout [ 291.927113][ T55] Bluetooth: hci1: command tx timeout [ 293.205955][ T55] Bluetooth: hci5: command tx timeout [ 294.006024][ T55] Bluetooth: hci1: command tx timeout [ 295.289597][ T55] Bluetooth: hci5: command tx timeout [ 317.467481][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.473813][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.064137][ T4624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.083984][ T4624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.096567][ T4624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.106555][ T4624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.116740][ T4624] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 332.124027][ T4624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.166079][ T55] Bluetooth: hci6: command tx timeout [ 336.246109][ T55] Bluetooth: hci6: command tx timeout [ 338.326043][ T55] Bluetooth: hci6: command tx timeout [ 340.407088][ T55] Bluetooth: hci6: command tx timeout [ 346.539611][ T4624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 346.549304][ T4624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 346.559991][ T4624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 346.578382][ T4624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 346.587825][ T4624] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 346.595408][ T4624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.466798][ T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 347.476479][ T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 347.485489][ T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 347.496248][ T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 347.504438][ T55] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 347.513525][ T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 348.645940][ T55] Bluetooth: hci7: command tx timeout [ 349.607033][ T55] Bluetooth: hci8: command tx timeout [ 350.726044][ T55] Bluetooth: hci7: command tx timeout [ 351.685875][ T4624] Bluetooth: hci8: command tx timeout [ 352.805804][ T4624] Bluetooth: hci7: command tx timeout [ 353.765736][ T4624] Bluetooth: hci8: command tx timeout [ 354.885850][ T4624] Bluetooth: hci7: command tx timeout [ 355.366340][ T4624] Bluetooth: hci0: command 0x0406 tx timeout [ 355.846502][ T55] Bluetooth: hci8: command tx timeout [ 361.070810][T10335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.892983][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.905650][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.547063][ T4624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.557213][ T4624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.565239][ T4624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.576690][ T4624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.585806][ T4624] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 392.593311][ T4624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.645846][ T4624] Bluetooth: hci0: command tx timeout [ 396.335739][ T4624] Bluetooth: hci3: command 0x0406 tx timeout [ 396.725805][ T55] Bluetooth: hci0: command tx timeout [ 398.805745][ T55] Bluetooth: hci0: command tx timeout [ 400.885864][ T55] Bluetooth: hci0: command tx timeout [ 407.120478][ T4624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.129652][ T4624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.146308][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.157561][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.165424][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 407.173367][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 408.178098][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 408.188020][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 408.196307][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 408.204335][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 408.215761][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 408.224237][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 409.205913][ T55] Bluetooth: hci2: command tx timeout [ 410.325860][ T55] Bluetooth: hci4: command tx timeout [ 411.285859][ T55] Bluetooth: hci2: command tx timeout [ 411.691675][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 411.710448][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 412.405769][ T4624] Bluetooth: hci4: command tx timeout [ 413.366986][ T4624] Bluetooth: hci2: command tx timeout [ 414.485995][ T4624] Bluetooth: hci4: command tx timeout [ 415.445812][ T4624] Bluetooth: hci2: command tx timeout [ 416.565800][ T4624] Bluetooth: hci4: command tx timeout [ 440.346104][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.352434][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.820744][T10335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.990870][ T5243] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 453.003163][ T5243] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 453.011867][ T5243] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 453.020193][ T5243] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 453.027868][ T5243] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 453.035160][ T5243] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 455.126081][ T4624] Bluetooth: hci9: command tx timeout [ 457.205818][ T4624] Bluetooth: hci9: command tx timeout [ 457.773201][ T4624] Bluetooth: hci6: command 0x0406 tx timeout [ 459.285903][ T5243] Bluetooth: hci9: command tx timeout [ 461.365822][ T5243] Bluetooth: hci9: command tx timeout [ 468.131848][ T4624] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 468.141078][ T4624] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 468.161379][ T4624] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 468.169967][ T4624] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 468.178660][ T4624] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 468.186335][ T4624] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 468.628058][ T5243] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 468.638116][ T5243] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 468.647505][ T5243] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 468.656048][ T5243] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 468.668366][ T5243] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 468.677091][ T5243] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 470.245815][ T5243] Bluetooth: hci10: command tx timeout [ 470.726008][ T5243] Bluetooth: hci11: command tx timeout [ 472.326023][ T5243] Bluetooth: hci10: command tx timeout [ 472.806518][ T5243] Bluetooth: hci11: command tx timeout [ 473.135617][ T5243] Bluetooth: hci8: command 0x0406 tx timeout [ 473.141693][ T5243] Bluetooth: hci7: command 0x0406 tx timeout [ 474.405824][T10444] Bluetooth: hci10: command tx timeout [ 474.885948][T10444] Bluetooth: hci11: command tx timeout [ 476.493413][T10444] Bluetooth: hci10: command tx timeout [ 476.966458][T10444] Bluetooth: hci11: command tx timeout [ 501.770682][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.777115][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.668448][ T4624] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 515.689395][ T4624] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 515.711863][ T4624] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 515.812935][ T4624] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 515.857806][ T4624] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 515.869075][ T4624] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 516.533861][T10335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.931201][T10335] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.926026][T10444] Bluetooth: hci12: command tx timeout [ 519.205790][T10444] Bluetooth: hci0: command 0x0406 tx timeout [ 520.005913][ T4624] Bluetooth: hci12: command tx timeout [ 522.086008][ T4624] Bluetooth: hci12: command tx timeout [ 522.251352][ T30] INFO: task kworker/u8:14:8592 blocked for more than 143 seconds. [ 522.282388][ T30] Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 522.320122][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.371524][ T30] task:kworker/u8:14 state:D stack:23448 pid:8592 tgid:8592 ppid:2 flags:0x00004000 [ 522.459836][ T30] Workqueue: netns cleanup_net [ 522.464697][ T30] Call Trace: [ 522.519303][ T30] [ 522.522296][ T30] __schedule+0x1895/0x4b30 [ 522.545665][ T30] ? __pfx___schedule+0x10/0x10 [ 522.550588][ T30] ? __pfx_lock_release+0x10/0x10 [ 522.566519][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 522.572110][ T30] ? kthread_data+0x52/0xd0 [ 522.585068][ T30] ? schedule+0x90/0x320 [ 522.589458][ T30] ? wq_worker_sleeping+0x66/0x240 [ 522.594607][ T30] ? schedule+0x90/0x320 [ 522.611235][ T30] schedule+0x14b/0x320 [ 522.615453][ T30] schedule_preempt_disabled+0x13/0x30 [ 522.625653][ T30] __mutex_lock+0x6a7/0xd70 [ 522.630205][ T30] ? __mutex_lock+0x52a/0xd70 [ 522.634914][ T30] ? devlink_pernet_pre_exit+0x13b/0x440 [ 522.652502][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 522.662313][ T30] ? devlinks_xa_find_get+0x2b/0x310 [ 522.672432][ T30] ? devlinks_xa_find_get+0x2ed/0x310 [ 522.683286][ T30] ? devlinks_xa_find_get+0x2b/0x310 [ 522.694872][ T30] devlink_pernet_pre_exit+0x13b/0x440 [ 522.705328][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 522.715619][ T30] ? class_remove_file_ns+0x121/0x160 [ 522.721043][ T30] cleanup_net+0x615/0xcc0 [ 522.738032][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 522.743023][ T30] ? process_scheduled_works+0x976/0x1850 [ 522.756211][ T30] process_scheduled_works+0xa63/0x1850 [ 522.761831][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 522.775908][ T30] ? assign_work+0x364/0x3d0 [ 522.780544][ T30] worker_thread+0x870/0xd30 [ 522.785172][ T30] ? __kthread_parkme+0x169/0x1d0 [ 522.804351][ T30] ? __pfx_worker_thread+0x10/0x10 [ 522.816297][ T30] kthread+0x2f0/0x390 [ 522.820409][ T30] ? __pfx_worker_thread+0x10/0x10 [ 522.834179][ T30] ? __pfx_kthread+0x10/0x10 [ 522.840415][ T30] ret_from_fork+0x4b/0x80 [ 522.844871][ T30] ? __pfx_kthread+0x10/0x10 [ 522.855678][ T30] ret_from_fork_asm+0x1a/0x30 [ 522.860498][ T30] [ 522.873847][ T30] [ 522.873847][ T30] Showing all locks held in the system: [ 522.883907][ T30] 6 locks held by kworker/0:1/9: [ 522.895647][ T30] 1 lock held by khungtaskd/30: [ 522.900526][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 522.921192][ T30] 3 locks held by kworker/1:2/1853: [ 522.930760][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 522.952778][ T30] #1: ffffc900048dfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 522.970758][ T30] #2: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 522.991199][ T30] 2 locks held by getty/4994: [ 522.999662][ T30] #0: ffff88803331a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 523.015455][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 523.049330][ T30] 4 locks held by kworker/u8:14/8592: [ 523.054750][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 523.074987][ T30] #1: ffffc9000bcb7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 523.095361][ T30] #2: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 523.106025][ T30] #3: ffff888066aa80e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 523.125360][ T30] 7 locks held by syz-executor/10335: [ 523.131419][ T30] #0: ffff88803348c420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 523.152737][ T30] #1: ffff88802d9fbc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 523.171761][ T30] #2: ffff888144b320f8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 523.184390][ T30] #3: ffffffff8f570588 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 523.203123][ T30] #4: ffff888066aa80e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 523.222805][ T30] #5: ffff8880654e3250 (&devlink->lock_key#16){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 523.243653][ T30] #6: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: unregister_nexthop_notifier+0x17/0x40 [ 523.254879][ T30] 2 locks held by syz-executor/10402: [ 523.265604][ T30] #0: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 523.275072][ T30] #1: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: cfg802154_pernet_exit+0x1b/0xe0 [ 523.293873][ T30] 2 locks held by syz-executor/10416: [ 523.300857][ T30] #0: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 523.321578][ T30] #1: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x7d/0x2a0 [ 523.341802][ T30] 2 locks held by syz-executor/10420: [ 523.349700][ T30] #0: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 523.366296][ T30] #1: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 523.375248][ T30] 2 locks held by syz-executor/10434: [ 523.390341][ T30] #0: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 523.405733][ T30] #1: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 523.414673][ T30] 3 locks held by syz-executor/10440: [ 523.429266][ T30] #0: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 523.446960][ T30] #1: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 523.466542][ T30] #2: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 523.487021][ T30] 1 lock held by syz-executor/10457: [ 523.492331][ T30] #0: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400 [ 523.512626][ T30] 2 locks held by syz-executor/10460: [ 523.518343][ T30] #0: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 523.543920][ T30] #1: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 523.563935][ T30] 1 lock held by syz-executor/10472: [ 523.569649][ T30] #0: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 523.586103][ T30] [ 523.588455][ T30] ============================================= [ 523.588455][ T30] [ 523.606207][ T30] NMI backtrace for cpu 1 [ 523.610567][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 523.621093][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 523.631164][ T30] Call Trace: [ 523.634457][ T30] [ 523.637493][ T30] dump_stack_lvl+0x241/0x360 [ 523.642206][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.647428][ T30] ? __pfx__printk+0x10/0x10 [ 523.652053][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 523.657021][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 523.662504][ T30] ? _printk+0xd5/0x120 [ 523.666684][ T30] ? __pfx__printk+0x10/0x10 [ 523.671302][ T30] ? __wake_up_klogd+0xcc/0x110 [ 523.676174][ T30] ? __pfx__printk+0x10/0x10 [ 523.680791][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 523.685837][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 523.691839][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 523.697841][ T30] watchdog+0xff4/0x1040 [ 523.702113][ T30] ? watchdog+0x1ea/0x1040 [ 523.706560][ T30] ? __pfx_watchdog+0x10/0x10 [ 523.711256][ T30] kthread+0x2f0/0x390 [ 523.715339][ T30] ? __pfx_watchdog+0x10/0x10 [ 523.720033][ T30] ? __pfx_kthread+0x10/0x10 [ 523.724638][ T30] ret_from_fork+0x4b/0x80 [ 523.729076][ T30] ? __pfx_kthread+0x10/0x10 [ 523.733680][ T30] ret_from_fork_asm+0x1a/0x30 [ 523.738480][ T30] [ 523.742246][ T30] Sending NMI from CPU 1 to CPUs 0: [ 523.747753][ C0] NMI backtrace for cpu 0 [ 523.747765][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 523.747785][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 523.747795][ C0] Workqueue: events nsim_dev_trap_report_work [ 523.747821][ C0] RIP: 0010:check_preemption_disabled+0x49/0x120 [ 523.747840][ C0] Code: 74 65 8b 05 91 02 3e 74 a9 ff ff ff 7f 74 26 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b <41> 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 [ 523.747859][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00000082 [ 523.747872][ C0] RAX: 0000000000000000 RBX: ffffc90000007980 RCX: ffffffff817056d4 [ 523.747885][ C0] RDX: 0000000000000000 RSI: ffffffff8c0ad7a0 RDI: ffffffff8c60fca0 [ 523.747896][ C0] RBP: ffffc90000007a68 R08: ffffffff901cf6ef R09: 1ffffffff2039edd [ 523.747909][ C0] R10: dffffc0000000000 R11: fffffbfff2039ede R12: 1ffff92000000f2c [ 523.747921][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000046 [ 523.747932][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 523.747946][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.747958][ C0] CR2: 000000000c2be0c5 CR3: 00000000308a6000 CR4: 00000000003526f0 [ 523.747971][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 523.747981][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 523.747991][ C0] Call Trace: [ 523.747997][ C0] [ 523.748003][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 523.748022][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 523.748044][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 523.748061][ C0] ? nmi_handle+0x2a/0x5a0 [ 523.748083][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 523.748102][ C0] ? nmi_handle+0x14f/0x5a0 [ 523.748117][ C0] ? nmi_handle+0x2a/0x5a0 [ 523.748132][ C0] ? check_preemption_disabled+0x49/0x120 [ 523.748148][ C0] ? default_do_nmi+0x63/0x160 [ 523.748166][ C0] ? exc_nmi+0x123/0x1f0 [ 523.748182][ C0] ? end_repeat_nmi+0xf/0x53 [ 523.748200][ C0] ? lock_acquire+0xd4/0x550 [ 523.748219][ C0] ? check_preemption_disabled+0x49/0x120 [ 523.748236][ C0] ? check_preemption_disabled+0x49/0x120 [ 523.748260][ C0] ? check_preemption_disabled+0x49/0x120 [ 523.748276][ C0] [ 523.748281][ C0] [ 523.748287][ C0] lock_acquire+0x1b0/0x550 [ 523.748309][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 523.748327][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 523.748345][ C0] ? arch_stack_walk+0x11c/0x150 [ 523.748364][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 523.748387][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 523.748407][ C0] ? ref_tracker_free+0x121/0x7e0 [ 523.748422][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 523.748441][ C0] ? stack_depot_save_flags+0x29/0x830 [ 523.748464][ C0] ref_tracker_free+0x121/0x7e0 [ 523.748480][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 523.748495][ C0] ? dst_destroy+0x105/0x360 [ 523.748510][ C0] ? rcu_core+0xaaa/0x17a0 [ 523.748524][ C0] ? handle_softirqs+0x2c5/0x980 [ 523.748542][ C0] ? do_softirq+0x11b/0x1e0 [ 523.748558][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 523.748575][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 523.748591][ C0] ? process_scheduled_works+0xa63/0x1850 [ 523.748610][ C0] ? worker_thread+0x870/0xd30 [ 523.748627][ C0] ? kthread+0x2f0/0x390 [ 523.748641][ C0] ? ret_from_fork+0x4b/0x80 [ 523.748659][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 523.748681][ C0] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 523.748703][ C0] dst_destroy+0x105/0x360 [ 523.748718][ C0] ? rcu_core+0xa37/0x17a0 [ 523.748733][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 523.748747][ C0] rcu_core+0xaaa/0x17a0 [ 523.748769][ C0] ? __pfx_rcu_core+0x10/0x10 [ 523.748786][ C0] ? sched_clock+0x4a/0x70 [ 523.748809][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 523.748834][ C0] handle_softirqs+0x2c5/0x980 [ 523.748854][ C0] ? do_softirq+0x11b/0x1e0 [ 523.748873][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 523.748895][ C0] do_softirq+0x11b/0x1e0 [ 523.748912][ C0] [ 523.748917][ C0] [ 523.748923][ C0] ? __pfx_do_softirq+0x10/0x10 [ 523.748941][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 523.748961][ C0] ? rcu_is_watching+0x15/0xb0 [ 523.748979][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 523.748996][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 523.749013][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 523.749031][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 523.749049][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 523.749068][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 523.749091][ C0] ? process_scheduled_works+0x976/0x1850 [ 523.749110][ C0] process_scheduled_works+0xa63/0x1850 [ 523.749141][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 523.749163][ C0] ? assign_work+0x364/0x3d0 [ 523.749184][ C0] worker_thread+0x870/0xd30 [ 523.749209][ C0] ? __kthread_parkme+0x169/0x1d0 [ 523.749229][ C0] ? __pfx_worker_thread+0x10/0x10 [ 523.749253][ C0] kthread+0x2f0/0x390 [ 523.749268][ C0] ? __pfx_worker_thread+0x10/0x10 [ 523.749285][ C0] ? __pfx_kthread+0x10/0x10 [ 523.749300][ C0] ret_from_fork+0x4b/0x80 [ 523.749318][ C0] ? __pfx_kthread+0x10/0x10 [ 523.749332][ C0] ret_from_fork_asm+0x1a/0x30 [ 523.749357][ C0] [ 524.322652][ T4624] Bluetooth: hci12: command tx timeout [ 524.332583][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 524.339457][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 524.349967][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 524.360031][ T30] Call Trace: [ 524.363319][ T30] [ 524.366262][ T30] dump_stack_lvl+0x241/0x360 [ 524.370959][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.376174][ T30] ? __pfx__printk+0x10/0x10 [ 524.380783][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 524.386794][ T30] ? vscnprintf+0x5d/0x90 [ 524.391145][ T30] panic+0x349/0x880 [ 524.395055][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 524.401228][ T30] ? __pfx_panic+0x10/0x10 [ 524.405660][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 524.411046][ T30] ? __irq_work_queue_local+0x137/0x410 [ 524.416610][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 524.421995][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 524.428164][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 524.434335][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 524.440506][ T30] watchdog+0x1033/0x1040 [ 524.444855][ T30] ? watchdog+0x1ea/0x1040 [ 524.449293][ T30] ? __pfx_watchdog+0x10/0x10 [ 524.453982][ T30] kthread+0x2f0/0x390 [ 524.458063][ T30] ? __pfx_watchdog+0x10/0x10 [ 524.462761][ T30] ? __pfx_kthread+0x10/0x10 [ 524.467373][ T30] ret_from_fork+0x4b/0x80 [ 524.471817][ T30] ? __pfx_kthread+0x10/0x10 [ 524.476426][ T30] ret_from_fork_asm+0x1a/0x30 [ 524.481250][ T30] [ 524.484540][ T30] Kernel Offset: disabled [ 524.488859][ T30] Rebooting in 86400 seconds..