last executing test programs: 6m43.132240391s ago: executing program 32 (id=64): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(0x3) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 6m29.25683271s ago: executing program 33 (id=349): r0 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x1) unshare(0x22020400) readahead(r0, 0xa8, 0xfffffffffffffffa) 6m16.400860947s ago: executing program 34 (id=614): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) dup2(r0, r1) 5m42.747561485s ago: executing program 35 (id=1368): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x1) pselect6(0x40, &(0x7f0000003600)={0x8, 0x5, 0x338, 0x8, 0x3ff, 0x3, 0x7f, 0xdd}, 0x0, 0x0, 0x0, 0x0) 5m23.869274518s ago: executing program 36 (id=1797): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x40000004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r0}) 4m13.345871946s ago: executing program 37 (id=3553): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) futex_waitv(&(0x7f0000000ac0)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000800)={0x77359400}, 0x1) 4m12.196249579s ago: executing program 38 (id=3588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000001c08000340000000b9080001400000000a08000240080000020900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 4m10.61112372s ago: executing program 39 (id=3614): openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 4m5.287096996s ago: executing program 40 (id=3667): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0xfd}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}]}, 0x34}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x70, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}}]}]}, 0x70}}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0xc000) 3m53.062586776s ago: executing program 41 (id=3852): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x530, 0x300, 0x400, 0x0, 0x0, 0xd0, 0x4e8, 0x4e8, 0xd0, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x703}}}, {{@ipv6={@mcast1, @local, [], [0xff000000], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x2c}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f00000001c0)) 3m51.930352409s ago: executing program 42 (id=3865): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 3m40.353294891s ago: executing program 43 (id=4062): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="7f", 0x1}], 0x1}}], 0x2, 0x20040044) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x8000}, 0x8) 3m32.413408205s ago: executing program 44 (id=4212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r1, &(0x7f00000003c0)={0x0, 0xc, 0x1, @thr={0x0, 0x0}}) close_range(r0, 0xffffffffffffffff, 0x0) 3m11.053361364s ago: executing program 45 (id=4622): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 2m52.246825472s ago: executing program 46 (id=4884): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010105}]}, &(0x7f0000000180)=0x10) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x1}, 0x8) 2m6.026185781s ago: executing program 47 (id=5546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 1m58.900322214s ago: executing program 48 (id=5630): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x8, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x8}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1m56.354521357s ago: executing program 49 (id=5643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r2], 0x38}}, 0x0) 1m49.580481039s ago: executing program 50 (id=5759): r0 = fsopen(&(0x7f00000006c0)='mqueue\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) mount_setattr(r1, &(0x7f0000000000)='.\x00', 0x1800, &(0x7f0000000080)={0x5, 0x7f, 0x80000}, 0x20) 1m37.235461934s ago: executing program 51 (id=5973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)) 1m30.732822269s ago: executing program 52 (id=6086): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0x0, 0x7ffc000a}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x4, 0x7ffffffe}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1m28.341344226s ago: executing program 53 (id=6126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009402"]) 1m19.486857656s ago: executing program 54 (id=6225): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2084) writev(r0, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) write$P9_RAUTH(r0, 0x0, 0xb00) 1m15.013078949s ago: executing program 0 (id=6283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m14.739651486s ago: executing program 0 (id=6289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}}, 0x0) 1m14.43458146s ago: executing program 55 (id=6289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}}, 0x0) 1m1.4601435s ago: executing program 6 (id=6499): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1m0.611971301s ago: executing program 6 (id=6520): openat$audio(0xffffffffffffff9c, &(0x7f0000000600), 0x80002, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x3, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m0.494505839s ago: executing program 6 (id=6525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000100)={0x5, 0x0, [{0x2, 0x0, 0x0, 0x5}, {0x76b48f433226e54c, 0x5, 0xe, 0x0, 0xcdd, 0x2, 0x10000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0xc, 0x0, 0xa, 0x7fe}, {0x0, 0x1b5d, 0x6, 0x1, 0x7, 0x5, 0xfffffff9}]}) 1m0.268129097s ago: executing program 6 (id=6530): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000002100), 0x210011, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) 1m0.159000192s ago: executing program 6 (id=6534): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 59.794846902s ago: executing program 6 (id=6542): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 59.593831875s ago: executing program 56 (id=6542): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 52.219959078s ago: executing program 8 (id=6670): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x13}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) 52.075184649s ago: executing program 8 (id=6674): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x2, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 51.91210319s ago: executing program 8 (id=6679): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) getsockname$inet6(r0, 0x0, 0x0) 51.835228821s ago: executing program 8 (id=6680): mkdir(&(0x7f0000000080)='./file0\x00', 0x9) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28) 51.695517253s ago: executing program 8 (id=6685): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f0000001200)={0x100208400, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) 51.300115401s ago: executing program 8 (id=6689): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="801ba2180a000200aaaaaaaaaa0c"], 0x28}}, 0x0) 51.077285556s ago: executing program 57 (id=6689): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="801ba2180a000200aaaaaaaaaa0c"], 0x28}}, 0x0) 49.689669724s ago: executing program 1 (id=6711): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f00000000c0)=""/44, 0x2c) 49.584834568s ago: executing program 1 (id=6712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000400000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808009f40000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c00ad06000000000000000714000000110001"], 0xdc}}, 0x40000) close(r0) 49.439815662s ago: executing program 1 (id=6715): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0x8, 0xe, 0x7, 0x0, 0xa, 0x10, 0x8, 0x8, 0x0, 0x9, 0x5, 0x5, 0x5, 0xa, 0xb, 0x4], 0x0, [0x1, 0x800, 0x3, 0x2, 0x81, 0x7, 0x0, 0x0, 0x5, 0xc, 0x800, 0x6d, 0xb, 0x9a, 0x5, 0xc5], [0x5, 0x1, 0x9, 0x3, 0x5, 0xe6, 0x24, 0x5, 0x4, 0xa3, 0x4, 0x9, 0x0, 0x22c6, 0x203, 0x6]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x4}}]}]}, 0xac}}, 0x82) 49.339759142s ago: executing program 1 (id=6716): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380), 0x2000401, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) utime(&(0x7f0000000040)='./file0\x00', 0x0) 49.196614566s ago: executing program 1 (id=6717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x235272c27981e554}, 0x0) 48.891920128s ago: executing program 1 (id=6723): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0) 48.702070145s ago: executing program 58 (id=6723): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0) 35.775919921s ago: executing program 7 (id=6903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460005003400c4000000080026"], 0x50}}, 0x0) 35.628040591s ago: executing program 7 (id=6907): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x18, 0x1, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) 35.520659264s ago: executing program 7 (id=6910): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000001240)=""/4096) 32.377052969s ago: executing program 7 (id=6974): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000002, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0xb, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0xfffffffffffffff8, 0x1, 0x201, 0x6dc6, 0x8, 0x5, 0x7, 0xe000, 0x601d824b499141fd, 0xcd35, 0xee01, 0x0, 0x1008, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 32.267653879s ago: executing program 7 (id=6978): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 32.029527178s ago: executing program 7 (id=6984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x6}, {0x1, 0x7}]}]}]}]}, 0x2c}}, 0x0) 31.728137224s ago: executing program 59 (id=6984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x6}, {0x1, 0x7}]}]}]}]}, 0x2c}}, 0x0) 27.96082132s ago: executing program 2 (id=7057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 27.76605453s ago: executing program 2 (id=7060): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)={'b', ' *:* ', 'm\x00'}, 0x8) 27.44772088s ago: executing program 2 (id=7063): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x606, 0x4) 27.174090167s ago: executing program 2 (id=7066): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x8, 0x2000000, 0x238d117e6f1c1b5b, 0x401, 0x7, 0x0, 0x0, 0x0, 0x0, 0x140}}, 0x50) 26.862462295s ago: executing program 9 (id=7070): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 26.803663367s ago: executing program 9 (id=7072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x40020) 26.713674817s ago: executing program 9 (id=7073): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) 26.540079536s ago: executing program 9 (id=7076): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)={0x7, 0x7}) 26.264076469s ago: executing program 2 (id=7078): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x239, &(0x7f0000000100)={0x0, 0x730a, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x2, 0x0, {0x1}}) io_uring_enter(r1, 0x2def, 0x4000, 0x4, 0x0, 0x0) 26.011642955s ago: executing program 2 (id=7082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 25.874839827s ago: executing program 60 (id=7082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 25.672292672s ago: executing program 9 (id=7087): r0 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000380)='binfmt_misc\x00', 0x0) 25.133867492s ago: executing program 9 (id=7099): r0 = msgget(0x1, 0x2b0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) msgsnd(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2100000080000000c0d8fd"], 0x8, 0x0) 24.923926361s ago: executing program 61 (id=7099): r0 = msgget(0x1, 0x2b0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) msgsnd(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2100000080000000c0d8fd"], 0x8, 0x0) 20.436131511s ago: executing program 4 (id=7151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 20.383172719s ago: executing program 4 (id=7152): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x4008af10, &(0x7f0000000280)) 20.180134261s ago: executing program 4 (id=7155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000008010040"]) 20.09950927s ago: executing program 4 (id=7157): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x401, 0x0, 0x11}, 0x18) 20.038899402s ago: executing program 4 (id=7159): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 19.823272602s ago: executing program 4 (id=7160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 19.497684817s ago: executing program 62 (id=7160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 17.281478991s ago: executing program 3 (id=7187): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1, 0x8, 0x6b7, 0x3c, 0x5c7, 0x4}, 0x14) 17.223309038s ago: executing program 0 (id=7083): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) 17.136578487s ago: executing program 3 (id=7188): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) close_range(r0, 0xffffffffffffffff, 0x0) 16.975335098s ago: executing program 3 (id=7189): r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x100, 0x4, 0x285}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x8, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 16.974513823s ago: executing program 0 (id=7199): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) 16.874781808s ago: executing program 3 (id=7190): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 16.873686702s ago: executing program 0 (id=7201): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000f5000040"]) 16.721799423s ago: executing program 0 (id=7191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007b000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800080088a8"], 0x4c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 16.711894064s ago: executing program 3 (id=7192): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="acb63cc5", 0x4}, {0x0}], 0x2) 15.885729132s ago: executing program 5 (id=7202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f00000005c0)) 15.754090172s ago: executing program 5 (id=7203): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x224) utime(&(0x7f0000000040)='./file0\x00', 0x0) 15.668041458s ago: executing program 5 (id=7204): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000002c0)="fffb1709476c651a87aa903900f8ffffff", 0x11}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x200002d0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 15.658107763s ago: executing program 5 (id=7205): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x4050, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000680)={0x0, 0x5}, 0x8) 15.603277844s ago: executing program 5 (id=7206): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000f5000040"]) 15.494277246s ago: executing program 5 (id=7207): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) 15.192332149s ago: executing program 3 (id=7208): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@deltaction={0x114, 0x31, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb39}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4b4}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.088220946s ago: executing program 63 (id=7191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007b000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800080088a8"], 0x4c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 49.060238ms ago: executing program 64 (id=7207): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) 0s ago: executing program 65 (id=7208): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@deltaction={0x114, 0x31, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb39}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4b4}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): ss (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.410080][T25237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.422010][T25237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.448437][T25237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.469930][T25237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.477335][T25528] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 388.515394][T25237] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.557494][T25237] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.569597][T25237] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.612260][T25237] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.847214][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.850977][T25367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.882090][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.903686][T25561] ip6tnl0: entered promiscuous mode [ 388.914380][T25560] ip6tnl0: left promiscuous mode [ 388.960737][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.975275][T25367] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.982518][ T5833] Bluetooth: hci2: command tx timeout [ 388.991092][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.024541][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.031685][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.047135][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.054326][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.138432][ T5833] Bluetooth: hci1: command tx timeout [ 389.160092][T25367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.186192][T25367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.261382][T25367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.337133][T25367] veth0_vlan: entered promiscuous mode [ 389.348658][ T5937] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 389.367089][T25367] veth1_vlan: entered promiscuous mode [ 389.429066][T25367] veth0_macvtap: entered promiscuous mode [ 389.452883][T25367] veth1_macvtap: entered promiscuous mode [ 389.493421][T25367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.504347][T25367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.517353][T25367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.539703][ T5937] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 389.541534][T25367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.548964][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.567189][T25367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.600771][T25367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.601273][ T5937] usb 7-1: config 0 descriptor?? [ 389.621504][T25367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.634103][T25367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.645310][ T5937] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 389.654801][T25367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.665871][T25367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.676115][T25367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.687155][T25367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.700284][T25367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.717318][T25367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.728768][T25367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.770678][T25367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.796144][T25367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.826559][T25367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.847348][ T5937] usb 7-1: Detected FT232B [ 389.855605][T25367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.877955][T25367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.915757][T25367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.935651][T25367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.953284][T25367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.964551][T25367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.977214][T25367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.998556][T25367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.018905][T25367] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.028806][T25367] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.037756][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 390.046101][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 390.053302][ T5937] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 390.060361][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 390.069084][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 390.076534][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 390.084014][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 390.091628][T25367] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.101963][ T5937] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 390.112352][T25367] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.254215][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.271618][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.314975][ T46] usb 7-1: USB disconnect, device number 17 [ 390.326401][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 390.339475][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.347323][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.361156][ T46] ftdi_sio 7-1:0.0: device disconnected [ 390.434238][T25629] chnl_net:caif_netlink_parms(): no params data found [ 390.550292][T25629] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.567617][T25629] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.577078][T25629] bridge_slave_0: entered allmulticast mode [ 390.584413][T25629] bridge_slave_0: entered promiscuous mode [ 390.592658][T25629] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.600675][T25629] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.608628][T25629] bridge_slave_1: entered allmulticast mode [ 390.615884][T25629] bridge_slave_1: entered promiscuous mode [ 390.665103][T25629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.680770][ T1105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.697138][T25629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.731357][T25629] team0: Port device team_slave_0 added [ 390.740367][ T9] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 390.749728][T25629] team0: Port device team_slave_1 added [ 390.776855][ T1105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.797488][T25629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.829945][T25629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.894055][T25629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.908593][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 390.922132][ T9] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 390.941514][ T1105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.947958][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.957282][T25629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.968047][T25629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.001996][T25629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.012793][ T9] usb 9-1: Product: syz [ 391.027530][ T9] usb 9-1: Manufacturer: syz [ 391.051463][ T9] usb 9-1: SerialNumber: syz [ 391.060871][ T54] Bluetooth: hci2: command tx timeout [ 391.067119][ T9] usb 9-1: config 0 descriptor?? [ 391.088813][ T9] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 391.138915][T25629] hsr_slave_0: entered promiscuous mode [ 391.145213][T25629] hsr_slave_1: entered promiscuous mode [ 391.169393][T25629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.176982][T25629] Cannot create hsr debugfs directory [ 391.220902][ T54] Bluetooth: hci1: command tx timeout [ 391.284630][T25705] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6308'. [ 391.322952][ T1105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.568248][ T1105] bridge_slave_1: left allmulticast mode [ 391.584805][ T1105] bridge_slave_1: left promiscuous mode [ 391.615170][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.626109][ T1105] bridge_slave_0: left allmulticast mode [ 391.631826][ T1105] bridge_slave_0: left promiscuous mode [ 391.637561][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.644778][ T5882] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 391.667822][ T5937] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 391.791678][ T1105] bond0 (unregistering): left promiscuous mode [ 391.797930][ T1105] bond_slave_0: left promiscuous mode [ 391.804275][ T1105] bond_slave_1: left promiscuous mode [ 391.811029][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.817887][ T5882] usb 6-1: Using ep0 maxpacket: 8 [ 391.826280][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.826686][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.846096][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.848265][ T1105] bond0 (unregistering): Released all slaves [ 391.856076][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.875164][ T5882] usb 6-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 391.884601][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.893104][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.907769][ T5937] usb 7-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 391.910331][ T9] ssu100 9-1:0.0: probe with driver ssu100 failed with error -71 [ 391.917602][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.935038][ T5882] usb 6-1: config 0 descriptor?? [ 391.944844][ T5937] usb 7-1: config 0 descriptor?? [ 391.952235][ T9] usb 9-1: USB disconnect, device number 37 [ 392.097899][ T54] Bluetooth: hci3: command tx timeout [ 392.167287][T25629] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 392.183808][ T1105] batadv0: left promiscuous mode [ 392.192474][ T1105] hsr_slave_0: left promiscuous mode [ 392.201565][ T1105] hsr_slave_1: left promiscuous mode [ 392.207273][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.218306][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.226035][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.233547][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.243068][ T1105] veth0_macvtap: left promiscuous mode [ 392.248916][ T1105] veth1_vlan: left promiscuous mode [ 392.254185][ T1105] veth0_vlan: left promiscuous mode [ 392.345600][ T5882] hid (null): invalid report_count 59648 [ 392.355731][ T5882] wacom 0003:056A:00B5.0080: invalid report_count 59648 [ 392.363304][ T5882] wacom 0003:056A:00B5.0080: item 0 2 1 9 parsing failed [ 392.373004][ T5882] wacom 0003:056A:00B5.0080: parse failed [ 392.379961][ T5937] kye 0003:0458:5017.0081: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 392.390922][ T5882] wacom 0003:056A:00B5.0080: probe with driver wacom failed with error -22 [ 392.401362][ T5937] kye 0003:0458:5017.0081: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.6-1/input0 [ 392.413436][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 392.420384][ T5937] kye 0003:0458:5017.0081: tablet-enabling feature report not found [ 392.429047][ T5937] kye 0003:0458:5017.0081: tablet enabling failed [ 392.443899][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 392.567515][ T9] usb 6-1: USB disconnect, device number 58 [ 392.580751][ T5882] usb 7-1: USB disconnect, device number 18 [ 392.599644][T25629] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 392.626727][T25629] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 392.643165][T25629] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 392.734203][T25629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.761610][T25760] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6323'. [ 392.768052][T25629] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.791650][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.798781][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.825117][T25760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6323'. [ 392.848035][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.855224][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.025358][T25629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.094969][T25629] veth0_vlan: entered promiscuous mode [ 393.112508][T25629] veth1_vlan: entered promiscuous mode [ 393.185853][T25629] veth0_macvtap: entered promiscuous mode [ 393.216300][T25629] veth1_macvtap: entered promiscuous mode [ 393.261681][T25629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.294357][T25629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.304431][ T54] Bluetooth: hci1: command tx timeout [ 393.336481][T25629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.358448][T25629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.371014][T25629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.394052][T25629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.423172][T25629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.458227][T25629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.477491][T25629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.498027][T25793] netlink: 'syz.5.6330': attribute type 18 has an invalid length. [ 393.499950][T25629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.538393][T25629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.551809][T25629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.572560][T25629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.604999][T25629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.634660][T25629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.657017][T25629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.680428][T25629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.701730][T25629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.714373][T25629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.735521][T25629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.761603][T25629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.783758][T25629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.803195][T25629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.823239][T25629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.848938][T25629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.872799][T25629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.892869][T25793] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.901724][T25793] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.910529][T25793] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.919291][T25793] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.970265][T25629] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.980226][T25629] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.995194][T25629] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.005858][T25629] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.140746][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.165431][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.178645][ T54] Bluetooth: hci3: command tx timeout [ 394.236110][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.282816][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.596454][T25884] netlink: 165 bytes leftover after parsing attributes in process `syz.8.6351'. [ 394.854923][T25909] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6356'. [ 395.292838][T25954] netlink: 260 bytes leftover after parsing attributes in process `syz.6.6367'. [ 395.519661][T25977] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6375'. [ 395.647915][ T46] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 395.805438][ T46] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 395.827829][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.842051][ T46] usb 6-1: Product: syz [ 395.856547][ T46] usb 6-1: Manufacturer: syz [ 395.865095][ T46] usb 6-1: SerialNumber: syz [ 395.888316][ T46] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 395.904487][ T5880] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 396.137840][ T5882] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 396.258616][ T54] Bluetooth: hci3: command tx timeout [ 396.298048][ T5882] usb 7-1: Using ep0 maxpacket: 16 [ 396.319457][ T5882] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.337448][ T5882] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.350773][ T5882] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.365824][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.390809][ T5882] usb 7-1: Product: syz [ 396.395064][ T5882] usb 7-1: Manufacturer: syz [ 396.416929][ T5882] usb 7-1: SerialNumber: syz [ 396.617828][ T5828] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 396.667417][T26057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.686204][T26057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.750130][T26073] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6391'. [ 396.789243][ T5828] usb 9-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 396.814762][ T5828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.837003][ T5882] usb 7-1: 0:2 : does not exist [ 396.845109][ T5828] usb 9-1: config 0 descriptor?? [ 396.978877][ T5880] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 396.998432][ T5880] ath9k_htc: Failed to initialize the device [ 397.031709][T26095] misc userio: Begin command sent, but we're already running [ 397.035547][ T5880] usb 6-1: ath9k_htc: USB layer deinitialized [ 397.047459][ T5937] usb 6-1: USB disconnect, device number 59 [ 397.250794][ T5882] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 397.273496][ T5882] usb 7-1: USB disconnect, device number 19 [ 397.667403][ T5828] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 397.701120][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.717689][ T5828] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 397.736695][ T5828] asix 9-1:0.0: probe with driver asix failed with error -71 [ 397.776681][ T5828] usb 9-1: USB disconnect, device number 38 [ 398.340678][ T54] Bluetooth: hci3: command tx timeout [ 398.813132][T26242] tun0: tun_chr_ioctl cmd 2147767506 [ 399.304418][T26282] pimreg: entered allmulticast mode [ 399.335166][T26282] dvmrp5: entered allmulticast mode [ 399.358776][T26282] pimreg: left allmulticast mode [ 399.377052][T26282] dvmrp5: left allmulticast mode [ 399.864877][T26316] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6446'. [ 399.903301][T26316] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6446'. [ 400.034435][T26329] netlink: 'syz.5.6453': attribute type 29 has an invalid length. [ 400.067631][T26329] netlink: 'syz.5.6453': attribute type 29 has an invalid length. [ 400.086125][T26329] netlink: 'syz.5.6453': attribute type 29 has an invalid length. [ 400.597849][ T5828] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 400.689841][T14943] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 400.759500][ T5828] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.794984][ T5828] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.822720][ T5828] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.849220][T14943] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 400.849607][ T5828] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.873655][T14943] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.904004][ T5828] usb 9-1: Product: syz [ 400.914169][ T5828] usb 9-1: Manufacturer: syz [ 400.919907][T14943] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 400.935465][ T5828] usb 9-1: SerialNumber: syz [ 400.945763][T14943] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.965894][T14943] usb 10-1: config 0 descriptor?? [ 401.151009][ T5828] usb 9-1: 0:2 : does not exist [ 401.161170][ T5828] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 401.188344][ T5828] usb 9-1: USB disconnect, device number 39 [ 401.390317][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.411577][T14943] isku 0003:1E7D:319C.0082: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.9-1/input0 [ 401.817031][ T5878] usb 10-1: USB disconnect, device number 38 [ 401.920209][T26477] sctp: [Deprecated]: syz.8.6484 (pid 26477) Use of int in maxseg socket option. [ 401.920209][T26477] Use struct sctp_assoc_value instead [ 402.583737][T26524] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6496'. [ 402.870327][T26547] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.881746][T26547] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 403.534838][T26589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.332006][T26655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.332279][ T3018] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.414461][ T3018] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.505194][ T3018] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.574598][ T3018] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.748074][ T3018] bridge_slave_1: left allmulticast mode [ 404.756017][ T3018] bridge_slave_1: left promiscuous mode [ 404.785199][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.793242][T26680] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6549'. [ 404.820695][ T3018] bridge_slave_0: left allmulticast mode [ 404.826637][ T3018] bridge_slave_0: left promiscuous mode [ 404.866308][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.948485][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 404.956556][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 404.965007][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 404.973453][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 404.981932][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 404.989871][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 405.043750][T26682] netlink: 'syz.8.6548': attribute type 2 has an invalid length. [ 405.073206][T26682] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6548'. [ 405.233554][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.245677][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.256893][ T3018] bond0 (unregistering): Released all slaves [ 405.409210][ T5878] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 405.411732][ T5880] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 405.430073][T26730] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6560'. [ 405.445303][T26730] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6560'. [ 405.497267][T26700] chnl_net:caif_netlink_parms(): no params data found [ 405.555214][ T3018] hsr_slave_0: left promiscuous mode [ 405.567801][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 405.575178][ T3018] hsr_slave_1: left promiscuous mode [ 405.584510][ T5878] usb 6-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 405.588506][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.622010][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.628480][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.632984][ T5880] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 405.660554][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.673945][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.681415][ T5880] usb 10-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 405.703117][ T3018] veth1_macvtap: left promiscuous mode [ 405.708009][ T5878] usb 6-1: Product: syz [ 405.713091][ T5878] usb 6-1: Manufacturer: syz [ 405.717733][ T5880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.718882][ T5880] usb 10-1: config 0 descriptor?? [ 405.735529][ T3018] veth0_macvtap: left promiscuous mode [ 405.745068][ T3018] veth1_vlan: left promiscuous mode [ 405.758564][ T3018] veth0_vlan: left promiscuous mode [ 405.766205][ T5880] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 405.832375][ T5878] usb 6-1: SerialNumber: syz [ 405.865260][ T5878] usb 6-1: config 0 descriptor?? [ 405.973800][ T5937] usb 10-1: USB disconnect, device number 39 [ 406.146102][T26700] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.157972][T26700] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.165631][T26700] bridge_slave_0: entered allmulticast mode [ 406.173184][T26700] bridge_slave_0: entered promiscuous mode [ 406.182205][T26700] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.189806][T26700] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.207483][T26700] bridge_slave_1: entered allmulticast mode [ 406.214651][T26700] bridge_slave_1: entered promiscuous mode [ 406.252401][T26700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.265348][T26700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.323874][T26700] team0: Port device team_slave_0 added [ 406.345867][T26700] team0: Port device team_slave_1 added [ 406.382229][T26700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.398244][T26700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.454245][T26700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.471227][ T3018] IPVS: stop unused estimator thread 0... [ 406.478152][T26700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.485111][T26700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.553770][T26700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.684586][T26700] hsr_slave_0: entered promiscuous mode [ 406.692357][T26700] hsr_slave_1: entered promiscuous mode [ 406.708476][T26700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.726552][ T5878] usb 6-1: reset high-speed USB device number 60 using dummy_hcd [ 406.735112][T26700] Cannot create hsr debugfs directory [ 406.744725][ T5878] usb 6-1: device reset changed ep0 maxpacket size! [ 406.764881][ T5878] usb 6-1: USB disconnect, device number 60 [ 406.920853][ T5878] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 407.058622][ T5833] Bluetooth: hci4: command tx timeout [ 407.087770][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 407.101566][ T5878] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 407.114114][ T5878] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 407.149936][ T5878] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 407.164584][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.184631][T26700] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 407.196361][ T5878] usb 6-1: Product: syz [ 407.201103][ T5878] usb 6-1: Manufacturer: syz [ 407.206026][ T5878] usb 6-1: SerialNumber: syz [ 407.221107][T26700] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 407.235659][T26700] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 407.260651][T26700] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 407.437960][ T5878] cdc_ncm 6-1:1.0: bind() failure [ 407.453809][ T5878] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 407.465720][T26700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.478571][ T5878] cdc_ncm 6-1:1.1: bind() failure [ 407.494497][ T5878] usb 6-1: USB disconnect, device number 61 [ 407.510699][T26700] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.551071][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.558220][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.597898][ T5880] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 407.607594][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.615007][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.717386][T26700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.759756][ T5880] usb 9-1: Using ep0 maxpacket: 32 [ 407.759791][T26700] veth0_vlan: entered promiscuous mode [ 407.781700][ T5880] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 407.801624][ T5880] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 407.802312][T26700] veth1_vlan: entered promiscuous mode [ 407.829716][ T5880] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 407.841265][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.856206][T26700] veth0_macvtap: entered promiscuous mode [ 407.856395][ T5880] usb 9-1: Product: syz [ 407.867192][ T5880] usb 9-1: Manufacturer: syz [ 407.884548][T26700] veth1_macvtap: entered promiscuous mode [ 407.895905][ T5880] usb 9-1: SerialNumber: syz [ 407.927574][T26700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.949756][T26700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.975972][T26700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.998210][T26700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.018778][T26700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.050486][T26700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.063493][T26700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.087814][T26700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.113143][T26700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.117805][ T5880] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 408.124221][T26700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.174788][T26700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.210589][T26700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.233003][T26700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.247586][T26700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.271813][T26700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.282241][T26700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.316895][T26700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.330297][ T5880] usb 9-1: USB disconnect, device number 40 [ 408.349609][ T5880] usblp0: removed [ 408.358283][T26700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.398954][T26700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.418878][T26700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.460002][T26700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.481524][T26700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.512849][T26700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.538224][T26700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.799377][T26700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.812494][T26700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.830924][T26700] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.854973][T26700] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.867395][T26700] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.877572][T26700] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.004383][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.048138][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.062529][T26915] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6603'. [ 409.121094][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.138733][ T5833] Bluetooth: hci4: command tx timeout [ 409.146118][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.545767][T26952] xt_CT: No such helper "netbios-ns" [ 410.050865][T26994] syz_tun: entered allmulticast mode [ 410.088464][T26994] dvmrp0: entered allmulticast mode [ 410.124418][T26994] dvmrp0: left allmulticast mode [ 410.154639][T26994] syz_tun: left allmulticast mode [ 411.218767][ T5833] Bluetooth: hci4: command tx timeout [ 411.862565][ T29] audit: type=1800 audit(1737609743.648:219): pid=27128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6666" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 412.048205][T27143] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6671'. [ 412.118837][T27143] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.126671][T27143] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.518527][T27182] netem: incorrect gi model size [ 412.523620][T27182] netem: change failed [ 412.872499][ T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.987253][ T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.081296][ T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.253612][ T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.297847][ T5833] Bluetooth: hci4: command tx timeout [ 413.453675][ T11] bridge_slave_1: left allmulticast mode [ 413.471402][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.473782][ T11] bridge_slave_1: left promiscuous mode [ 413.484815][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 413.496466][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 413.514475][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 413.516127][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.535185][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 413.546142][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 413.650494][ T11] bridge_slave_0: left allmulticast mode [ 413.656520][ T11] bridge_slave_0: left promiscuous mode [ 413.679212][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.980814][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.002791][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.016977][ T11] bond0 (unregistering): Released all slaves [ 414.205053][T27261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6705'. [ 414.287589][T27226] chnl_net:caif_netlink_parms(): no params data found [ 414.365281][T27269] vivid-003: disconnect [ 414.399558][T27269] vivid-003: reconnect [ 414.499723][T27226] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.507297][T27226] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.516941][T27226] bridge_slave_0: entered allmulticast mode [ 414.524599][T27226] bridge_slave_0: entered promiscuous mode [ 414.547855][T27226] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.565510][T27226] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.574303][T27226] bridge_slave_1: entered allmulticast mode [ 414.598870][T27226] bridge_slave_1: entered promiscuous mode [ 414.702721][T27226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.736208][T27226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.821418][T27226] team0: Port device team_slave_0 added [ 414.841433][T27226] team0: Port device team_slave_1 added [ 414.856597][ T11] hsr_slave_0: left promiscuous mode [ 414.866639][ T11] hsr_slave_1: left promiscuous mode [ 414.874223][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.884687][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.895628][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.904157][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.927008][ T11] veth1_macvtap: left promiscuous mode [ 414.940944][ T11] veth0_macvtap: left promiscuous mode [ 414.964558][ T11] veth1_vlan: left promiscuous mode [ 414.970000][ T11] veth0_vlan: left promiscuous mode [ 415.298190][ T11] team0 (unregistering): Port device team_slave_1 removed [ 415.331182][ T11] team0 (unregistering): Port device team_slave_0 removed [ 415.503412][T27226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.513236][T27226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.539365][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.555337][T27226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.592586][T27226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.601218][T27226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.627130][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.630657][ T54] Bluetooth: hci2: command tx timeout [ 415.678837][T27226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.696066][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.711554][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.719517][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.727405][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.738275][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6725'. [ 415.757808][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 415.766411][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 415.824983][T27226] hsr_slave_0: entered promiscuous mode [ 415.855314][T27226] hsr_slave_1: entered promiscuous mode [ 415.863909][T27226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.873081][T27226] Cannot create hsr debugfs directory [ 416.321604][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.372690][T27345] chnl_net:caif_netlink_parms(): no params data found [ 416.455715][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.552725][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.597137][T27345] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.606225][T27345] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.629065][T27345] bridge_slave_0: entered allmulticast mode [ 416.639289][T27345] bridge_slave_0: entered promiscuous mode [ 416.652030][T27345] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.667271][T27345] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.683321][T27345] bridge_slave_1: entered allmulticast mode [ 416.700673][T27345] bridge_slave_1: entered promiscuous mode [ 416.741054][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.768438][T27345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.791150][T27345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.813442][T27226] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.834467][T27226] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.845869][T27345] team0: Port device team_slave_0 added [ 416.853369][ T9] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 416.864533][T27345] team0: Port device team_slave_1 added [ 416.872053][T27226] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.893041][T27226] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 416.914120][T27345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.924384][T27345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.951144][T27345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.002568][T27345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.018334][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 417.020154][T27345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.054838][T27345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.068019][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.079935][ T11] bridge_slave_1: left allmulticast mode [ 417.085599][ T11] bridge_slave_1: left promiscuous mode [ 417.091447][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.100331][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.114686][ T11] bridge_slave_0: left allmulticast mode [ 417.116370][ T9] usb 10-1: New USB device found, idVendor=0408, idProduct=3001, bcdDevice= 0.00 [ 417.123888][ T11] bridge_slave_0: left promiscuous mode [ 417.135819][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.146680][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.170697][ T9] usb 10-1: config 0 descriptor?? [ 417.284380][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.296324][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.312239][ T11] bond0 (unregistering): Released all slaves [ 417.353782][T27345] hsr_slave_0: entered promiscuous mode [ 417.362800][T27345] hsr_slave_1: entered promiscuous mode [ 417.375931][T27345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.387539][T27345] Cannot create hsr debugfs directory [ 417.487371][T27226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.535973][ T11] hsr_slave_0: left promiscuous mode [ 417.546186][ T11] hsr_slave_1: left promiscuous mode [ 417.552628][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.563098][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.571515][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.581290][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.594898][ T11] veth1_macvtap: left promiscuous mode [ 417.604226][ T11] veth0_macvtap: left promiscuous mode [ 417.605283][ T9] hid-generic 0003:0408:3001.0083: hidraw0: USB HID v0.00 Device [HID 0408:3001] on usb-dummy_hcd.9-1/input0 [ 417.611523][ T11] veth1_vlan: left promiscuous mode [ 417.632078][ T11] veth0_vlan: left promiscuous mode [ 417.699701][ T54] Bluetooth: hci2: command tx timeout [ 417.844797][ T9] usb 10-1: USB disconnect, device number 40 [ 417.859056][ T54] Bluetooth: hci4: command tx timeout [ 417.892129][ T11] team0 (unregistering): Port device team_slave_1 removed [ 417.905369][ T11] team0 (unregistering): Port device team_slave_0 removed [ 418.035785][T27226] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.088035][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.095455][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.109140][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.116562][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.184485][T27226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.228471][T27226] veth0_vlan: entered promiscuous mode [ 418.241215][T27226] veth1_vlan: entered promiscuous mode [ 418.294950][T27226] veth0_macvtap: entered promiscuous mode [ 418.355176][T27226] veth1_macvtap: entered promiscuous mode [ 418.390698][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.402929][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.417500][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.429657][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.444423][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.455519][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.467423][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.489720][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.510687][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.523623][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.546825][T27226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.567172][T27475] vlan2: entered promiscuous mode [ 418.574389][T27475] macvtap0: entered promiscuous mode [ 418.585859][T27475] team0: Device vlan2 is up. Set it down before adding it as a team port [ 418.595642][T27475] macvtap0: left promiscuous mode [ 418.616215][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.650427][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.663957][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.675050][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.687050][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.702668][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.725832][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.742805][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.753238][T27226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.766231][T27226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.790990][T27226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.810790][T27226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.827899][T27226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.848215][T27226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.867792][T27226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.953268][T27345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 418.996787][T27345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 419.028557][T27345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 419.082357][T27345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 419.148043][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.163715][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.180818][T27517] loop4: detected capacity change from 0 to 8 [ 419.219667][T27517] Dev loop4: unable to read RDB block 8 [ 419.225569][T27517] loop4: unable to read partition table [ 419.232796][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.251984][T27517] loop4: partition table beyond EOD, truncated [ 419.267898][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.276411][T27517] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 419.364105][T27345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.434970][T27345] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.474661][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.482058][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.538790][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.545941][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.562170][T27534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6753'. [ 419.639916][T27345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.735785][T27345] veth0_vlan: entered promiscuous mode [ 419.776491][T27345] veth1_vlan: entered promiscuous mode [ 419.782795][ T54] Bluetooth: hci2: command tx timeout [ 419.836387][T27345] veth0_macvtap: entered promiscuous mode [ 419.848746][T27345] veth1_macvtap: entered promiscuous mode [ 419.866510][T27345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.903899][T27345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.937035][T27345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.947994][ T54] Bluetooth: hci4: command tx timeout [ 419.986970][T27345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.997344][T27345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.018498][T27345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.037897][T27345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.050314][T27345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.080876][T27345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.117828][T27345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.154463][T27345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.177948][T27345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.218800][T27345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.260138][T27345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.307994][T27345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.346497][T27345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.387372][T27345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.417595][T27345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.438491][T27345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.467859][T27345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.493891][T27345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.524748][T27345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.535583][T27345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.545896][T27345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.556694][T27345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.568287][T27345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.579291][T27345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.594577][T27345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.613896][T27345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.647999][T27345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.786786][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.824771][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.868054][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.880375][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.099595][T27601] bond0: entered promiscuous mode [ 421.105003][T27601] bond_slave_0: entered promiscuous mode [ 421.155088][T27601] bond_slave_1: entered promiscuous mode [ 421.163973][T27601] batadv0: entered promiscuous mode [ 421.185632][T27601] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 421.509391][ T9] IPVS: starting estimator thread 0... [ 421.597898][T27629] IPVS: using max 52 ests per chain, 124800 per kthread [ 421.867850][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 421.868350][ T54] Bluetooth: hci2: command tx timeout [ 422.019163][ T54] Bluetooth: hci4: command tx timeout [ 422.039344][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.068144][ T9] usb 4-1: config 0 has no interface number 0 [ 422.089107][ T9] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.140396][ T9] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.165849][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 422.175857][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.187213][ T9] usb 4-1: config 0 descriptor?? [ 422.643250][ T9] uclogic 0003:28BD:0905.0084: Interface probing failed: -22 [ 422.653381][T27689] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6793'. [ 422.660426][ T9] uclogic 0003:28BD:0905.0084: interface is invalid, ignoring [ 422.782041][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 422.792017][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 422.792043][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 422.792056][ T54] Workqueue: hci3 hci_rx_work [ 422.792084][ T54] Call Trace: [ 422.792092][ T54] [ 422.792099][ T54] dump_stack_lvl+0x241/0x360 [ 422.792126][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.792150][ T54] ? __pfx__printk+0x10/0x10 [ 422.792172][ T54] ? __kmalloc_cache_noprof+0x243/0x390 [ 422.792196][ T54] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 422.792218][ T54] sysfs_create_dir_ns+0x2ce/0x3a0 [ 422.792239][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 422.792261][ T54] kobject_add_internal+0x435/0x8d0 [ 422.792284][ T54] kobject_add+0x152/0x220 [ 422.792302][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 422.792323][ T54] ? device_add+0x3e7/0xbf0 [ 422.792343][ T54] ? __pfx_kobject_add+0x10/0x10 [ 422.792362][ T54] ? _raw_spin_unlock+0x28/0x50 [ 422.792395][ T54] ? get_device_parent+0x165/0x410 [ 422.792418][ T54] device_add+0x4e5/0xbf0 [ 422.792455][ T54] hci_conn_add_sysfs+0xe8/0x200 [ 422.792477][ T54] le_conn_complete_evt+0xc9f/0x12e0 [ 422.792507][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 422.792528][ T54] ? __mutex_unlock_slowpath+0x227/0x800 [ 422.792549][ T54] ? skb_pull_data+0x112/0x230 [ 422.792574][ T54] hci_le_conn_complete_evt+0x18c/0x420 [ 422.792601][ T54] hci_event_packet+0xa55/0x1540 [ 422.792624][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 422.792649][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 422.792668][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 422.792687][ T54] ? rcu_is_watching+0x15/0xb0 [ 422.792712][ T54] ? hci_send_to_monitor+0xd8/0x7f0 [ 422.792736][ T54] ? kcov_remote_start+0x97/0x7d0 [ 422.792759][ T54] hci_rx_work+0x3f3/0xdb0 [ 422.792782][ T54] ? process_scheduled_works+0x976/0x1840 [ 422.792800][ T54] process_scheduled_works+0xa66/0x1840 [ 422.792830][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 422.792849][ T54] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 422.792872][ T54] ? assign_work+0x364/0x3d0 [ 422.792891][ T54] worker_thread+0x870/0xd30 [ 422.792914][ T54] ? __kthread_parkme+0x169/0x1d0 [ 422.792934][ T54] ? __pfx_worker_thread+0x10/0x10 [ 422.792952][ T54] kthread+0x7a9/0x920 [ 422.792971][ T54] ? __pfx_kthread+0x10/0x10 [ 422.792991][ T54] ? __pfx_worker_thread+0x10/0x10 [ 422.793008][ T54] ? __pfx_kthread+0x10/0x10 [ 422.793031][ T54] ? __pfx_kthread+0x10/0x10 [ 422.793052][ T54] ? __pfx_kthread+0x10/0x10 [ 422.793071][ T54] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.793093][ T54] ? lockdep_hardirqs_on+0x99/0x150 [ 422.793116][ T54] ? __pfx_kthread+0x10/0x10 [ 422.793136][ T54] ret_from_fork+0x4b/0x80 [ 422.793152][ T54] ? __pfx_kthread+0x10/0x10 [ 422.793171][ T54] ret_from_fork_asm+0x1a/0x30 [ 422.793192][ T54] [ 422.793237][ T54] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 422.893563][ T9] usb 4-1: USB disconnect, device number 31 [ 422.896677][ T54] Bluetooth: hci3: failed to register connection device [ 423.029950][T27705] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x9 [ 423.450124][ T119] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 423.573049][T27733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6802'. [ 423.615630][ T119] usb 10-1: Using ep0 maxpacket: 16 [ 423.637461][ T119] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 423.670523][ T119] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.707974][ T119] usb 10-1: Product: syz [ 423.713905][ T119] usb 10-1: Manufacturer: syz [ 423.728008][ T119] usb 10-1: SerialNumber: syz [ 423.740033][ T119] usb 10-1: config 0 descriptor?? [ 423.756583][ T119] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 424.003856][ T5879] usb 10-1: USB disconnect, device number 41 [ 424.094898][T27760] netlink: 'syz.3.6811': attribute type 29 has an invalid length. [ 424.108098][ T5833] Bluetooth: hci4: command tx timeout [ 424.112848][T27760] netlink: 'syz.3.6811': attribute type 29 has an invalid length. [ 424.185221][T27760] netlink: 'syz.3.6811': attribute type 29 has an invalid length. [ 424.814880][T27805] syz.2.6824: attempt to access beyond end of device [ 424.814880][T27805] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 424.970692][ T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 424.989681][ T5920] usb 7-1: [UEAGLE-ATM] firmware is not available [ 425.024509][ T29] audit: type=1326 audit(1737609756.808:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27820 comm="syz.2.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc118cd29 code=0x7ffc0000 [ 425.086055][ T29] audit: type=1326 audit(1737609756.838:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27820 comm="syz.2.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc118cd29 code=0x7ffc0000 [ 425.157842][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 425.174786][ T9] usb 6-1: config index 0 descriptor too short (expected 1051, got 27) [ 425.197429][ T29] audit: type=1326 audit(1737609756.838:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27820 comm="syz.2.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fc118b690 code=0x7ffc0000 [ 425.219948][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.227772][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 425.260272][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 114, changing to 10 [ 425.278141][ T29] audit: type=1326 audit(1737609756.838:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27820 comm="syz.2.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc118cd29 code=0x7ffc0000 [ 425.307354][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 25963, setting to 1024 [ 425.323478][ T29] audit: type=1326 audit(1737609756.838:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27820 comm="syz.2.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc118cd29 code=0x7ffc0000 [ 425.371001][ T9] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 425.380780][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.406189][ T29] audit: type=1326 audit(1737609756.838:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27820 comm="syz.2.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f1fc118cd29 code=0x7ffc0000 [ 425.429558][ T9] usb 6-1: Product: syz [ 425.433975][ T9] usb 6-1: Manufacturer: syz [ 425.439171][ T9] usb 6-1: SerialNumber: syz [ 425.463009][ T9] usb 6-1: config 0 descriptor?? [ 425.475307][T27795] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 425.497874][ T29] audit: type=1326 audit(1737609756.838:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27820 comm="syz.2.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc118cd29 code=0x7ffc0000 [ 425.520432][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.745201][T14943] usb 6-1: USB disconnect, device number 62 [ 426.161954][T27899] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6854'. [ 426.197088][T27899] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 426.218689][T27899] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 426.254106][T27902] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 426.388727][T27912] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6858'. [ 426.476881][T27919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6860'. [ 426.523228][T27923] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6861'. [ 426.698653][ T5920] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 426.745636][T27939] dvmrp1: entered allmulticast mode [ 426.864057][ T5920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.899384][ T5920] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.910123][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6871'. [ 426.930848][ T5920] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 426.941687][T27955] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6872'. [ 426.965888][ T5920] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.985232][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.007919][ T5920] usb 3-1: Product: syz [ 427.012123][ T5920] usb 3-1: Manufacturer: syz [ 427.027217][ T5920] usb 3-1: SerialNumber: syz [ 427.631569][T28003] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6884'. [ 427.723626][T28010] input: syz1 as /devices/virtual/input/input80 [ 427.856931][ T5920] cdc_mbim 3-1:1.0: bind() failure [ 427.873932][T28017] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.881089][T28017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.889715][ T5920] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 427.909127][ T5920] cdc_ncm 3-1:1.1: bind() failure [ 427.928002][ T5920] usb 3-1: USB disconnect, device number 52 [ 428.023219][T28028] netlink: 'syz.9.6892': attribute type 7 has an invalid length. [ 428.411239][T28058] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6903'. [ 428.531820][T28066] veth1_macvtap: left promiscuous mode [ 428.629855][T28074] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6908'. [ 428.988330][T28103] netlink: 'syz.5.6917': attribute type 29 has an invalid length. [ 429.027200][T28103] netlink: 'syz.5.6917': attribute type 29 has an invalid length. [ 429.080615][T28103] netlink: 'syz.5.6917': attribute type 29 has an invalid length. [ 429.349069][ T5920] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 429.520697][ T5920] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.537489][ T5920] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.549189][ T5920] usb 10-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 429.570245][ T5920] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.611053][ T5920] usb 10-1: config 0 descriptor?? [ 430.042075][ T5920] lenovo 0003:17EF:6067.0085: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.9-1/input0 [ 430.262042][ T9] usb 10-1: USB disconnect, device number 42 [ 431.215092][T28264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.340934][T28278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6965'. [ 431.381970][ T5877] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 431.538621][ T5877] usb 6-1: Using ep0 maxpacket: 16 [ 431.548934][ T5877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.561407][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.590988][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 431.649883][ T5877] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 431.676004][ T5877] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.715354][ T5877] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 431.741439][ T5877] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 431.771912][ T5877] usb 6-1: Manufacturer: syz [ 431.796571][ T5877] usb 6-1: config 0 descriptor?? [ 432.117067][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.118934][ T5877] rc_core: IR keymap rc-hauppauge not found [ 432.157875][ T5920] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 432.182173][ T5877] Registered IR keymap rc-empty [ 432.195880][ T5877] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.238003][ T5877] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.278765][ T5877] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 432.299747][ T5877] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input81 [ 432.299943][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.325288][ T5877] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.346244][ T5920] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 432.357944][ T5877] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.377828][ T5877] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.377967][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.397883][ T5877] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.426501][ T5877] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.426716][ T5920] usb 3-1: config 0 descriptor?? [ 432.442395][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.473145][ T5920] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 432.490681][ T5877] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.523556][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.537968][ T5877] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.578172][ T5877] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.600377][ T5877] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.648037][ T5877] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 432.699047][ T5877] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 432.724006][ T5877] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 432.752827][ T12] bridge_slave_1: left allmulticast mode [ 432.791274][ T12] bridge_slave_1: left promiscuous mode [ 432.794839][ T5877] usb 6-1: USB disconnect, device number 63 [ 432.812144][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.880097][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 432.890465][ T12] bridge_slave_0: left allmulticast mode [ 432.896333][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 432.907109][ T12] bridge_slave_0: left promiscuous mode [ 432.913564][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 432.925071][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.940448][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 432.950564][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 432.968306][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 433.022542][T28356] tap0: tun_chr_ioctl cmd 1074025672 [ 433.045065][T28356] tap0: ignored: set checksum enabled [ 433.242530][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.255397][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.266799][ T12] bond0 (unregistering): Released all slaves [ 433.277612][ T5920] gspca_sunplus: reg_w_riv err -71 [ 433.282882][ T5920] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 433.306464][ T5920] usb 3-1: USB disconnect, device number 53 [ 433.526532][T28363] chnl_net:caif_netlink_parms(): no params data found [ 433.720812][ T12] hsr_slave_0: left promiscuous mode [ 433.742963][ T12] hsr_slave_1: left promiscuous mode [ 433.757043][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.767875][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.798689][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.807590][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.828588][ T12] veth1_macvtap: left promiscuous mode [ 433.834155][ T12] veth0_macvtap: left promiscuous mode [ 433.846378][ T12] veth1_vlan: left promiscuous mode [ 433.865287][ T12] veth0_vlan: left promiscuous mode [ 434.252200][ T12] team0 (unregistering): Port device team_slave_1 removed [ 434.265865][T28448] random: crng reseeded on system resumption [ 434.278831][ T12] team0 (unregistering): Port device team_slave_0 removed [ 434.289512][ C1] sd 0:0:1:0: [sda] tag#5351 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 434.299930][ C1] sd 0:0:1:0: [sda] tag#5351 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 434.394133][T28363] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.403972][T28363] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.417656][T28363] bridge_slave_0: entered allmulticast mode [ 434.425697][T28363] bridge_slave_0: entered promiscuous mode [ 434.435548][T28444] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 434.461385][T28363] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.471258][T28363] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.478941][T28363] bridge_slave_1: entered allmulticast mode [ 434.485843][T28363] bridge_slave_1: entered promiscuous mode [ 434.546698][T28363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.563403][T28363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.598735][T28363] team0: Port device team_slave_0 added [ 434.622938][T28363] team0: Port device team_slave_1 added [ 434.654875][T28363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.662094][T28363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.687977][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.729099][T28363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.752614][T28363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.761132][T28363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.787051][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.822272][T28363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.913233][T28363] hsr_slave_0: entered promiscuous mode [ 434.921085][T28363] hsr_slave_1: entered promiscuous mode [ 434.927055][T28363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.935566][T28363] Cannot create hsr debugfs directory [ 435.058710][ T5833] Bluetooth: hci3: command tx timeout [ 435.681527][T28363] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 435.707355][T28363] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 435.718359][T28363] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 435.736885][T28363] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 435.820511][T28363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.852602][T28363] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.878051][ T46] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 435.889418][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.896554][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.927632][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.934843][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.002505][T28363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.046712][T28363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.067482][ T46] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 436.095848][T28363] veth0_vlan: entered promiscuous mode [ 436.101634][ T46] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 436.116806][ T46] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 436.131462][T28363] veth1_vlan: entered promiscuous mode [ 436.139349][ T46] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 436.151728][ T46] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 436.170590][ T46] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 436.177074][T28363] veth0_macvtap: entered promiscuous mode [ 436.185808][ T46] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 436.196621][ T46] usb 10-1: Product: syz [ 436.214901][ T46] usb 10-1: Manufacturer: syz [ 436.229171][T28363] veth1_macvtap: entered promiscuous mode [ 436.245025][ T46] cdc_wdm 10-1:1.0: skipping garbage [ 436.252532][ T46] cdc_wdm 10-1:1.0: skipping garbage [ 436.261780][T28363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.276018][T28363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.286342][ T46] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 436.287181][T28363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.296055][ T46] cdc_wdm 10-1:1.0: Unknown control protocol [ 436.310237][T28363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.334694][T28363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.345407][T28363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.356532][T28363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.357874][ T5877] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 436.367203][T28363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.386909][T28363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.397608][T28363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.408084][T28363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.419238][T28363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.430462][T28363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.440120][T28363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.456051][T28363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.462448][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 436.469412][T28363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.472575][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 436.484204][T28363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.490044][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 436.499545][T28363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.505748][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 436.506479][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 436.516721][T28363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.522294][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 436.523383][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 436.533970][T28363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.538945][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 436.539423][ T46] usb 10-1: USB disconnect, device number 43 [ 436.545352][T28363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.551920][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 436.551940][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 436.551953][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 436.611215][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 436.616516][T28363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.627598][T28363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.637995][T28363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.648849][T28363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.655829][ T5877] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 436.662207][T28363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.683492][ T5877] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 436.697054][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 436.698483][T28363] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.715258][ T5877] usb 4-1: Product: syz [ 436.729992][ T5877] usb 4-1: Manufacturer: syz [ 436.731868][T28363] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.734670][ T5877] usb 4-1: SerialNumber: syz [ 436.761630][ T5877] usb 4-1: config 0 descriptor?? [ 436.767076][T28551] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 436.768608][T28363] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.807083][T28363] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.881737][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.895288][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.926279][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.944573][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.053778][ T5877] usb 4-1: USB disconnect, device number 32 [ 437.127437][T28584] team0: Device gtp0 is of different type [ 437.138406][ T5833] Bluetooth: hci3: command tx timeout [ 437.223534][T28587] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7069'. [ 437.506479][T28606] random: crng reseeded on system resumption [ 437.538889][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 437.951109][T28643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7079'. [ 437.960778][T28643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7079'. [ 438.026951][T28650] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7080'. [ 438.094435][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.184380][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.243234][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.336035][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.526613][ T35] bridge_slave_1: left allmulticast mode [ 438.543066][ T35] bridge_slave_1: left promiscuous mode [ 438.571422][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.601399][ T35] bridge_slave_0: left allmulticast mode [ 438.607140][ T35] bridge_slave_0: left promiscuous mode [ 438.637596][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.657430][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.665796][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.673688][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.681379][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.688852][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 438.696087][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.097354][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.134051][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.159250][ T35] bond0 (unregistering): Released all slaves [ 439.180538][T28697] netlink: 'syz.3.7095': attribute type 1 has an invalid length. [ 439.202823][T28697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7095'. [ 439.218314][ T5833] Bluetooth: hci3: command tx timeout [ 439.585677][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 439.593171][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 439.600577][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 439.608237][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 439.617390][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 439.625450][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 439.748444][ T35] hsr_slave_0: left promiscuous mode [ 439.767747][ T35] hsr_slave_1: left promiscuous mode [ 439.773575][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.806109][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.815076][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.823215][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.836739][ T35] veth1_macvtap: left promiscuous mode [ 439.851593][ T35] veth0_macvtap: left promiscuous mode [ 439.867482][ T35] veth1_vlan: left promiscuous mode [ 439.873105][ T35] veth0_vlan: left promiscuous mode [ 440.022683][T28692] chnl_net:caif_netlink_parms(): no params data found [ 440.146273][ T35] team0 (unregistering): Port device team_slave_1 removed [ 440.161971][ T35] team0 (unregistering): Port device team_slave_0 removed [ 440.217937][ T46] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 440.340509][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.347013][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.388860][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 440.405741][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.417348][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 440.439528][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 440.465175][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.479705][T28692] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.482255][ T46] usb 4-1: config 0 descriptor?? [ 440.498245][T28692] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.511422][T28692] bridge_slave_0: entered allmulticast mode [ 440.533536][T28692] bridge_slave_0: entered promiscuous mode [ 440.546679][T28692] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.571944][T28692] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.588092][T28692] bridge_slave_1: entered allmulticast mode [ 440.599143][T28692] bridge_slave_1: entered promiscuous mode [ 440.666008][T28692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.694818][T28692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.737855][ T5833] Bluetooth: hci2: command tx timeout [ 440.754682][T28692] team0: Port device team_slave_0 added [ 440.802849][T28692] team0: Port device team_slave_1 added [ 440.847630][T28692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.876373][T28692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.906942][T28692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.919591][ T46] logitech 0003:046D:C29C.0086: unknown main item tag 0x0 [ 440.929782][ T46] logitech 0003:046D:C29C.0086: hidraw0: USB HID vff.fe Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 440.940430][T28743] chnl_net:caif_netlink_parms(): no params data found [ 440.964552][T28692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.978123][T28692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.012002][T28692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.121768][T28692] hsr_slave_0: entered promiscuous mode [ 441.138490][T28692] hsr_slave_1: entered promiscuous mode [ 441.152752][T28692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.178469][T28692] Cannot create hsr debugfs directory [ 441.188849][ T35] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.300509][ T5833] Bluetooth: hci3: command tx timeout [ 441.310772][ T35] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.332109][ T46] logitech 0003:046D:C29C.0086: no inputs found [ 441.384240][ T46] usb 4-1: USB disconnect, device number 33 [ 441.407610][T28743] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.456808][T28743] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.491619][T28743] bridge_slave_0: entered allmulticast mode [ 441.508834][T28743] bridge_slave_0: entered promiscuous mode [ 441.530492][T28743] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.537615][T28743] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.550909][T28743] bridge_slave_1: entered allmulticast mode [ 441.558539][T28743] bridge_slave_1: entered promiscuous mode [ 441.614340][T28815] ipvlan2: entered promiscuous mode [ 441.621455][T28815] bridge0: port 3(ipvlan2) entered blocking state [ 441.628349][T28815] bridge0: port 3(ipvlan2) entered disabled state [ 441.634967][T28815] ipvlan2: entered allmulticast mode [ 441.640672][T28815] bridge0: entered allmulticast mode [ 441.646601][T28815] ipvlan2: left allmulticast mode [ 441.651721][T28815] bridge0: left allmulticast mode [ 441.662509][ T35] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.676025][T28743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.692982][T28743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.702462][ T5833] Bluetooth: hci0: command tx timeout [ 441.745228][T28743] team0: Port device team_slave_0 added [ 441.774523][T28743] team0: Port device team_slave_1 added [ 441.799663][ T35] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.835421][T28743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.846700][T28743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.872624][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.887035][T28743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.920177][T28743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.944070][T28743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.974999][T28743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.042280][T28831] sch_tbf: burst 6238 is lower than device lo mtu (65550) ! [ 442.083570][T28743] hsr_slave_0: entered promiscuous mode [ 442.090571][T28743] hsr_slave_1: entered promiscuous mode [ 442.097352][T28743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.125268][T28743] Cannot create hsr debugfs directory [ 442.432411][ T35] bridge_slave_1: left allmulticast mode [ 442.448265][ T35] bridge_slave_1: left promiscuous mode [ 442.458194][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.483540][ T35] bridge_slave_0: left allmulticast mode [ 442.489430][ T35] bridge_slave_0: left promiscuous mode [ 442.496041][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.579383][ T5879] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 442.622281][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.632573][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.643028][ T35] bond0 (unregistering): Released all slaves [ 442.655296][T28861] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 442.747849][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 442.759364][ T5879] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 442.766823][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.770339][T28692] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 442.815034][ T5879] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.832736][ T5833] Bluetooth: hci2: command tx timeout [ 442.857071][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.879406][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.892340][ T5879] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 442.894034][T28692] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 442.908413][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.921406][ T5879] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.933800][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.947663][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.968769][ T5879] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 442.976773][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.980399][T28692] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 442.992591][ T5879] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.017641][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.033544][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.048044][ T5879] usb 4-1: string descriptor 0 read error: -22 [ 443.056768][ T5879] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 443.066801][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.081237][T28692] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 443.091930][ T5879] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 443.198420][T28883] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7145'. [ 443.227754][T28883] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7145'. [ 443.269739][T28692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.320074][T28692] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.370940][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.378154][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.386484][ T29] audit: type=1326 audit(1737609775.148:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871a38cd29 code=0x7ffc0000 [ 443.389696][ T5880] usb 4-1: USB disconnect, device number 34 [ 443.441933][ T29] audit: type=1326 audit(1737609775.148:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871a38cd29 code=0x7ffc0000 [ 443.465923][ T29] audit: type=1326 audit(1737609775.148:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f871a38cd29 code=0x7ffc0000 [ 443.491046][ T29] audit: type=1326 audit(1737609775.148:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871a38cd29 code=0x7ffc0000 [ 443.522226][ T35] hsr_slave_0: left promiscuous mode [ 443.531510][ T29] audit: type=1326 audit(1737609775.148:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871a38cd29 code=0x7ffc0000 [ 443.553853][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.561523][ T35] hsr_slave_1: left promiscuous mode [ 443.567256][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.577250][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.594280][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.601989][ T29] audit: type=1326 audit(1737609775.148:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f871a38cd29 code=0x7ffc0000 [ 443.618107][T28850] adutux: No device or device unplugged -19 [ 443.625156][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.637476][ T29] audit: type=1326 audit(1737609775.148:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871a38cd29 code=0x7ffc0000 [ 443.675958][ T29] audit: type=1326 audit(1737609775.148:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871a38cd29 code=0x7ffc0000 [ 443.699484][ T35] veth1_macvtap: left promiscuous mode [ 443.705030][ T35] veth0_macvtap: left promiscuous mode [ 443.710688][ T35] veth1_vlan: left promiscuous mode [ 443.715972][ T35] veth0_vlan: left promiscuous mode [ 443.722506][ T29] audit: type=1326 audit(1737609775.148:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f871a38cd29 code=0x7ffc0000 [ 443.778064][ T5833] Bluetooth: hci0: command tx timeout [ 443.796943][ T29] audit: type=1326 audit(1737609775.148:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.5.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871a38cd29 code=0x7ffc0000 [ 443.819332][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.863602][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.870743][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.081948][ T35] team0 (unregistering): Port device team_slave_1 removed [ 444.100132][ T35] team0 (unregistering): Port device team_slave_0 removed [ 444.180519][T28743] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 444.198856][T28743] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 444.217659][T28743] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 444.233014][T28743] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 444.296286][T28692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.330728][T28743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.376898][T28743] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.404562][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.411710][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.456948][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.464083][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.500755][T28692] veth0_vlan: entered promiscuous mode [ 444.556514][T28692] veth1_vlan: entered promiscuous mode [ 444.629584][T28692] veth0_macvtap: entered promiscuous mode [ 444.645508][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.671669][T28692] veth1_macvtap: entered promiscuous mode [ 444.691100][T28743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.753975][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.779778][T28942] Failed to get privilege flags for destination (handle=0x2:0x0) [ 444.798696][T28692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.820836][T28692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.843241][T28692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.866941][T28692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.889275][T28692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.898007][ T5833] Bluetooth: hci2: command tx timeout [ 444.944908][T28692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.963651][T28692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.976526][T28692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.988909][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 444.995963][T28692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.996117][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 445.014323][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 445.021286][T28692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.024773][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 445.034507][T28692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.048966][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 445.056861][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 445.066285][T28955] bridge_slave_0: default FDB implementation only supports local addresses [ 445.122068][T28692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.165835][T28692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.176077][T28692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.187300][T28692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.197243][T28692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.209053][T28692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.222194][T28692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.232849][T28692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.251214][T28692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.266308][T28692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.281209][T28692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.293821][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.344059][T28692] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.360919][T28692] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.379821][T28692] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.428224][T28692] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.616692][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.650841][T28743] veth0_vlan: entered promiscuous mode [ 445.687263][T28743] veth1_vlan: entered promiscuous mode [ 445.711167][T28743] veth0_macvtap: entered promiscuous mode [ 445.857967][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.858219][ T54] Bluetooth: hci0: command tx timeout [ 445.865803][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.886156][T28743] veth1_macvtap: entered promiscuous mode [ 445.905743][T28743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.920442][T28743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.933804][T28743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.944648][T28743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.967814][T28743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.989192][T28743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.007853][T28743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.027898][T28743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.057875][T28743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.068531][T28743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.079180][T28743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.089925][T28743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.101083][T28743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.168956][T28743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.196254][T28743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.211528][T28743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.228702][T28743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.248783][T28743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.271504][T28743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.294076][T28743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.310499][T28743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.320662][T28743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.331320][T28743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.341293][T28743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.352042][T28743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.362948][T28743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.378539][T28961] chnl_net:caif_netlink_parms(): no params data found [ 446.423978][T28743] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.439967][T28743] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.458082][T28743] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.466879][T28743] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.479983][ T35] bridge_slave_1: left allmulticast mode [ 446.486373][ T35] bridge_slave_1: left promiscuous mode [ 446.493121][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.503957][ T35] bridge_slave_0: left allmulticast mode [ 446.509889][ T35] bridge_slave_0: left promiscuous mode [ 446.515661][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.559514][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.593236][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.797458][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.817635][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.832912][ T35] bond0 (unregistering): Released all slaves [ 446.966211][T28961] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.978678][ T54] Bluetooth: hci2: command tx timeout [ 446.994403][T28961] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.002714][T28961] bridge_slave_0: entered allmulticast mode [ 447.023366][T28961] bridge_slave_0: entered promiscuous mode [ 447.061549][T28961] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.075730][T28961] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.086658][T28961] bridge_slave_1: entered allmulticast mode [ 447.094079][T28961] bridge_slave_1: entered promiscuous mode [ 447.137859][ T54] Bluetooth: hci3: command tx timeout [ 447.453213][T29111] netlink: 'syz.0.7191': attribute type 8 has an invalid length. [ 447.464125][T29111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7191'. [ 447.699974][ T5920] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 447.880995][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 447.912587][ T5920] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 447.923602][ T5920] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 447.937761][ T54] Bluetooth: hci0: command tx timeout [ 447.949063][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.970654][T29113] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 447.993736][ T5920] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 448.215784][ T5920] usb 4-1: USB disconnect, device number 35 [ 449.227930][ T54] Bluetooth: hci3: command tx timeout [ 451.297958][ T54] Bluetooth: hci3: command tx timeout [ 453.377939][ T54] Bluetooth: hci3: command tx timeout [ 463.161602][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 463.168971][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 463.176873][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 463.184610][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 463.192102][ T5833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 463.199421][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 464.264842][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 464.275963][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 464.283351][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 464.290376][T29241] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 464.291097][T29241] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 464.300431][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 464.306364][T29241] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 464.315864][ T5830] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 464.320133][T29241] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 464.325991][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 464.333311][T29241] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 464.347393][T29241] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 465.217853][T29241] Bluetooth: hci5: command tx timeout [ 466.417873][ T5833] Bluetooth: hci6: command tx timeout [ 466.423502][T29241] Bluetooth: hci7: command tx timeout [ 467.297827][T29241] Bluetooth: hci5: command tx timeout [ 468.498174][T29241] Bluetooth: hci7: command tx timeout [ 468.498175][ T5833] Bluetooth: hci6: command tx timeout [ 469.377898][ T5833] Bluetooth: hci5: command tx timeout [ 470.577863][ T5833] Bluetooth: hci7: command tx timeout [ 470.578531][T29241] Bluetooth: hci6: command tx timeout [ 471.457911][T29241] Bluetooth: hci5: command tx timeout [ 472.657920][T29241] Bluetooth: hci6: command tx timeout [ 472.667790][T29241] Bluetooth: hci7: command tx timeout [ 499.746727][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 499.754038][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 499.764575][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 499.772414][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 499.779993][ T5833] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 499.787248][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 501.780569][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.786893][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.857882][T29241] Bluetooth: hci8: command tx timeout [ 503.937800][T29241] Bluetooth: hci8: command tx timeout [ 505.212574][ T5833] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 505.220188][ T5833] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 505.227517][ T5833] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 505.235129][ T5833] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 505.243643][ T5833] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 505.251614][ T5833] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 506.017815][T29241] Bluetooth: hci8: command tx timeout [ 507.297785][ T5833] Bluetooth: hci9: command tx timeout [ 508.097796][ T5833] Bluetooth: hci8: command tx timeout [ 508.978610][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 509.377924][T29241] Bluetooth: hci9: command tx timeout [ 511.467902][T29241] Bluetooth: hci9: command tx timeout [ 513.537866][T29241] Bluetooth: hci9: command tx timeout [ 523.279310][ T5833] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 523.287511][ T5833] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 523.294894][ T5833] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 523.302730][ T5833] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 523.313791][ T5833] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 523.321125][ T5833] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 524.830145][T29241] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 524.840166][T29241] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 524.847494][T29241] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 524.851927][ T5830] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 524.862950][ T5830] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 524.865428][T29241] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 524.871089][ T5830] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 524.877998][T29241] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 524.885594][ T5830] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 524.892163][T29241] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 524.899059][ T5830] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 524.917127][ T5830] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 525.377847][ T54] Bluetooth: hci10: command tx timeout [ 526.977917][ T5830] Bluetooth: hci11: command tx timeout [ 526.980340][ T54] Bluetooth: hci12: command tx timeout [ 527.457843][ T54] Bluetooth: hci10: command tx timeout [ 529.057847][ T54] Bluetooth: hci12: command tx timeout [ 529.067839][ T54] Bluetooth: hci11: command tx timeout [ 529.537807][ T54] Bluetooth: hci10: command tx timeout [ 531.137807][ T54] Bluetooth: hci11: command tx timeout [ 531.137899][ T5830] Bluetooth: hci12: command tx timeout [ 531.627773][ T5830] Bluetooth: hci10: command tx timeout [ 533.217853][ T5830] Bluetooth: hci12: command tx timeout [ 533.217877][ T54] Bluetooth: hci11: command tx timeout [ 539.697796][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 559.860861][ T5830] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 559.869083][ T5830] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 559.876426][ T5830] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 559.884480][ T5830] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 559.892235][ T5830] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 559.899645][ T5830] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 561.937859][ T5830] Bluetooth: hci13: command tx timeout [ 563.220156][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.226524][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.017903][ T5830] Bluetooth: hci13: command tx timeout [ 565.297788][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 565.298474][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 565.867265][T29241] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 565.874758][T29241] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 565.883302][T29241] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 565.891069][T29241] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 565.898735][T29241] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 565.906078][T29241] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 566.097811][T29241] Bluetooth: hci13: command tx timeout [ 567.937843][T29241] Bluetooth: hci14: command tx timeout [ 568.177814][T29241] Bluetooth: hci13: command tx timeout [ 570.017826][ T54] Bluetooth: hci14: command tx timeout [ 570.417821][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 572.097875][T29241] Bluetooth: hci14: command tx timeout [ 574.177849][T29241] Bluetooth: hci14: command tx timeout [ 583.358495][ T54] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 583.367273][ T54] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 583.374690][ T54] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 583.384259][ T54] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 583.391837][ T54] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 583.399811][ T54] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 585.415792][ T5833] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 585.423161][ T5833] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 585.431052][ T5833] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 585.436624][T29286] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 585.438740][ T5833] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 585.449534][T29286] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 585.453802][ T5833] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 585.465092][T29286] Bluetooth: hci15: command tx timeout [ 585.467586][ T5833] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 585.473032][T29286] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 585.488044][T29286] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 585.495565][T29286] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 585.506041][T29286] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 585.777881][T29286] Bluetooth: hci5: command 0x0406 tx timeout [ 587.537868][T29241] Bluetooth: hci17: command tx timeout [ 587.538074][ T5830] Bluetooth: hci16: command tx timeout [ 587.546617][T29286] Bluetooth: hci15: command tx timeout [ 589.617858][T29241] Bluetooth: hci15: command tx timeout [ 589.617860][T29242] Bluetooth: hci17: command tx timeout [ 589.618501][T29288] Bluetooth: hci16: command tx timeout [ 590.897800][T29288] Bluetooth: hci6: command 0x0406 tx timeout [ 590.907861][ T5830] Bluetooth: hci7: command 0x0406 tx timeout [ 591.697730][T29286] Bluetooth: hci16: command tx timeout [ 591.697821][ T5830] Bluetooth: hci15: command tx timeout [ 591.707807][T29286] Bluetooth: hci17: command tx timeout [ 593.787804][T29286] Bluetooth: hci17: command tx timeout [ 593.790116][ T5830] Bluetooth: hci16: command tx timeout [ 603.537987][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 603.545608][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 603.553228][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 603.562045][ T30] task:kworker/0:0 state:D stack:19632 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 603.572822][ T30] Workqueue: events switchdev_deferred_process_work [ 603.579533][ T30] Call Trace: [ 603.582822][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 603.585760][ T30] __schedule+0x186c/0x4be0 [ 603.590326][ T30] ? try_to_wake_up+0x959/0x1470 [ 603.595294][ T30] ? schedule+0x90/0x320 [ 603.599629][ T30] ? schedule+0x90/0x320 [ 603.603889][ T30] ? __pfx___schedule+0x10/0x10 [ 603.608827][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 603.613963][ T30] ? __pfx_lock_release+0x10/0x10 [ 603.621353][ T30] ? kick_pool+0x45c/0x620 [ 603.625841][ T30] ? schedule+0x90/0x320 [ 603.642872][ T30] ? rcu_is_watching+0x15/0xb0 [ 603.649727][ T30] ? schedule+0x90/0x320 [ 603.654034][ T30] schedule+0x14b/0x320 [ 603.663859][ T30] schedule_preempt_disabled+0x13/0x30 [ 603.671163][ T30] __mutex_lock+0x817/0x1010 [ 603.675824][ T30] ? __mutex_lock+0x602/0x1010 [ 603.680834][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 603.687032][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 603.692161][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 603.698571][ T30] ? rcu_is_watching+0x15/0xb0 [ 603.703365][ T30] ? process_scheduled_works+0x976/0x1840 [ 603.709161][ T30] switchdev_deferred_process_work+0xe/0x20 [ 603.715075][ T30] process_scheduled_works+0xa66/0x1840 [ 603.720681][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 603.726673][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 603.732353][ T30] ? assign_work+0x364/0x3d0 [ 603.737073][ T30] worker_thread+0x870/0xd30 [ 603.741712][ T30] ? __kthread_parkme+0x169/0x1d0 [ 603.746752][ T30] ? __pfx_worker_thread+0x10/0x10 [ 603.751925][ T30] kthread+0x7a9/0x920 [ 603.756005][ T30] ? __pfx_kthread+0x10/0x10 [ 603.760642][ T30] ? __pfx_worker_thread+0x10/0x10 [ 603.765768][ T30] ? __pfx_kthread+0x10/0x10 [ 603.770869][ T30] ? __pfx_kthread+0x10/0x10 [ 603.775487][ T30] ? __pfx_kthread+0x10/0x10 [ 603.780293][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 603.785515][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 603.790772][ T30] ? __pfx_kthread+0x10/0x10 [ 603.795375][ T30] ret_from_fork+0x4b/0x80 [ 603.799882][ T30] ? __pfx_kthread+0x10/0x10 [ 603.804484][ T30] ret_from_fork_asm+0x1a/0x30 [ 603.809276][ T30] [ 603.812304][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 603.820006][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 603.827280][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 603.835980][ T30] task:kworker/u8:0 state:D stack:22096 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 603.846179][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 603.853276][ T30] Call Trace: [ 603.856554][ T30] [ 603.859608][ T30] __schedule+0x186c/0x4be0 [ 603.864278][ T30] ? schedule+0x90/0x320 [ 603.868573][ T30] ? schedule+0x90/0x320 [ 603.873319][ T30] ? __pfx___schedule+0x10/0x10 [ 603.878242][ T30] ? __pfx_lock_release+0x10/0x10 [ 603.883530][ T30] ? rcu_is_watching+0x15/0xb0 [ 603.888505][ T30] ? kthread_data+0x52/0xd0 [ 603.893017][ T30] ? schedule+0x90/0x320 [ 603.897246][ T30] ? wq_worker_sleeping+0x66/0x240 [ 603.902392][ T30] ? schedule+0x90/0x320 [ 603.906643][ T30] schedule+0x14b/0x320 [ 603.910880][ T30] schedule_preempt_disabled+0x13/0x30 [ 603.916377][ T30] __mutex_lock+0x817/0x1010 [ 603.921044][ T30] ? __mutex_lock+0x602/0x1010 [ 603.925837][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 603.932342][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 603.938071][ T30] ? rcu_is_watching+0x15/0xb0 [ 603.943295][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 603.949646][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 603.955313][ T30] ? __pfx_lock_release+0x10/0x10 [ 603.960384][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 603.966389][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 603.973309][ T30] ? rcu_is_watching+0x15/0xb0 [ 603.978718][ T30] ? process_scheduled_works+0x976/0x1840 [ 603.984466][ T30] process_scheduled_works+0xa66/0x1840 [ 603.990068][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 603.996055][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 604.001799][ T30] ? assign_work+0x364/0x3d0 [ 604.006403][ T30] worker_thread+0x870/0xd30 [ 604.011043][ T30] ? __kthread_parkme+0x169/0x1d0 [ 604.016072][ T30] ? __pfx_worker_thread+0x10/0x10 [ 604.021377][ T30] kthread+0x7a9/0x920 [ 604.025508][ T30] ? __pfx_kthread+0x10/0x10 [ 604.030153][ T30] ? __pfx_worker_thread+0x10/0x10 [ 604.035282][ T30] ? __pfx_kthread+0x10/0x10 [ 604.039926][ T30] ? __pfx_kthread+0x10/0x10 [ 604.044529][ T30] ? __pfx_kthread+0x10/0x10 [ 604.049168][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.054371][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 604.059605][ T30] ? __pfx_kthread+0x10/0x10 [ 604.064196][ T30] ret_from_fork+0x4b/0x80 [ 604.068642][ T30] ? __pfx_kthread+0x10/0x10 [ 604.073235][ T30] ret_from_fork_asm+0x1a/0x30 [ 604.078539][ T30] [ 604.081584][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 604.089255][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 604.096531][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.105370][ T30] task:kworker/u8:2 state:D stack:21488 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 604.115724][ T30] Workqueue: netns cleanup_net [ 604.120538][ T30] Call Trace: [ 604.123824][ T30] [ 604.126740][ T30] __schedule+0x186c/0x4be0 [ 604.131293][ T30] ? schedule+0x90/0x320 [ 604.135542][ T30] ? schedule+0x90/0x320 [ 604.139813][ T30] ? __pfx___schedule+0x10/0x10 [ 604.144669][ T30] ? __pfx_lock_release+0x10/0x10 [ 604.149742][ T30] ? rcu_is_watching+0x15/0xb0 [ 604.154525][ T30] ? kthread_data+0x52/0xd0 [ 604.159063][ T30] ? schedule+0x90/0x320 [ 604.163327][ T30] ? wq_worker_sleeping+0x66/0x240 [ 604.168497][ T30] ? schedule+0x90/0x320 [ 604.172745][ T30] schedule+0x14b/0x320 [ 604.176888][ T30] schedule_preempt_disabled+0x13/0x30 [ 604.183218][ T30] __mutex_lock+0x817/0x1010 [ 604.187875][ T30] ? __mutex_lock+0x602/0x1010 [ 604.192640][ T30] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 604.199185][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 604.204207][ T30] ? __pfx___might_resched+0x10/0x10 [ 604.209525][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 604.216050][ T30] ? rcu_is_watching+0x15/0xb0 [ 604.221019][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 604.227537][ T30] unregister_netdevice_many_notify+0xac2/0x2030 [ 604.233935][ T30] ? rcu_is_watching+0x15/0xb0 [ 604.238781][ T30] ? lock_release+0xbf/0xa30 [ 604.243384][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 604.249749][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 604.256519][ T30] ? rcu_is_watching+0x15/0xb0 [ 604.261382][ T30] ? __pfx_lock_release+0x10/0x10 [ 604.266418][ T30] unregister_netdevice_queue+0x303/0x370 [ 604.272205][ T30] ? __pfx_up_write+0x10/0x10 [ 604.276894][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 604.283669][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 604.289471][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 604.295193][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 604.301042][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 604.307395][ T30] ? rcu_is_watching+0x15/0xb0 [ 604.312209][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 604.317585][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 604.323182][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 604.329459][ T30] hwsim_exit_net+0x5c1/0x670 [ 604.334165][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 604.339451][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 604.345261][ T30] cleanup_net+0x812/0xd60 [ 604.349724][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 604.354663][ T30] ? rcu_is_watching+0x15/0xb0 [ 604.359473][ T30] ? process_scheduled_works+0x976/0x1840 [ 604.365195][ T30] process_scheduled_works+0xa66/0x1840 [ 604.370789][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 604.376771][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 604.382359][ T30] ? assign_work+0x364/0x3d0 [ 604.387361][ T30] worker_thread+0x870/0xd30 [ 604.392016][ T30] ? __kthread_parkme+0x169/0x1d0 [ 604.397044][ T30] ? __pfx_worker_thread+0x10/0x10 [ 604.402198][ T30] kthread+0x7a9/0x920 [ 604.406279][ T30] ? __pfx_kthread+0x10/0x10 [ 604.410928][ T30] ? __pfx_worker_thread+0x10/0x10 [ 604.416052][ T30] ? __pfx_kthread+0x10/0x10 [ 604.420687][ T30] ? __pfx_kthread+0x10/0x10 [ 604.425285][ T30] ? __pfx_kthread+0x10/0x10 [ 604.429940][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.435165][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 604.440579][ T30] ? __pfx_kthread+0x10/0x10 [ 604.445173][ T30] ret_from_fork+0x4b/0x80 [ 604.449774][ T30] ? __pfx_kthread+0x10/0x10 [ 604.454373][ T30] ret_from_fork_asm+0x1a/0x30 [ 604.459185][ T30] [ 604.462252][ T30] INFO: task kworker/u8:6:1153 blocked for more than 144 seconds. [ 604.470860][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 604.478345][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.487488][ T30] task:kworker/u8:6 state:D stack:22096 pid:1153 tgid:1153 ppid:2 flags:0x00004000 [ 604.497857][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 604.503856][ T30] Call Trace: [ 604.507123][ T30] [ 604.510102][ T30] __schedule+0x186c/0x4be0 [ 604.514617][ T30] ? schedule+0x90/0x320 [ 604.519255][ T30] ? schedule+0x90/0x320 [ 604.523509][ T30] ? __pfx___schedule+0x10/0x10 [ 604.528394][ T30] ? __pfx_lock_release+0x10/0x10 [ 604.533423][ T30] ? rcu_is_watching+0x15/0xb0 [ 604.538231][ T30] ? kthread_data+0x52/0xd0 [ 604.542734][ T30] ? schedule+0x90/0x320 [ 604.546984][ T30] ? wq_worker_sleeping+0x66/0x240 [ 604.552293][ T30] ? schedule+0x90/0x320 [ 604.556543][ T30] schedule+0x14b/0x320 [ 604.560745][ T30] schedule_preempt_disabled+0x13/0x30 [ 604.566214][ T30] __mutex_lock+0x817/0x1010 [ 604.570840][ T30] ? __mutex_lock+0x602/0x1010 [ 604.575610][ T30] ? addrconf_dad_work+0x10e/0x16a0 [ 604.580928][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 604.585986][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 604.591921][ T30] addrconf_dad_work+0x10e/0x16a0 [ 604.596955][ T30] ? __pfx_lock_release+0x10/0x10 [ 604.602040][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 604.607513][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 604.614066][ T30] ? rcu_is_watching+0x15/0xb0 [ 604.618904][ T30] ? process_scheduled_works+0x976/0x1840 [ 604.624629][ T30] process_scheduled_works+0xa66/0x1840 [ 604.630221][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 604.636206][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 604.641802][ T30] ? assign_work+0x364/0x3d0 [ 604.646401][ T30] worker_thread+0x870/0xd30 [ 604.651108][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 604.657017][ T30] ? __kthread_parkme+0x169/0x1d0 [ 604.662300][ T30] ? __pfx_worker_thread+0x10/0x10 [ 604.667430][ T30] kthread+0x7a9/0x920 [ 604.671543][ T30] ? __pfx_kthread+0x10/0x10 [ 604.676229][ T30] ? __pfx_worker_thread+0x10/0x10 [ 604.681382][ T30] ? __pfx_kthread+0x10/0x10 [ 604.685974][ T30] ? __pfx_kthread+0x10/0x10 [ 604.690595][ T30] ? __pfx_kthread+0x10/0x10 [ 604.695624][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.700896][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 604.706108][ T30] ? __pfx_kthread+0x10/0x10 [ 604.710738][ T30] ret_from_fork+0x4b/0x80 [ 604.715159][ T30] ? __pfx_kthread+0x10/0x10 [ 604.719792][ T30] ret_from_fork_asm+0x1a/0x30 [ 604.724562][ T30] [ 604.727646][ T30] INFO: task kworker/u8:7:3018 blocked for more than 144 seconds. [ 604.735453][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 604.743125][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.752178][ T30] task:kworker/u8:7 state:D stack:20944 pid:3018 tgid:3018 ppid:2 flags:0x00004000 [ 604.762467][ T30] Workqueue: events_unbound linkwatch_event [ 604.768723][ T30] Call Trace: [ 604.772031][ T30] [ 604.774971][ T30] __schedule+0x186c/0x4be0 [ 604.779545][ T30] ? schedule+0x90/0x320 [ 604.783803][ T30] ? schedule+0x90/0x320 [ 604.788090][ T30] ? __pfx___schedule+0x10/0x10 [ 604.792952][ T30] ? __pfx_lock_release+0x10/0x10 [ 604.798522][ T30] ? rcu_is_watching+0x15/0xb0 [ 604.803310][ T30] ? kthread_data+0x52/0xd0 [ 604.807843][ T30] ? schedule+0x90/0x320 [ 604.812127][ T30] ? wq_worker_sleeping+0x66/0x240 [ 604.817244][ T30] ? schedule+0x90/0x320 [ 604.821539][ T30] schedule+0x14b/0x320 [ 604.825734][ T30] schedule_preempt_disabled+0x13/0x30 [ 604.831268][ T30] __mutex_lock+0x817/0x1010 [ 604.835867][ T30] ? __mutex_lock+0x602/0x1010 [ 604.840696][ T30] ? linkwatch_event+0xe/0x60 [ 604.845392][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 604.850500][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 604.856503][ T30] ? rcu_is_watching+0x15/0xb0 [ 604.861317][ T30] ? process_scheduled_works+0x976/0x1840 [ 604.867051][ T30] linkwatch_event+0xe/0x60 [ 604.871626][ T30] process_scheduled_works+0xa66/0x1840 [ 604.877214][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 604.883445][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 604.889055][ T30] ? assign_work+0x364/0x3d0 [ 604.893664][ T30] worker_thread+0x870/0xd30 [ 604.898994][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 604.904946][ T30] ? __kthread_parkme+0x169/0x1d0 [ 604.910033][ T30] ? __pfx_worker_thread+0x10/0x10 [ 604.915151][ T30] kthread+0x7a9/0x920 [ 604.919268][ T30] ? __pfx_kthread+0x10/0x10 [ 604.923868][ T30] ? __pfx_worker_thread+0x10/0x10 [ 604.929059][ T30] ? __pfx_kthread+0x10/0x10 [ 604.933656][ T30] ? __pfx_kthread+0x10/0x10 [ 604.938326][ T30] ? __pfx_kthread+0x10/0x10 [ 604.942939][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.948193][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 604.953408][ T30] ? __pfx_kthread+0x10/0x10 [ 604.958048][ T30] ret_from_fork+0x4b/0x80 [ 604.962499][ T30] ? __pfx_kthread+0x10/0x10 [ 604.967147][ T30] ret_from_fork_asm+0x1a/0x30 [ 604.971985][ T30] [ 604.975068][ T30] INFO: task dhcpcd:5500 blocked for more than 144 seconds. [ 604.982542][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 604.990086][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.999310][ T30] task:dhcpcd state:D stack:21456 pid:5500 tgid:5500 ppid:5499 flags:0x00000002 [ 605.009572][ T30] Call Trace: [ 605.012861][ T30] [ 605.016143][ T30] __schedule+0x186c/0x4be0 [ 605.020689][ T30] ? schedule+0x90/0x320 [ 605.024948][ T30] ? schedule+0x90/0x320 [ 605.029232][ T30] ? __pfx___schedule+0x10/0x10 [ 605.034111][ T30] ? __pfx_lock_release+0x10/0x10 [ 605.039178][ T30] ? rcu_is_watching+0x15/0xb0 [ 605.043953][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 605.049905][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 605.056246][ T30] ? schedule+0x90/0x320 [ 605.060616][ T30] schedule+0x14b/0x320 [ 605.064876][ T30] schedule_preempt_disabled+0x13/0x30 [ 605.070380][ T30] __mutex_lock+0x817/0x1010 [ 605.074971][ T30] ? __mutex_lock+0x602/0x1010 [ 605.079788][ T30] ? devinet_ioctl+0x31a/0x1ac0 [ 605.084640][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 605.089708][ T30] ? apparmor_capable+0x13b/0x1b0 [ 605.094753][ T30] ? bpf_lsm_capable+0x9/0x10 [ 605.099628][ T30] devinet_ioctl+0x31a/0x1ac0 [ 605.104888][ T30] ? get_user_ifreq+0x1bb/0x200 [ 605.109911][ T30] inet_ioctl+0x3d7/0x4f0 [ 605.114253][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 605.119218][ T30] ? tomoyo_path_number_perm+0x679/0x860 [ 605.124871][ T30] ? tomoyo_path_number_perm+0x206/0x860 [ 605.130535][ T30] sock_do_ioctl+0x158/0x460 [ 605.135132][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 605.140683][ T30] ? __pfx_lock_release+0x10/0x10 [ 605.145914][ T30] sock_ioctl+0x626/0x8e0 [ 605.150299][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 605.155177][ T30] ? __sys_socket+0x20a/0x3c0 [ 605.159979][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 605.166355][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 605.172934][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 605.177860][ T30] __se_sys_ioctl+0xf5/0x170 [ 605.182454][ T30] do_syscall_64+0xf3/0x230 [ 605.186944][ T30] ? clear_bhb_loop+0x35/0x90 [ 605.191704][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.197662][ T30] RIP: 0033:0x7ff7f2b95d49 [ 605.202083][ T30] RSP: 002b:00007ffdb111c8b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.211374][ T30] RAX: ffffffffffffffda RBX: 00007ff7f2ac76c0 RCX: 00007ff7f2b95d49 [ 605.219590][ T30] RDX: 00007ffdb112caa8 RSI: 0000000000008914 RDI: 000000000000000f [ 605.227650][ T30] RBP: 00007ffdb113cc68 R08: 00007ffdb112ca68 R09: 00007ffdb112ca18 [ 605.235634][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.243680][ T30] R13: 00007ffdb112caa8 R14: 0000000000000028 R15: 0000000000008914 [ 605.251813][ T30] [ 605.254872][ T30] INFO: task syz-executor:28743 blocked for more than 145 seconds. [ 605.262842][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 605.270177][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.278936][ T30] task:syz-executor state:D stack:21360 pid:28743 tgid:28743 ppid:1 flags:0x00004004 [ 605.289733][ T30] Call Trace: [ 605.293028][ T30] [ 605.295960][ T30] __schedule+0x186c/0x4be0 [ 605.300682][ T30] ? schedule+0x90/0x320 [ 605.304949][ T30] ? schedule+0x90/0x320 [ 605.310003][ T30] ? __pfx___schedule+0x10/0x10 [ 605.314877][ T30] ? __pfx_lock_release+0x10/0x10 [ 605.319958][ T30] ? rcu_is_watching+0x15/0xb0 [ 605.324749][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 605.330706][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 605.337041][ T30] ? schedule+0x90/0x320 [ 605.341333][ T30] schedule+0x14b/0x320 [ 605.345495][ T30] schedule_preempt_disabled+0x13/0x30 [ 605.350983][ T30] __mutex_lock+0x817/0x1010 [ 605.355595][ T30] ? __mutex_lock+0x602/0x1010 [ 605.360547][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 605.366718][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 605.371776][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 605.377872][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 605.383862][ T30] wiphy_register+0x1be5/0x27b0 [ 605.388773][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 605.394004][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 605.399195][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 605.405271][ T30] ieee80211_register_hw+0x354e/0x4240 [ 605.411573][ T30] ? ieee80211_register_hw+0x15f1/0x4240 [ 605.417222][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 605.423096][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 605.428934][ T30] ? __asan_memset+0x23/0x50 [ 605.433506][ T30] ? __hrtimer_init+0x170/0x250 [ 605.438388][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 605.444140][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 605.450267][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 605.455400][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 605.461213][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 605.466772][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 605.473166][ T30] genl_rcv_msg+0xb14/0xec0 [ 605.477728][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.482766][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 605.488016][ T30] ? kasan_save_track+0x51/0x80 [ 605.492884][ T30] ? __sys_sendto+0x363/0x4c0 [ 605.497548][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 605.502640][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 605.508261][ T30] ? __pfx___might_resched+0x10/0x10 [ 605.514196][ T30] netlink_rcv_skb+0x1e3/0x430 [ 605.519047][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.524095][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 605.529425][ T30] ? lock_release+0xbf/0xa30 [ 605.534035][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 605.539574][ T30] genl_rcv+0x28/0x40 [ 605.543583][ T30] netlink_unicast+0x7f6/0x990 [ 605.548386][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 605.553669][ T30] ? __virt_addr_valid+0x45f/0x530 [ 605.558871][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 605.563902][ T30] ? __check_object_size+0x47a/0x730 [ 605.569236][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 605.574021][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.579361][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 605.584324][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.589660][ T30] __sock_sendmsg+0x221/0x270 [ 605.594344][ T30] __sys_sendto+0x363/0x4c0 [ 605.598904][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 605.603937][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 605.610301][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 605.617257][ T30] ? rcu_is_watching+0x15/0xb0 [ 605.622147][ T30] __x64_sys_sendto+0xde/0x100 [ 605.626932][ T30] do_syscall_64+0xf3/0x230 [ 605.631537][ T30] ? clear_bhb_loop+0x35/0x90 [ 605.636279][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.642234][ T30] RIP: 0033:0x7f8fa958ebbc [ 605.646660][ T30] RSP: 002b:00007f8fa98cfe80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 605.655184][ T30] RAX: ffffffffffffffda RBX: 00007f8faa2d4620 RCX: 00007f8fa958ebbc [ 605.663250][ T30] RDX: 0000000000000024 RSI: 00007f8faa2d4670 RDI: 0000000000000003 [ 605.671307][ T30] RBP: 0000000000000000 R08: 00007f8fa98cfed4 R09: 000000000000000c [ 605.679314][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 605.687269][ T30] R13: 0000000000000000 R14: 00007f8faa2d4670 R15: 0000000000000000 [ 605.695310][ T30] [ 605.698453][ T30] INFO: task syz-executor:28961 blocked for more than 145 seconds. [ 605.706362][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 605.713717][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.723076][ T30] task:syz-executor state:D stack:22128 pid:28961 tgid:28961 ppid:1 flags:0x00004004 [ 605.733326][ T30] Call Trace: [ 605.736782][ T30] [ 605.739756][ T30] __schedule+0x186c/0x4be0 [ 605.744291][ T30] ? schedule+0x90/0x320 [ 605.748585][ T30] ? schedule+0x90/0x320 [ 605.752839][ T30] ? __pfx___schedule+0x10/0x10 [ 605.757750][ T30] ? __pfx_lock_release+0x10/0x10 [ 605.762782][ T30] ? rcu_is_watching+0x15/0xb0 [ 605.767544][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 605.773511][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 605.779950][ T30] ? schedule+0x90/0x320 [ 605.784348][ T30] schedule+0x14b/0x320 [ 605.788626][ T30] schedule_preempt_disabled+0x13/0x30 [ 605.794160][ T30] __mutex_lock+0x817/0x1010 [ 605.798873][ T30] ? __mutex_lock+0x602/0x1010 [ 605.803647][ T30] ? rtnl_newlink+0xce2/0x2210 [ 605.808462][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 605.813509][ T30] ? ns_capable+0x8a/0xf0 [ 605.818617][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 605.824468][ T30] rtnl_newlink+0xce2/0x2210 [ 605.829108][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 605.834143][ T30] ? rcu_is_watching+0x15/0xb0 [ 605.838952][ T30] ? lock_release+0xbf/0xa30 [ 605.843601][ T30] ? rcu_is_watching+0x15/0xb0 [ 605.848417][ T30] ? lock_release+0xbf/0xa30 [ 605.853016][ T30] ? __pfx_lock_release+0x10/0x10 [ 605.858161][ T30] ? bpf_lsm_capable+0x9/0x10 [ 605.862869][ T30] ? security_capable+0x7e/0x2d0 [ 605.867855][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 605.872885][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 605.877886][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 605.883002][ T30] ? lock_release+0xbf/0xa30 [ 605.887647][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 605.893133][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 605.898221][ T30] ? rcu_is_watching+0x15/0xb0 [ 605.903005][ T30] ? lock_acquire+0xe3/0x550 [ 605.907766][ T30] netlink_rcv_skb+0x1e3/0x430 [ 605.912554][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 605.918077][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 605.924053][ T30] ? net_generic+0x1f/0x240 [ 605.928993][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 605.934199][ T30] netlink_unicast+0x7f6/0x990 [ 605.939133][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 605.944714][ T30] ? __virt_addr_valid+0x45f/0x530 [ 605.949911][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 605.954938][ T30] ? __check_object_size+0x47a/0x730 [ 605.960294][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 605.965092][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.970424][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 605.975406][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.980735][ T30] __sock_sendmsg+0x221/0x270 [ 605.985428][ T30] __sys_sendto+0x363/0x4c0 [ 605.990010][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 605.995052][ T30] ? xfd_validate_state+0x6e/0x150 [ 606.000213][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 606.006576][ T30] ? rcu_is_watching+0x15/0xb0 [ 606.011428][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 606.017904][ T30] ? rcu_is_watching+0x15/0xb0 [ 606.023466][ T30] __x64_sys_sendto+0xde/0x100 [ 606.028305][ T30] do_syscall_64+0xf3/0x230 [ 606.032817][ T30] ? clear_bhb_loop+0x35/0x90 [ 606.037484][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.043630][ T30] RIP: 0033:0x7f9052b8ebbc [ 606.048084][ T30] RSP: 002b:00007f9052ecf650 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 606.056721][ T30] RAX: ffffffffffffffda RBX: 00007f90538d4620 RCX: 00007f9052b8ebbc [ 606.064768][ T30] RDX: 0000000000000068 RSI: 00007f90538d4670 RDI: 0000000000000003 [ 606.072800][ T30] RBP: 0000000000000000 R08: 00007f9052ecf6a4 R09: 000000000000000c [ 606.080842][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 606.088847][ T30] R13: 0000000000000000 R14: 00007f90538d4670 R15: 0000000000000000 [ 606.096825][ T30] [ 606.100919][ T30] INFO: task syz.0.7191:29111 blocked for more than 145 seconds. [ 606.109368][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 606.116686][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 606.125872][ T30] task:syz.0.7191 state:D stack:25264 pid:29111 tgid:29110 ppid:28692 flags:0x00004004 [ 606.136111][ T30] Call Trace: [ 606.139448][ T30] [ 606.142383][ T30] __schedule+0x186c/0x4be0 [ 606.146916][ T30] ? schedule+0x90/0x320 [ 606.151214][ T30] ? schedule+0x90/0x320 [ 606.155463][ T30] ? __pfx___schedule+0x10/0x10 [ 606.160411][ T30] ? __pfx_lock_release+0x10/0x10 [ 606.165458][ T30] ? rcu_is_watching+0x15/0xb0 [ 606.170322][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 606.176235][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 606.182812][ T30] ? schedule+0x90/0x320 [ 606.187074][ T30] schedule+0x14b/0x320 [ 606.191323][ T30] schedule_preempt_disabled+0x13/0x30 [ 606.196790][ T30] __mutex_lock+0x817/0x1010 [ 606.201422][ T30] ? __mutex_lock+0x602/0x1010 [ 606.206186][ T30] ? rtnl_newlink+0xce2/0x2210 [ 606.210996][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 606.216021][ T30] ? ns_capable+0x8a/0xf0 [ 606.220531][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 606.226350][ T30] rtnl_newlink+0xce2/0x2210 [ 606.231476][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 606.236609][ T30] ? __netlink_deliver_tap+0x56b/0x7f0 [ 606.242133][ T30] ? netlink_deliver_tap+0x19d/0x1b0 [ 606.247440][ T30] ? netlink_unicast+0x7c4/0x990 [ 606.252436][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 606.257379][ T30] ? __sock_sendmsg+0x221/0x270 [ 606.262410][ T30] ? ____sys_sendmsg+0x52a/0x7e0 [ 606.267372][ T30] ? __sys_sendmsg+0x269/0x350 [ 606.272228][ T30] ? do_syscall_64+0xf3/0x230 [ 606.276922][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.283026][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 606.289440][ T30] ? rcu_is_watching+0x15/0xb0 [ 606.294216][ T30] ? rcu_is_watching+0x15/0xb0 [ 606.299038][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 606.305545][ T30] ? lock_release+0xbf/0xa30 [ 606.310174][ T30] ? nlmon_xmit+0xaf/0x100 [ 606.314603][ T30] ? rcu_is_watching+0x15/0xb0 [ 606.319394][ T30] ? rcu_is_watching+0x15/0xb0 [ 606.324162][ T30] ? lock_release+0xbf/0xa30 [ 606.328991][ T30] ? __pfx_aa_get_newest_label+0x10/0x10 [ 606.335097][ T30] ? __pfx_lock_release+0x10/0x10 [ 606.340221][ T30] ? bpf_lsm_capable+0x9/0x10 [ 606.344917][ T30] ? security_capable+0x7e/0x2d0 [ 606.349898][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 606.355032][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 606.360004][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 606.365121][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 606.370633][ T30] ? ref_tracker_free+0x643/0x7e0 [ 606.375664][ T30] netlink_rcv_skb+0x1e3/0x430 [ 606.380467][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 606.385929][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 606.391263][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 606.396474][ T30] netlink_unicast+0x7f6/0x990 [ 606.401279][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 606.406564][ T30] ? __virt_addr_valid+0x45f/0x530 [ 606.411721][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 606.416761][ T30] ? __check_object_size+0x47a/0x730 [ 606.422214][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 606.426994][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.432831][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 606.438014][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.443308][ T30] __sock_sendmsg+0x221/0x270 [ 606.448048][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 606.452818][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.458125][ T30] ? __fget_files+0x2a/0x410 [ 606.462722][ T30] ? __fget_files+0x2a/0x410 [ 606.467316][ T30] __sys_sendmsg+0x269/0x350 [ 606.471953][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 606.477075][ T30] ? __se_sys_futex+0x3f9/0x480 [ 606.481951][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 606.488348][ T30] ? rcu_is_watching+0x15/0xb0 [ 606.493123][ T30] ? rcu_is_watching+0x15/0xb0 [ 606.497932][ T30] do_syscall_64+0xf3/0x230 [ 606.502439][ T30] ? clear_bhb_loop+0x35/0x90 [ 606.507102][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.513051][ T30] RIP: 0033:0x7f89f318cd29 [ 606.517471][ T30] RSP: 002b:00007f89f3f9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.526016][ T30] RAX: ffffffffffffffda RBX: 00007f89f33a5fa0 RCX: 00007f89f318cd29 [ 606.534050][ T30] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 606.542622][ T30] RBP: 00007f89f320e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 606.550746][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.558764][ T30] R13: 0000000000000000 R14: 00007f89f33a5fa0 R15: 00007f89f34cfa28 [ 606.566764][ T30] [ 606.569853][ T30] INFO: task syz.5.7207:29215 blocked for more than 146 seconds. [ 606.577639][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 606.584925][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 606.593771][ T30] task:syz.5.7207 state:D stack:27984 pid:29215 tgid:29214 ppid:25367 flags:0x00000004 [ 606.604132][ T30] Call Trace: [ 606.607402][ T30] [ 606.610376][ T30] __schedule+0x186c/0x4be0 [ 606.614898][ T30] ? schedule+0x90/0x320 [ 606.619160][ T30] ? schedule+0x90/0x320 [ 606.623406][ T30] ? __pfx___schedule+0x10/0x10 [ 606.628304][ T30] ? __pfx_lock_release+0x10/0x10 [ 606.633330][ T30] ? rcu_is_watching+0x15/0xb0 [ 606.638646][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 606.644559][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 606.650962][ T30] ? schedule+0x90/0x320 [ 606.655222][ T30] schedule+0x14b/0x320 [ 606.659647][ T30] schedule_preempt_disabled+0x13/0x30 [ 606.665305][ T30] __mutex_lock+0x817/0x1010 [ 606.669978][ T30] ? __mutex_lock+0x602/0x1010 [ 606.674760][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 606.679902][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 606.684928][ T30] ? bpf_lsm_capable+0x9/0x10 [ 606.689665][ T30] ? security_capable+0x7e/0x2d0 [ 606.694608][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 606.699571][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 606.704691][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 606.710213][ T30] ? ref_tracker_free+0x643/0x7e0 [ 606.715275][ T30] netlink_rcv_skb+0x1e3/0x430 [ 606.720069][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 606.725541][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 606.730891][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 606.736108][ T30] netlink_unicast+0x7f6/0x990 [ 606.741484][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 606.746807][ T30] ? __virt_addr_valid+0x45f/0x530 [ 606.751973][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 606.757101][ T30] ? __check_object_size+0x47a/0x730 [ 606.762464][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 606.767245][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.772758][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 606.777758][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.783059][ T30] __sock_sendmsg+0x221/0x270 [ 606.787812][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 606.792636][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.797958][ T30] ? __fget_files+0x2a/0x410 [ 606.802560][ T30] ? __fget_files+0x2a/0x410 [ 606.807148][ T30] __sys_sendmsg+0x269/0x350 [ 606.811785][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 606.816911][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 606.823534][ T30] ? rcu_is_watching+0x15/0xb0 [ 606.828535][ T30] ? rcu_is_watching+0x15/0xb0 [ 606.833329][ T30] do_syscall_64+0xf3/0x230 [ 606.837870][ T30] ? clear_bhb_loop+0x35/0x90 [ 606.843053][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.849023][ T30] RIP: 0033:0x7f871a38cd29 [ 606.853463][ T30] RSP: 002b:00007f871b2bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.861918][ T30] RAX: ffffffffffffffda RBX: 00007f871a5a5fa0 RCX: 00007f871a38cd29 [ 606.870114][ T30] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003 [ 606.878287][ T30] RBP: 00007f871a40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 606.886263][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.894266][ T30] R13: 0000000000000000 R14: 00007f871a5a5fa0 R15: 00007f871a6cfa28 [ 606.902287][ T30] [ 606.905310][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 606.914353][ T30] INFO: task syz.3.7208:29231 blocked for more than 146 seconds. [ 606.922113][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 606.929453][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 606.938166][ T30] task:syz.3.7208 state:D stack:27504 pid:29231 tgid:29230 ppid:27345 flags:0x00000004 [ 606.948884][ T30] Call Trace: [ 606.952178][ T30] [ 606.955115][ T30] __schedule+0x186c/0x4be0 [ 606.959670][ T30] ? schedule+0x90/0x320 [ 606.963942][ T30] ? schedule+0x90/0x320 [ 606.968248][ T30] ? __pfx___schedule+0x10/0x10 [ 606.973105][ T30] ? __pfx_lock_release+0x10/0x10 [ 606.978271][ T30] ? rcu_is_watching+0x15/0xb0 [ 606.983136][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 606.989254][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 606.995596][ T30] ? schedule+0x90/0x320 [ 606.999860][ T30] schedule+0x14b/0x320 [ 607.004021][ T30] schedule_preempt_disabled+0x13/0x30 [ 607.009517][ T30] __mutex_lock+0x817/0x1010 [ 607.014113][ T30] ? __mutex_lock+0x602/0x1010 [ 607.018918][ T30] ? rtnl_dumpit+0x99/0x200 [ 607.023425][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 607.028483][ T30] ? __build_skb_around+0x245/0x3d0 [ 607.033686][ T30] ? __alloc_skb+0x28f/0x440 [ 607.038316][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 607.043259][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 607.049216][ T30] rtnl_dumpit+0x99/0x200 [ 607.053584][ T30] netlink_dump+0x64d/0xe10 [ 607.058176][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 607.063262][ T30] ? __netlink_lookup+0x780/0x890 [ 607.068353][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 607.073382][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 607.078622][ T30] ? kasan_save_track+0x51/0x80 [ 607.083475][ T30] __netlink_dump_start+0x5a2/0x790 [ 607.088717][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 607.094094][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 607.099232][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 607.104702][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 607.109965][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 607.115354][ T30] ? ref_tracker_free+0x643/0x7e0 [ 607.120450][ T30] netlink_rcv_skb+0x1e3/0x430 [ 607.125222][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 607.130887][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 607.136201][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 607.141736][ T30] netlink_unicast+0x7f6/0x990 [ 607.146572][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 607.152395][ T30] ? __virt_addr_valid+0x45f/0x530 [ 607.157542][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 607.162623][ T30] ? __check_object_size+0x47a/0x730 [ 607.167963][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 607.172741][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.178064][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 607.183013][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.188338][ T30] __sock_sendmsg+0x221/0x270 [ 607.193017][ T30] __sys_sendto+0x363/0x4c0 [ 607.197507][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 607.202572][ T30] ? do_futex+0x33b/0x560 [ 607.206908][ T30] ? xfd_validate_state+0x6e/0x150 [ 607.212196][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 607.218671][ T30] ? rcu_is_watching+0x15/0xb0 [ 607.223428][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 607.229796][ T30] ? rcu_is_watching+0x15/0xb0 [ 607.234651][ T30] __x64_sys_sendto+0xde/0x100 [ 607.239458][ T30] do_syscall_64+0xf3/0x230 [ 607.243962][ T30] ? clear_bhb_loop+0x35/0x90 [ 607.248677][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.254968][ T30] RIP: 0033:0x7feb14b8cd29 [ 607.259434][ T30] RSP: 002b:00007feb129f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 607.267881][ T30] RAX: ffffffffffffffda RBX: 00007feb14da5fa0 RCX: 00007feb14b8cd29 [ 607.275853][ T30] RDX: 0000000000000012 RSI: 0000000020000740 RDI: 0000000000000003 [ 607.283863][ T30] RBP: 00007feb14c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 607.291857][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.299949][ T30] R13: 0000000000000000 R14: 00007feb14da5fa0 R15: 00007feb14ecfa28 [ 607.307983][ T30] [ 607.311008][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 607.320226][ T30] INFO: lockdep is turned off. [ 607.325026][ T30] NMI backtrace for cpu 1 [ 607.325039][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 607.325050][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 607.325056][ T30] Call Trace: [ 607.325061][ T30] [ 607.325065][ T30] dump_stack_lvl+0x241/0x360 [ 607.325084][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.325097][ T30] ? __pfx__printk+0x10/0x10 [ 607.325109][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 607.325124][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 607.325139][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 607.325151][ T30] ? _printk+0xd5/0x120 [ 607.325162][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 607.325174][ T30] ? __pfx__printk+0x10/0x10 [ 607.325187][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 607.325197][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 607.325210][ T30] watchdog+0xff6/0x1040 [ 607.325222][ T30] ? watchdog+0x1ea/0x1040 [ 607.325234][ T30] ? __pfx_watchdog+0x10/0x10 [ 607.325244][ T30] kthread+0x7a9/0x920 [ 607.325256][ T30] ? __pfx_kthread+0x10/0x10 [ 607.325269][ T30] ? __pfx_watchdog+0x10/0x10 [ 607.325279][ T30] ? __pfx_kthread+0x10/0x10 [ 607.325290][ T30] ? __pfx_kthread+0x10/0x10 [ 607.325302][ T30] ? __pfx_kthread+0x10/0x10 [ 607.325313][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 607.325326][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 607.325340][ T30] ? __pfx_kthread+0x10/0x10 [ 607.325352][ T30] ret_from_fork+0x4b/0x80 [ 607.325363][ T30] ? __pfx_kthread+0x10/0x10 [ 607.325374][ T30] ret_from_fork_asm+0x1a/0x30 [ 607.325386][ T30] [ 607.325390][ T30] Sending NMI from CPU 1 to CPUs 0: [ 607.492917][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 607.493955][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 607.508935][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 607.519086][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 607.529151][ T30] Call Trace: [ 607.532428][ T30] [ 607.535346][ T30] dump_stack_lvl+0x241/0x360 [ 607.540024][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.545218][ T30] ? __pfx__printk+0x10/0x10 [ 607.549889][ T30] ? vscnprintf+0x5d/0x90 [ 607.554208][ T30] panic+0x349/0x880 [ 607.558096][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 607.564270][ T30] ? __pfx_panic+0x10/0x10 [ 607.568682][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 607.574050][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 607.580198][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 607.586348][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 607.592502][ T30] watchdog+0x1035/0x1040 [ 607.596914][ T30] ? watchdog+0x1ea/0x1040 [ 607.601323][ T30] ? __pfx_watchdog+0x10/0x10 [ 607.605991][ T30] kthread+0x7a9/0x920 [ 607.610095][ T30] ? __pfx_kthread+0x10/0x10 [ 607.614676][ T30] ? __pfx_watchdog+0x10/0x10 [ 607.619340][ T30] ? __pfx_kthread+0x10/0x10 [ 607.623933][ T30] ? __pfx_kthread+0x10/0x10 [ 607.628516][ T30] ? __pfx_kthread+0x10/0x10 [ 607.633182][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 607.638371][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 607.643565][ T30] ? __pfx_kthread+0x10/0x10 [ 607.648149][ T30] ret_from_fork+0x4b/0x80 [ 607.652565][ T30] ? __pfx_kthread+0x10/0x10 [ 607.657142][ T30] ret_from_fork_asm+0x1a/0x30 [ 607.661901][ T30] [ 607.665039][ T30] Kernel Offset: disabled [ 607.669442][ T30] Rebooting in 86400 seconds..