last executing test programs: 51.004192934s ago: executing program 0 (id=5228): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xe9}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, 0x0) 47.857123692s ago: executing program 0 (id=5265): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 47.770704397s ago: executing program 0 (id=5267): ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x11, &(0x7f00000077c0)={r1}, 0x8) 47.656441445s ago: executing program 0 (id=5270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK={0x8}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x44}}, 0x0) 47.571191802s ago: executing program 0 (id=5272): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001880), 0x0, 0x0, 0x0) fsopen(0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000002c03f92c0000000000000000000000000000000000000000000000000000000000000000000069d9bf8d8d908fa8f9c9fc0000000000000000000000000000000000000000000000000009000000000000000000000000000008"], 0xb8}}, 0x0) 47.465078349s ago: executing program 0 (id=5274): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x3) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0xaa, 0x0, 0x43, 0x0, "8b62d38162d11d34e29ca77dcbf24898d6a94f553da1788337c9c9b9ae7339d4fa08282a85f3f595ecc7ea4970f940447ed103956cd02d6f7c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in, 0x0, 0x0, 0x3b, 0x0, "5819f9e6b047ec2003b8892ff3889dcf134877503c8e12291d5f1d34e7b933aa1500cac85514b454ad6485d8ba26286d9bb88fa7887d95da6e6cc5f6e88372034cda51a10260c291dee9ed3a8b490de4"}, 0xd8) connect$inet(r3, &(0x7f0000000000)={0x2, 0xffff, @remote}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0xc3a0f000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 46.128602036s ago: executing program 4 (id=5287): openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x200080, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @any, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x14) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(0xffffffffffffffff, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xac, &(0x7f0000000000), &(0x7f0000000200)=0x4) r3 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340), 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/135, 0x87}], 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) syz_emit_vhci(0x0, 0xffffffffffffffc7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b14, 0x0) 45.293430095s ago: executing program 3 (id=5290): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x10002def, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 44.397031197s ago: executing program 3 (id=5291): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r2, 0x0) r3 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)='Z', 0x1}], 0x1}, 0x0) r4 = dup2(r1, r0) close_range(r4, 0xffffffffffffffff, 0x0) 41.568731943s ago: executing program 3 (id=5293): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x111, 0x4b4, 0x158, 0xd4feffff, 0x298, 0x20a, 0x278, 0x298, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x4, 0x0, 0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 41.524568959s ago: executing program 3 (id=5295): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000040), 0x4) 41.199158334s ago: executing program 3 (id=5296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 39.580697726s ago: executing program 4 (id=5298): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x0) close(r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000003e80)={0x0, 0x0, 0x0}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5}, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x15) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, &(0x7f0000001340)={0x2020}, 0x2020) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%Q\x1ae\xe0\x00\x00\x00\x00\xfb\xff\xf0^)pR\x854G\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\xad;\xf5\xc8\xfc7?WS\xd6\x91\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5\x00\x00\x00\x00#\x80z8\xff\x03\x00\x00\x00\x00\x00\x00\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\'\xb5\xe0m\x1cV\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000280)) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec'}]}, 0x95) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x80}}, './file0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x204, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000040)={@multicast, @remote, @void, {@llc={0x4, {@snap={0xaa, 0x0, "af", "1a0c65"}}}}}, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000002640)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18) sendmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[], 0x64}}, 0x0) execveat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 39.462966883s ago: executing program 1 (id=5300): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local=0x3}, 0x10) 39.462331951s ago: executing program 3 (id=5301): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) 37.865945991s ago: executing program 1 (id=5303): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r2, 0x0) r3 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)='Z', 0x1}], 0x1}, 0x0) r4 = dup2(r1, r0) close_range(r4, 0xffffffffffffffff, 0x0) 35.71899293s ago: executing program 1 (id=5306): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x111, 0x4b4, 0x158, 0xd4feffff, 0x298, 0x20a, 0x278, 0x298, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x4, 0x0, 0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 35.705857325s ago: executing program 4 (id=5307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000009180006"], 0xac}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 33.205190971s ago: executing program 1 (id=5308): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0) 33.204358161s ago: executing program 4 (id=5309): openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x200080, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @any, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x14) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(0xffffffffffffffff, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xac, &(0x7f0000000000), &(0x7f0000000200)=0x4) r3 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340), 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/135, 0x87}], 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) syz_emit_vhci(0x0, 0xffffffffffffffc7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b14, 0x0) 28.796503545s ago: executing program 1 (id=5311): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8}, @TCA_CAKE_RTT={0x8}]}}]}, 0x44}}, 0x0) 26.618494662s ago: executing program 4 (id=5313): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local=0x3}, 0x10) 25.716498296s ago: executing program 4 (id=5315): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x3) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0xaa, 0x0, 0x43, 0x0, "8b62d38162d11d34e29ca77dcbf24898d6a94f553da1788337c9c9b9ae7339d4fa08282a85f3f595ecc7ea4970f940447ed103956cd02d6f7c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in, 0x0, 0x0, 0x3b, 0x0, "5819f9e6b047ec2003b8892ff3889dcf134877503c8e12291d5f1d34e7b933aa1500cac85514b454ad6485d8ba26286d9bb88fa7887d95da6e6cc5f6e88372034cda51a10260c291dee9ed3a8b490de4"}, 0xd8) connect$inet(r3, &(0x7f0000000000)={0x2, 0xffff, @remote}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0xc3a0f000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 24.805127431s ago: executing program 1 (id=5316): r0 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.149890434s ago: executing program 2 (id=5325): r0 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.514646665s ago: executing program 2 (id=5326): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7823d5f2fd71a6a76177920ea7e60c0ac7a4a5"}) close_range(r0, 0xffffffffffffffff, 0x0) 368.290283ms ago: executing program 2 (id=5327): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x101, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000400)={0x9, @raw_data="045401052d376b6e832aed175c97b18de714af360407176e619a03d62d33f622322a1de82c49cce09ce71d9a4bbc6efdbbe21336067c41e8799861bc5190cd0e73e781d87dbd5a2c04d70d57d79ba33b828b259df20b7b630e69754f92d181126a8570d4cbdd0fa38e75770e2c04cbe4f36ab96d2b41bbb3854ea88a908c943c510ccf9d529600b17e8fcf17f268b2d57af60c8b799cf413e875e8e79672e44c7b7505c9df370f87880f560c4ac859e65fc7a0fab1e5e5d56f2a41e77cf13b667633814d30a83cc8"}) 286.059254ms ago: executing program 2 (id=5328): keyctl$reject(0x14, 0x0, 0x1ffffffd, 0x8000000000000001, 0x0) 191.999513ms ago: executing program 2 (id=5329): socket$inet6(0xa, 0x0, 0x0) r0 = socket(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x340, 0x400, 0x130, 0x98, 0x130, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'syz_tun\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp={{0x28}, {0x0, "0a1c"}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 0s ago: executing program 2 (id=5330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000200)={{0x0, 0x0, 0x80}}) kernel console output (not intermixed with test programs): 77015][T24701] netlink: 'syz.1.4858': attribute type 12 has an invalid length. [ 1023.256575][ T4490] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1023.265212][T24720] binder: 24719:24720 ioctl c0306201 0 returned -14 [ 1023.276042][ T2911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.402504][T24700] chnl_net:caif_netlink_parms(): no params data found [ 1023.603159][ T2911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.685886][T24721] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4865'. [ 1023.802012][ T2911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.040184][ T2911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.302591][T24700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.316862][T24700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.337859][T24700] bridge_slave_0: entered allmulticast mode [ 1024.357301][T24700] bridge_slave_0: entered promiscuous mode [ 1024.391748][ T4490] Bluetooth: hci5: command tx timeout [ 1024.399221][T24700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.407712][T24700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.458906][T24700] bridge_slave_1: entered allmulticast mode [ 1024.480902][T24700] bridge_slave_1: entered promiscuous mode [ 1024.672513][T24700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.800955][T24700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.097651][T24700] team0: Port device team_slave_0 added [ 1025.209424][T24700] team0: Port device team_slave_1 added [ 1025.333969][ T2911] bridge_slave_1: left allmulticast mode [ 1025.387389][ T2911] bridge_slave_1: left promiscuous mode [ 1025.408337][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.434468][ T2911] bridge_slave_0: left allmulticast mode [ 1025.453040][ T2911] bridge_slave_0: left promiscuous mode [ 1025.459187][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.671209][ T4490] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1025.690055][T24777] binder: 24776:24777 ioctl c0306201 0 returned -14 [ 1026.468918][ T4490] Bluetooth: hci5: command tx timeout [ 1026.761561][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.797204][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.823925][ T2911] bond0 (unregistering): Released all slaves [ 1026.868841][T24781] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4881'. [ 1026.930104][T24700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.937048][T24700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.069497][T24802] netlink: 'syz.2.4889': attribute type 29 has an invalid length. [ 1027.088908][T24700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.150330][T24700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.175573][T24700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.264788][T24700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.285485][T24802] netlink: 'syz.2.4889': attribute type 29 has an invalid length. [ 1027.327256][ T2911] tipc: Left network mode [ 1027.369662][T24809] netlink: 'syz.2.4889': attribute type 29 has an invalid length. [ 1027.741703][T24700] hsr_slave_0: entered promiscuous mode [ 1027.830282][T24700] hsr_slave_1: entered promiscuous mode [ 1027.839834][T24700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1027.847414][T24700] Cannot create hsr debugfs directory [ 1027.928448][T24835] binder: 24834:24835 ioctl c0306201 0 returned -14 [ 1027.948735][ T4490] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1028.343407][T24843] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4900'. [ 1028.491545][T24853] netlink: 'syz.3.4904': attribute type 29 has an invalid length. [ 1028.520909][ T2911] hsr_slave_0: left promiscuous mode [ 1028.551241][ T4490] Bluetooth: hci5: command tx timeout [ 1028.557332][ T2911] hsr_slave_1: left promiscuous mode [ 1028.571670][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1028.590826][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.613785][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.630586][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.734988][ T2911] veth1_macvtap: left promiscuous mode [ 1028.756755][ T2911] veth0_macvtap: left promiscuous mode [ 1028.779047][ T2911] veth1_vlan: left promiscuous mode [ 1028.789216][ T2911] veth0_vlan: left promiscuous mode [ 1029.705706][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 1029.774626][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 1030.347570][T24853] netlink: 'syz.3.4904': attribute type 29 has an invalid length. [ 1030.576288][T24889] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1030.629291][ T4490] Bluetooth: hci5: command tx timeout [ 1031.332809][ T4490] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1031.333192][T24924] binder: 24923:24924 ioctl c0306201 0 returned -14 [ 1031.374214][T24927] xt_policy: output policy not valid in PREROUTING and INPUT [ 1031.555305][T24933] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1031.645026][T24931] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4933'. [ 1031.936212][T24700] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1031.968316][T24700] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1032.026463][T24700] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1032.064609][T24700] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1032.167238][T24955] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4943'. [ 1032.318782][ T785] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1032.369484][T24962] xt_policy: output policy not valid in PREROUTING and INPUT [ 1032.376509][T24700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.450119][T24700] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.513154][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.520381][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.538139][ T785] usb 4-1: Using ep0 maxpacket: 32 [ 1032.566058][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.588052][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.614568][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.621749][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.633777][ T785] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1032.645512][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.667463][ T785] usb 4-1: config 0 descriptor?? [ 1032.681242][ T785] hub 4-1:0.0: USB hub found [ 1032.819629][ T25] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1032.852759][T24700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.893477][ T785] hub 4-1:0.0: 1 port detected [ 1032.914776][T24700] veth0_vlan: entered promiscuous mode [ 1032.943178][T24700] veth1_vlan: entered promiscuous mode [ 1033.002580][T24700] veth0_macvtap: entered promiscuous mode [ 1033.039893][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 1033.052057][ T25] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 1033.063510][T24700] veth1_macvtap: entered promiscuous mode [ 1033.073357][ T25] usb 3-1: config 0 has no interface number 0 [ 1033.100252][ T785] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1033.105328][ T25] usb 3-1: config 0 interface 3 has no altsetting 0 [ 1033.121395][ T785] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1033.143429][T24700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.160207][ T25] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1033.165056][ T785] usbhid 4-1:0.0: can't add hid device: -71 [ 1033.175228][ T25] usb 3-1: New USB device strings: Mfr=0, Product=247, SerialNumber=255 [ 1033.175256][ T25] usb 3-1: Product: syz [ 1033.175273][ T25] usb 3-1: SerialNumber: syz [ 1033.213427][T24700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.233592][T24700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.246359][ T25] usb 3-1: config 0 descriptor?? [ 1033.262544][ T25] hso 3-1:0.3: Not our interface [ 1033.293626][ T785] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1033.313646][T24700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.342376][ T785] usb 4-1: USB disconnect, device number 53 [ 1033.356448][T24700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.388372][T24700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.417938][T24700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.438950][T24700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.451386][T24700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.462766][T24700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.473856][T24700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.490793][T24700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.552317][T24700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.611068][T24700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.698812][T24700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.752793][T24700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.820366][T24700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.859523][T24700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.897287][T24700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.919703][T24700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.948790][T24700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.995422][T24700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.046666][T24700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.058890][ T5149] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1034.067894][T24700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.090938][T24700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.146496][T24700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.180067][T24700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.219723][T24700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.237267][T24700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.256866][T24700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.260010][ T5149] usb 4-1: Using ep0 maxpacket: 16 [ 1034.282211][T25002] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4955'. [ 1034.335672][ T5149] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 1034.352793][ T5149] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1034.389011][ T5149] usb 4-1: config 0 has no interface number 0 [ 1034.411049][ T5149] usb 4-1: config 0 interface 183 has no altsetting 0 [ 1034.437273][ T5149] usb 4-1: New USB device found, idVendor=079b, idProduct=000f, bcdDevice=57.ce [ 1034.471256][ T5149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.504818][ T5149] usb 4-1: Product: syz [ 1034.526461][ T5149] usb 4-1: Manufacturer: syz [ 1034.554459][ T5149] usb 4-1: SerialNumber: syz [ 1034.585373][ T5149] usb 4-1: config 0 descriptor?? [ 1034.693857][T19938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.728772][T19938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.763992][T19938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.784018][T19938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.093771][T24999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.106537][T24999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.628239][ T5149] usb 3-1: USB disconnect, device number 54 [ 1035.748940][ T5152] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1035.763079][ T6531] usb 4-1: USB disconnect, device number 54 [ 1035.870698][T25065] xt_policy: output policy not valid in PREROUTING and INPUT [ 1035.958906][ T5152] usb 2-1: Using ep0 maxpacket: 32 [ 1035.975063][ T5152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.001989][ T5152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.035090][ T5152] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1036.068168][ T5152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.099556][ T5152] usb 2-1: config 0 descriptor?? [ 1036.116101][ T5152] hub 2-1:0.0: USB hub found [ 1036.237143][T25080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4970'. [ 1036.257758][T25080] netlink: 'syz.2.4970': attribute type 18 has an invalid length. [ 1036.280555][T25080] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.290089][T25080] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.299020][T25080] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.307739][T25080] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.320370][T25080] vxlan0: entered promiscuous mode [ 1036.328289][ T5152] hub 2-1:0.0: 1 port detected [ 1036.540817][ T5152] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1036.549623][ T5152] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1036.561209][ T5152] usbhid 2-1:0.0: can't add hid device: -71 [ 1036.567255][ T5152] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1036.601485][ T5152] usb 2-1: USB disconnect, device number 44 [ 1037.188276][ T2911] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.328809][ T5152] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1037.420734][ T2911] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.517610][ T2911] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.559094][ T5152] usb 3-1: Using ep0 maxpacket: 16 [ 1037.566279][T17737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1037.575753][T17737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1037.592008][T17737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1037.601997][T17737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1037.609819][ T5152] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 1037.618412][ T5152] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1037.629449][ T5152] usb 3-1: config 0 has no interface number 0 [ 1037.636932][T17737] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1037.645964][ T5152] usb 3-1: config 0 interface 183 has no altsetting 0 [ 1037.646049][T17737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1037.649284][ T5149] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1037.670451][ T5152] usb 3-1: New USB device found, idVendor=079b, idProduct=000f, bcdDevice=57.ce [ 1037.679960][ T5152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.687969][ T5152] usb 3-1: Product: syz [ 1037.692286][ T5152] usb 3-1: Manufacturer: syz [ 1037.697009][ T5152] usb 3-1: SerialNumber: syz [ 1037.703833][ T5152] usb 3-1: config 0 descriptor?? [ 1037.746229][ T2911] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.898928][ T5149] usb 4-1: Using ep0 maxpacket: 16 [ 1037.908499][ T5149] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1037.938238][ T5149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.976907][ T5149] usb 4-1: Product: syz [ 1037.994596][ T5149] usb 4-1: Manufacturer: syz [ 1038.006010][ T5149] usb 4-1: SerialNumber: syz [ 1038.017205][ T5149] usb 4-1: config 0 descriptor?? [ 1038.037299][ T5149] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1038.109093][ T2911] bridge_slave_1: left allmulticast mode [ 1038.114820][ T2911] bridge_slave_1: left promiscuous mode [ 1038.136499][T25087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.145743][T25087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.182529][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.215136][ T2911] bridge_slave_0: left allmulticast mode [ 1038.227422][ T2911] bridge_slave_0: left promiscuous mode [ 1038.241454][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.344679][T25110] input: syz0 as /devices/virtual/input/input55 [ 1038.924718][ T5153] usb 3-1: USB disconnect, device number 55 [ 1039.342447][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.360981][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.372968][ T2911] bond0 (unregistering): Released all slaves [ 1039.407235][T25114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4986'. [ 1039.426973][T25114] netlink: 'syz.0.4986': attribute type 18 has an invalid length. [ 1039.448809][ T5153] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1039.465678][T25114] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.474964][T25114] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.483859][T25114] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.494261][T25114] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.547698][T25114] vxlan0: entered promiscuous mode [ 1039.687529][ T5153] usb 3-1: Using ep0 maxpacket: 32 [ 1039.727478][ T5153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.754543][ T4490] Bluetooth: hci0: command tx timeout [ 1039.778850][ T5153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.802445][ T5153] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1039.818767][ T5153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.820354][T25099] chnl_net:caif_netlink_parms(): no params data found [ 1039.866113][ T5153] usb 3-1: config 0 descriptor?? [ 1039.897895][ T5153] hub 3-1:0.0: USB hub found [ 1040.110353][ T5153] hub 3-1:0.0: 1 port detected [ 1040.191017][ T5149] gp8psk: usb in 128 operation failed. [ 1040.255445][ T5149] gp8psk: usb in 137 operation failed. [ 1040.293465][ T5149] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1040.340642][ T5153] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1040.378751][ T5153] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1040.387470][ T5149] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1040.420580][ T5153] usbhid 3-1:0.0: can't add hid device: -71 [ 1040.426625][ T5153] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1040.434655][ T5149] usb 4-1: media controller created [ 1040.519880][ T5153] usb 3-1: USB disconnect, device number 56 [ 1040.547734][ T5149] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1040.621793][ T2911] hsr_slave_0: left promiscuous mode [ 1040.631923][ T2911] hsr_slave_1: left promiscuous mode [ 1040.645035][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.645349][ T5149] gp8psk_fe: Frontend revision 1 attached [ 1040.658837][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.687084][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.688143][ T5149] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1040.717548][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.773647][ T5149] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1040.860786][ T2911] veth1_macvtap: left promiscuous mode [ 1040.866382][ T2911] veth0_macvtap: left promiscuous mode [ 1040.897320][ T2911] veth1_vlan: left promiscuous mode [ 1040.907597][ T2911] veth0_vlan: left promiscuous mode [ 1040.991960][ T5149] gp8psk: usb in 138 operation failed. [ 1040.997475][ T5149] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1041.026559][ T5149] gp8psk: found Genpix USB device pID = 201 (hex) [ 1041.056886][ T5149] usb 4-1: USB disconnect, device number 55 [ 1041.240759][T17737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1041.261971][T17737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1041.270845][T17737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1041.279755][T17737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1041.293326][T17737] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1041.302731][T17737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1041.352978][ T5149] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1041.829308][ T4490] Bluetooth: hci0: command tx timeout [ 1041.866820][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 1041.915793][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 1042.528519][T25099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.548796][T25099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.556066][T25099] bridge_slave_0: entered allmulticast mode [ 1042.580359][T25099] bridge_slave_0: entered promiscuous mode [ 1042.658990][T25099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.686134][T25099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.694367][T25099] bridge_slave_1: entered allmulticast mode [ 1042.709298][T25099] bridge_slave_1: entered promiscuous mode [ 1042.760178][T25099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.791896][T25099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.945231][T25099] team0: Port device team_slave_0 added [ 1042.985238][T25099] team0: Port device team_slave_1 added [ 1043.174393][T25099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.209512][T25099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.268236][T25099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.348896][ T4490] Bluetooth: hci1: command tx timeout [ 1043.463027][T25099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.479733][T25099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.548775][T25099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.744494][T17737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1043.757015][T17737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1043.764442][T25160] chnl_net:caif_netlink_parms(): no params data found [ 1043.786014][T17737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1043.789385][T25099] hsr_slave_0: entered promiscuous mode [ 1043.803116][T17737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1043.817789][T25099] hsr_slave_1: entered promiscuous mode [ 1043.824208][T17737] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1043.839189][T17737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1043.910785][T17737] Bluetooth: hci0: command tx timeout [ 1043.919312][ T2911] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.930135][ T2911] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.044006][ T2911] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.054454][ T2911] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.175398][ T2911] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.186856][ T2911] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.208056][T25160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.215347][T25160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.224344][T25160] bridge_slave_0: entered allmulticast mode [ 1044.231818][T25160] bridge_slave_0: entered promiscuous mode [ 1044.262781][T25160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.270543][T25160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.278014][T25160] bridge_slave_1: entered allmulticast mode [ 1044.285450][T25160] bridge_slave_1: entered promiscuous mode [ 1044.325588][ T2911] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.336184][ T2911] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.415067][T25160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.506826][T25160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.733951][T25160] team0: Port device team_slave_0 added [ 1044.943575][T25160] team0: Port device team_slave_1 added [ 1045.176222][T25160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.188816][T25160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.221728][T25160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.261813][T25202] chnl_net:caif_netlink_parms(): no params data found [ 1045.324903][ T2911] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.367450][T25160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.385711][T25160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.417848][T25160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.429800][T17737] Bluetooth: hci1: command tx timeout [ 1045.514109][ T2911] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.765433][ T2911] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.835277][T25099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1045.909033][T17737] Bluetooth: hci3: command tx timeout [ 1045.985295][T25099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1045.992243][T17737] Bluetooth: hci0: command tx timeout [ 1046.040251][T25099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1046.163702][ T2911] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.197042][T25160] hsr_slave_0: entered promiscuous mode [ 1046.214129][T25160] hsr_slave_1: entered promiscuous mode [ 1046.227945][T25160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1046.255917][T25160] Cannot create hsr debugfs directory [ 1046.331063][T25099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1046.427695][T25202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.435934][T25202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.447025][T25202] bridge_slave_0: entered allmulticast mode [ 1046.455650][T25202] bridge_slave_0: entered promiscuous mode [ 1046.497023][T25202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.504312][T25202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.511702][T25202] bridge_slave_1: entered allmulticast mode [ 1046.529122][T25202] bridge_slave_1: entered promiscuous mode [ 1046.610526][T25202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.712197][T25202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.924839][ T2911] bridge_slave_1: left allmulticast mode [ 1046.935381][ T2911] bridge_slave_1: left promiscuous mode [ 1046.942016][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.989580][ T2911] bridge_slave_0: left allmulticast mode [ 1046.995275][ T2911] bridge_slave_0: left promiscuous mode [ 1047.009537][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.041450][ T2911] bridge_slave_1: left allmulticast mode [ 1047.047124][ T2911] bridge_slave_1: left promiscuous mode [ 1047.058890][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.091876][ T2911] bridge_slave_0: left allmulticast mode [ 1047.097566][ T2911] bridge_slave_0: left promiscuous mode [ 1047.109203][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.177233][ T4490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1047.191585][ T4490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1047.200957][ T4490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1047.229012][ T4490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1047.238054][ T4490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1047.250577][ T4490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1047.319333][ T4490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1047.330885][ T4490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1047.339263][ T4490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1047.350045][ T4490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1047.358947][ T4490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1047.367972][ T4490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1047.514481][T17737] Bluetooth: hci1: command tx timeout [ 1047.992108][T17737] Bluetooth: hci3: command tx timeout [ 1048.025348][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.037882][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.051122][ T2911] bond0 (unregistering): Released all slaves [ 1048.193899][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.205395][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.216400][ T2911] bond0 (unregistering): Released all slaves [ 1048.282840][T25202] team0: Port device team_slave_0 added [ 1048.296259][T25202] team0: Port device team_slave_1 added [ 1048.451535][T25202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.465618][T25202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.504876][T25202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.527704][T25202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.537997][T25202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.576629][T25202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.917878][T25202] hsr_slave_0: entered promiscuous mode [ 1048.934331][T25202] hsr_slave_1: entered promiscuous mode [ 1048.943567][T25202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1048.954715][T25202] Cannot create hsr debugfs directory [ 1049.349122][T17737] Bluetooth: hci2: command tx timeout [ 1049.384747][ T2911] hsr_slave_0: left promiscuous mode [ 1049.390882][ T2911] hsr_slave_1: left promiscuous mode [ 1049.396840][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1049.404571][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.417996][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1049.426436][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.434518][T17737] Bluetooth: hci4: command tx timeout [ 1049.445126][ T2911] hsr_slave_0: left promiscuous mode [ 1049.454440][ T2911] hsr_slave_1: left promiscuous mode [ 1049.462340][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1049.470243][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.477986][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1049.485566][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.527763][ T2911] veth1_macvtap: left promiscuous mode [ 1049.533735][ T2911] veth0_macvtap: left promiscuous mode [ 1049.539913][ T2911] veth1_vlan: left promiscuous mode [ 1049.545200][ T2911] veth0_vlan: left promiscuous mode [ 1049.552450][ T2911] veth1_macvtap: left promiscuous mode [ 1049.557973][ T2911] veth0_macvtap: left promiscuous mode [ 1049.564006][ T2911] veth1_vlan: left promiscuous mode [ 1049.569531][ T2911] veth0_vlan: left promiscuous mode [ 1049.589167][T17737] Bluetooth: hci1: command tx timeout [ 1050.078959][T17737] Bluetooth: hci3: command tx timeout [ 1050.171866][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 1050.228197][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 1051.078391][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 1051.135325][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 1051.438783][T17737] Bluetooth: hci2: command tx timeout [ 1051.518923][T17737] Bluetooth: hci4: command tx timeout [ 1051.726225][T25099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.847560][T25160] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1051.879260][T25160] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1052.038778][T25262] chnl_net:caif_netlink_parms(): no params data found [ 1052.060427][T25099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.067512][T25160] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1052.130460][T25160] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1052.149268][T17737] Bluetooth: hci3: command tx timeout [ 1052.258967][T25264] chnl_net:caif_netlink_parms(): no params data found [ 1052.308424][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.315639][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.601030][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.608184][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.711658][T25262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.739692][T25262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.746972][T25262] bridge_slave_0: entered allmulticast mode [ 1052.757278][T25262] bridge_slave_0: entered promiscuous mode [ 1052.811249][T25262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.818415][T25262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.840899][T25262] bridge_slave_1: entered allmulticast mode [ 1052.870562][T25262] bridge_slave_1: entered promiscuous mode [ 1053.005401][T25099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1053.075293][T25262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.102311][T25262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.146749][T25264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.160575][T25264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.167834][T25264] bridge_slave_0: entered allmulticast mode [ 1053.181150][T25264] bridge_slave_0: entered promiscuous mode [ 1053.200007][T25264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.207138][T25264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.226921][T25264] bridge_slave_1: entered allmulticast mode [ 1053.236085][T25264] bridge_slave_1: entered promiscuous mode [ 1053.367374][T25264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.390806][T25264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.455415][T25262] team0: Port device team_slave_0 added [ 1053.473122][T25262] team0: Port device team_slave_1 added [ 1053.509006][T17737] Bluetooth: hci2: command tx timeout [ 1053.581694][T25264] team0: Port device team_slave_0 added [ 1053.589140][T17737] Bluetooth: hci4: command tx timeout [ 1053.644927][T25262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.652808][T25262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.680380][T25262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.692285][T25202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1053.708339][T25202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1053.736540][T25264] team0: Port device team_slave_1 added [ 1053.779013][T25262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.785996][T25262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.824257][T25262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.852603][T25202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1053.934539][T25202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1053.953192][T25099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.964535][T25264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.979009][T25264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.006835][T25264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.047588][T25160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.089441][T25264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.096433][T25264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.138589][T25264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.180489][T25262] hsr_slave_0: entered promiscuous mode [ 1054.199048][T25262] hsr_slave_1: entered promiscuous mode [ 1054.206568][T25262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1054.217382][T25262] Cannot create hsr debugfs directory [ 1054.357586][ T2911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.378500][ T2911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.526657][T25264] hsr_slave_0: entered promiscuous mode [ 1054.533957][T25264] hsr_slave_1: entered promiscuous mode [ 1054.540993][T25264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1054.549501][T25264] Cannot create hsr debugfs directory [ 1054.578020][ T2911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.590882][ T2911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.628330][T25160] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.740583][ T2911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.751991][ T2911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.791450][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.798001][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.846377][ T2911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.858451][ T2911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.937427][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.944664][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.007963][T25262] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.050058][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.057169][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.079950][T25099] veth0_vlan: entered promiscuous mode [ 1055.137374][T25262] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.284109][T25262] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.331198][T25160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1055.369161][T25262] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.385758][T25099] veth1_vlan: entered promiscuous mode [ 1055.473445][T25202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.499630][T25160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.575300][ T2911] bridge_slave_1: left allmulticast mode [ 1055.584297][ T2911] bridge_slave_1: left promiscuous mode [ 1055.589054][T17737] Bluetooth: hci2: command tx timeout [ 1055.590988][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.605991][ T2911] bridge_slave_0: left allmulticast mode [ 1055.619237][ T2911] bridge_slave_0: left promiscuous mode [ 1055.625116][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.647590][ T2911] bridge_slave_1: left allmulticast mode [ 1055.654449][ T2911] bridge_slave_1: left promiscuous mode [ 1055.668883][T17737] Bluetooth: hci4: command tx timeout [ 1055.671507][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.691460][ T2911] bridge_slave_0: left allmulticast mode [ 1055.697136][ T2911] bridge_slave_0: left promiscuous mode [ 1055.713190][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.523036][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.534681][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.545761][ T2911] bond0 (unregistering): Released all slaves [ 1056.677103][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.688396][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.704247][ T2911] bond0 (unregistering): Released all slaves [ 1056.723035][T25202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.756894][T25099] veth0_macvtap: entered promiscuous mode [ 1056.831026][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.838194][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.873305][T25099] veth1_macvtap: entered promiscuous mode [ 1056.885817][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.892987][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.014982][T25262] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1057.097543][T25262] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1057.110356][T25262] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1057.162425][T25099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.193172][T25099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.208379][T25099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.229534][T25099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.250210][T25099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.269406][T25099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.288910][T25099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.309380][T25099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.321509][T25099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.338976][T25160] veth0_vlan: entered promiscuous mode [ 1057.364323][T25262] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1057.587021][T25202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1057.621406][T25160] veth1_vlan: entered promiscuous mode [ 1057.630220][T25099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.652370][T25099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.669158][T25099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.690574][T25099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.708405][T25099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.722164][T25099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.742851][T25099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.766253][T25099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.778159][T25099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.854035][T25099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.875910][T25099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.898770][T25099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.907686][T25099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.136908][T25160] veth0_macvtap: entered promiscuous mode [ 1058.177355][T25202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.253649][ T2911] hsr_slave_0: left promiscuous mode [ 1058.260914][ T2911] hsr_slave_1: left promiscuous mode [ 1058.266974][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.275223][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.284514][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.292332][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.304761][ T2911] hsr_slave_0: left promiscuous mode [ 1058.313872][ T2911] hsr_slave_1: left promiscuous mode [ 1058.322327][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.330437][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.338477][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.347388][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.396266][ T2911] veth1_macvtap: left promiscuous mode [ 1058.402104][ T2911] veth0_macvtap: left promiscuous mode [ 1058.407776][ T2911] veth1_vlan: left promiscuous mode [ 1058.413959][ T2911] veth0_vlan: left promiscuous mode [ 1058.432361][ T2911] veth1_macvtap: left promiscuous mode [ 1058.437927][ T2911] veth0_macvtap: left promiscuous mode [ 1058.444117][ T2911] veth1_vlan: left promiscuous mode [ 1058.449617][ T2911] veth0_vlan: left promiscuous mode [ 1059.347928][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 1059.402308][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 1060.503502][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 1060.557184][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 1061.089650][T25160] veth1_macvtap: entered promiscuous mode [ 1061.116229][T25160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.139998][T25160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.150182][T25160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.160774][T25160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.170735][T25160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.181541][T25160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.195166][T25160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.255488][T25160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.267093][T25160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.277252][T25160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.287842][T25160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.297989][T25160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.310793][T25160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.329910][T25160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.402791][T25160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.414549][T25160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.423778][T25160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.433477][T25160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.444761][T25264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1061.454392][T25264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1061.465945][T25264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1061.504132][ T7018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.513333][ T7018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.549625][T25264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1061.576276][T25202] veth0_vlan: entered promiscuous mode [ 1061.656673][T25202] veth1_vlan: entered promiscuous mode [ 1061.718577][T19938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.732363][T19938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.781839][T25262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.889959][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.897838][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.943621][T25202] veth0_macvtap: entered promiscuous mode [ 1061.954921][T25202] veth1_macvtap: entered promiscuous mode [ 1061.972522][T25262] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.046664][T19938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.072077][T19938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.084329][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.091538][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.108194][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.115408][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.154834][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.166909][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.176887][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.188295][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.198227][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.211358][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.221332][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.233236][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.245919][T25202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.319225][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.336920][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.355110][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.365832][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.376286][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.387149][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.397850][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.408347][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.420738][T25202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.433497][T25202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.442415][T25202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.451319][T25202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.461061][T25202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.554578][T25264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.616235][T25262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.711376][T25264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.773072][ T2465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.792879][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.800074][ T6531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.813264][ T2465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.828599][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.835825][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.005577][T25262] veth0_vlan: entered promiscuous mode [ 1063.027433][ T7018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.053754][ T7018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.094909][T25262] veth1_vlan: entered promiscuous mode [ 1063.169788][ T5151] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1063.237030][T25262] veth0_macvtap: entered promiscuous mode [ 1063.351893][T25264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.366913][T25262] veth1_macvtap: entered promiscuous mode [ 1063.398817][ T5151] usb 5-1: Using ep0 maxpacket: 8 [ 1063.412814][ T5151] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 1063.429723][ T5151] usb 5-1: config 0 has no interface number 0 [ 1063.435858][ T5151] usb 5-1: config 0 interface 3 has no altsetting 0 [ 1063.458368][T25262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.473148][T25262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.483574][T25262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.496684][T25262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.521628][ T5151] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1063.535183][T25262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.538797][ T5149] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1063.545736][ T5151] usb 5-1: New USB device strings: Mfr=0, Product=247, SerialNumber=255 [ 1063.564819][T25262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.575281][ T5151] usb 5-1: Product: syz [ 1063.579816][T25262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.591341][ T5151] usb 5-1: SerialNumber: syz [ 1063.598655][ T5151] usb 5-1: config 0 descriptor?? [ 1063.607341][ T5151] hso 5-1:0.3: Not our interface [ 1063.613322][T25262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.634171][T25262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.658464][T25262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.670475][T25262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.720847][T25262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.739417][ T5149] usb 3-1: Using ep0 maxpacket: 32 [ 1063.753840][ T5149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.758650][T25262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.775159][ T5149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.775223][ T5149] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1063.775247][ T5149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.783099][ T5149] usb 3-1: config 0 descriptor?? [ 1063.788227][T25262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.851520][ T5149] hub 3-1:0.0: USB hub found [ 1063.876339][T25262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.899128][T25262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.930401][T25262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.954899][T25262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.987256][T25262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.018984][T25262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.059070][T25262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.088779][ T5149] hub 3-1:0.0: 1 port detected [ 1064.097374][T25262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.193078][T25262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.221479][T25262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.257288][T25262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.274062][ T5149] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1064.276357][T25262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.287544][ T5149] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1064.318312][ T5149] usbhid 3-1:0.0: can't add hid device: -71 [ 1064.357671][ T5149] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1064.416968][ T2465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.430667][ T5149] usb 3-1: USB disconnect, device number 57 [ 1064.531773][T25264] veth0_vlan: entered promiscuous mode [ 1064.638346][ T2465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.667259][ T4490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1064.680116][ T4490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1064.694696][ T4490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1064.707108][T25264] veth1_vlan: entered promiscuous mode [ 1064.715826][ T4490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1064.723728][ T4490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1064.731437][ T4490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1064.876423][ T2465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.982628][ T2465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.122976][ T7018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.138998][ T7018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.338876][T19938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.347502][T19938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.388345][T25264] veth0_macvtap: entered promiscuous mode [ 1065.427667][T25493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5034'. [ 1065.438054][ T2465] bridge_slave_1: left allmulticast mode [ 1065.458551][ T2465] bridge_slave_1: left promiscuous mode [ 1065.466856][ T2465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.477141][ T2465] bridge_slave_0: left allmulticast mode [ 1065.487930][ T2465] bridge_slave_0: left promiscuous mode [ 1065.493781][ T2465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.941697][ T5147] usb 5-1: USB disconnect, device number 52 [ 1065.973062][ T2465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.003678][ T2465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.022322][ T2465] bond0 (unregistering): Released all slaves [ 1066.110553][T25264] veth1_macvtap: entered promiscuous mode [ 1066.205956][T25501] usb usb8: usbfs: process 25501 (syz.3.5022) did not claim interface 0 before use [ 1066.323640][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.335194][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.345831][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.356374][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.366308][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.377363][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.387731][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.403853][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.414098][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.425667][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.436104][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.447125][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.458838][ T5149] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1066.459254][T25264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.537827][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.553171][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.565593][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.576875][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.593496][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.612935][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.631703][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.652601][ T5149] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.669749][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.687786][ T5149] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1066.697707][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.711923][ T5149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.731571][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.749814][ T5149] usb 5-1: config 0 descriptor?? [ 1066.755031][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.761593][ T5149] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 1066.774666][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.780155][ T5149] usb 5-1: No valid video chain found. [ 1066.795632][T25264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.805438][T17737] Bluetooth: hci1: command tx timeout [ 1066.827915][T25264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.856523][T25264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.874910][T25264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.886837][T25264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.040171][ T5151] usb 5-1: USB disconnect, device number 53 [ 1067.092508][ T2465] hsr_slave_0: left promiscuous mode [ 1067.103288][ T2465] hsr_slave_1: left promiscuous mode [ 1067.123563][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.134855][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.152770][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.164150][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.224675][ T2465] veth1_macvtap: left promiscuous mode [ 1067.234718][ T2465] veth0_macvtap: left promiscuous mode [ 1067.241189][ T2465] veth1_vlan: left promiscuous mode [ 1067.246480][ T2465] veth0_vlan: left promiscuous mode [ 1067.866379][ T2465] team0 (unregistering): Port device team_slave_1 removed [ 1067.936548][ T2465] team0 (unregistering): Port device team_slave_0 removed [ 1068.669928][T25487] chnl_net:caif_netlink_parms(): no params data found [ 1068.869788][T17737] Bluetooth: hci1: command tx timeout [ 1068.938890][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.946746][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.190027][ T5150] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1069.265812][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.300627][T25487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.307857][T25487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.315313][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.332303][T25487] bridge_slave_0: entered allmulticast mode [ 1069.342887][T25487] bridge_slave_0: entered promiscuous mode [ 1069.353461][T25487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.361505][T25487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.369150][T25487] bridge_slave_1: entered allmulticast mode [ 1069.376545][T25487] bridge_slave_1: entered promiscuous mode [ 1069.400583][ T5150] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.424318][ T5150] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1069.449810][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.487104][ T5150] usb 5-1: config 0 descriptor?? [ 1069.520327][ T5150] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 1069.547033][T25487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.560209][ T5150] usb 5-1: No valid video chain found. [ 1069.582051][T25487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.702815][T25487] team0: Port device team_slave_0 added [ 1069.761057][T25487] team0: Port device team_slave_1 added [ 1070.001330][ T2465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.087724][T25487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.121537][T25487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.190760][T25487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.227132][ T4490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1070.269120][ T4490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1070.281425][ T4490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1070.296070][ T4490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1070.304335][ T4490] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1070.319386][ T4490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1070.375778][ T6531] usb 5-1: USB disconnect, device number 54 [ 1070.403927][ T2465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.431452][T25487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.446652][T25487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.483825][T25487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.595030][ T2465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.742877][ T2465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.847260][T25487] hsr_slave_0: entered promiscuous mode [ 1070.853184][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1070.853200][ T29] audit: type=1326 audit(1720225382.520:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.0.5055" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52edb75bd9 code=0x0 [ 1070.882330][T25487] hsr_slave_1: entered promiscuous mode [ 1070.899806][T25487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1070.915624][T25487] Cannot create hsr debugfs directory [ 1070.958900][T17737] Bluetooth: hci1: command tx timeout [ 1070.984747][T17737] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 1070.995750][T17737] CPU: 0 PID: 17737 Comm: kworker/u9:0 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1071.006118][T17737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1071.016192][T17737] Workqueue: hci2 hci_rx_work [ 1071.020877][T17737] Call Trace: [ 1071.024156][T17737] [ 1071.027082][T17737] dump_stack_lvl+0x241/0x360 [ 1071.031770][T17737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1071.036972][T17737] ? __pfx__printk+0x10/0x10 [ 1071.041561][T17737] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 1071.046846][T17737] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 1071.052220][T17737] sysfs_create_dir_ns+0x2ce/0x3a0 [ 1071.057331][T17737] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1071.062966][T17737] kobject_add_internal+0x435/0x8d0 [ 1071.068174][T17737] kobject_add+0x152/0x220 [ 1071.072590][T17737] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1071.077783][T17737] ? device_add+0x3e7/0xbf0 [ 1071.082282][T17737] ? __pfx_kobject_add+0x10/0x10 [ 1071.087221][T17737] ? _raw_spin_unlock+0x28/0x50 [ 1071.092067][T17737] ? get_device_parent+0x165/0x410 [ 1071.097174][T17737] device_add+0x4e5/0xbf0 [ 1071.101508][T17737] hci_conn_add_sysfs+0xe8/0x200 [ 1071.106444][T17737] hci_sync_conn_complete_evt+0x789/0xaa0 [ 1071.112259][T17737] hci_event_packet+0xac0/0x1540 [ 1071.117194][T17737] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 1071.123437][T17737] ? __pfx_hci_event_packet+0x10/0x10 [ 1071.128805][T17737] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1071.134007][T17737] ? hci_send_to_monitor+0xd8/0x7f0 [ 1071.139211][T17737] ? kcov_remote_start+0x9e/0x7e0 [ 1071.144241][T17737] hci_rx_work+0x3e8/0xca0 [ 1071.148667][T17737] ? process_scheduled_works+0x945/0x1830 [ 1071.154388][T17737] process_scheduled_works+0xa2c/0x1830 [ 1071.159947][T17737] ? __pfx_process_scheduled_works+0x10/0x10 [ 1071.165925][T17737] ? assign_work+0x364/0x3d0 [ 1071.170509][T17737] worker_thread+0x86d/0xd50 [ 1071.175099][T17737] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1071.180989][T17737] ? __kthread_parkme+0x169/0x1d0 [ 1071.186011][T17737] ? __pfx_worker_thread+0x10/0x10 [ 1071.191119][T17737] kthread+0x2f0/0x390 [ 1071.195186][T17737] ? __pfx_worker_thread+0x10/0x10 [ 1071.200289][T17737] ? __pfx_kthread+0x10/0x10 [ 1071.204871][T17737] ret_from_fork+0x4b/0x80 [ 1071.209280][T17737] ? __pfx_kthread+0x10/0x10 [ 1071.213861][T17737] ret_from_fork_asm+0x1a/0x30 [ 1071.218641][T17737] [ 1071.226912][T17737] kobject: kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1071.248815][T17737] Bluetooth: hci2: failed to register connection device [ 1071.974797][ T2465] bridge_slave_1: left allmulticast mode [ 1071.988776][T25629] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1072.000319][ T2465] bridge_slave_1: left promiscuous mode [ 1072.006115][ T2465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.036180][ T2465] bridge_slave_0: left allmulticast mode [ 1072.048532][ T2465] bridge_slave_0: left promiscuous mode [ 1072.057085][ T2465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.393715][T17737] Bluetooth: hci3: command tx timeout [ 1072.963635][ T2465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.994913][ T2465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.024523][ T2465] bond0 (unregistering): Released all slaves [ 1073.038877][ T4490] Bluetooth: hci1: command tx timeout [ 1073.044390][T17737] Bluetooth: hci2: command tx timeout [ 1073.263223][T25612] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 1073.296580][T25612] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 1073.385870][T25586] chnl_net:caif_netlink_parms(): no params data found [ 1073.527573][T25645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'. [ 1073.677488][T25651] tmpfs: Unknown parameter 'fd' [ 1074.040610][ T2465] hsr_slave_0: left promiscuous mode [ 1074.053508][ T2465] hsr_slave_1: left promiscuous mode [ 1074.061684][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.070476][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.079829][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.095612][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.138168][ T2465] veth1_macvtap: left promiscuous mode [ 1074.147367][ T2465] veth0_macvtap: left promiscuous mode [ 1074.157566][ T2465] veth1_vlan: left promiscuous mode [ 1074.166393][ T2465] veth0_vlan: left promiscuous mode [ 1074.172283][T17737] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1074.483429][T17737] Bluetooth: hci3: command tx timeout [ 1074.973393][ T2465] team0 (unregistering): Port device team_slave_1 removed [ 1075.042046][ T2465] team0 (unregistering): Port device team_slave_0 removed [ 1075.852809][T25683] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 1075.884763][T25683] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 1075.950665][T25586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.957888][T25586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.976103][T25586] bridge_slave_0: entered allmulticast mode [ 1075.986085][T25586] bridge_slave_0: entered promiscuous mode [ 1076.000672][T25586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.031919][T25586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.040480][T25586] bridge_slave_1: entered allmulticast mode [ 1076.050342][T25586] bridge_slave_1: entered promiscuous mode [ 1076.221799][T25586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.238987][T17737] Bluetooth: hci2: command tx timeout [ 1076.259140][T25586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.404453][T25586] team0: Port device team_slave_0 added [ 1076.429925][T25586] team0: Port device team_slave_1 added [ 1076.445257][T25487] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1076.477729][T25487] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1076.551640][T25695] tmpfs: Unknown parameter 'fd' [ 1076.562974][T17737] Bluetooth: hci3: command tx timeout [ 1076.570136][T25487] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1076.589013][T25586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.596957][T25586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.634466][T25586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.654339][T25586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.662641][T25586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.673225][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1076.689446][T25586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.711056][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1076.719520][T25487] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1076.727681][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1076.737030][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1076.745821][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1076.754179][ T4490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1076.973472][ T2465] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.106640][T25586] hsr_slave_0: entered promiscuous mode [ 1077.149124][T25586] hsr_slave_1: entered promiscuous mode [ 1077.178838][T25586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1077.186438][T25586] Cannot create hsr debugfs directory [ 1077.306495][ T2465] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.445003][ T29] audit: type=1326 audit(1720225389.110:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25714 comm="syz.3.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ffb75bd9 code=0x7fc00000 [ 1077.471595][ T2465] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.585069][ T2465] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.632255][ T4490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1077.644036][ T4490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1077.658598][ T4490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1077.674589][ T4490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1077.691910][ T4490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1077.700094][ T4490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1078.166654][ T29] audit: type=1326 audit(1720225389.820:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25714 comm="syz.3.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38ffb75bd9 code=0x7fc00000 [ 1078.284648][T25740] netlink: 5300 bytes leftover after parsing attributes in process `syz.3.5088'. [ 1078.296960][T25740] openvswitch: netlink: IP tunnel dst address not specified [ 1078.302792][T25699] chnl_net:caif_netlink_parms(): no params data found [ 1078.361507][ T2465] bridge_slave_1: left allmulticast mode [ 1078.367194][ T2465] bridge_slave_1: left promiscuous mode [ 1078.378978][ T2465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.391213][ T2465] bridge_slave_0: left allmulticast mode [ 1078.396872][ T2465] bridge_slave_0: left promiscuous mode [ 1078.404156][ T2465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.628853][ T4490] Bluetooth: hci3: command tx timeout [ 1078.650247][ T5150] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1078.775771][ T2465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.788272][ T2465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.809425][ T2465] bond0 (unregistering): Released all slaves [ 1078.861613][ T5150] usb 4-1: Using ep0 maxpacket: 16 [ 1078.869237][ T4490] Bluetooth: hci0: command tx timeout [ 1078.881007][ T5150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1078.904862][ T5150] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1078.914836][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.940520][ T5150] usb 4-1: config 0 descriptor?? [ 1079.218376][T25699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.226523][T25699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.235255][T25699] bridge_slave_0: entered allmulticast mode [ 1079.246416][T25699] bridge_slave_0: entered promiscuous mode [ 1079.255115][T25699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.262787][T25699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.272809][T25699] bridge_slave_1: entered allmulticast mode [ 1079.280208][T25699] bridge_slave_1: entered promiscuous mode [ 1079.325178][T25487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.361093][T25699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.374960][T25699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.397559][T25722] chnl_net:caif_netlink_parms(): no params data found [ 1079.454692][T25742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.465369][ T2465] hsr_slave_0: left promiscuous mode [ 1079.465712][T25742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.479484][ T2465] hsr_slave_1: left promiscuous mode [ 1079.488003][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.491998][ T5150] hid (null): invalid report_size 12391 [ 1079.498773][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.501748][ T5150] hid (null): report_id 0 is invalid [ 1079.516981][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.521553][ T5150] hid-generic 0003:0158:0100.001B: unknown main item tag 0x1 [ 1079.524656][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.541581][ T5150] hid-generic 0003:0158:0100.001B: unexpected long global item [ 1079.557095][ T5150] hid-generic 0003:0158:0100.001B: probe with driver hid-generic failed with error -22 [ 1079.564952][ T2465] veth1_macvtap: left promiscuous mode [ 1079.573047][ T2465] veth0_macvtap: left promiscuous mode [ 1079.585177][ T2465] veth1_vlan: left promiscuous mode [ 1079.590805][ T2465] veth0_vlan: left promiscuous mode [ 1079.766111][ T4490] Bluetooth: hci4: command tx timeout [ 1079.789278][ T5150] usb 4-1: USB disconnect, device number 56 [ 1080.164785][ T2465] team0 (unregistering): Port device team_slave_1 removed [ 1080.215898][ T2465] team0 (unregistering): Port device team_slave_0 removed [ 1080.463950][ T4490] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1080.887889][T25751] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 1080.899460][T25751] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 1080.948800][ T4490] Bluetooth: hci0: command tx timeout [ 1080.957877][T25699] team0: Port device team_slave_0 added [ 1081.051188][T25699] team0: Port device team_slave_1 added [ 1081.312622][T25722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.326822][T25722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.342684][T25722] bridge_slave_0: entered allmulticast mode [ 1081.365594][T25722] bridge_slave_0: entered promiscuous mode [ 1081.386628][T25586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1081.407770][T25586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1081.439239][T25487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.448973][T25586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1081.479387][T25699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.486373][T25699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.514093][T25699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.549562][T25699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.556535][T25699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.587288][T25699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.628033][T25722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.659819][T25722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.685749][T25722] bridge_slave_1: entered allmulticast mode [ 1081.710535][T25722] bridge_slave_1: entered promiscuous mode [ 1081.777380][T25586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1081.828842][ T4490] Bluetooth: hci4: command tx timeout [ 1081.893899][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.901091][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.931856][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.939065][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.020074][T25722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.093977][T25699] hsr_slave_0: entered promiscuous mode [ 1082.110809][T25699] hsr_slave_1: entered promiscuous mode [ 1082.132844][T25722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.300984][T25722] team0: Port device team_slave_0 added [ 1082.328937][T25722] team0: Port device team_slave_1 added [ 1082.402693][ T2465] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.470117][ T4490] Bluetooth: hci2: command tx timeout [ 1082.567414][ T2465] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.598112][T25722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.612613][T25722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.655567][T25722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.735055][ T2465] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.756786][T25722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.774931][T25722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.806436][T25722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.913621][ T2465] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.030459][ T4490] Bluetooth: hci0: command tx timeout [ 1083.128097][T25722] hsr_slave_0: entered promiscuous mode [ 1083.143790][T25722] hsr_slave_1: entered promiscuous mode [ 1083.152775][T25814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5093'. [ 1083.161821][T25722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1083.169557][T25722] Cannot create hsr debugfs directory [ 1083.462685][T25586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.583272][T25586] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.620617][ T2465] bridge_slave_1: left allmulticast mode [ 1083.627280][ T2465] bridge_slave_1: left promiscuous mode [ 1083.638545][ T2465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.649089][ T2465] bridge_slave_0: left allmulticast mode [ 1083.654763][ T2465] bridge_slave_0: left promiscuous mode [ 1083.674232][ T2465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.910480][ T4490] Bluetooth: hci4: command tx timeout [ 1084.452986][ T2465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.465422][ T2465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.478072][ T2465] bond0 (unregistering): Released all slaves [ 1084.519682][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.526810][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.646230][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.653471][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.700996][T25487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1085.049816][ T2465] hsr_slave_0: left promiscuous mode [ 1085.055954][ T2465] hsr_slave_1: left promiscuous mode [ 1085.064059][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.072341][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.084071][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.099004][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.109400][ T4490] Bluetooth: hci0: command tx timeout [ 1085.133794][ T2465] veth1_macvtap: left promiscuous mode [ 1085.139798][ T2465] veth0_macvtap: left promiscuous mode [ 1085.145452][ T2465] veth1_vlan: left promiscuous mode [ 1085.151927][ T2465] veth0_vlan: left promiscuous mode [ 1085.686370][ T2465] team0 (unregistering): Port device team_slave_1 removed [ 1085.743841][ T2465] team0 (unregistering): Port device team_slave_0 removed [ 1085.994880][ T4490] Bluetooth: hci4: command tx timeout [ 1086.341149][T25487] veth0_vlan: entered promiscuous mode [ 1086.441866][T25487] veth1_vlan: entered promiscuous mode [ 1086.453872][T25699] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1086.484067][T25699] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1086.572495][T25586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.589197][T25699] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1086.649179][T25699] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1086.860802][T25487] veth0_macvtap: entered promiscuous mode [ 1086.907858][T25487] veth1_macvtap: entered promiscuous mode [ 1086.927356][T25586] veth0_vlan: entered promiscuous mode [ 1087.034091][T25487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.055817][T25487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.083809][ T4490] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1087.088662][T25487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.112678][T25487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.123342][T25487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.135252][T25487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.160660][T25487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.204419][T25586] veth1_vlan: entered promiscuous mode [ 1087.257292][T25487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.280454][T25487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.307033][T25487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.333942][T25487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.364506][T25487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.386274][T25487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.424393][T25487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.494275][T25487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.502323][T25878] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 1087.503601][T25487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.521866][T25878] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 1087.521900][T25487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.538489][T25487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.683437][T25586] veth0_macvtap: entered promiscuous mode [ 1087.762888][T25699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.800851][T25722] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1087.836910][T25586] veth1_macvtap: entered promiscuous mode [ 1087.872588][T25722] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1087.904213][T25722] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1087.993622][T25699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.024640][T25722] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1088.055211][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.062403][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.123968][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.131143][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.186004][T25586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.203536][T25586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.217992][T25586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.235002][T25586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.248344][T25586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.259512][T25586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.269429][T25586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.279990][T25586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.292073][T25586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.329055][T25586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.342007][T25586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.353040][T25586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.363825][T25586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.376461][T25586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.393937][T25586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.405076][T25586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.431388][T25586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.443858][T25586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.490128][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.498243][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.583208][T25586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.601922][T25586] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.618823][T25586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.645324][T25586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.708533][T19938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.734451][T19938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.007492][T19938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.042961][T25722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.056761][T19938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.109555][ T4490] Bluetooth: hci2: command tx timeout [ 1089.139445][T25699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.194921][T25722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.213066][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.252873][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.280445][ T6368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.287579][ T6368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.321077][ T6368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.328232][ T6368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.471245][T25699] veth0_vlan: entered promiscuous mode [ 1089.532528][T25699] veth1_vlan: entered promiscuous mode [ 1089.737336][T25699] veth0_macvtap: entered promiscuous mode [ 1089.802751][T25722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.863453][T25699] veth1_macvtap: entered promiscuous mode [ 1089.962135][T25699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.995490][T25699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.017011][T25699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.040212][T25699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.060839][T25699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.072617][T25699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.087355][T25699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.127104][T25699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.151430][T25699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.173358][T25699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.200995][T25699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.269277][T25699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.282437][T25699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.293475][T25699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.314707][T25699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.336128][T25699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.369578][T25699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.404149][T25699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.437374][T25699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.468370][T25699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.507987][T25699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.546149][T25699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.600692][T25699] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.633928][T25699] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.676943][T25699] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.707107][T25699] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.790618][T25722] veth0_vlan: entered promiscuous mode [ 1090.834948][T25722] veth1_vlan: entered promiscuous mode [ 1090.938869][ T5150] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1091.053358][T19938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.074086][T19938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.127254][T25722] veth0_macvtap: entered promiscuous mode [ 1091.171460][ T5150] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1091.172153][T25722] veth1_macvtap: entered promiscuous mode [ 1091.182388][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.205496][ T2465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.217761][ T5150] usb 4-1: config 0 descriptor?? [ 1091.224468][ T2465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.257272][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.271539][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.282181][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.292825][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.306765][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.317483][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.327833][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.338402][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.349573][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.360125][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.370625][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.381472][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.400583][T25722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.434356][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.445412][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.469258][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.482744][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.492987][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.504198][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.516137][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.538816][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.549278][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.560383][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.570272][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.585280][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.598323][T25722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.618209][T25722] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.628433][T25722] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.637549][T25722] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.655144][T25722] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.664420][ T5150] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1091.807761][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.849508][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.933931][T25996] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1092.453818][ T5150] usb 4-1: USB disconnect, device number 57 [ 1092.479213][T26004] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5137'. [ 1092.601166][ T2465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.648379][ T2465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.054722][T26022] syz_tun: entered promiscuous mode [ 1093.084195][T26022] batadv_slave_0: entered promiscuous mode [ 1094.022160][T26053] syz_tun: entered promiscuous mode [ 1094.031867][T26053] batadv_slave_0: entered promiscuous mode [ 1094.045296][T26053] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1094.054652][T26053] Cannot create hsr debugfs directory [ 1094.363351][T26066] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5161'. [ 1094.443111][T26066] syz_tun (unregistering): left promiscuous mode [ 1094.812705][ T5147] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1094.883558][T26086] netlink: 'syz.2.5169': attribute type 2 has an invalid length. [ 1095.029487][ T5147] usb 5-1: Using ep0 maxpacket: 32 [ 1095.060500][ T5147] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.087325][ T5147] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.137195][ T5147] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1095.162139][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.201863][ T5147] hub 5-1:4.0: USB hub found [ 1095.297157][T26096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5172'. [ 1095.431009][ T5147] hub 5-1:4.0: 2 ports detected [ 1095.448348][ T5147] usb 5-1: selecting invalid altsetting 1 [ 1095.462385][ T5147] hub 5-1:4.0: Using single TT (err -22) [ 1095.646836][ T5147] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 1095.673668][ T5147] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 1095.745128][ T5147] usb 5-1: USB disconnect, device number 55 [ 1096.242314][T26121] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5183'. [ 1096.316105][T26123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5184'. [ 1096.504024][ T4490] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 1096.515413][ T4490] CPU: 1 PID: 4490 Comm: kworker/u9:1 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1096.525673][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1096.535733][ T4490] Workqueue: hci0 hci_rx_work [ 1096.540456][ T4490] Call Trace: [ 1096.543722][ T4490] [ 1096.547100][ T4490] dump_stack_lvl+0x241/0x360 [ 1096.551774][ T4490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1096.556961][ T4490] ? __pfx__printk+0x10/0x10 [ 1096.561545][ T4490] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 1096.566818][ T4490] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 1096.572283][ T4490] sysfs_create_dir_ns+0x2ce/0x3a0 [ 1096.577387][ T4490] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1096.583012][ T4490] kobject_add_internal+0x435/0x8d0 [ 1096.588202][ T4490] kobject_add+0x152/0x220 [ 1096.592608][ T4490] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1096.597789][ T4490] ? device_add+0x3e7/0xbf0 [ 1096.602280][ T4490] ? __pfx_kobject_add+0x10/0x10 [ 1096.607207][ T4490] ? _raw_spin_unlock+0x28/0x50 [ 1096.612043][ T4490] ? get_device_parent+0x165/0x410 [ 1096.617145][ T4490] device_add+0x4e5/0xbf0 [ 1096.621468][ T4490] hci_conn_add_sysfs+0xe8/0x200 [ 1096.626419][ T4490] hci_sync_conn_complete_evt+0x789/0xaa0 [ 1096.632135][ T4490] hci_event_packet+0xac0/0x1540 [ 1096.637064][ T4490] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 1096.643299][ T4490] ? __pfx_hci_event_packet+0x10/0x10 [ 1096.648674][ T4490] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1096.653880][ T4490] ? hci_send_to_monitor+0xd8/0x7f0 [ 1096.659079][ T4490] ? kcov_remote_start+0x9e/0x7e0 [ 1096.664117][ T4490] hci_rx_work+0x3e8/0xca0 [ 1096.668528][ T4490] ? process_scheduled_works+0x945/0x1830 [ 1096.674234][ T4490] process_scheduled_works+0xa2c/0x1830 [ 1096.679787][ T4490] ? __pfx_process_scheduled_works+0x10/0x10 [ 1096.685757][ T4490] ? assign_work+0x364/0x3d0 [ 1096.690339][ T4490] worker_thread+0x86d/0xd50 [ 1096.694923][ T4490] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1096.700805][ T4490] ? __kthread_parkme+0x169/0x1d0 [ 1096.705817][ T4490] ? __pfx_worker_thread+0x10/0x10 [ 1096.710916][ T4490] kthread+0x2f0/0x390 [ 1096.714970][ T4490] ? __pfx_worker_thread+0x10/0x10 [ 1096.720070][ T4490] ? __pfx_kthread+0x10/0x10 [ 1096.724649][ T4490] ret_from_fork+0x4b/0x80 [ 1096.729058][ T4490] ? __pfx_kthread+0x10/0x10 [ 1096.733638][ T4490] ret_from_fork_asm+0x1a/0x30 [ 1096.738399][ T4490] [ 1096.744153][ T4490] kobject: kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1096.758313][ T4490] Bluetooth: hci0: failed to register connection device [ 1097.854035][T26137] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 1097.867815][T26137] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 1098.549250][ T4490] Bluetooth: hci0: command tx timeout [ 1101.078905][ T5149] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1101.284210][ T5149] usb 2-1: config 1 has an invalid interface number: 2 but max is 0 [ 1101.307900][ T5149] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.327972][ T5149] usb 2-1: config 1 has no interface number 0 [ 1101.344626][ T5149] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1101.372498][ T5149] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1101.391671][ T5149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1101.418402][ T5149] usb 2-1: SerialNumber: syz [ 1101.658374][T26292] tap0: tun_chr_ioctl cmd 1074025677 [ 1101.667195][T26292] tap0: linktype set to 6 [ 1101.675809][ T5149] usb 2-1: bad CDC descriptors [ 1103.644627][T26354] tap0: tun_chr_ioctl cmd 1074025677 [ 1103.657073][T26354] tap0: linktype set to 6 [ 1103.809930][ T5152] usb 2-1: USB disconnect, device number 45 [ 1104.010710][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.041827][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.173601][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.332461][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.504359][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.790851][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.896860][ T4490] Bluetooth: hci0: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1105.081739][ C0] vkms_vblank_simulate: vblank timer overrun [ 1105.327251][ C0] vkms_vblank_simulate: vblank timer overrun [ 1107.129764][ T4490] Bluetooth: hci0: command tx timeout [ 1109.321464][T26397] xt_HMARK: proto mask must be zero with L3 mode [ 1110.193590][T26385] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 1110.243878][T26385] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 1111.313530][T26407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5297'. [ 1117.571165][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.577507][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.588068][T26428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5307'. [ 1117.597368][T26426] xt_HMARK: proto mask must be zero with L3 mode [ 1119.605755][T17737] Bluetooth: hci0: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1119.664977][T26436] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 1121.024619][T26436] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 1121.079581][ T5094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1122.017221][ T4490] Bluetooth: hci0: command tx timeout [ 1122.031142][ T5094] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1122.039687][ T5094] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1122.048303][ T5094] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1122.056465][ T5094] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1122.067616][ T5094] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1124.158748][ T5094] Bluetooth: hci5: command tx timeout [ 1124.169586][T26442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5310'. [ 1125.143866][T26449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1128.012046][T17737] Bluetooth: hci5: command tx timeout [ 1128.035833][T26441] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1128.047351][T26441] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1128.058922][T26441] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1128.069099][T26441] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1128.828805][ T6368] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1128.935106][T26462] xt_HMARK: proto mask must be zero with L3 mode [ 1128.949299][T26441] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1128.979098][T26441] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1131.026637][T26441] Bluetooth: hci5: command tx timeout [ 1131.108781][ T5094] Bluetooth: hci6: command tx timeout [ 1131.220237][T26441] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1131.230317][T26441] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1131.239211][T26441] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1131.250411][T26441] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1131.258077][T26441] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1131.266952][T26441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1132.387525][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.422265][T26456] tap0: tun_chr_ioctl cmd 1074025677 [ 1132.427740][T26456] tap0: linktype set to 6 [ 1133.930510][T26441] Bluetooth: hci5: command tx timeout [ 1133.934455][ T5094] Bluetooth: hci6: command tx timeout [ 1133.935972][T26441] Bluetooth: hci1: command tx timeout [ 1136.956167][ T5094] Bluetooth: hci6: command tx timeout [ 1136.962432][ T5094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1136.971729][ T5094] Bluetooth: hci1: command tx timeout [ 1136.981458][T26441] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1136.996790][T26441] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1137.018827][T26441] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1137.026393][T26441] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1137.033981][T26441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1140.058308][T26441] Bluetooth: hci1: command tx timeout [ 1140.063763][T26441] Bluetooth: hci6: command tx timeout [ 1140.101224][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.203071][T17737] Bluetooth: hci2: command tx timeout [ 1144.667955][T17737] Bluetooth: hci2: command tx timeout [ 1144.667999][T26441] Bluetooth: hci1: command tx timeout [ 1147.356255][T17737] Bluetooth: hci2: command tx timeout [ 1147.365597][T25699] syz_tun (unregistering): left promiscuous mode [ 1150.460114][T17737] Bluetooth: hci2: command tx timeout [ 1150.810370][T26501] Cannot find set identified by id 0 to match [ 1159.109785][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.626472][T26443] chnl_net:caif_netlink_parms(): no params data found [ 1180.332882][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1180.339230][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.379691][ T5094] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1180.388260][T26441] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1180.398394][T26443] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1180.420757][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1180.440578][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1180.448831][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1180.475627][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1180.499784][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1180.507226][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1180.702057][T26472] chnl_net:caif_netlink_parms(): no params data found [ 1180.773400][T26480] chnl_net:caif_netlink_parms(): no params data found [ 1180.826563][T26464] chnl_net:caif_netlink_parms(): no params data found [ 1181.016946][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1181.028177][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1181.036912][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1181.047163][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1181.057106][ T5094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1181.065819][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1182.628883][T26441] Bluetooth: hci0: command tx timeout [ 1184.708985][T26441] Bluetooth: hci0: command tx timeout [ 1184.929695][T17737] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1184.939947][T17737] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1184.947974][T17737] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1184.956630][T17737] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1184.968027][T17737] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1184.975852][T17737] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1191.058801][ T5094] Bluetooth: hci0: command tx timeout [ 1191.064342][ T5094] Bluetooth: hci4: command tx timeout [ 1191.071197][ T5094] Bluetooth: hci7: command tx timeout [ 1196.878747][ T5094] Bluetooth: hci7: command tx timeout [ 1196.885389][ T5094] Bluetooth: hci4: command tx timeout [ 1196.890894][ T5094] Bluetooth: hci0: command tx timeout [ 1203.349235][T17737] Bluetooth: hci4: command tx timeout [ 1203.354693][T17737] Bluetooth: hci7: command tx timeout [ 1210.784876][T26441] Bluetooth: hci4: command tx timeout [ 1210.794221][T17737] Bluetooth: hci7: command tx timeout [ 1219.014318][ T5094] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1219.023942][T17737] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1219.079180][ T5094] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1219.118476][ T4490] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1219.138791][T26536] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1219.164528][ T4490] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1219.185894][T26536] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1219.208789][ T4490] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1219.235649][ T4490] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1219.243073][ T4490] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1219.264284][ T4490] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1219.271713][ T4490] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1219.294586][ T4490] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1219.303235][ T4490] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1238.593510][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.609143][ T5094] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1238.647634][T26441] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1238.673129][T26441] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1238.696468][T26441] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1238.716748][T26441] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1238.737037][T26441] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1250.209203][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1250.215536][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.291270][T26480] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 1263.258775][T26441] Bluetooth: hci8: command tx timeout [ 1264.257151][T26554] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1264.290773][T26557] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1264.314281][T26559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1264.323433][T26559] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1264.334412][T26557] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1264.357839][T26557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1264.365905][T26557] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1264.378153][T26559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1264.398926][T26559] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1264.424799][T26559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1264.439092][T26557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1264.458915][T26557] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1264.480597][T26559] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1264.499090][T26557] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1264.509087][T26557] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1264.516174][T26557] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1264.529388][T26559] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1264.550218][T26559] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1279.082775][T26557] Bluetooth: hci8: command tx timeout [ 1279.088229][T26557] Bluetooth: hci2: command 0x0406 tx timeout [ 1279.095108][T26557] Bluetooth: hci1: command 0x0406 tx timeout [ 1296.265161][ T5094] Bluetooth: hci8: command tx timeout [ 1296.812023][T26572] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1296.836941][T26574] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1296.860603][T26572] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1296.883038][T26574] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1296.906270][T26572] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1296.918543][T26574] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1296.943996][T26572] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1296.966260][T26572] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1296.993968][T26574] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1297.016581][T26574] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1297.024100][T26574] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1297.049047][T26574] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1315.617642][T26557] Bluetooth: hci8: command tx timeout [ 1315.629534][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.635879][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1384.118713][ T30] INFO: task kworker/u8:4:61 blocked for more than 173 seconds. [ 1384.126417][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1384.218684][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1384.227580][ T30] task:kworker/u8:4 state:D stack:20272 pid:61 tgid:61 ppid:2 flags:0x00004000 [ 1384.288736][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 1384.295054][ T30] Call Trace: [ 1384.298340][ T30] [ 1384.318678][ T30] __schedule+0x17e8/0x4a20 [ 1384.323259][ T30] ? __pfx___schedule+0x10/0x10 [ 1384.328220][ T30] ? __pfx_lock_release+0x10/0x10 [ 1384.348709][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1384.354226][ T30] ? kthread_data+0x52/0xd0 [ 1384.368746][ T30] ? schedule+0x90/0x320 [ 1384.373037][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1384.389455][ T30] ? schedule+0x90/0x320 [ 1384.393765][ T30] schedule+0x14b/0x320 [ 1384.397937][ T30] schedule_preempt_disabled+0x13/0x30 [ 1384.419563][ T30] __mutex_lock+0x6a4/0xd70 [ 1384.424130][ T30] ? __mutex_lock+0x527/0xd70 [ 1384.428903][ T30] ? addrconf_verify_work+0x19/0x30 [ 1384.434117][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1384.448747][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1384.454789][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1384.478758][ T30] ? process_scheduled_works+0x945/0x1830 [ 1384.484538][ T30] addrconf_verify_work+0x19/0x30 [ 1384.498717][ T30] process_scheduled_works+0xa2c/0x1830 [ 1384.504344][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1384.528720][ T30] ? assign_work+0x364/0x3d0 [ 1384.533370][ T30] worker_thread+0x86d/0xd50 [ 1384.538027][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1384.558724][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1384.563897][ T30] kthread+0x2f0/0x390 [ 1384.567981][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1384.582131][ T30] ? __pfx_kthread+0x10/0x10 [ 1384.586785][ T30] ret_from_fork+0x4b/0x80 [ 1384.591956][ T30] ? __pfx_kthread+0x10/0x10 [ 1384.596589][ T30] ret_from_fork_asm+0x1a/0x30 [ 1384.601499][ T30] [ 1384.604603][ T30] INFO: task kworker/1:6:6368 blocked for more than 173 seconds. [ 1384.612395][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1384.620087][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1384.628822][ T30] task:kworker/1:6 state:D stack:19472 pid:6368 tgid:6368 ppid:2 flags:0x00004000 [ 1384.639078][ T30] Workqueue: events linkwatch_event [ 1384.644297][ T30] Call Trace: [ 1384.647578][ T30] [ 1384.650615][ T30] __schedule+0x17e8/0x4a20 [ 1384.655155][ T30] ? __pfx___schedule+0x10/0x10 [ 1384.660116][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1384.666286][ T30] ? __pfx_lock_release+0x10/0x10 [ 1384.671379][ T30] ? kick_pool+0x45c/0x620 [ 1384.675811][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1384.681837][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1384.687055][ T30] ? schedule+0x90/0x320 [ 1384.691874][ T30] schedule+0x14b/0x320 [ 1384.696045][ T30] schedule_preempt_disabled+0x13/0x30 [ 1384.701718][ T30] __mutex_lock+0x6a4/0xd70 [ 1384.706280][ T30] ? __mutex_lock+0x527/0xd70 [ 1384.711313][ T30] ? linkwatch_event+0xe/0x60 [ 1384.716016][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1384.721299][ T30] ? process_scheduled_works+0x945/0x1830 [ 1384.727059][ T30] linkwatch_event+0xe/0x60 [ 1384.731711][ T30] process_scheduled_works+0xa2c/0x1830 [ 1384.737299][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1384.743462][ T30] ? assign_work+0x364/0x3d0 [ 1384.748078][ T30] worker_thread+0x86d/0xd50 [ 1384.752746][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1384.758739][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1384.763959][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1384.769157][ T30] kthread+0x2f0/0x390 [ 1384.773326][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1384.778449][ T30] ? __pfx_kthread+0x10/0x10 [ 1384.783744][ T30] ret_from_fork+0x4b/0x80 [ 1384.788182][ T30] ? __pfx_kthread+0x10/0x10 [ 1384.793345][ T30] ret_from_fork_asm+0x1a/0x30 [ 1384.798153][ T30] [ 1384.801283][ T30] INFO: task syz-executor:26526 blocked for more than 173 seconds. [ 1384.809259][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1384.816905][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1384.825664][ T30] task:syz-executor state:D stack:25808 pid:26526 tgid:26526 ppid:1 flags:0x00004006 [ 1384.835952][ T30] Call Trace: [ 1384.839563][ T30] [ 1384.842508][ T30] __schedule+0x17e8/0x4a20 [ 1384.847047][ T30] ? __pfx___schedule+0x10/0x10 [ 1384.851983][ T30] ? __pfx_lock_release+0x10/0x10 [ 1384.857021][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1384.862542][ T30] ? schedule+0x90/0x320 [ 1384.866811][ T30] schedule+0x14b/0x320 [ 1384.871036][ T30] schedule_preempt_disabled+0x13/0x30 [ 1384.876503][ T30] __mutex_lock+0x6a4/0xd70 [ 1384.881073][ T30] ? __mutex_lock+0x527/0xd70 [ 1384.886876][ T30] ? ip_tunnel_init_net+0x20e/0x710 [ 1384.892197][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1384.897255][ T30] ip_tunnel_init_net+0x20e/0x710 [ 1384.902340][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1384.907935][ T30] ops_init+0x359/0x610 [ 1384.912263][ T30] setup_net+0x515/0xca0 [ 1384.916524][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1384.922123][ T30] ? __pfx_setup_net+0x10/0x10 [ 1384.926995][ T30] copy_net_ns+0x4e2/0x7b0 [ 1384.931513][ T30] create_new_namespaces+0x425/0x7b0 [ 1384.936819][ T30] ? bpf_lsm_capable+0x9/0x10 [ 1384.941605][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 1384.947337][ T30] ksys_unshare+0x619/0xc10 [ 1384.951977][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1384.957021][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1384.963056][ T30] ? do_syscall_64+0x100/0x230 [ 1384.967844][ T30] __x64_sys_unshare+0x38/0x40 [ 1384.972711][ T30] do_syscall_64+0xf3/0x230 [ 1384.977230][ T30] ? clear_bhb_loop+0x35/0x90 [ 1384.982057][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.989152][ T30] RIP: 0033:0x7f7518d77337 [ 1384.993592][ T30] RSP: 002b:00007f751902ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1385.002101][ T30] RAX: ffffffffffffffda RBX: 00007f7518de4be6 RCX: 00007f7518d77337 [ 1385.010150][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1385.018128][ T30] RBP: 0000000000000000 R08: 00007f7519a37d60 R09: 0000000000000000 [ 1385.026172][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 1385.034233][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1385.042394][ T30] [ 1385.045427][ T30] INFO: task syz-executor:26539 blocked for more than 146 seconds. [ 1385.053366][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1385.061087][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1385.069809][ T30] task:syz-executor state:D stack:26256 pid:26539 tgid:26539 ppid:1 flags:0x00004004 [ 1385.080130][ T30] Call Trace: [ 1385.083421][ T30] [ 1385.086363][ T30] __schedule+0x17e8/0x4a20 [ 1385.091556][ T30] ? __pfx___schedule+0x10/0x10 [ 1385.096425][ T30] ? __pfx_lock_release+0x10/0x10 [ 1385.102013][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1385.107522][ T30] ? schedule+0x90/0x320 [ 1385.111905][ T30] schedule+0x14b/0x320 [ 1385.116519][ T30] schedule_preempt_disabled+0x13/0x30 [ 1385.122067][ T30] __mutex_lock+0x6a4/0xd70 [ 1385.126588][ T30] ? __mutex_lock+0x527/0xd70 [ 1385.131338][ T30] ? register_nexthop_notifier+0x84/0x290 [ 1385.137076][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1385.142194][ T30] ? __asan_memset+0x23/0x50 [ 1385.146799][ T30] register_nexthop_notifier+0x84/0x290 [ 1385.152481][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1385.158303][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 1385.164549][ T30] ? __asan_memset+0x23/0x50 [ 1385.169204][ T30] ops_init+0x359/0x610 [ 1385.173388][ T30] setup_net+0x515/0xca0 [ 1385.177635][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1385.183344][ T30] ? __pfx_setup_net+0x10/0x10 [ 1385.188130][ T30] copy_net_ns+0x4e2/0x7b0 [ 1385.193714][ T30] create_new_namespaces+0x425/0x7b0 [ 1385.199737][ T30] ? bpf_lsm_capable+0x9/0x10 [ 1385.204445][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 1385.210327][ T30] ksys_unshare+0x619/0xc10 [ 1385.214853][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1385.219990][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1385.226075][ T30] ? do_syscall_64+0x100/0x230 [ 1385.230941][ T30] __x64_sys_unshare+0x38/0x40 [ 1385.235718][ T30] do_syscall_64+0xf3/0x230 [ 1385.240358][ T30] ? clear_bhb_loop+0x35/0x90 [ 1385.245048][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.251007][ T30] RIP: 0033:0x7f64b8577337 [ 1385.255443][ T30] RSP: 002b:00007f64b882ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1385.263931][ T30] RAX: ffffffffffffffda RBX: 00007f64b85e4be6 RCX: 00007f64b8577337 [ 1385.272465][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1385.280516][ T30] RBP: 0000000000000000 R08: 00007f64b9237d60 R09: 0000000000000000 [ 1385.288493][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 1385.297158][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1385.305718][ T30] [ 1385.308785][ T30] INFO: task syz-executor:26540 blocked for more than 146 seconds. [ 1385.317026][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1385.324824][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1385.333537][ T30] task:syz-executor state:D stack:26784 pid:26540 tgid:26540 ppid:1 flags:0x00004004 [ 1385.343824][ T30] Call Trace: [ 1385.347111][ T30] [ 1385.350424][ T30] __schedule+0x17e8/0x4a20 [ 1385.354966][ T30] ? __pfx___schedule+0x10/0x10 [ 1385.360068][ T30] ? __pfx_lock_release+0x10/0x10 [ 1385.365107][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1385.370634][ T30] ? schedule+0x90/0x320 [ 1385.374889][ T30] schedule+0x14b/0x320 [ 1385.379152][ T30] schedule_preempt_disabled+0x13/0x30 [ 1385.384653][ T30] __mutex_lock+0x6a4/0xd70 [ 1385.389275][ T30] ? __mutex_lock+0x527/0xd70 [ 1385.394000][ T30] ? register_nexthop_notifier+0x84/0x290 [ 1385.400531][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1385.405624][ T30] ? __asan_memset+0x23/0x50 [ 1385.411013][ T30] register_nexthop_notifier+0x84/0x290 [ 1385.416589][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1385.422631][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 1385.428908][ T30] ? __asan_memset+0x23/0x50 [ 1385.433515][ T30] ops_init+0x359/0x610 [ 1385.437693][ T30] setup_net+0x515/0xca0 [ 1385.442014][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1385.447579][ T30] ? __pfx_setup_net+0x10/0x10 [ 1385.452425][ T30] copy_net_ns+0x4e2/0x7b0 [ 1385.456864][ T30] create_new_namespaces+0x425/0x7b0 [ 1385.462238][ T30] ? bpf_lsm_capable+0x9/0x10 [ 1385.466938][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 1385.472710][ T30] ksys_unshare+0x619/0xc10 [ 1385.477258][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1385.482475][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1385.488564][ T30] ? do_syscall_64+0x100/0x230 [ 1385.493393][ T30] __x64_sys_unshare+0x38/0x40 [ 1385.498169][ T30] do_syscall_64+0xf3/0x230 [ 1385.503407][ T30] ? clear_bhb_loop+0x35/0x90 [ 1385.508104][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.514567][ T30] RIP: 0033:0x7faaccb77337 [ 1385.519060][ T30] RSP: 002b:00007faacce2ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1385.527499][ T30] RAX: ffffffffffffffda RBX: 00007faaccbe4be6 RCX: 00007faaccb77337 [ 1385.535619][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1385.543673][ T30] RBP: 0000000000000000 R08: 00007faacd837d60 R09: 0000000000000000 [ 1385.551686][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 1385.559925][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1385.567924][ T30] [ 1385.571027][ T30] [ 1385.571027][ T30] Showing all locks held in the system: [ 1385.578810][ T30] 1 lock held by khungtaskd/30: [ 1385.583670][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1385.593593][ T30] 6 locks held by kworker/u8:2/35: [ 1385.598937][ T30] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1385.610627][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1385.621837][ T30] #2: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1385.631372][ T30] #3: ffff88807c5300e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 1385.641586][ T30] #4: ffff88807c537250 (&devlink->lock_key#137){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 1385.652631][ T30] #5: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1385.663464][ T30] 3 locks held by kworker/u8:4/61: [ 1385.668579][ T30] #0: ffff88802a588148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1385.680277][ T30] #1: ffffc900015c7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1385.694032][ T30] #2: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1385.703624][ T30] 4 locks held by kworker/u8:6/953: [ 1385.709481][ T30] 5 locks held by kworker/u8:9/2900: [ 1385.714772][ T30] 5 locks held by kworker/u9:1/4490: [ 1385.720634][ T30] #0: ffff88802c796948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1385.731555][ T30] #1: ffffc9000d96fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1385.744254][ T30] #2: ffff888028e9cd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1385.754262][ T30] #3: ffff888028e9c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1385.764036][ T30] #4: ffffffff8f751508 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 1385.773890][ T30] 2 locks held by getty/4847: [ 1385.778570][ T30] #0: ffff88802ab2c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1385.788415][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1385.798663][ T30] 4 locks held by kworker/u9:2/5094: [ 1385.803950][ T30] #0: ffff888046e8b948 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1385.816125][ T30] #1: ffffc90004057d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1385.829012][ T30] #2: ffff888069ca4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 1385.839063][ T30] #3: ffffffff8f751508 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 1385.849604][ T30] 2 locks held by kworker/0:5/5150: [ 1385.854804][ T30] 3 locks held by kworker/1:5/5153: [ 1385.860058][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1385.871195][ T30] #1: ffffc90004627d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1385.882266][ T30] #2: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1385.892694][ T30] 3 locks held by kworker/1:6/6368: [ 1385.897892][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1385.909107][ T30] #1: ffffc90004047d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1385.921451][ T30] #2: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1385.930625][ T30] 5 locks held by kworker/u9:0/17737: [ 1385.935999][ T30] #0: ffff88802c13f948 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1385.946867][ T30] #1: ffffc90004117d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1385.959601][ T30] #2: ffff888059f98d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1385.969548][ T30] #3: ffff888059f98078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1385.979300][ T30] #4: ffffffff8f751508 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 1385.989117][ T30] 5 locks held by kworker/u9:3/26441: [ 1385.994489][ T30] #0: ffff888063aa0148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1386.005376][ T30] #1: ffffc90005097d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1386.018652][ T30] #2: ffff8880778d4d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1386.029295][ T30] #3: ffff8880778d4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1386.039038][ T30] #4: ffffffff8f751508 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 1386.048879][ T30] 1 lock held by syz-executor/26443: [ 1386.054164][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1386.063225][ T30] 1 lock held by syz-executor/26464: [ 1386.068511][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1386.077589][ T30] 1 lock held by syz-executor/26472: [ 1386.082932][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1386.092537][ T30] 1 lock held by syz.2.5330/26502: [ 1386.097648][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1386.106703][ T30] 2 locks held by syz-executor/26522: [ 1386.112208][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1386.122283][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 1386.132181][ T30] 2 locks held by syz-executor/26526: [ 1386.137561][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1386.147066][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x710 [ 1386.156657][ T30] 2 locks held by syz-executor/26531: [ 1386.162082][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1386.171560][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x710 [ 1386.181109][ T30] 5 locks held by kworker/u9:4/26536: [ 1386.186484][ T30] 2 locks held by syz-executor/26539: [ 1386.191943][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1386.201427][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1386.211530][ T30] 2 locks held by syz-executor/26540: [ 1386.218158][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1386.227718][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1386.238070][ T30] 2 locks held by syz-executor/26543: [ 1386.243499][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1386.253003][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1386.263111][ T30] 4 locks held by kworker/u9:5/26551: [ 1386.268485][ T30] #0: ffff888029f22948 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1386.279704][ T30] #1: ffffc90004697d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1386.291807][ T30] #2: ffff88806c92c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 1386.301841][ T30] #3: ffffffff8f751508 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 1386.312382][ T30] 4 locks held by kworker/u9:6/26554: [ 1386.317754][ T30] #0: ffff888059cd0948 ((wq_completion)hci6#4){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1386.329426][ T30] #1: ffffc90003ff7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1386.342037][ T30] #2: ffff88806c928078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 1386.352074][ T30] #3: ffffffff8f751508 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 1386.362671][ T30] 5 locks held by kworker/u9:7/26557: [ 1386.368082][ T30] #0: ffff888060f6e148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1386.379044][ T30] #1: ffffc9000376fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1386.391716][ T30] #2: ffff88806b6f8d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1386.402675][ T30] #3: ffff88806b6f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1386.419383][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1386.426849][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1386.445450][T26577] Bluetooth: hci7: command 0x0406 tx timeout [ 1386.451790][T26577] Bluetooth: hci10: command tx timeout [ 1386.458412][T26577] Bluetooth: hci4: command 0x0406 tx timeout [ 1386.466127][T26577] Bluetooth: hci9: command tx timeout [ 1386.473865][T26577] Bluetooth: hci0: command tx timeout [ 1386.482802][ T30] #4: ffffffff8f751508 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 1386.495527][ T30] 4 locks held by kworker/u9:8/26559: [ 1386.501577][ T30] #0: ffff88806c9c4948 ((wq_completion)hci3#3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1386.512715][ T30] #1: ffffc9000369fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1386.525442][ T30] #2: ffff88804ecf8078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 1386.536048][ T30] #3: ffffffff8f751508 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 1386.551647][ T30] 2 locks held by syz-executor/26560: [ 1386.557045][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1386.569222][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1386.580025][ T30] 2 locks held by syz-executor/26561: [ 1386.585407][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1386.594901][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1386.606510][ T30] 2 locks held by syz-executor/26562: [ 1386.613220][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1386.622865][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1386.634873][ T30] 1 lock held by dhcpcd/26563: [ 1386.641042][ T30] #0: ffff8880561e5010 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1386.651386][ T30] 4 locks held by kworker/u9:9/26572: [ 1386.656760][ T30] #0: ffff8880475d7948 ((wq_completion)hci5#4){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1386.668128][ T30] #1: ffffc9000340fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1386.680286][ T30] #2: ffff888057894078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 1386.690305][ T30] #3: ffffffff8f751508 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 1386.700870][ T30] 2 locks held by syz-executor/26575: [ 1386.706246][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1386.715825][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1386.725947][ T30] 2 locks held by syz-executor/26576: [ 1386.731993][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1386.741978][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1386.752067][ T30] 3 locks held by kworker/u9:11/26577: [ 1386.757527][ T30] #0: ffff888048c2f948 ((wq_completion)hci13){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1386.768514][ T30] #1: ffffc9000359fd00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1386.798837][ T30] #2: ffff888048c30d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 1386.808325][ T30] [ 1386.828694][ T30] ============================================= [ 1386.828694][ T30] [ 1386.838558][ T30] NMI backtrace for cpu 1 [ 1386.842924][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1386.852818][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1386.862872][ T30] Call Trace: [ 1386.866154][ T30] [ 1386.869086][ T30] dump_stack_lvl+0x241/0x360 [ 1386.873874][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1386.879172][ T30] ? __pfx__printk+0x10/0x10 [ 1386.883769][ T30] ? vprintk_emit+0x631/0x770 [ 1386.888456][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1386.893498][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1386.898451][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1386.903911][ T30] ? _printk+0xd5/0x120 [ 1386.908072][ T30] ? __pfx__printk+0x10/0x10 [ 1386.912685][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1386.917632][ T30] ? __pfx__printk+0x10/0x10 [ 1386.922233][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1386.927267][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1386.933264][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1386.939255][ T30] watchdog+0xfde/0x1020 [ 1386.943512][ T30] ? watchdog+0x1ea/0x1020 [ 1386.947939][ T30] ? __pfx_watchdog+0x10/0x10 [ 1386.952619][ T30] kthread+0x2f0/0x390 [ 1386.956701][ T30] ? __pfx_watchdog+0x10/0x10 [ 1386.961388][ T30] ? __pfx_kthread+0x10/0x10 [ 1386.965984][ T30] ret_from_fork+0x4b/0x80 [ 1386.970405][ T30] ? __pfx_kthread+0x10/0x10 [ 1386.974999][ T30] ret_from_fork_asm+0x1a/0x30 [ 1386.979786][ T30] [ 1386.983641][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1386.989512][ C0] NMI backtrace for cpu 0 [ 1386.989526][ C0] CPU: 0 PID: 953 Comm: kworker/u8:6 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1386.989544][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1386.989556][ C0] Workqueue: bat_events batadv_nc_worker [ 1386.989579][ C0] RIP: 0010:__lock_acquire+0xf21/0x1fd0 [ 1386.989600][ C0] Code: 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 80 75 fa 92 be 08 00 00 00 e8 17 62 89 00 48 0f a3 1d 4f f8 87 11 <0f> 83 56 02 00 00 48 69 c3 c8 00 00 00 48 8d 98 80 d4 c8 92 48 bf [ 1386.989614][ C0] RSP: 0018:ffffc90000007a30 EFLAGS: 00000057 [ 1386.989627][ C0] RAX: 0000000000000001 RBX: 0000000000000021 RCX: ffffffff81727d29 [ 1386.989639][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff92fa7580 [ 1386.989651][ C0] RBP: fc5f49dca7b01222 R08: ffffffff92fa7587 R09: 1ffffffff25f4eb0 [ 1386.989664][ C0] R10: dffffc0000000000 R11: fffffbfff25f4eb1 R12: ffff888020dd9e00 [ 1386.989677][ C0] R13: ffff888020dd9e00 R14: 0000000000000001 R15: ffff888020dd9e00 [ 1386.989689][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1386.989703][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1386.989716][ C0] CR2: 0000561145ae2558 CR3: 0000000079baa000 CR4: 00000000003506f0 [ 1386.989731][ C0] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 1386.989742][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1386.989752][ C0] Call Trace: [ 1386.989760][ C0] [ 1386.989767][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1386.989785][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1386.989802][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1386.989826][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1386.989843][ C0] ? nmi_handle+0x14f/0x5a0 [ 1386.989865][ C0] ? nmi_handle+0x2a/0x5a0 [ 1386.989885][ C0] ? __lock_acquire+0xf21/0x1fd0 [ 1386.989902][ C0] ? default_do_nmi+0x63/0x160 [ 1386.989919][ C0] ? exc_nmi+0x123/0x1f0 [ 1386.989935][ C0] ? end_repeat_nmi+0xf/0x53 [ 1386.989959][ C0] ? __lock_acquire+0xf19/0x1fd0 [ 1386.989976][ C0] ? __lock_acquire+0xf21/0x1fd0 [ 1386.989992][ C0] ? __lock_acquire+0xf21/0x1fd0 [ 1386.990009][ C0] ? __lock_acquire+0xf21/0x1fd0 [ 1386.990026][ C0] [ 1386.990032][ C0] [ 1386.990045][ C0] lock_acquire+0x1ed/0x550 [ 1386.990061][ C0] ? advance_sched+0xab/0xca0 [ 1386.990085][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1386.990102][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1386.990120][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 1386.990141][ C0] ? __pfx_lock_release+0x10/0x10 [ 1386.990159][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1386.990179][ C0] _raw_spin_lock+0x2e/0x40 [ 1386.990200][ C0] ? advance_sched+0xab/0xca0 [ 1386.990219][ C0] advance_sched+0xab/0xca0 [ 1386.990240][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1386.990256][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1386.990275][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1386.990295][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 1386.990315][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1386.990339][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1386.990362][ C0] hrtimer_interrupt+0x396/0x990 [ 1386.990391][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1386.990419][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1386.990439][ C0] [ 1386.990445][ C0] [ 1386.990451][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1386.990472][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 1386.990489][ C0] Code: 2b 00 74 08 4c 89 f7 e8 2a 73 89 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1386.990502][ C0] RSP: 0018:ffffc90003fc79e0 EFLAGS: 00000206 [ 1386.990516][ C0] RAX: 0000000000000001 RBX: 1ffff920007f8f48 RCX: 0000000000000001 [ 1386.990527][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe9c0 [ 1386.990540][ C0] RBP: ffffc90003fc7b40 R08: ffffffff92fa7587 R09: 1ffffffff25f4eb0 [ 1386.990552][ C0] R10: dffffc0000000000 R11: fffffbfff25f4eb1 R12: 1ffff920007f8f44 [ 1386.990565][ C0] R13: dffffc0000000000 R14: ffffc90003fc7a40 R15: 0000000000000246 [ 1386.990587][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1386.990605][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1386.990623][ C0] ? __pfx_lock_release+0x10/0x10 [ 1386.990641][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1386.990661][ C0] batadv_nc_worker+0xec/0x610 [ 1386.990679][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1386.990696][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1386.990715][ C0] ? process_scheduled_works+0x945/0x1830 [ 1386.990731][ C0] process_scheduled_works+0xa2c/0x1830 [ 1386.990759][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1386.990779][ C0] ? assign_work+0x364/0x3d0 [ 1386.990796][ C0] worker_thread+0x86d/0xd50 [ 1386.990816][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1386.990834][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1386.990853][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1386.990869][ C0] kthread+0x2f0/0x390 [ 1386.990886][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1386.990902][ C0] ? __pfx_kthread+0x10/0x10 [ 1386.990920][ C0] ret_from_fork+0x4b/0x80 [ 1386.990938][ C0] ? __pfx_kthread+0x10/0x10 [ 1386.990955][ C0] ret_from_fork_asm+0x1a/0x30 [ 1386.990981][ C0] [ 1387.512885][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1387.519752][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1387.529651][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1387.539711][ T30] Call Trace: [ 1387.542993][ T30] [ 1387.545926][ T30] dump_stack_lvl+0x241/0x360 [ 1387.550623][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1387.555859][ T30] ? __pfx__printk+0x10/0x10 [ 1387.560457][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1387.566470][ T30] ? vscnprintf+0x5d/0x90 [ 1387.570806][ T30] panic+0x349/0x860 [ 1387.574711][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1387.580886][ T30] ? __pfx_panic+0x10/0x10 [ 1387.585331][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1387.590804][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1387.596375][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1387.601770][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1387.607944][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1387.614106][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1387.620267][ T30] watchdog+0x101d/0x1020 [ 1387.624612][ T30] ? watchdog+0x1ea/0x1020 [ 1387.629060][ T30] ? __pfx_watchdog+0x10/0x10 [ 1387.633766][ T30] kthread+0x2f0/0x390 [ 1387.637856][ T30] ? __pfx_watchdog+0x10/0x10 [ 1387.642637][ T30] ? __pfx_kthread+0x10/0x10 [ 1387.647242][ T30] ret_from_fork+0x4b/0x80 [ 1387.651671][ T30] ? __pfx_kthread+0x10/0x10 [ 1387.656267][ T30] ret_from_fork_asm+0x1a/0x30 [ 1387.661061][ T30] [ 1388.780981][ T30] Shutting down cpus with NMI [ 1388.785903][ T30] Kernel Offset: disabled [ 1388.790235][ T30] Rebooting in 86400 seconds..