last executing test programs: 1m18.243449357s ago: executing program 1 (id=24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}, @generic={0x8, 0x2}]}}}}}}}}, 0x0) 1m4.029281148s ago: executing program 1 (id=24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}, @generic={0x8, 0x2}]}}}}}}}}, 0x0) 52.430741338s ago: executing program 1 (id=24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}, @generic={0x8, 0x2}]}}}}}}}}, 0x0) 42.574935406s ago: executing program 1 (id=24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}, @generic={0x8, 0x2}]}}}}}}}}, 0x0) 31.826356415s ago: executing program 1 (id=24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}, @generic={0x8, 0x2}]}}}}}}}}, 0x0) 9.229925447s ago: executing program 1 (id=24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}, @generic={0x8, 0x2}]}}}}}}}}, 0x0) 7.370600663s ago: executing program 3 (id=1218): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}, {@uname={'uname', 0x3d, 'btrfs\x00'}}], [], 0x6b}}) 7.155907342s ago: executing program 3 (id=1219): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc040aed4, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000fe8000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 6.522004727s ago: executing program 3 (id=1223): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r2, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) read$FUSE(r2, &(0x7f0000002000)={0x2020}, 0xfffffc7c) 5.469956187s ago: executing program 0 (id=1227): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 5.430036517s ago: executing program 3 (id=1228): syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 5.143864619s ago: executing program 2 (id=1231): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 4.882107702s ago: executing program 2 (id=1232): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 4.77938904s ago: executing program 2 (id=1233): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x3410}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) unshare(0x2c060000) unshare(0x24020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 4.579422946s ago: executing program 2 (id=1234): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000085c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x48}, {0x2, 0x3, 0x6}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.47827055s ago: executing program 0 (id=1235): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) chown(0x0, 0x0, 0xffffffffffffffff) 4.444777073s ago: executing program 3 (id=1236): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.338857712s ago: executing program 0 (id=1237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32=r2, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) 3.542447619s ago: executing program 2 (id=1239): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}}, 0x0) 3.484906367s ago: executing program 0 (id=1240): r0 = socket(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000000c0)="6bf80c4747b819614e8d66efbafc0cb038eef30f1ef644260f300fc76ebb0f7ffb0fc72cf30faea700680f353e656726360f01c30f01c5", 0x37}], 0x1, 0x58, 0x0, 0x0) ioctl(r0, 0x8936, &(0x7f0000000000)) 3.36345791s ago: executing program 2 (id=1241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c98847", 0xfdef}], 0x1) 3.143483597s ago: executing program 0 (id=1242): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"9fcaa0504b38d5004b764b4d2ada8bdf000000000000202700009400", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37e45d27e2a9be9f60700000400001a00", r2, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 2.969287333s ago: executing program 0 (id=1243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'nicvf0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'team_slave_1\x00', 0x400}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x3}, {0x4}}}, 0x24}}, 0x0) 2.395349719s ago: executing program 4 (id=1246): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)="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", 0x11a}, {&(0x7f0000000380)="5132ac5e8205378f905fac4b0f7b0ad4ff080df00b5a6655e32124d51a45ebebdf4a86101587d502357bfc43f44098742b83caede42f6e007330dc8ab67371c65d39bc126b8f9bf17dce0ba9d14f263efa7056bb8a0291a4842e42342519a9e795b7d8aee13edfa09bd3f9ae3bdc4c2dccc274c0cf4fe85fa17f46ff8c017571490f296ef2ea1cf31486bd4167bb33cb9a5e1f96de2ee8af5074695ddf5d1ec4d17c9508cdd9e77ec5bc62a820e263a31521f0b9031c9e1e1491f0c99b44960df2aaee22480355aa20d280d1ed54ae539055ca", 0xd3}, {&(0x7f0000000840)="661da68e4cca7c69729c5f3808acccac69431df174bbce91246fce262b3de6a53334d329a142ae0f304e4fbde8fab4d68bedcd182b41227278c65f7de3723a93dbbaeb901b447fb35a9f3f4b671a3e3929c119f9deec5e46cdbe5cac679cad88c9aa61bc7ffd219a18b36ef0bf5ca45da80aa46274d8cda17a4b8588c492dcdd43dee797fe7debf7c1143177d4f4b02255ca5a46", 0x94}], 0x3}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000780)="82cd0eafc5f89141ee1208e4900490249c15f0d9a6acd550f5e639f133e99677736e30499b7092ef5c8069ec56b2daed9a95df90879b7758079a65a6432e160a36ded164326a891f006e435eef617031708536776b73260b2cdfb5fdedc0b07956bacbbe30af8d1810bcc9ef090e", 0x6e}, {&(0x7f0000000640)="72126509caec095807090dba7a3967d9884ce638db1b533a4b22559bf9166ba1568930c85350c8e4c4bc40d2f21c8042ef5f78d0c8450382c66ea27d01387272ddb6350a1b9df7af8dc636bd2a4e14c5ead6ff46562bbb74e63c835b9827f0b5be88de7ea0b09ad394495e7a2e45da891ae90f972844a04ac9427903a3102cc8ec0030873c527172f369fc7d7ebe01950d7c3c1a1df3b5c2c7940b81f27ed3e5bbb9db01d84e36e67763cde8eb69ed38a8401e2c6daa808897bf60b8b795aac9afe46e918edb28ea6fe06a6afcfad209e55826dc2000a46b358665fdfee08e82c24a22ef3e7c3a54", 0xe8}], 0x2}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000a00)="9b94bd4f7c3a6ece62bebec3ebc3f6245c2cf71ebb80b25d12176c92489efa61aac34738d5eb54550e4ee1a5e35c2b82abfcd8c85c175b38e97da83e872522954d2a5ec48d8fa0f5363f20ca098ee73815ead5dccd3b1bd88c69cc612a19197857d16407c95aad3267a5e215e5286ad94990", 0x72}, {&(0x7f0000000500)}, {&(0x7f0000000bc0)="ebb4431e47a08e69be39d99a05e164370fea19918eda462585b3e7d878eab91929a2929e0c3d931b038606966c61ca9cb8691a4b8ff9eb5f4236355b275ae5db5cdd3dd74f0b442723d7c839f08eabfcdcdf92b8b8ccfdda4f3410e0", 0x5c}, {&(0x7f0000000fc0)="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", 0x104}], 0x4}}], 0x4, 0x2000c0c4) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 2.231576305s ago: executing program 4 (id=1247): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) unshare(0x8000480) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/116) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 2.177842969s ago: executing program 3 (id=1248): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) 2.091888035s ago: executing program 4 (id=1249): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xa9}) r1 = epoll_create(0x651) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f00009b7000/0x2000)=nil, 0x2000, 0x4) read(r0, &(0x7f0000000240)=""/131, 0x83) 1.953190367s ago: executing program 4 (id=1250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 910.663081ms ago: executing program 4 (id=1251): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000100)="28d8", 0x2, 0x44010, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10001}, 0x1c) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x4040050) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r2, 0x1200, 0x1, '}'}, 0x9) 0s ago: executing program 4 (id=1252): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): [ T7682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.557519][ T7682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.578473][ T7682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.607555][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 205.616426][ T7682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.639102][ T7682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.659665][ T7682] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.679729][ T7682] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.709088][ T7682] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.739764][ T7682] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.769220][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.816202][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 205.847952][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 205.888234][ T7910] block nbd3: NBD_DISCONNECT [ 205.911640][ T7909] block nbd3: Disconnected due to user request. [ 205.917958][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.918012][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.918039][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.958826][ T7909] block nbd3: shutting down sockets [ 205.965225][ T9] usb 5-1: config 0 descriptor?? [ 205.979289][ T7902] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.992852][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.016715][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.099424][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.128457][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.372562][ T7917] atomic_op ffff88805a16f198 conn xmit_atomic 0000000000000000 [ 206.472519][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd [ 206.493247][ T9] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 206.504193][ T9] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 206.600149][ T7925] vivid-007: disconnect [ 206.615010][ T7924] vivid-007: reconnect [ 206.701239][ T7902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.744868][ T7902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.819117][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 206.819598][ T5225] Bluetooth: hci5: command 0x0406 tx timeout [ 206.825175][ T54] Bluetooth: hci7: command 0x0406 tx timeout [ 206.831196][ T5227] Bluetooth: hci1: command 0x0406 tx timeout [ 206.850834][ T5237] usb 5-1: USB disconnect, device number 13 [ 207.179161][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.919691][ T7948] atomic_op ffff888029097998 conn xmit_atomic 0000000000000000 [ 208.148671][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 208.238974][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.304563][ T5231] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 208.318934][ T5231] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 208.328734][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.341492][ T5231] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 208.357781][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.367104][ T5231] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 208.380794][ T5231] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 208.395262][ T5231] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 208.410495][ T25] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 208.421190][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.429731][ T25] usb 3-1: SerialNumber: syz [ 208.453569][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.517549][ T939] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 208.569841][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.650965][ T25] usb 3-1: 0:2 : does not exist [ 208.697898][ T25] usb 3-1: unit 255 not found! [ 208.702890][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.744792][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.762530][ T25] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 208.799151][ T25] usb 3-1: 5:0: cannot get min/max values for control 6 (id 5) [ 208.819017][ T939] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 208.857565][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.888488][ T25] usb 3-1: USB disconnect, device number 14 [ 208.954793][ T939] usb 4-1: config 0 descriptor?? [ 209.008782][ T7962] chnl_net:caif_netlink_parms(): no params data found [ 209.048974][ T5272] kernel read not supported for file /usbmon0 (pid: 5272 comm: kworker/1:6) [ 209.062014][ T52] bridge_slave_1: left allmulticast mode [ 209.069550][ T52] bridge_slave_1: left promiscuous mode [ 209.075390][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.116798][ T52] bridge_slave_0: left allmulticast mode [ 209.127693][ T52] bridge_slave_0: left promiscuous mode [ 209.133520][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.206890][ T7984] netlink: 'syz.0.835': attribute type 9 has an invalid length. [ 209.215434][ T7984] netlink: 'syz.0.835': attribute type 11 has an invalid length. [ 209.223812][ T7984] netlink: 86528 bytes leftover after parsing attributes in process `syz.0.835'. [ 209.250548][ T7984] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 209.437898][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 209.481819][ T939] uclogic 0003:5543:0042.0013: No inputs registered, leaving [ 209.490650][ T939] uclogic 0003:5543:0042.0013: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.3-1/input0 [ 209.596228][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.607839][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.618356][ T25] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 209.627562][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 209.655980][ T25] usb 5-1: SerialNumber: syz [ 209.693516][ T5271] usb 4-1: USB disconnect, device number 18 [ 209.888396][ T25] usb 5-1: 0:2 : does not exist [ 209.895026][ T25] usb 5-1: unit 118 not found! [ 209.926080][ T25] usb 5-1: USB disconnect, device number 14 [ 209.926300][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.949791][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.962853][ T52] bond0 (unregistering): Released all slaves [ 209.980269][ T7993] netlink: 'syz.0.839': attribute type 10 has an invalid length. [ 209.990067][ T1049] bond0: (slave bond_slave_0): interface is now down [ 209.997301][ T1049] bond0: (slave bond_slave_1): interface is now down [ 210.047811][ T1049] bond0: (slave bond_slave_0): interface is now down [ 210.054569][ T1049] bond0: (slave bond_slave_1): interface is now down [ 210.062604][ T7993] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 210.140003][ T2567] bond0: (slave bond_slave_0): interface is now down [ 210.146753][ T2567] bond0: (slave bond_slave_1): interface is now down [ 210.167785][ T1049] bond0: (slave bond_slave_0): interface is now down [ 210.175854][ T1049] bond0: (slave bond_slave_1): interface is now down [ 210.202662][ T2567] bond0: (slave bond_slave_0): interface is now down [ 210.212304][ T2567] bond0: (slave bond_slave_1): interface is now down [ 210.238854][ T11] bond0: (slave bond_slave_0): interface is now down [ 210.245619][ T11] bond0: (slave bond_slave_1): interface is now down [ 210.268018][ T1049] bond0: (slave bond_slave_0): interface is now down [ 210.274852][ T1049] bond0: (slave bond_slave_1): interface is now down [ 210.303115][ T1049] bond0: (slave bond_slave_0): interface is now down [ 210.310600][ T1049] bond0: (slave bond_slave_1): interface is now down [ 210.337686][ T12] bond0: (slave bond_slave_0): interface is now down [ 210.348151][ T12] bond0: (slave bond_slave_1): interface is now down [ 210.365938][ T12] bond0: now running without any active interface! [ 210.374806][ T7962] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.383287][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.413149][ T7962] bridge_slave_0: entered allmulticast mode [ 210.434014][ T7962] bridge_slave_0: entered promiscuous mode [ 210.477586][ T939] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 210.500385][ T4615] Bluetooth: hci9: command tx timeout [ 210.526264][ T7962] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.546511][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.577031][ T7962] bridge_slave_1: entered allmulticast mode [ 210.599853][ T7962] bridge_slave_1: entered promiscuous mode [ 210.653298][ T939] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 210.672995][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.700172][ T939] usb 3-1: config 0 descriptor?? [ 210.715507][ T939] cp210x 3-1:0.0: cp210x converter detected [ 210.817700][ T52] hsr_slave_0: left promiscuous mode [ 210.867865][ T52] hsr_slave_1: left promiscuous mode [ 210.898526][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.906060][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.958714][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.966252][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.091283][ T52] veth1_macvtap: left promiscuous mode [ 211.096910][ T52] veth0_macvtap: left promiscuous mode [ 211.157684][ T52] veth1_vlan: left promiscuous mode [ 211.163083][ T52] veth0_vlan: left promiscuous mode [ 212.568002][ T4615] Bluetooth: hci9: command tx timeout [ 214.661354][ T4615] Bluetooth: hci9: command tx timeout [ 215.247200][ T939] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 215.277517][ T939] cp210x 3-1:0.0: querying part number failed [ 215.287884][ T939] usb 3-1: cp210x converter now attached to ttyUSB0 [ 215.322700][ T939] usb 3-1: USB disconnect, device number 15 [ 215.341038][ T52] team0 (unregistering): Port device team_slave_1 removed [ 215.358705][ T939] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 215.367001][ T939] cp210x 3-1:0.0: device disconnected [ 215.569853][ T52] team0 (unregistering): Port device team_slave_0 removed [ 215.782532][ T8040] kernel read not supported for file /file1 (pid: 8040 comm: syz.0.858) [ 215.791458][ T939] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 215.816821][ T29] audit: type=1800 audit(1729571402.320:65): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.858" name="file1" dev="mqueue" ino=28925 res=0 errno=0 [ 215.957761][ T939] usb 3-1: Using ep0 maxpacket: 16 [ 215.964693][ T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.979980][ T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.007926][ T939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 216.056168][ T939] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 216.077881][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.098626][ T939] usb 3-1: config 0 descriptor?? [ 216.343148][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 216.508976][ T7962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.523647][ T939] hid-multitouch 0003:045E:9994.0014: unknown main item tag 0x2 [ 216.542186][ T939] hid-multitouch 0003:045E:9994.0014: unknown main item tag 0x0 [ 216.547433][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 216.550606][ T939] hid-multitouch 0003:045E:9994.0014: unknown main item tag 0x0 [ 216.568538][ T7962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.577580][ T939] hid-multitouch 0003:045E:9994.0014: unknown main item tag 0x0 [ 216.587729][ T9] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 216.592327][ T939] hid-multitouch 0003:045E:9994.0014: unknown main item tag 0x0 [ 216.595948][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 216.595988][ T9] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 216.611315][ T939] hid-multitouch 0003:045E:9994.0014: unknown main item tag 0x0 [ 216.657155][ T9] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 216.663104][ T939] hid-multitouch 0003:045E:9994.0014: unknown main item tag 0x0 [ 216.685886][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.695918][ T939] hid-multitouch 0003:045E:9994.0014: unknown main item tag 0x0 [ 216.704000][ T939] hid-multitouch 0003:045E:9994.0014: unknown main item tag 0x0 [ 216.712039][ T939] hid-multitouch 0003:045E:9994.0014: unknown main item tag 0x0 [ 216.720217][ T939] hid-multitouch 0003:045E:9994.0014: unknown main item tag 0x0 [ 216.728594][ T4615] Bluetooth: hci9: command tx timeout [ 216.735139][ T939] hid-multitouch 0003:045E:9994.0014: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.2-1/input0 [ 216.750646][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 216.760044][ T9] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 216.768958][ T9] usb 1-1: Product: syz [ 216.773150][ T9] usb 1-1: Manufacturer: syz [ 216.778022][ T9] usb 1-1: SerialNumber: syz [ 216.784885][ T9] usb 1-1: config 0 descriptor?? [ 216.794847][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 216.805935][ T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 216.854141][ T7962] team0: Port device team_slave_0 added [ 216.878037][ T939] usb 3-1: USB disconnect, device number 16 [ 216.898704][ T7962] team0: Port device team_slave_1 added [ 216.966676][ T7962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.977701][ T7962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.035907][ T7962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.098103][ T7962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.105120][ T7962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.146132][ T7962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.266786][ T7962] hsr_slave_0: entered promiscuous mode [ 217.288470][ T7962] hsr_slave_1: entered promiscuous mode [ 217.298177][ T7962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.307076][ T7962] Cannot create hsr debugfs directory [ 217.917087][ T7962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.927356][ T7962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.951217][ T7962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.969044][ T7962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 218.102161][ T7962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.139347][ T7962] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.162989][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.170303][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.214467][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.221639][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.569623][ T29] audit: type=1326 audit(1729571405.080:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb97dff9 code=0x7ffc0000 [ 218.637568][ T29] audit: type=1326 audit(1729571405.080:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb97dff9 code=0x7ffc0000 [ 218.661049][ T7962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.715996][ T29] audit: type=1326 audit(1729571405.080:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f1fdb97dff9 code=0x7ffc0000 [ 218.756088][ T29] audit: type=1326 audit(1729571405.080:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb97dff9 code=0x7ffc0000 [ 218.785592][ T7962] veth0_vlan: entered promiscuous mode [ 218.816767][ T7962] veth1_vlan: entered promiscuous mode [ 218.851770][ T29] audit: type=1326 audit(1729571405.080:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f1fdb97dff9 code=0x7ffc0000 [ 218.917790][ T29] audit: type=1326 audit(1729571405.080:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb97dff9 code=0x7ffc0000 [ 218.919901][ T7962] veth0_macvtap: entered promiscuous mode [ 218.940460][ T29] audit: type=1326 audit(1729571405.100:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb97dff9 code=0x7ffc0000 [ 219.041326][ T7962] veth1_macvtap: entered promiscuous mode [ 219.072030][ T5237] usb 1-1: USB disconnect, device number 12 [ 219.080045][ T5237] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 219.126625][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.157468][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.186950][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.217460][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.237781][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.255383][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.275666][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.297568][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.331858][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.345251][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.355607][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.367036][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.377160][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.392955][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.410761][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.421538][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.449022][ T8127] smb3: Unknown parameter 'rdma/loop-control' [ 219.467720][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.491129][ T8129] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 219.499019][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.549507][ T7962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.583939][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.597826][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.608053][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.620558][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.657573][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.691061][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.722008][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.742221][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.767813][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.787557][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.811739][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.833899][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.855443][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.877520][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.897575][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.915980][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.931766][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.942626][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.954116][ T7962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.968571][ T7962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.978047][ T7962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.986781][ T7962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.996144][ T7962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.078095][ T5270] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 220.168563][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.177639][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.239517][ T5270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.257422][ T5270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.267243][ T5270] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 220.281825][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.298759][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.317684][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.328393][ T5270] usb 3-1: config 0 descriptor?? [ 220.648847][ T8166] loop8: detected capacity change from 0 to 7 [ 220.674709][ T8166] Dev loop8: unable to read RDB block 7 [ 220.695917][ T8166] loop8: unable to read partition table [ 220.703005][ T8166] loop8: partition table beyond EOD, truncated [ 220.709903][ T8166] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 220.709903][ T8166] ) failed (rc=-5) [ 220.799564][ T8168] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode [ 220.813343][ T8168] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 220.966511][ T5270] usb 3-1: string descriptor 0 read error: -22 [ 221.175316][ T5270] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0015/input/input28 [ 221.208856][ T5270] uclogic 0003:256C:006D.0015: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 221.377182][ T9] usb 3-1: USB disconnect, device number 17 [ 221.431046][ T2952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.667219][ T2952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.772920][ T2952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.883567][ T2952] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.077684][ T2952] bridge_slave_1: left allmulticast mode [ 222.083382][ T2952] bridge_slave_1: left promiscuous mode [ 222.113145][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.145285][ T2952] bridge_slave_0: left allmulticast mode [ 222.163914][ T2952] bridge_slave_0: left promiscuous mode [ 222.175139][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.422461][ T8188] MTD: Couldn't look up './file0': -15 [ 222.627515][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 222.727520][ T5300] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 222.789593][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 222.800541][ T25] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 222.818423][ T5231] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 222.829100][ T5231] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 222.838260][ T5231] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 222.857187][ T25] usb 1-1: config 179 has no interface number 0 [ 222.863665][ T25] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 222.874979][ T25] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 222.886481][ T25] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 222.898981][ T25] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 222.911180][ T25] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 222.924574][ T25] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 222.933730][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.944140][ T5231] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 222.946768][ T8189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 222.959998][ T5300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.972084][ T5231] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 222.975226][ T5300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.993666][ T5231] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 223.034404][ T5300] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.104090][ T5300] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.142598][ T5300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.206285][ T5300] usb 4-1: config 0 descriptor?? [ 223.222509][ T5270] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input29 [ 223.420207][ T5271] usb 1-1: USB disconnect, device number 13 [ 223.420216][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 223.435615][ T5271] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 223.459495][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.513957][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.545511][ T2952] bond0 (unregistering): Released all slaves [ 223.650330][ T5300] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 223.669881][ T5300] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 223.716205][ T5300] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 223.817960][ T8213] block nbd2: server does not support multiple connections per device. [ 223.828171][ T8212] block nbd2: shutting down sockets [ 224.329248][ T2952] hsr_slave_0: left promiscuous mode [ 224.335962][ T2952] hsr_slave_1: left promiscuous mode [ 224.378349][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.386096][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.415197][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.447572][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.519156][ T2952] veth1_macvtap: left promiscuous mode [ 224.525178][ T2952] veth0_macvtap: left promiscuous mode [ 224.532126][ T2952] veth1_vlan: left promiscuous mode [ 224.537614][ T2952] veth0_vlan: left promiscuous mode [ 224.737552][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 224.903503][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 224.916667][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 224.940720][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.971724][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.981149][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.991434][ T25] usb 3-1: config 0 descriptor?? [ 224.997306][ T8228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 225.049209][ T5231] Bluetooth: hci9: command tx timeout [ 225.433971][ T25] plantronics 0003:047F:FFFF.0017: unknown main item tag 0xd [ 225.442664][ T2952] team0 (unregistering): Port device team_slave_1 removed [ 225.452816][ T25] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 225.475743][ T25] plantronics 0003:047F:FFFF.0017: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 225.561987][ T2952] team0 (unregistering): Port device team_slave_0 removed [ 225.575552][ T8234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.741258][ T9] usb 3-1: USB disconnect, device number 18 [ 225.752862][ T5271] usb 4-1: USB disconnect, device number 19 [ 226.370161][ T8254] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 226.515518][ T8200] chnl_net:caif_netlink_parms(): no params data found [ 226.764736][ T8200] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.773530][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.788067][ T8200] bridge_slave_0: entered allmulticast mode [ 226.795543][ T8200] bridge_slave_0: entered promiscuous mode [ 226.808489][ T8200] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.816056][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.823490][ T8200] bridge_slave_1: entered allmulticast mode [ 226.830658][ T8200] bridge_slave_1: entered promiscuous mode [ 226.881883][ T8200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.920841][ T8200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.016271][ T8200] team0: Port device team_slave_0 added [ 227.050132][ T8200] team0: Port device team_slave_1 added [ 227.128096][ T5231] Bluetooth: hci9: command tx timeout [ 227.224200][ T8200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.267655][ T8200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.340729][ T8200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.398959][ T8200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.424189][ T8200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.453099][ T8200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.605254][ T8200] hsr_slave_0: entered promiscuous mode [ 227.629210][ T8200] hsr_slave_1: entered promiscuous mode [ 227.658258][ T8200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.676224][ T8200] Cannot create hsr debugfs directory [ 227.757630][ T5271] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 227.939774][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.977445][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.007578][ T5271] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.037512][ T5271] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.056816][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.070088][ T5271] usb 1-1: config 0 descriptor?? [ 228.488340][ T5271] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 228.507018][ T5271] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 228.541540][ T5271] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 228.583922][ T8200] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.590843][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 228.605916][ T8200] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.619354][ T8200] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.625078][ T8314] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 228.640445][ T8200] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.789915][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 228.799389][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.830719][ T9] usb 5-1: config 0 descriptor?? [ 228.843031][ T9] cp210x 5-1:0.0: cp210x converter detected [ 228.857282][ T8200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.908724][ T8200] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.939595][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.946836][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.995983][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.003221][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.208157][ T5231] Bluetooth: hci9: command tx timeout [ 229.249151][ T9] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 229.271951][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 229.472479][ T5308] usb 5-1: USB disconnect, device number 15 [ 229.489606][ T5308] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 229.518220][ T5308] cp210x 5-1:0.0: device disconnected [ 229.588434][ T8200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.728048][ T8200] veth0_vlan: entered promiscuous mode [ 229.755184][ T8200] veth1_vlan: entered promiscuous mode [ 229.822967][ T8200] veth0_macvtap: entered promiscuous mode [ 229.854820][ T8200] veth1_macvtap: entered promiscuous mode [ 229.888118][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.899284][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.909646][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.920368][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.934265][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.945275][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.958957][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.970343][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.980835][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.991952][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.002290][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.037510][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.049205][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.061818][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.071859][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.086128][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.098839][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.109659][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.134781][ T8200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.151000][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.163588][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.197668][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.220321][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.247553][ T5270] IPVS: starting estimator thread 0... [ 230.264915][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.287569][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.317690][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.347486][ T8348] IPVS: using max 22 ests per chain, 52800 per kthread [ 230.405575][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.458778][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.507734][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.528610][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.543451][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.556105][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.571333][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.581709][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.593273][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.606006][ T8200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.614611][ T8365] siw: device registration error -23 [ 230.622955][ T8200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.623451][ T5237] usb 1-1: USB disconnect, device number 14 [ 230.635014][ T8200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.826821][ T8370] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 230.888750][ T8200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.919244][ T8200] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.930283][ T8200] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.939143][ T8200] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.099080][ T8383] netlink: 'syz.4.989': attribute type 10 has an invalid length. [ 231.178639][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.186168][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.210063][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.217237][ T8383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.224695][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.231809][ T8383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.294690][ T5231] Bluetooth: hci9: command tx timeout [ 231.310503][ T8383] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 231.408496][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.416325][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.500200][ T2558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.508342][ T2558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.283111][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 232.437802][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 232.591899][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.603086][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.628685][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.651631][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.668819][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.683703][ T9] usb 3-1: config 0 descriptor?? [ 232.933680][ T2558] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.106439][ T9] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 233.116085][ T9] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 233.126270][ T9] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 233.277496][ T2558] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.404932][ T2558] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.490562][ T2558] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.609428][ T2558] bridge_slave_1: left allmulticast mode [ 233.615152][ T2558] bridge_slave_1: left promiscuous mode [ 233.621122][ T2558] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.630486][ T2558] bridge_slave_0: left allmulticast mode [ 233.636174][ T2558] bridge_slave_0: left promiscuous mode [ 233.644532][ T2558] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.464480][ T4615] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 234.482529][ T4615] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 234.502800][ T4615] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 234.524659][ T4615] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 234.534871][ T4615] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 234.542661][ T4615] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 234.755994][ T2558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.785286][ T2558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.806541][ T2558] bond0 (unregistering): Released all slaves [ 235.182099][ T5271] usb 3-1: USB disconnect, device number 19 [ 235.297553][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 235.467892][ T2558] hsr_slave_0: left promiscuous mode [ 235.478379][ T2558] hsr_slave_1: left promiscuous mode [ 235.485979][ T25] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 235.495827][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.504934][ T25] usb 5-1: Product: syz [ 235.513607][ T25] usb 5-1: Manufacturer: syz [ 235.526129][ T25] usb 5-1: SerialNumber: syz [ 235.526326][ T2558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.551050][ T25] usb 5-1: config 0 descriptor?? [ 235.585094][ T2558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.625260][ T2558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.642437][ T2558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.672329][ T2558] veth1_macvtap: left promiscuous mode [ 235.680886][ T2558] veth0_macvtap: left promiscuous mode [ 235.686740][ T2558] veth1_vlan: left promiscuous mode [ 235.694825][ T2558] veth0_vlan: left promiscuous mode [ 235.858200][ T5308] usb 5-1: USB disconnect, device number 16 [ 235.914412][ T29] audit: type=1326 audit(1729571422.420:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d157dff9 code=0x7ffc0000 [ 236.000118][ T29] audit: type=1326 audit(1729571422.420:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d157dff9 code=0x7ffc0000 [ 236.068916][ T29] audit: type=1326 audit(1729571422.440:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d157dff9 code=0x7ffc0000 [ 236.124275][ T29] audit: type=1326 audit(1729571422.450:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d157dff9 code=0x7ffc0000 [ 236.149809][ T29] audit: type=1326 audit(1729571422.450:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d157dff9 code=0x7ffc0000 [ 236.242168][ T29] audit: type=1326 audit(1729571422.450:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f45d157dff9 code=0x7ffc0000 [ 236.286931][ T29] audit: type=1326 audit(1729571422.450:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d157dff9 code=0x7ffc0000 [ 236.310192][ T29] audit: type=1326 audit(1729571422.450:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d157dff9 code=0x7ffc0000 [ 236.337060][ T11] Bluetooth: hci10: Frame reassembly failed (-84) [ 236.567662][ T4615] Bluetooth: hci9: command tx timeout [ 236.634424][ T5237] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 236.787615][ T5237] usb 3-1: Using ep0 maxpacket: 32 [ 236.805557][ T5237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.827540][ T5237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.839462][ T5237] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 236.862999][ T5237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.886557][ T5237] usb 3-1: config 0 descriptor?? [ 236.895075][ T5237] hub 3-1:0.0: USB hub found [ 237.113944][ T2558] team0 (unregistering): Port device team_slave_1 removed [ 237.114877][ T5237] hub 3-1:0.0: 1 port detected [ 237.239106][ T2558] team0 (unregistering): Port device team_slave_0 removed [ 237.316296][ T5237] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 237.341978][ T5237] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 237.438188][ T5237] usbhid 3-1:0.0: can't add hid device: -71 [ 237.444305][ T5237] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 237.499706][ T5237] usb 3-1: USB disconnect, device number 20 [ 237.572354][ T8468] Bluetooth: hci11: Frame reassembly failed (-84) [ 237.606683][ T11] Bluetooth: hci11: Frame reassembly failed (-84) [ 237.618750][ T11] Bluetooth: hci11: Frame reassembly failed (-84) [ 238.132604][ T8430] chnl_net:caif_netlink_parms(): no params data found [ 238.319053][ T8430] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.326382][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.333893][ T8430] bridge_slave_0: entered allmulticast mode [ 238.339957][ T5230] Bluetooth: hci10: command 0x1003 tx timeout [ 238.346456][ T5231] Bluetooth: hci10: Opcode 0x1003 failed: -110 [ 238.374379][ T8430] bridge_slave_0: entered promiscuous mode [ 238.410030][ T8430] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.417878][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.425155][ T8430] bridge_slave_1: entered allmulticast mode [ 238.447420][ T8430] bridge_slave_1: entered promiscuous mode [ 238.495813][ T8430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.509161][ T8430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.546043][ T8430] team0: Port device team_slave_0 added [ 238.554367][ T8430] team0: Port device team_slave_1 added [ 238.581659][ T8430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.588781][ T8430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.614970][ T8430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.635188][ T8430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.643101][ T8430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.670976][ T5231] Bluetooth: hci9: command tx timeout [ 238.676518][ T8430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.717089][ T8430] hsr_slave_0: entered promiscuous mode [ 238.725580][ T8430] hsr_slave_1: entered promiscuous mode [ 238.732273][ T8430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.740694][ T8430] Cannot create hsr debugfs directory [ 239.096654][ T8430] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 239.106731][ T8430] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.116642][ T8430] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.126117][ T8430] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.150484][ T8430] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.157671][ T8430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.165013][ T8430] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.172246][ T8430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.209300][ T2558] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.219242][ T2558] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.266746][ T8430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.290414][ T8430] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.309046][ T2558] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.316204][ T2558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.332929][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.340133][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.542129][ T8430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.586336][ T8430] veth0_vlan: entered promiscuous mode [ 239.602867][ T8430] veth1_vlan: entered promiscuous mode [ 239.607895][ T4615] Bluetooth: hci11: Opcode 0x1003 failed: -110 [ 239.609069][ T5231] Bluetooth: hci11: command 0x1003 tx timeout [ 239.681481][ T8430] veth0_macvtap: entered promiscuous mode [ 239.692452][ T8430] veth1_macvtap: entered promiscuous mode [ 239.709900][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.720586][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.730901][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.741461][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.751449][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.761989][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.772192][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.782938][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.794038][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.805606][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.815576][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.826158][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.836117][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.846631][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.856625][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.867156][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.877137][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.887691][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.900604][ T8430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.911787][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.922344][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.932456][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.943019][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.953026][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.963666][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.973616][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.984184][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.994747][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.005969][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.016025][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.026547][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.036444][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.046978][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.057385][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.068100][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.078265][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.088989][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.102347][ T8430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.108388][ T939] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 240.221912][ T8430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.237875][ T8430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.261703][ T8430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.277429][ T8430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.283602][ T939] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.304374][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.334538][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 240.345958][ T5237] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 240.360990][ T939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.428260][ T939] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.439122][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.446986][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.455061][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.467581][ T29] audit: type=1326 audit(1729571426.980:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8502 comm="syz.4.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f97dff9 code=0x7ffc0000 [ 240.513228][ T939] usb 4-1: config 0 descriptor?? [ 240.519628][ T29] audit: type=1326 audit(1729571426.980:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8502 comm="syz.4.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f97dff9 code=0x7ffc0000 [ 240.547014][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.556143][ T5237] usb 3-1: device descriptor read/all, error -71 [ 240.565181][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.868633][ T8509] loop2: detected capacity change from 0 to 7 [ 240.875627][ T8509] Dev loop2: unable to read RDB block 7 [ 240.896789][ T8509] loop2: unable to read partition table [ 240.903385][ T8509] loop2: partition table beyond EOD, truncated [ 240.909873][ T8509] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 240.969489][ T939] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 240.985105][ T939] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 240.999698][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 241.230303][ T5308] usb 4-1: USB disconnect, device number 20 [ 241.237897][ T8522] Bluetooth: hci9: Frame reassembly failed (-84) [ 241.249738][ T1107] Bluetooth: hci9: Frame reassembly failed (-84) [ 241.322898][ T8526] netlink: 'syz.0.1038': attribute type 13 has an invalid length. [ 241.331332][ T8526] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1038'. [ 241.857540][ T939] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 242.029158][ T939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 242.042132][ T939] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 242.057063][ T939] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.067277][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 242.075600][ T939] usb 1-1: SerialNumber: syz [ 242.083485][ T8536] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 242.157699][ T5318] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 242.272728][ T8554] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1052'. [ 242.282876][ T8554] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1052'. [ 242.311609][ T939] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 242.331823][ T939] usb 1-1: USB disconnect, device number 15 [ 242.364632][ T5318] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 242.374688][ T5318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.383040][ T5318] usb 4-1: Product: syz [ 242.387764][ T5318] usb 4-1: Manufacturer: syz [ 242.392434][ T5318] usb 4-1: SerialNumber: syz [ 242.403543][ T5318] usb 4-1: config 0 descriptor?? [ 242.413966][ T5318] powermate 4-1:0.0: probe with driver powermate failed with error -22 [ 242.621903][ T5318] usb 4-1: USB disconnect, device number 21 [ 242.806898][ T2558] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.287708][ T4615] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 243.287978][ T5231] Bluetooth: hci9: command 0x1003 tx timeout [ 243.829893][ T8566] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 244.019906][ T5231] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 244.032417][ T5231] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 244.039641][ T5318] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 244.056217][ T5231] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 244.065640][ T5231] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 244.077287][ T5231] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 244.084854][ T5231] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 244.127698][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 244.207584][ T5318] usb 4-1: Using ep0 maxpacket: 8 [ 244.220532][ T5318] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 244.237521][ T5318] usb 4-1: config 179 has no interface number 0 [ 244.243877][ T5318] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 244.248897][ T8573] chnl_net:caif_netlink_parms(): no params data found [ 244.263408][ T5318] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 244.281851][ T5318] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.294415][ T5318] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 244.307039][ T5318] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 244.321212][ T5318] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 244.331029][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.342586][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.350750][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 244.364766][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.373925][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.383797][ T8567] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.398731][ T2558] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.400892][ T9] usb 5-1: config 0 descriptor?? [ 244.532575][ T2558] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.552004][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.559787][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.568829][ T8573] bridge_slave_0: entered allmulticast mode [ 244.577700][ T8573] bridge_slave_0: entered promiscuous mode [ 244.586470][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.595305][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.604642][ T8573] bridge_slave_1: entered allmulticast mode [ 244.612854][ T8573] bridge_slave_1: entered promiscuous mode [ 244.647279][ T5271] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input32 [ 244.706399][ T2558] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.739000][ T8573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.751945][ T8573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.809519][ T8573] team0: Port device team_slave_0 added [ 244.821568][ T8573] team0: Port device team_slave_1 added [ 244.848042][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 244.860210][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 244.860216][ T939] usb 4-1: USB disconnect, device number 22 [ 244.874583][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 244.885669][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 244.893687][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 244.901670][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 244.904954][ T939] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 244.910787][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 244.926840][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 244.934564][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 244.943368][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 244.951038][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 244.958698][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 244.962158][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.966168][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 244.981216][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 244.987557][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.988806][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 245.016341][ T8573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.055479][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.059237][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 245.063630][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.077423][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 245.097828][ T8573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.123076][ T9] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 245.159539][ T9] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 245.178132][ T8573] hsr_slave_0: entered promiscuous mode [ 245.184786][ T8573] hsr_slave_1: entered promiscuous mode [ 245.191141][ T8573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.199763][ T8573] Cannot create hsr debugfs directory [ 245.225802][ T2558] bridge_slave_1: left allmulticast mode [ 245.231885][ T2558] bridge_slave_1: left promiscuous mode [ 245.237856][ T2558] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.247026][ T2558] bridge_slave_0: left allmulticast mode [ 245.253002][ T2558] bridge_slave_0: left promiscuous mode [ 245.258815][ T2558] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.572632][ T8585] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 245.967737][ T5318] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 246.103808][ T2558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.118946][ T2558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.131189][ T2558] bond0 (unregistering): Released all slaves [ 246.162622][ T5318] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 246.167795][ T4615] Bluetooth: hci9: command tx timeout [ 246.172076][ T5318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.191789][ T5318] usb 1-1: config 0 descriptor?? [ 246.590443][ T8605] Falling back ldisc for ptm0. [ 246.617182][ T5318] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 246.633647][ T2558] hsr_slave_0: left promiscuous mode [ 246.642504][ T2558] hsr_slave_1: left promiscuous mode [ 246.656192][ T2558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.668742][ T2558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.677205][ T2558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.684931][ T2558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.724124][ T2558] veth1_macvtap: left promiscuous mode [ 246.736618][ T2558] veth0_macvtap: left promiscuous mode [ 246.745619][ T2558] veth1_vlan: left promiscuous mode [ 246.752440][ T2558] veth0_vlan: left promiscuous mode [ 246.777560][ T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 246.921838][ T5236] usb 5-1: USB disconnect, device number 17 [ 246.961973][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 246.993734][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 247.027812][ T5318] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 247.041475][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.058096][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 247.066390][ T9] usb 4-1: SerialNumber: syz [ 247.099063][ T8604] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 247.332094][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 247.345978][ T9] usb 4-1: USB disconnect, device number 23 [ 247.960229][ T2558] team0 (unregistering): Port device team_slave_1 removed [ 248.060129][ T2558] team0 (unregistering): Port device team_slave_0 removed [ 248.166617][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 248.252212][ T4615] Bluetooth: hci9: command tx timeout [ 248.870872][ T5318] usb 1-1: USB disconnect, device number 16 [ 248.915514][ T8633] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 249.306393][ T8573] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 249.324605][ T8573] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.337852][ T8573] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 249.380004][ T8573] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.417805][ T5318] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 249.550252][ T8573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.570208][ T8573] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.583983][ T2558] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.591245][ T2558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.667484][ T5318] usb 1-1: Using ep0 maxpacket: 32 [ 249.674714][ T5318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.687033][ T5318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.707177][ T2558] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.714440][ T2558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.723174][ T5318] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 249.732619][ T5318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.750887][ T5318] usb 1-1: config 0 descriptor?? [ 249.775655][ T5318] hub 1-1:0.0: USB hub found [ 249.986619][ T5318] hub 1-1:0.0: 1 port detected [ 250.042914][ T8665] vivid-007: disconnect [ 250.055779][ T8664] vivid-007: reconnect [ 250.110642][ T8573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.189980][ T5318] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 250.201860][ T5318] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 250.223827][ T5318] usbhid 1-1:0.0: can't add hid device: -71 [ 250.237231][ T8573] veth0_vlan: entered promiscuous mode [ 250.244379][ T8673] ======================================================= [ 250.244379][ T8673] WARNING: The mand mount option has been deprecated and [ 250.244379][ T8673] and is ignored by this kernel. Remove the mand [ 250.244379][ T8673] option from the mount to silence this warning. [ 250.244379][ T8673] ======================================================= [ 250.286069][ T5318] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 250.318188][ T8573] veth1_vlan: entered promiscuous mode [ 250.323050][ T5318] usb 1-1: USB disconnect, device number 17 [ 250.327899][ T4615] Bluetooth: hci9: command tx timeout [ 250.369516][ T8573] veth0_macvtap: entered promiscuous mode [ 250.379299][ T8573] veth1_macvtap: entered promiscuous mode [ 250.427030][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.441746][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.452733][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.474184][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.485924][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.496837][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.506997][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.520095][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.530159][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.547010][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.557814][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.569359][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.579329][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.589824][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.599813][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.610467][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.620434][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.630957][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.645885][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.660899][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.683113][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.693906][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.704646][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.714569][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.725493][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.736121][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.763795][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.773825][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.788279][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.799397][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.814336][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.825226][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.836038][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.847558][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.858414][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.868616][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.879465][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.904501][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.006159][ T8573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.015623][ T8573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.037243][ T8573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.055485][ T8573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.421409][ T2952] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.527805][ T8699] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 251.595951][ T2952] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.644938][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.670401][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.747729][ T2952] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.846950][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.884850][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.956855][ T2952] bond0: (slave netdevsim0): Releasing backup interface [ 251.984018][ T8709] loop8: detected capacity change from 0 to 7 [ 251.994186][ T2952] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.011876][ T5231] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 252.036886][ T5231] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 252.048086][ T8709] Dev loop8: unable to read RDB block 7 [ 252.053739][ T8709] loop8: unable to read partition table [ 252.060607][ T5231] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 252.068322][ T8709] loop8: partition table beyond EOD, truncated [ 252.075545][ T8709] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 252.075545][ T8709] ) failed (rc=-5) [ 252.098234][ T5231] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 252.115704][ T8714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.122793][ T5231] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 252.137670][ T5231] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 252.396854][ T2952] bridge_slave_1: left allmulticast mode [ 252.416659][ T2952] bridge_slave_1: left promiscuous mode [ 252.423238][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.443314][ T2952] bridge_slave_0: left allmulticast mode [ 252.449485][ T2952] bridge_slave_0: left promiscuous mode [ 252.455280][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.507572][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 252.536943][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 252.536961][ T29] audit: type=1326 audit(1729571440.043:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8717 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d157dff9 code=0x7fc00000 [ 252.677165][ T8727] kvm: kvm [8726]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xfffffeb7 [ 252.689747][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 252.697240][ T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 252.725702][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 252.738327][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.759960][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.782989][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.813498][ T9] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 252.823221][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.843229][ T9] usb 1-1: config 0 descriptor?? [ 253.167566][ T29] audit: type=1326 audit(1729571440.673:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8717 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45d157dff9 code=0x7fc00000 [ 253.313022][ T9] hid-steam 0003:28DE:1102.001C: unknown main item tag 0x0 [ 253.329158][ T9] hid-steam 0003:28DE:1102.001C: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 253.340810][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.361846][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.396539][ T2952] bond0 (unregistering): Released all slaves [ 253.408266][ T9] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' connected [ 253.425346][ T9] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.001C/input/input33 [ 253.502381][ T9] hid-steam 0003:28DE:1102.001D: unknown main item tag 0x0 [ 253.583067][ T9] hid-steam 0003:28DE:1102.001D: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 253.690438][ T9] usb 1-1: USB disconnect, device number 18 [ 253.770754][ T9] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' disconnected [ 253.925240][ T8711] chnl_net:caif_netlink_parms(): no params data found [ 254.017140][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.041214][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.078604][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.088987][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.146326][ T2952] veth1_macvtap: left promiscuous mode [ 254.159454][ T2952] veth0_macvtap: left promiscuous mode [ 254.175615][ T4615] Bluetooth: hci8: command tx timeout [ 255.123102][ T5231] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 255.142656][ T5231] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 255.164236][ T5231] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 255.175877][ T5231] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 255.198302][ T5231] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 255.217163][ T5231] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 255.929880][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.936272][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.048238][ T8769] UBIFS error (pid: 8769): cannot open "./file0", error -22 [ 256.253925][ T4615] Bluetooth: hci8: command tx timeout [ 256.338481][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.345638][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.448028][ T8711] bridge_slave_0: entered allmulticast mode [ 256.455270][ T8711] bridge_slave_0: entered promiscuous mode [ 256.461446][ T5270] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 257.299541][ T4615] Bluetooth: hci9: command tx timeout [ 258.338321][ T5231] Bluetooth: hci8: command tx timeout [ 258.486394][ T2952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.901941][ T2952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.214179][ T2952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.380071][ T5231] Bluetooth: hci9: command tx timeout [ 259.640198][ T2952] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.357796][ T2952] bridge_slave_1: left allmulticast mode [ 260.363515][ T2952] bridge_slave_1: left promiscuous mode [ 260.408237][ T5231] Bluetooth: hci8: command tx timeout [ 260.468881][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.597910][ T2952] bridge_slave_0: left allmulticast mode [ 260.603617][ T2952] bridge_slave_0: left promiscuous mode [ 260.699904][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.489741][ T5231] Bluetooth: hci9: command tx timeout [ 262.420145][ T8805] ubi1: attaching mtd0 [ 262.607691][ T939] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 262.643337][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.675854][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.708324][ T2952] bond0 (unregistering): Released all slaves [ 262.726129][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.733786][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.741396][ T8711] bridge_slave_1: entered allmulticast mode [ 262.749959][ T8711] bridge_slave_1: entered promiscuous mode [ 262.767531][ T939] usb 4-1: Using ep0 maxpacket: 16 [ 262.774533][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.786863][ T939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 262.805159][ T939] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.818971][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.840978][ T939] usb 4-1: config 0 descriptor?? [ 262.936555][ T8711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.951458][ T8711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.055513][ T8711] team0: Port device team_slave_0 added [ 263.139609][ T8711] team0: Port device team_slave_1 added [ 263.212877][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.228474][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.277895][ T8711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.325058][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.347523][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.373493][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.423920][ T8711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.476920][ T2952] hsr_slave_0: left promiscuous mode [ 263.496129][ T2952] hsr_slave_1: left promiscuous mode [ 263.519945][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.527628][ T5231] Bluetooth: hci9: command tx timeout [ 263.537771][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.568017][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.575573][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.579435][ T4615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.592777][ T4615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.601116][ T4615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.610068][ T4615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.620667][ T4615] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 263.637635][ T4615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.706953][ T2952] veth1_macvtap: left promiscuous mode [ 263.735533][ T2952] veth0_macvtap: left promiscuous mode [ 263.759451][ T2952] veth1_vlan: left promiscuous mode [ 263.772786][ T2952] veth0_vlan: left promiscuous mode [ 264.575824][ T2952] team0 (unregistering): Port device team_slave_1 removed [ 264.654681][ T2952] team0 (unregistering): Port device team_slave_0 removed [ 265.150100][ T939] usbhid 4-1:0.0: can't add hid device: -71 [ 265.157764][ T939] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 265.168845][ T939] usb 4-1: USB disconnect, device number 24 [ 265.687908][ T4615] Bluetooth: hci3: command tx timeout [ 265.872604][ T8711] hsr_slave_0: entered promiscuous mode [ 265.879285][ T8837] input: syz0 as /devices/virtual/input/input34 [ 265.922094][ T8711] hsr_slave_1: entered promiscuous mode [ 265.947547][ T8711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.955426][ T8711] Cannot create hsr debugfs directory [ 265.974230][ T8748] chnl_net:caif_netlink_parms(): no params data found [ 266.109830][ T8841] input: syz0 as /devices/virtual/input/input35 [ 266.407931][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.436376][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.448739][ T8748] bridge_slave_0: entered allmulticast mode [ 266.456039][ T8748] bridge_slave_0: entered promiscuous mode [ 266.488733][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.496780][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.504416][ T8748] bridge_slave_1: entered allmulticast mode [ 266.513196][ T8748] bridge_slave_1: entered promiscuous mode [ 266.537561][ T5270] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 266.681936][ T8748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.698172][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.726497][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.747130][ T5270] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.779273][ T5270] usb 1-1: New USB device found, idVendor=1a34, idProduct=0f02, bcdDevice= 0.00 [ 266.812687][ T8748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.827616][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.862377][ T5270] usb 1-1: config 0 descriptor?? [ 267.033461][ T2952] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.199861][ T8748] team0: Port device team_slave_0 added [ 267.268944][ T2952] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.297841][ T5270] hid-generic 0003:1A34:0F02.001E: hidraw0: USB HID v0.00 Device [HID 1a34:0f02] on usb-dummy_hcd.0-1/input0 [ 267.298309][ T8748] team0: Port device team_slave_1 added [ 267.356082][ T8821] chnl_net:caif_netlink_parms(): no params data found [ 267.404456][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.413021][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.451384][ T8748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.501011][ T2952] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.528511][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.535622][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.562647][ T5308] usb 1-1: USB disconnect, device number 20 [ 267.572647][ T8748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.628687][ T2952] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.767623][ T4615] Bluetooth: hci3: command tx timeout [ 267.773913][ T8748] hsr_slave_0: entered promiscuous mode [ 267.780651][ T8748] hsr_slave_1: entered promiscuous mode [ 267.786859][ T8748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.800023][ T8748] Cannot create hsr debugfs directory [ 267.805922][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.813740][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.821278][ T8821] bridge_slave_0: entered allmulticast mode [ 267.829346][ T8821] bridge_slave_0: entered promiscuous mode [ 267.850911][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.862344][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.869869][ T8821] bridge_slave_1: entered allmulticast mode [ 267.876684][ T8821] bridge_slave_1: entered promiscuous mode [ 267.892318][ T8711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 267.926223][ T8821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.935754][ T8711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.948182][ T8711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 267.966517][ T8821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.988966][ T8711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.051617][ T8821] team0: Port device team_slave_0 added [ 268.058239][ T2952] bridge_slave_1: left allmulticast mode [ 268.063931][ T2952] bridge_slave_1: left promiscuous mode [ 268.070645][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.080397][ T2952] bridge_slave_0: left allmulticast mode [ 268.086102][ T2952] bridge_slave_0: left promiscuous mode [ 268.092717][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.184581][ T2952] ip6gretap0 (unregistering): left promiscuous mode [ 268.405490][ T2952] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 268.708956][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.758450][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.781638][ T2952] bond0 (unregistering): Released all slaves [ 268.802003][ T8821] team0: Port device team_slave_1 added [ 268.939792][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.946837][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.974809][ T8821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.999637][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.006665][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.032825][ T8821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.047765][ T5270] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 269.108258][ T8892] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 269.115198][ T8892] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 269.137736][ T8892] hsr_slave_0: left promiscuous mode [ 269.144339][ T8892] hsr_slave_1: left promiscuous mode [ 269.209134][ T5270] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.226042][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 269.247435][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 269.257246][ T5270] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 269.277792][ T5270] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 269.286992][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.308972][ T5270] usb 4-1: config 0 descriptor?? [ 269.436576][ T2952] batadv_slave_0: left promiscuous mode [ 269.475039][ T2952] hsr_slave_0: left promiscuous mode [ 269.481398][ T2952] hsr_slave_1: left promiscuous mode [ 269.498845][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.506411][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.516047][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.523872][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.559335][ T2952] veth1_macvtap: left promiscuous mode [ 269.564963][ T2952] veth0_macvtap: left promiscuous mode [ 269.759985][ T5270] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 269.781004][ T2952] pim6reg (unregistering): left allmulticast mode [ 269.797846][ T5270] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 269.849819][ T4615] Bluetooth: hci3: command tx timeout [ 270.504803][ T2952] batadv_slave_0 (unregistering): left allmulticast mode [ 270.569921][ T2952] team0 (unregistering): Port device team_slave_1 removed [ 270.628335][ T2952] team0 (unregistering): Port device team_slave_0 removed [ 270.630163][ T5300] usb 4-1: USB disconnect, device number 25 [ 271.298479][ T8821] hsr_slave_0: entered promiscuous mode [ 271.321629][ T8821] hsr_slave_1: entered promiscuous mode [ 271.330258][ T8821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.338554][ T8821] Cannot create hsr debugfs directory [ 271.353193][ T8908] netlink: 'syz.0.1183': attribute type 4 has an invalid length. [ 271.755883][ T8711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.844036][ T8748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 271.856099][ T8748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 271.929017][ T5231] Bluetooth: hci3: command tx timeout [ 271.943953][ T8711] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.978467][ T8748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 271.988603][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.995761][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.006868][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.014099][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.055546][ T8748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.106282][ T2952] IPVS: stop unused estimator thread 0... [ 272.267539][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 272.302900][ T8748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.342305][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.384823][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.392011][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.422840][ T8821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.430378][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 272.456112][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.470631][ T8821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.478086][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.488475][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.504399][ T8821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.511831][ T9] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 272.524944][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.532109][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.539920][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.559769][ T9] usb 1-1: config 0 descriptor?? [ 272.572659][ T8821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 272.640114][ T8711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.786983][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 272.795026][ T8711] veth0_vlan: entered promiscuous mode [ 272.810283][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 272.840779][ T9] usb 1-1: USB disconnect, device number 21 [ 272.865373][ T8711] veth1_vlan: entered promiscuous mode [ 272.927189][ T8711] veth0_macvtap: entered promiscuous mode [ 272.972479][ T8711] veth1_macvtap: entered promiscuous mode [ 273.003259][ T8821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.046518][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.067179][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.092037][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.113272][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.125787][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.142749][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.154993][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.167527][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.178495][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.189160][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.201984][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.213505][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.223848][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.234408][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.245906][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.263352][ T8821] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.294133][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.317671][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.327920][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.339118][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.349301][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.360181][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.375868][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.389572][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.399667][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.410524][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.420527][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.438777][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.449888][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.460852][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.476744][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.512517][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.519676][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.552109][ T8945] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 273.637403][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.644611][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.662353][ T8711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.671352][ T8711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.680807][ T8711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.691030][ T8711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.806052][ T8748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.991565][ T8821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.022469][ T8821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.103455][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.122823][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.172278][ T8748] veth0_vlan: entered promiscuous mode [ 274.233367][ T8748] veth1_vlan: entered promiscuous mode [ 274.282757][ T2558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.292556][ T2558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.349670][ T8748] veth0_macvtap: entered promiscuous mode [ 274.400460][ T8748] veth1_macvtap: entered promiscuous mode [ 274.434988][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.446721][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.467119][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.487801][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.527534][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.554502][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.571711][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.592284][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.607083][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.625170][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.635433][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.646365][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.656840][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.667652][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.677576][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.688217][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.699963][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.722435][ T8980] netlink: 'syz.0.1206': attribute type 1 has an invalid length. [ 274.732303][ T8980] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1206'. [ 274.765883][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.795815][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.812489][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.817549][ T5272] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 274.838102][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.849521][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.861481][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.871759][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.882425][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.892794][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.904367][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.917642][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.928636][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.939261][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.950325][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.971348][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.987537][ T5272] usb 3-1: Using ep0 maxpacket: 8 [ 274.992828][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.006445][ T5272] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 275.025779][ T5272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.036231][ T5272] usb 3-1: Product: syz [ 275.038464][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.055734][ T5272] usb 3-1: Manufacturer: syz [ 275.066171][ T5272] usb 3-1: SerialNumber: syz [ 275.085443][ T5272] usb 3-1: config 0 descriptor?? [ 275.116680][ T5272] gspca_main: sq930x-2.14.0 probing 2770:930c [ 275.130127][ T8821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.143575][ T8748] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.167946][ T8748] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.180048][ T8748] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.191096][ T8748] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.363444][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.373796][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.449404][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.480701][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.608340][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 275.736839][ T8821] veth0_vlan: entered promiscuous mode [ 275.749494][ T8821] veth1_vlan: entered promiscuous mode [ 275.774298][ T8821] veth0_macvtap: entered promiscuous mode [ 275.783797][ T8821] veth1_macvtap: entered promiscuous mode [ 275.803949][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.814677][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.817851][ T5272] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 275.825274][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.841938][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.852183][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.862883][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.873002][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.883447][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.893368][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.903892][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.913770][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.924269][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.934851][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.945967][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.955931][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.966678][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.976829][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.987417][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.999024][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.016871][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.027723][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.057555][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.067668][ T5272] gspca_sq930x: Sensor ov9630 not yet treated [ 276.068933][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.074490][ T5272] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 276.084705][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.105305][ T9] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 276.113770][ T9] usb 4-1: config 0 has no interface number 0 [ 276.127481][ T9] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 276.129332][ T5272] usb 3-1: USB disconnect, device number 23 [ 276.146197][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.164063][ T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 276.174566][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.187378][ T9] usb 4-1: Product: syz [ 276.191620][ T9] usb 4-1: Manufacturer: syz [ 276.202297][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.213210][ T9] usb 4-1: SerialNumber: syz [ 276.238320][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.251039][ T9] usb 4-1: config 0 descriptor?? [ 276.258433][ T8993] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 276.270967][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.282831][ T9] usb-storage 4-1:0.20: USB Mass Storage device detected [ 276.290360][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.305374][ T9] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 276.313035][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.324202][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.335910][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.347597][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.357580][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.369013][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.382277][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.393016][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.414288][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.525941][ T9] scsi host1: usb-storage 4-1:0.20 [ 276.537867][ T9] usb 4-1: USB disconnect, device number 26 [ 276.544633][ T2558] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.576548][ T8821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.585662][ T8821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.594712][ T8821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.603545][ T8821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.733292][ T2558] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.764955][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.773288][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.804658][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.818852][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.891909][ T2558] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.274446][ T2558] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.346030][ T2558] bridge_slave_1: left allmulticast mode [ 277.352776][ T2558] bridge_slave_1: left promiscuous mode [ 277.358860][ T2558] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.370684][ T2558] bridge_slave_0: left allmulticast mode [ 277.376456][ T2558] bridge_slave_0: left promiscuous mode [ 277.382202][ T2558] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.029470][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 278.058536][ T5231] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 278.069736][ T5231] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 278.102480][ T5231] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 278.135715][ T5231] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 278.156623][ T5231] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 278.164370][ T5231] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 278.207921][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 278.232267][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.257160][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 278.271010][ T2558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.284696][ T2558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.286862][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.320736][ T2558] bond0 (unregistering): Released all slaves [ 278.330161][ T25] usb 1-1: config 0 descriptor?? [ 278.344832][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 278.603702][ T9036] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 279.171346][ T25] gspca_vc032x: reg_w err -71 [ 279.176265][ T25] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 279.247034][ T25] usb 1-1: USB disconnect, device number 22 [ 279.304456][ T2558] hsr_slave_0: left promiscuous mode [ 279.335287][ T2558] hsr_slave_1: left promiscuous mode [ 279.344093][ T2558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.383157][ T2558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.410894][ T2558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.429797][ T2558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.526360][ T2558] veth1_macvtap: left promiscuous mode [ 279.557567][ T2558] veth0_macvtap: left promiscuous mode [ 279.577498][ T2558] veth1_vlan: left promiscuous mode [ 279.583008][ T2558] veth0_vlan: left promiscuous mode [ 279.985887][ T29] audit: type=1326 audit(1729571467.493:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.3.1228" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45d157dff9 code=0x0 [ 280.033871][ T9088] vivid-002: disconnect [ 280.256399][ T4615] Bluetooth: hci9: command tx timeout [ 280.745165][ T9084] vivid-002: reconnect [ 280.880183][ T2558] team0 (unregistering): Port device team_slave_1 removed [ 280.954943][ T2558] team0 (unregistering): Port device team_slave_0 removed [ 281.127919][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 281.317743][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 281.328789][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 281.355051][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 281.378815][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 281.397403][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.417191][ T9] usb 4-1: Product: syz [ 281.426270][ T9] usb 4-1: Manufacturer: syz [ 281.441372][ T9] usb 4-1: SerialNumber: syz [ 281.450252][ T9] usb 4-1: config 0 descriptor?? [ 281.458908][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 281.470243][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 281.702023][ T9029] chnl_net:caif_netlink_parms(): no params data found [ 281.968324][ T9029] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.986508][ T9029] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.017761][ T9029] bridge_slave_0: entered allmulticast mode [ 282.026981][ T9029] bridge_slave_0: entered promiscuous mode [ 282.091168][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 282.094102][ T9029] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.108518][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 282.118935][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.136807][ T9029] bridge_slave_1: entered allmulticast mode [ 282.144680][ T9029] bridge_slave_1: entered promiscuous mode [ 282.335781][ T4615] Bluetooth: hci9: command tx timeout [ 282.549613][ T9] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 282.564319][ T9] em28xx 4-1:0.0: No AC97 audio processor [ 282.607242][ T9] usb 4-1: USB disconnect, device number 27 [ 282.615845][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 282.636251][ T9] em28xx 4-1:0.0: Freeing device [ 284.407814][ T4615] Bluetooth: hci9: command tx timeout [ 286.009550][ T30] INFO: task syz-executor:6266 blocked for more than 143 seconds. [ 286.018903][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 286.026665][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.036848][ T30] task:syz-executor state:D stack:20656 pid:6266 tgid:6266 ppid:1 flags:0x00004000 [ 286.047427][ T30] Call Trace: [ 286.050760][ T30] [ 286.053730][ T30] __schedule+0x185a/0x4b70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 286.058571][ T30] ? __pfx___schedule+0x10/0x10 [ 286.063493][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.068626][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.075693][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.082274][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.087989][ T30] ? schedule+0x90/0x320 [ 286.092288][ T30] schedule+0x14b/0x320 [ 286.097069][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.102744][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 286.117476][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 286.123553][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.130586][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 286.135702][ T30] ? exit_mmap+0x28b/0xc40 [ 286.159823][ T30] down_write+0x1d7/0x220 [ 286.192617][ T30] ? __pfx_down_write+0x10/0x10 [ 286.198692][ T30] exit_mmap+0x2bd/0xc40 [ 286.203016][ T30] ? __mutex_lock+0x2ef/0xd70 [ 286.217399][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 286.222377][ T30] ? __pfx_exit_aio+0x10/0x10 [ 286.227104][ T30] ? uprobe_clear_state+0x271/0x290 [ 286.246050][ T30] ? mm_update_next_owner+0xa2/0x8a0 [ 286.257471][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 286.262763][ T30] __mmput+0x115/0x380 [ 286.266874][ T30] exit_mm+0x220/0x310 [ 286.271185][ T30] ? __pfx_exit_mm+0x10/0x10 [ 286.276508][ T30] ? taskstats_exit+0x326/0xa60 [ 286.281467][ T30] do_exit+0x9b2/0x28e0 [ 286.285668][ T30] ? __pfx_do_exit+0x10/0x10 [ 286.290420][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.296445][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.303242][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.308617][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 286.313853][ T30] do_group_exit+0x207/0x2c0 [ 286.318560][ T30] __x64_sys_exit_group+0x3f/0x40 [ 286.323618][ T30] x64_sys_call+0x2634/0x2640 [ 286.328509][ T30] do_syscall_64+0xf3/0x230 [ 286.333047][ T30] ? clear_bhb_loop+0x35/0x90 [ 286.337877][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.343940][ T30] RIP: 0033:0x7f8cc857dff9 [ 286.348527][ T30] RSP: 002b:00007ffde46eec48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 286.356983][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8cc857dff9 [ 286.365075][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 286.373278][ T30] RBP: 00007f8cc85dd588 R08: 00007ffde46ec9e7 R09: 0000000000000003 [ 286.382595][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.390745][ T30] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffde46eedf0 [ 286.398807][ T30] [ 286.402086][ T30] INFO: task syz.4.270:6457 blocked for more than 143 seconds. [ 286.410847][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 286.429435][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.446809][ T30] task:syz.4.270 state:D stack:22864 pid:6457 tgid:6456 ppid:5343 flags:0x00004000 [ 286.467483][ T30] Call Trace: [ 286.470824][ T30] [ 286.473780][ T30] __schedule+0x185a/0x4b70 [ 286.487561][ T4615] Bluetooth: hci9: command tx timeout [ 286.493093][ T30] ? __pfx___schedule+0x10/0x10 [ 286.507485][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.512694][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.527468][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.533971][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.539347][ T30] ? schedule+0x90/0x320 [ 286.543643][ T30] schedule+0x14b/0x320 [ 286.547994][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.553508][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 286.559339][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 286.565297][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.571732][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 286.576859][ T30] ? exit_mmap+0x28b/0xc40 [ 286.582015][ T30] down_write+0x1d7/0x220 [ 286.587804][ T30] ? __pfx_down_write+0x10/0x10 [ 286.592780][ T30] exit_mmap+0x2bd/0xc40 [ 286.597085][ T30] ? __mutex_lock+0x2ef/0xd70 [ 286.602008][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 286.607192][ T30] ? __pfx_exit_aio+0x10/0x10 [ 286.612079][ T30] ? uprobe_clear_state+0x271/0x290 [ 286.617308][ T30] ? mm_update_next_owner+0xa2/0x8a0 [ 286.622768][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 286.628132][ T30] __mmput+0x115/0x380 [ 286.632244][ T30] exit_mm+0x220/0x310 [ 286.636345][ T30] ? __pfx_exit_mm+0x10/0x10 [ 286.641126][ T30] ? taskstats_exit+0x326/0xa60 [ 286.646028][ T30] do_exit+0x9b2/0x28e0 [ 286.652198][ T30] ? __pfx_do_exit+0x10/0x10 [ 286.656844][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 286.674093][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.686096][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.692788][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.698167][ T30] do_group_exit+0x207/0x2c0 [ 286.702804][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.708262][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 286.713872][ T30] get_signal+0x16a3/0x1740 [ 286.719058][ T30] ? __pfx_get_signal+0x10/0x10 [ 286.723973][ T30] arch_do_signal_or_restart+0x96/0x860 [ 286.729780][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 286.735975][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.742125][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 286.748049][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 286.753643][ T30] do_syscall_64+0x100/0x230 [ 286.758312][ T30] ? clear_bhb_loop+0x35/0x90 [ 286.763023][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.769114][ T30] RIP: 0033:0x7f5b8037dff9 [ 286.773564][ T30] RSP: 002b:00007f5b810dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 286.782062][ T30] RAX: fffffffffffffe00 RBX: 00007f5b80535f88 RCX: 00007f5b8037dff9 [ 286.791244][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5b80535f88 [ 286.799331][ T30] RBP: 00007f5b80535f80 R08: 0000000000000000 R09: 0000000000000000 [ 286.812031][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5b80535f8c [ 286.820246][ T30] R13: 0000000000000000 R14: 00007ffe2b1892d0 R15: 00007ffe2b1893b8 [ 286.828794][ T30] [ 286.831894][ T30] INFO: task syz.0.271:6460 blocked for more than 144 seconds. [ 286.839545][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 286.847217][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.856100][ T30] task:syz.0.271 state:D stack:24536 pid:6460 tgid:6460 ppid:5336 flags:0x00004004 [ 286.877482][ T30] Call Trace: [ 286.880824][ T30] [ 286.883783][ T30] __schedule+0x185a/0x4b70 [ 286.901098][ T30] ? __pfx___schedule+0x10/0x10 [ 286.906035][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.917568][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.923634][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.937471][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.942648][ T30] ? schedule+0x90/0x320 [ 286.946964][ T30] schedule+0x14b/0x320 [ 286.951373][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.956878][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 286.962715][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 286.969004][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.975199][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 286.980395][ T30] ? exit_mmap+0x28b/0xc40 [ 286.984855][ T30] down_write+0x1d7/0x220 [ 286.989281][ T30] ? __pfx_down_write+0x10/0x10 [ 286.994875][ T30] exit_mmap+0x2bd/0xc40 [ 286.999364][ T30] ? __mutex_lock+0x2ef/0xd70 [ 287.004157][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 287.009018][ T30] ? __pfx_exit_aio+0x10/0x10 [ 287.013719][ T30] ? uprobe_clear_state+0x271/0x290 [ 287.019421][ T30] ? mm_update_next_owner+0xa2/0x8a0 [ 287.024895][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.037398][ T30] __mmput+0x115/0x380 [ 287.041620][ T30] exit_mm+0x220/0x310 [ 287.045698][ T30] ? __pfx_exit_mm+0x10/0x10 [ 287.050780][ T30] ? hrtimer_try_to_cancel+0x3d1/0x410 [ 287.056409][ T30] ? taskstats_exit+0x326/0xa60 [ 287.061354][ T30] do_exit+0x9b2/0x28e0 [ 287.065591][ T30] ? __pfx_do_exit+0x10/0x10 [ 287.070275][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 287.075678][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.081736][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.088260][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 287.093417][ T30] do_group_exit+0x207/0x2c0 [ 287.099237][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.104521][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 287.109830][ T30] get_signal+0x16a3/0x1740 [ 287.114370][ T30] ? __pfx_down_write_killable+0x10/0x10 [ 287.120494][ T30] ? __pfx_get_signal+0x10/0x10 [ 287.125386][ T30] arch_do_signal_or_restart+0x96/0x860 [ 287.131359][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 287.143473][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.149594][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 287.155355][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 287.160993][ T30] do_syscall_64+0x100/0x230 [ 287.165602][ T30] ? clear_bhb_loop+0x35/0x90 [ 287.170398][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.176322][ T30] RIP: 0033:0x7f93c337e033 [ 287.180782][ T30] RSP: 002b:00007ffd657b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 287.189400][ T30] RAX: fffffffffffffffc RBX: 0000000000400000 RCX: 00007f93c337e033 [ 287.198340][ T30] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b31160000 [ 287.206430][ T30] RBP: 0000001b31160000 R08: 0000000000000004 R09: 0000000000040000 [ 287.214838][ T30] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000032 [ 287.223460][ T30] R13: 0000000000021507 R14: 000000000002133b R15: 00007ffd657b8310 [ 287.231621][ T30] [ 287.245203][ T30] [ 287.245203][ T30] Showing all locks held in the system: [ 287.265271][ T30] 1 lock held by khungtaskd/30: [ 287.277383][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 287.307547][ T30] 4 locks held by kworker/u8:8/2558: [ 287.312985][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 287.337437][ T30] #1: ffffc90008c47d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 287.367397][ T30] #2: ffffffff8fcb3e50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 287.377021][ T30] #3: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x7d/0x2a0 [ 287.386371][ T30] 1 lock held by klogd/4666: [ 287.391067][ T30] #0: ffff88807c6b4418 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 287.400237][ T30] 2 locks held by udevd/4677: [ 287.406017][ T30] #0: ffffffff8e9eb450 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x282/0x1f40 [ 287.414961][ T30] #1: ffff88807bdab118 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2a5/0x1f40 [ 287.424240][ T30] 2 locks held by getty/4977: [ 287.429467][ T30] #0: ffff88802e9030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.439364][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 287.457561][ T30] 8 locks held by kworker/1:5/5270: [ 287.462824][ T30] 1 lock held by syz-executor/5336: [ 287.468089][ T30] #0: ffff88807987a798 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 287.477235][ T30] 1 lock held by syz-executor/5341: [ 287.482530][ T30] #0: ffff88807b8bf398 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 287.491710][ T30] 1 lock held by syz-executor/5345: [ 287.496925][ T30] #0: ffff88807b8bc418 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 287.507126][ T30] 1 lock held by udevd/5475: [ 287.517412][ T30] #0: ffff888030084418 (&mm->mmap_lock){++++}-{3:3}, at: __vm_munmap+0x1fe/0x480 [ 287.526748][ T30] 1 lock held by udevd/5580: [ 287.543034][ T30] #0: ffff888024684d98 (&mm->mmap_lock){++++}-{3:3}, at: __vm_munmap+0x1fe/0x480 [ 287.552516][ T30] 1 lock held by syz-executor/6266: [ 287.557905][ T30] #0: ffff888077a5a798 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 287.567021][ T30] 1 lock held by syz.4.270/6457: [ 287.572069][ T30] #0: ffff888030082798 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 287.581280][ T30] 1 lock held by syz.0.271/6460: [ 287.586234][ T30] #0: ffff888030080b18 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 287.595433][ T30] 1 lock held by poweroff/7543: [ 287.600371][ T30] #0: ffff88807bdab118 (&mm->mmap_lock){++++}-{3:3}, at: __access_remote_vm+0xa4/0x830 [ 287.611154][ T30] 1 lock held by syz-executor/9029: [ 287.616389][ T30] #0: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 287.625893][ T30] 3 locks held by kworker/u8:36/9072: [ 287.631775][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 287.643561][ T30] #1: ffffc900015d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 287.654690][ T30] #2: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 287.663804][ T30] 2 locks held by syz.2.1241/9120: [ 287.669000][ T30] #0: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 287.678076][ T30] #1: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 287.689178][ T30] 1 lock held by syz.0.1243/9126: [ 287.694258][ T30] #0: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400 [ 287.703763][ T30] 1 lock held by syz.0.1243/9129: [ 287.709715][ T30] #0: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x419/0x2400 [ 287.719226][ T30] 1 lock held by syz.0.1243/9131: [ 287.724274][ T30] #0: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 287.734258][ T30] 2 locks held by syz.3.1248/9142: [ 287.739481][ T30] #0: ffffffff8fd266b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 287.747783][ T30] #1: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 287.757071][ T30] 2 locks held by syz.3.1248/9145: [ 287.762371][ T30] #0: ffffffff8fd266b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 287.770799][ T30] #1: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 287.780166][ T30] 4 locks held by syz.4.1252/9154: [ 287.785287][ T30] #0: ffff888028cd4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 287.795337][ T30] #1: ffff888028cd4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 287.805141][ T30] #2: ffffffff8fe2d268 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 287.816109][ T30] #3: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 287.827182][ T30] [ 287.829638][ T30] ============================================= [ 287.829638][ T30] [ 287.838533][ T30] NMI backtrace for cpu 0 [ 287.842911][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 287.853420][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.863480][ T30] Call Trace: [ 287.866756][ T30] [ 287.869689][ T30] dump_stack_lvl+0x241/0x360 [ 287.874380][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.879588][ T30] ? __pfx__printk+0x10/0x10 [ 287.884190][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.889142][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.894610][ T30] ? _printk+0xd5/0x120 [ 287.898771][ T30] ? __pfx__printk+0x10/0x10 [ 287.903363][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.908222][ T30] ? __pfx__printk+0x10/0x10 [ 287.912814][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 287.917854][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.923851][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.929850][ T30] watchdog+0xff4/0x1040 [ 287.934104][ T30] ? watchdog+0x1ea/0x1040 [ 287.938536][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.943222][ T30] kthread+0x2f0/0x390 [ 287.947296][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.952020][ T30] ? __pfx_kthread+0x10/0x10 [ 287.956609][ T30] ret_from_fork+0x4b/0x80 [ 287.961035][ T30] ? __pfx_kthread+0x10/0x10 [ 287.965625][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.970409][ T30] [ 287.975975][ T30] Sending NMI from CPU 0 to CPUs 1: [ 287.982624][ C1] NMI backtrace for cpu 1 [ 287.982638][ C1] CPU: 1 UID: 0 PID: 9074 Comm: kworker/u8:38 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 287.982657][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.982668][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 287.982695][ C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x25a/0x780 [ 287.982724][ C1] Code: 8b 44 24 10 48 8d 98 e0 0a 00 00 4c 8d a0 00 0b 00 00 45 31 ed 49 83 fd 31 0f 83 a5 00 00 00 4c 89 e0 48 c1 e8 03 0f b6 04 10 <84> c0 75 54 8b 43 20 a9 00 00 04 00 74 2c 31 d2 a9 00 00 03 00 0f [ 287.982739][ C1] RSP: 0018:ffffc90003ae6b00 EFLAGS: 00000806 [ 287.982752][ C1] RAX: 0000000000000000 RBX: ffff8880755464e0 RCX: ffffffff9a39a903 [ 287.982764][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ad820 RDI: ffffffff8c602ea0 [ 287.982776][ C1] RBP: ffffc90003ae6ba8 R08: ffffffff901bd2af R09: 1ffffffff2037a55 [ 287.982789][ C1] R10: dffffc0000000000 R11: fffffbfff2037a56 R12: ffff888075546500 [ 287.982801][ C1] R13: 0000000000000000 R14: ffff8880755464d8 R15: 1ffff1100eaa8c9b [ 287.982813][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 287.982827][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.982838][ C1] CR2: 00000000200c8000 CR3: 000000000e734000 CR4: 00000000003526f0 [ 287.982852][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.982862][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.982872][ C1] Call Trace: [ 287.982878][ C1] [ 287.982886][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 287.982908][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 287.982933][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.982960][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.982982][ C1] ? nmi_handle+0x14f/0x5a0 [ 287.982999][ C1] ? nmi_handle+0x2a/0x5a0 [ 287.983016][ C1] ? lockdep_hardirqs_on_prepare+0x25a/0x780 [ 287.983040][ C1] ? default_do_nmi+0x63/0x160 [ 287.983062][ C1] ? exc_nmi+0x123/0x1f0 [ 287.983082][ C1] ? end_repeat_nmi+0xf/0x53 [ 287.983103][ C1] ? lockdep_hardirqs_on_prepare+0x25a/0x780 [ 287.983127][ C1] ? lockdep_hardirqs_on_prepare+0x25a/0x780 [ 287.983151][ C1] ? lockdep_hardirqs_on_prepare+0x25a/0x780 [ 287.983176][ C1] [ 287.983181][ C1] [ 287.983188][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.983214][ C1] ? rcu_is_watching+0x15/0xb0 [ 287.983232][ C1] trace_hardirqs_on+0x28/0x40 [ 287.983259][ C1] _raw_spin_unlock_irqrestore+0x8f/0x140 [ 287.983284][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 287.983312][ C1] debug_check_no_obj_freed+0x561/0x580 [ 287.983342][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 287.983368][ C1] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 287.983388][ C1] ? ieee80211_inform_bss+0xbb2/0x1080 [ 287.983411][ C1] ? ieee80211_inform_bss+0xbb2/0x1080 [ 287.983434][ C1] kfree+0x11f/0x440 [ 287.983448][ C1] ? ieee80211_inform_bss+0x5fb/0x1080 [ 287.983472][ C1] ieee80211_inform_bss+0xbb2/0x1080 [ 287.983498][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 287.983523][ C1] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 287.983541][ C1] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 287.983558][ C1] ? cfg80211_inform_single_bss_data+0xd6e/0x2090 [ 287.983576][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 287.983600][ C1] cfg80211_inform_single_bss_data+0xec1/0x2090 [ 287.983621][ C1] ? deref_stack_reg+0x17c/0x210 [ 287.983636][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 287.983663][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 287.983686][ C1] ? cfg80211_inform_bss_data+0x3b6/0x5e70 [ 287.983705][ C1] cfg80211_inform_bss_data+0x3ce/0x5e70 [ 287.983733][ C1] ? __pfx_validate_chain+0x10/0x10 [ 287.983759][ C1] ? __pfx_validate_chain+0x10/0x10 [ 287.983777][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 287.983797][ C1] ? mark_lock+0x9a/0x360 [ 287.983814][ C1] ? __lock_acquire+0x1384/0x2050 [ 287.983849][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 287.983872][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 287.983897][ C1] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 287.983918][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 287.983941][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 287.983966][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 287.983990][ C1] ? __pfx_lock_release+0x10/0x10 [ 287.984020][ C1] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 287.984050][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 287.984073][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 287.984099][ C1] ? mark_lock+0x9a/0x360 [ 287.984116][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.984141][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.984170][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.984196][ C1] ieee80211_iface_work+0x8a5/0xf20 [ 287.984241][ C1] cfg80211_wiphy_work+0x2db/0x490 [ 287.984273][ C1] ? process_scheduled_works+0x976/0x1850 [ 287.984297][ C1] process_scheduled_works+0xa63/0x1850 [ 287.984333][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.984361][ C1] ? assign_work+0x364/0x3d0 [ 287.984386][ C1] worker_thread+0x870/0xd30 [ 287.984415][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 287.984442][ C1] ? __kthread_parkme+0x169/0x1d0 [ 287.984469][ C1] ? __pfx_worker_thread+0x10/0x10 [ 287.984494][ C1] kthread+0x2f0/0x390 [ 287.984510][ C1] ? __pfx_worker_thread+0x10/0x10 [ 287.984533][ C1] ? __pfx_kthread+0x10/0x10 [ 287.984550][ C1] ret_from_fork+0x4b/0x80 [ 287.984576][ C1] ? __pfx_kthread+0x10/0x10 [ 287.984592][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.984622][ C1] [ 287.986065][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 288.538972][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 288.549477][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 288.559538][ T30] Call Trace: [ 288.562819][ T30] [ 288.565752][ T30] dump_stack_lvl+0x241/0x360 [ 288.570453][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.575662][ T30] ? __pfx__printk+0x10/0x10 [ 288.580253][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 288.586247][ T30] ? vscnprintf+0x5d/0x90 [ 288.590588][ T30] panic+0x349/0x880 [ 288.594490][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 288.600654][ T30] ? __pfx_panic+0x10/0x10 [ 288.605070][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 288.610448][ T30] ? __irq_work_queue_local+0x137/0x410 [ 288.616024][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 288.621401][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 288.627567][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 288.633732][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 288.639901][ T30] watchdog+0x1033/0x1040 [ 288.644280][ T30] ? watchdog+0x1ea/0x1040 [ 288.648712][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.653401][ T30] kthread+0x2f0/0x390 [ 288.657474][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.662158][ T30] ? __pfx_kthread+0x10/0x10 [ 288.666761][ T30] ret_from_fork+0x4b/0x80 [ 288.671187][ T30] ? __pfx_kthread+0x10/0x10 [ 288.675778][ T30] ret_from_fork_asm+0x1a/0x30 [ 288.680560][ T30] [ 288.683953][ T30] Kernel Offset: disabled [ 288.688288][ T30] Rebooting in 86400 seconds..