last executing test programs: 5.733299817s ago: executing program 4 (id=2328): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) 5.655030843s ago: executing program 4 (id=2329): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unshare(0x0) 5.340074801s ago: executing program 1 (id=2331): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x8001}, {0x0, 0x0, 0x1000}], 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) semctl$GETVAL(r0, 0x2, 0xc, 0x0) 4.98284833s ago: executing program 4 (id=2336): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033", @ANYRES32=0x0, @ANYRES32=0x0], 0x138}}, 0x0) 4.860023494s ago: executing program 4 (id=2338): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000002140)=0x0) io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f0000002180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 4.337263942s ago: executing program 1 (id=2343): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "178f1f00003589e68a97f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f893098d39af14c329d56ad59300", 0x3}, 0x48, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x3d, 0x79, 0x40, 0x1ac7, 0x1, 0xcc19, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x93, 0x2c, 0xf4}}]}}]}}, 0x0) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, r0) 4.186423018s ago: executing program 3 (id=2346): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite6\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/257, 0x101}], 0x1, 0xa3, 0x0) 4.029429257s ago: executing program 3 (id=2348): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 3.889811257s ago: executing program 3 (id=2351): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) 3.809607985s ago: executing program 4 (id=2352): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000010c0)={0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r1}, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.534638004s ago: executing program 4 (id=2354): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@dev, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x80000, @empty}, 0x1c) 2.899105004s ago: executing program 2 (id=2360): r0 = socket(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x22812, r0, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x36, &(0x7f0000001d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x328, 0x208, 0x328, 0x0, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'macvtap0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00', [], [], 'nicvf0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 2.752088393s ago: executing program 1 (id=2361): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000001500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)='\x00', 0x1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 2.532371937s ago: executing program 2 (id=2363): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, r1, 0xe7d02281b1d40d47, 0x0, 0x0, {0x81}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0x14, 0x6, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x2c}}, 0x0) 2.404929485s ago: executing program 3 (id=2365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x3c}}, 0x0) 2.131793263s ago: executing program 2 (id=2366): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '(#\a', 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x22, 0xa}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}, @generic={0x2, 0x4, "67ca"}, @mptcp=@synack={0x1e, 0x10}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) 2.027834781s ago: executing program 3 (id=2367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0xdf06, @empty}, 0x1c) shutdown(r0, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x120fc0aaa6594540, &(0x7f00000003c0)={0xa, 0x4e20, 0x204, @mcast2, 0x9}, 0x1c) 1.999847389s ago: executing program 1 (id=2368): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16=r0], 0x0) 1.677432204s ago: executing program 3 (id=2370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 1.507619995s ago: executing program 2 (id=2371): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./bus\x00', 0xa3000040) utime(&(0x7f0000000080)='./bus\x00', 0x0) 1.282429029s ago: executing program 2 (id=2373): r0 = syz_io_uring_setup(0x94, &(0x7f0000000380)={0x0, 0x0, 0x80, 0xfffffffd, 0xfffffffd}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x600000, 0x2, 0x9}, 0x0, 0x18, 0x0, 0x23456}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.107356936s ago: executing program 2 (id=2374): syz_usb_connect(0x5, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) 976.264736ms ago: executing program 0 (id=2375): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) unshare(0x26020280) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r0, r0], 0x2}, 0x58) 618.239002ms ago: executing program 0 (id=2376): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040)="b3", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x9c) 513.436333ms ago: executing program 0 (id=2377): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x8, @fd_index=0x6, 0x3, 0x9, 0x3, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 357.445555ms ago: executing program 0 (id=2378): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host}, {@local}, 0x400, "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"}, 0x418}) 344.504024ms ago: executing program 1 (id=2379): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}], 0x20}}], 0x1, 0x0) 214.99992ms ago: executing program 0 (id=2380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x204, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r1, r0, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000000)=""/24, 0x12}, {0x0}], 0x1000000000000374, 0x0, 0x0) 152.386989ms ago: executing program 1 (id=2381): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=@setlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}, @IFLA_MTU={0x8, 0x4, 0x6a9}]}, 0x50}}, 0x0) 0s ago: executing program 0 (id=2382): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2], 0x54}}, 0x0) kernel console output (not intermixed with test programs): ] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.826815][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.836129][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.845271][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.854510][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.863349][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.872572][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.884883][T10149] ldm_validate_partition_table(): Disk read failed. [ 270.895109][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.904307][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.918601][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.933998][T10149] Dev loop6: unable to read RDB block 0 [ 270.946275][T10149] loop6: unable to read partition table [ 270.963509][T10149] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 271.022791][ T4680] ldm_validate_partition_table(): Disk read failed. [ 271.023100][ T9961] veth0_vlan: entered promiscuous mode [ 271.055089][ T4680] Dev loop6: unable to read RDB block 0 [ 271.068003][ T9961] veth1_vlan: entered promiscuous mode [ 271.102738][ T4680] loop6: unable to read partition table [ 271.153951][ T9961] veth0_macvtap: entered promiscuous mode [ 271.198940][ T9961] veth1_macvtap: entered promiscuous mode [ 271.270443][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.299831][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.323005][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.347250][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.363416][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.382864][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.393363][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.411962][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.442163][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.452800][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.462861][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.474078][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.486485][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.496397][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.507194][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.517137][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.527729][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.537751][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.548216][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.558457][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.569039][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.579618][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.590862][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.600771][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.611239][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.622443][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.631713][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1563'. [ 271.706072][ T9961] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.723356][ T9961] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.754679][ T9961] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.773659][ T9961] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.077081][ T929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.115324][ T5233] Bluetooth: hci2: command tx timeout [ 272.123153][ T929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.302925][ T5765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.335768][ T5765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.583675][T10204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1575'. [ 273.026960][T10227] trusted_key: encrypted_key: keyword 'upZate' not recognized [ 273.110037][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1587'. [ 273.551554][T10255] tun0: tun_chr_ioctl cmd 1074025677 [ 273.560954][T10255] tun0: linktype set to 825 [ 273.875599][ T5233] Bluetooth: hci3: command tx timeout [ 274.136352][T10279] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 274.195037][ T5233] Bluetooth: hci2: command tx timeout [ 274.337880][T10279] vhci_hcd: default hub control req: 6012 v0002 i0006 l0 [ 274.515011][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 274.692144][ T8] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 274.715856][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.747789][ T8] usb 5-1: config 0 descriptor?? [ 274.798032][ T8] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 274.958338][T10311] netlink: 'syz.2.1625': attribute type 3 has an invalid length. [ 275.033076][ T29] audit: type=1804 audit(1727033259.898:18): pid=10313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1626" name="/" dev="pidfs" ino=10612 res=1 errno=0 [ 275.222229][T10323] sctp: [Deprecated]: syz.2.1631 (pid 10323) Use of int in maxseg socket option. [ 275.222229][T10323] Use struct sctp_assoc_value instead [ 275.386286][T10332] netlink: 'syz.2.1635': attribute type 8 has an invalid length. [ 275.394351][T10332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1635'. [ 275.603652][ T8] gspca_sunplus: reg_w_riv err -71 [ 275.609479][ T8] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 275.619903][ T8] usb 5-1: USB disconnect, device number 15 [ 276.426071][T10383] binder: 10382:10383 ioctl c018620c 20000000 returned -22 [ 276.444547][ T5275] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 276.514930][T10387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1662'. [ 276.606334][ T5275] usb 1-1: config 0 has no interfaces? [ 276.611913][ T5275] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.633614][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.676793][ T5275] usb 1-1: config 0 descriptor?? [ 276.968917][T10368] dvmrp0: entered allmulticast mode [ 277.019626][T10413] binder: 10412:10413 ioctl c0046209 0 returned -22 [ 277.021899][ T8] usb 1-1: USB disconnect, device number 11 [ 277.038874][T10411] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 277.623146][ T5765] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.779931][ T5765] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.033598][ T5765] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.212878][ T5765] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.217604][ T5228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.231974][T10461] warning: `syz.0.1699' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 278.245434][ T5228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.254790][ T5228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.262820][ T5228] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.284010][ T5228] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.293007][ T5228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.334555][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 278.360073][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'. [ 278.414627][ T5275] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 278.587326][ T5275] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.604313][ T5275] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 278.609828][ T5765] bridge_slave_1: left allmulticast mode [ 278.623472][ T5275] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 278.632734][ T5765] bridge_slave_1: left promiscuous mode [ 278.632964][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.666476][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.678925][T10462] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 278.690305][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.700879][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.704064][ T5275] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 278.721636][ T5765] bridge_slave_0: left allmulticast mode [ 278.727826][ T5765] bridge_slave_0: left promiscuous mode [ 278.733650][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.766201][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 278.779042][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 278.787327][ T9] usb 2-1: SerialNumber: syz [ 278.909298][ T5275] usb 3-1: USB disconnect, device number 15 [ 279.062948][ T9] usb 2-1: 0:2 : does not exist [ 279.115853][ T9] usb 2-1: USB disconnect, device number 15 [ 279.173510][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.441676][ T5765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.453332][ T5765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.466362][ T5765] bond0 (unregistering): Released all slaves [ 279.585245][ T29] audit: type=1326 audit(1727033264.458:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10491 comm="syz.0.1711" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb74d57def9 code=0x0 [ 279.678553][T10466] chnl_net:caif_netlink_parms(): no params data found [ 279.891207][T10500] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.354838][ T5233] Bluetooth: hci3: command tx timeout [ 280.389752][T10466] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.438406][T10466] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.472382][T10466] bridge_slave_0: entered allmulticast mode [ 280.504284][T10466] bridge_slave_0: entered promiscuous mode [ 280.544557][ T5765] hsr_slave_0: left promiscuous mode [ 280.554978][ T5765] hsr_slave_1: left promiscuous mode [ 280.564884][ T29] audit: type=1400 audit(1727033265.428:20): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.691157][ T5765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.731291][ T5765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.757968][ T5765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.791534][ T5765] veth1_macvtap: left promiscuous mode [ 280.798568][ T5765] veth0_macvtap: left promiscuous mode [ 280.804786][ T5765] veth1_vlan: left promiscuous mode [ 280.810593][ T5765] veth0_vlan: left promiscuous mode [ 281.367378][ T5765] team0 (unregistering): Port device team_slave_1 removed [ 281.418496][ T5765] team0 (unregistering): Port device team_slave_0 removed [ 281.843175][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.854130][T10466] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.863292][T10466] bridge_slave_1: entered allmulticast mode [ 281.873830][T10466] bridge_slave_1: entered promiscuous mode [ 282.038591][T10466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.063154][T10466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.337156][T10466] team0: Port device team_slave_0 added [ 282.356060][T10466] team0: Port device team_slave_1 added [ 282.420494][T10466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.437393][ T5233] Bluetooth: hci3: command tx timeout [ 282.454263][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.493457][T10466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.537302][T10466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.544387][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.604589][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 282.619791][T10466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.784722][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 282.795215][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1748'. [ 282.811932][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 282.840500][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1748'. [ 282.854287][ T8] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 282.870857][ T8] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 282.890535][T10466] hsr_slave_0: entered promiscuous mode [ 282.904690][ T8] usb 4-1: Product: syz [ 282.925051][ T8] usb 4-1: Manufacturer: syz [ 282.929695][ T8] usb 4-1: SerialNumber: syz [ 282.945058][T10466] hsr_slave_1: entered promiscuous mode [ 282.993516][ T8] usb 4-1: config 0 descriptor?? [ 283.010143][T10579] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.036364][T10466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.074018][T10466] Cannot create hsr debugfs directory [ 283.369421][T10617] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.371216][ T5278] usb 4-1: USB disconnect, device number 13 [ 283.472793][ T5765] dvmrp0 (unregistering): left allmulticast mode [ 283.510462][ T5258] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 283.675003][ T5258] usb 2-1: Using ep0 maxpacket: 16 [ 283.689818][ T5258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.714328][T10632] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode [ 283.739878][ T5258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.752030][T10632] mac80211_hwsim hwsim46 wlan1: left promiscuous mode [ 283.759773][ T5258] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.793709][ T5258] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 283.803703][ T5258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.821850][ T5258] usb 2-1: config 0 descriptor?? [ 284.258689][ T5258] koneplus 0003:1E7D:2E22.0015: unknown main item tag 0x0 [ 284.288393][ T5258] koneplus 0003:1E7D:2E22.0015: unknown main item tag 0x0 [ 284.297551][T10466] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.317738][ T5233] Bluetooth: hci0: unknown advertising packet type: 0x6b [ 284.317819][ T5233] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 284.330959][T10466] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.334525][ T5233] Bluetooth: hci0: unknown advertising packet type: 0x05 [ 284.345059][ T5233] Bluetooth: hci0: Malformed LE Event: 0x02 [ 284.365135][ T5258] koneplus 0003:1E7D:2E22.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 284.377194][T10466] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.397246][T10466] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.514780][ T5233] Bluetooth: hci3: command tx timeout [ 284.668489][T10466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.686568][ T5258] usb 2-1: USB disconnect, device number 16 [ 284.731198][T10466] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.786326][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.793505][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.855920][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.863082][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.004238][T10466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.113827][T10466] veth0_vlan: entered promiscuous mode [ 285.160789][T10466] veth1_vlan: entered promiscuous mode [ 285.260484][T10466] veth0_macvtap: entered promiscuous mode [ 285.332344][T10466] veth1_macvtap: entered promiscuous mode [ 285.384899][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.425009][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.456290][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.476379][T10694] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 285.476379][T10694] The task syz.2.1777 (10694) triggered the difference, watch for misbehavior. [ 285.525432][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.544597][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.586072][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.604607][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.628751][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.654554][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.674705][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.697550][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.735042][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.775900][T10466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.835002][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.858592][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.884490][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.908827][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.934496][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.953973][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.974478][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.994505][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.004374][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.024739][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.038718][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.064637][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.099351][T10466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.160310][T10466] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.190529][T10466] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.247948][T10466] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.289502][T10466] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.595191][ T5233] Bluetooth: hci3: command tx timeout [ 286.786184][ T5765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.794061][ T5765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.957867][ T11] bridge_slave_1: left allmulticast mode [ 286.963671][ T11] bridge_slave_1: left promiscuous mode [ 286.979525][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.042953][ T11] bridge_slave_0: left allmulticast mode [ 287.073204][ T11] bridge_slave_0: left promiscuous mode [ 287.102997][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.882694][ T11] erspan0 (unregistering): left promiscuous mode [ 287.953848][ T11] gretap0 (unregistering): left promiscuous mode [ 288.483583][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.495884][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.507363][ T11] bond0 (unregistering): Released all slaves [ 288.540003][ T2562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.554580][ T2562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.054604][ T11] hsr_slave_0: left promiscuous mode [ 290.060877][ T11] hsr_slave_1: left promiscuous mode [ 290.075054][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.102353][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.151975][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.188266][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.196277][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 290.264155][ T11] veth1_macvtap: left promiscuous mode [ 290.279214][ T11] veth0_macvtap: left promiscuous mode [ 290.301443][ T11] veth1_vlan: left promiscuous mode [ 290.332381][ T11] veth0_vlan: left promiscuous mode [ 290.358580][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 290.374003][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.639731][ T9] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 291.332375][ T9] usb 2-1: device descriptor read/64, error -71 [ 291.599353][ T9] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 291.615321][ T9] usb 2-1: device reset changed ep0 maxpacket size! [ 291.668112][ T9] usb 2-1: USB disconnect, device number 17 [ 291.834585][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 291.939920][ T11] team0 (unregistering): Port device team_slave_1 removed [ 292.004602][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 292.026655][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.045991][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.081081][ T9] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 292.091825][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.101140][ T11] team0 (unregistering): Port device team_slave_0 removed [ 292.137989][ T9] usb 2-1: config 0 descriptor?? [ 292.395033][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 292.423081][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 292.473361][ T9] usb 2-1: USB disconnect, device number 18 [ 293.341028][ T5276] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 293.494627][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 293.502362][ T5276] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.565132][ T5276] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.620015][ T5276] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.692661][ T5276] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.788989][ T5276] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 293.818384][T10792] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 293.854630][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.973411][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.981150][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.140951][ T5276] usb 2-1: GET_CAPABILITIES returned 0 [ 294.164047][ T5276] usbtmc 2-1:16.0: can't read capabilities [ 294.361881][ T8] usb 2-1: USB disconnect, device number 19 [ 294.610038][ T29] audit: type=1326 audit(1727033279.478:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8548d7def9 code=0x7ffc0000 [ 294.758957][ T29] audit: type=1326 audit(1727033279.478:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8548d7def9 code=0x7ffc0000 [ 294.941214][ T29] audit: type=1326 audit(1727033279.548:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8548d7def9 code=0x7ffc0000 [ 295.116540][ T29] audit: type=1326 audit(1727033279.548:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8548d7def9 code=0x7ffc0000 [ 295.144547][ T5276] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 295.256103][ T29] audit: type=1326 audit(1727033279.548:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8548d7def9 code=0x7ffc0000 [ 295.291160][ T29] audit: type=1326 audit(1727033279.548:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8548d7def9 code=0x7ffc0000 [ 295.384274][ T5276] usb 3-1: unable to get BOS descriptor or descriptor too short [ 295.442609][ T5276] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 295.463003][ T5276] usb 3-1: can't read configurations, error -71 [ 295.476118][ T29] audit: type=1326 audit(1727033279.548:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8548d74ea7 code=0x7ffc0000 [ 295.534981][ T29] audit: type=1326 audit(1727033279.548:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8548d19879 code=0x7ffc0000 [ 295.601693][ T29] audit: type=1326 audit(1727033279.548:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8548d74ea7 code=0x7ffc0000 [ 295.712444][ T29] audit: type=1326 audit(1727033279.548:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8548d19879 code=0x7ffc0000 [ 295.760476][ T5228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.785760][ T5228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.814724][ T5228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.843709][ T5228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.855864][ T5228] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 295.863368][ T5228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.046791][T10830] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 296.289744][ T72] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.361198][T10834] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1835'. [ 296.442159][ T72] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.568002][T10827] chnl_net:caif_netlink_parms(): no params data found [ 296.697168][ T72] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.735739][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 296.852943][ T72] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.885412][T10848] bridge0: port 2(bridge_slave_1) entered listening state [ 296.917902][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 296.927003][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.944669][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.956886][ T8] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 296.966496][ T8] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 296.978505][ T8] usb 5-1: Product: syz [ 296.982741][ T8] usb 5-1: Manufacturer: syz [ 296.991131][ T8] usb 5-1: config 0 descriptor?? [ 297.051683][T10827] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.084716][T10827] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.114655][T10827] bridge_slave_0: entered allmulticast mode [ 297.121830][T10827] bridge_slave_0: entered promiscuous mode [ 297.177573][T10827] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.212423][T10827] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.230131][T10827] bridge_slave_1: entered allmulticast mode [ 297.245646][T10827] bridge_slave_1: entered promiscuous mode [ 297.360524][T10827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.423326][ T8] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0xd [ 297.436639][T10827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.448255][ T8] kovaplus 0003:1E7D:2D50.0016: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 297.595893][T10827] team0: Port device team_slave_0 added [ 297.623391][T10827] team0: Port device team_slave_1 added [ 297.697656][ T72] bridge_slave_1: left allmulticast mode [ 297.703359][ T72] bridge_slave_1: left promiscuous mode [ 297.712761][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.738205][ T72] bridge_slave_0: left allmulticast mode [ 297.745470][ T5276] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 297.751282][ T72] bridge_slave_0: left promiscuous mode [ 297.768253][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.823173][ T8] kovaplus 0003:1E7D:2D50.0016: couldn't init struct kovaplus_device [ 297.833849][ T8] kovaplus 0003:1E7D:2D50.0016: couldn't install mouse [ 297.866189][ T8] kovaplus 0003:1E7D:2D50.0016: probe with driver kovaplus failed with error -71 [ 297.908175][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 297.938717][ T8] usb 5-1: USB disconnect, device number 16 [ 297.957484][ T5276] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 297.967018][ T5233] Bluetooth: hci5: command tx timeout [ 297.978650][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.987717][ T5276] usb 2-1: Product: syz [ 297.994268][ T5276] usb 2-1: Manufacturer: syz [ 298.000733][ T5276] usb 2-1: SerialNumber: syz [ 298.014094][ T5276] usb 2-1: config 0 descriptor?? [ 298.023196][ T5276] gspca_main: se401-2.14.0 probing 047d:5003 [ 298.680700][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.726334][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.739342][ T72] bond0 (unregistering): Released all slaves [ 298.765954][T10827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.783714][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.851091][T10900] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1858'. [ 298.861024][ T5276] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 298.875812][T10900] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 298.880448][T10827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.934297][T10827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.958743][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.997349][T10827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.045939][T10861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1845'. [ 299.056356][T10861] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1845'. [ 299.065513][T10861] vlan0: entered allmulticast mode [ 299.070795][T10861] veth0_vlan: entered allmulticast mode [ 299.182420][T10911] input: syz1 as /devices/virtual/input/input25 [ 299.329342][T10827] hsr_slave_0: entered promiscuous mode [ 299.349916][T10827] hsr_slave_1: entered promiscuous mode [ 299.368469][T10827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.390827][T10827] Cannot create hsr debugfs directory [ 299.437386][ T5276] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 299.453178][ T5276] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 299.483814][ T5276] usb 2-1: USB disconnect, device number 20 [ 299.667435][ T5277] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 299.698266][ T72] hsr_slave_0: left promiscuous mode [ 299.719117][ T72] hsr_slave_1: left promiscuous mode [ 299.735971][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.749379][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.766942][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.784740][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.831056][ T72] veth1_macvtap: left promiscuous mode [ 299.848650][ T72] veth0_macvtap: left promiscuous mode [ 299.854292][ T72] veth1_vlan: left promiscuous mode [ 299.854597][ T5277] usb 5-1: Using ep0 maxpacket: 32 [ 299.873214][ T72] veth0_vlan: left promiscuous mode [ 299.888681][ T5277] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 299.902324][ T5277] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 299.911880][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 299.920413][ T5277] usb 5-1: Product: syz [ 299.925044][ T5277] usb 5-1: Manufacturer: syz [ 299.929920][ T5277] usb 5-1: SerialNumber: syz [ 299.938757][ T5277] usb 5-1: config 0 descriptor?? [ 299.944579][T10915] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 300.035150][ T5233] Bluetooth: hci5: command tx timeout [ 300.247277][ T5276] usb 5-1: USB disconnect, device number 17 [ 300.852619][ T72] team0 (unregistering): Port device team_slave_1 removed [ 300.889429][ T5278] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 300.900075][ T72] team0 (unregistering): Port device team_slave_0 removed [ 301.056375][ T5278] usb 2-1: Using ep0 maxpacket: 8 [ 301.066785][ T5278] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.091888][ T5278] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 301.112185][ T5278] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.125418][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.144784][ T5278] usb 2-1: Product: syz [ 301.149000][ T5278] usb 2-1: Manufacturer: syz [ 301.153611][ T5278] usb 2-1: SerialNumber: syz [ 301.176007][ T5278] usb 2-1: config 0 descriptor?? [ 301.400423][ T5233] Bluetooth: hci4: Dropping invalid advertising data [ 301.408591][ T5233] Bluetooth: hci4: unknown advertising packet type: 0x6b [ 301.408630][ T5233] Bluetooth: hci4: Malformed LE Event: 0x02 [ 301.415728][ T5278] usb 2-1: USB disconnect, device number 21 [ 301.879238][ T5233] Bluetooth: hci0: command tx timeout [ 302.017234][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1879'. [ 302.114570][ T5233] Bluetooth: hci5: command tx timeout [ 302.815513][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 302.828758][T10997] netlink: 201400 bytes leftover after parsing attributes in process `syz.2.1886'. [ 302.851232][T11004] netlink: 'syz.3.1888': attribute type 12 has an invalid length. [ 302.863738][T11004] netlink: 'syz.3.1888': attribute type 11 has an invalid length. [ 302.903328][T11004] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.1888'. [ 302.975189][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 302.982938][ T8] usb 2-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 303.004921][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 303.038919][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 303.070477][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 303.094465][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.136090][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 303.165310][ T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 303.173486][ T8] usb 2-1: Manufacturer: syz [ 303.201666][ T8] usb 2-1: config 0 descriptor?? [ 303.221519][T10987] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 303.233263][T11017] cgroup: fork rejected by pids controller in /syz2 [ 303.243829][T10827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 303.273028][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 303.274783][T10827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 303.359915][T10827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 303.390937][T10827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 303.501365][ T8] usb 2-1: USB disconnect, device number 22 [ 303.692259][T10827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.773222][T10827] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.812075][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.819282][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.958816][ T1835] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.079370][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.086645][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.193954][ T1835] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.194603][ T5233] Bluetooth: hci5: command tx timeout [ 304.463349][ T1835] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.601684][T10827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.653860][T10827] veth0_vlan: entered promiscuous mode [ 304.665485][T10827] veth1_vlan: entered promiscuous mode [ 304.688408][T10827] veth0_macvtap: entered promiscuous mode [ 304.697411][T10827] veth1_macvtap: entered promiscuous mode [ 304.722225][ T1835] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.731086][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.743742][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.753811][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.762386][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.792230][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.803017][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.813029][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.813725][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 304.826075][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.840951][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.851735][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.861818][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.873078][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.886030][T10827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.896003][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.920643][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.931666][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.942126][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.952941][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.963627][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.975041][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.985469][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.996378][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.006598][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.017280][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.029403][T10827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.039509][T10827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.048347][T10827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.057749][T10827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.067077][T10827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.096513][ T5327] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 305.287237][ T5327] usb 5-1: Using ep0 maxpacket: 16 [ 305.323516][ T5327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.369928][ T5327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.422924][ T5327] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 305.468319][ T5765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.483480][T11077] chnl_net:caif_netlink_parms(): no params data found [ 305.493684][ T5327] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 305.504951][ T5765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.539865][ T5327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.608743][ T5327] usb 5-1: config 0 descriptor?? [ 305.661754][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.672328][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1913'. [ 305.685021][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.693138][T11095] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 305.775402][ T1835] bridge_slave_1: left allmulticast mode [ 305.781140][ T1835] bridge_slave_1: left promiscuous mode [ 305.797603][ T1835] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.850461][ T1835] bridge_slave_0: left allmulticast mode [ 305.885858][ T1835] bridge_slave_0: left promiscuous mode [ 305.891709][ T1835] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.060886][ T5327] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.085815][ T5327] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.093103][ T5327] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.137394][ T5327] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.151220][ T5327] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.200372][ T5327] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.217527][ T5327] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.232931][ T5327] microsoft 0003:045E:07DA.0017: No inputs registered, leaving [ 306.270897][ T5327] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 306.305401][ T5327] microsoft 0003:045E:07DA.0017: no inputs found [ 306.317692][ T5327] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 306.417399][ T5327] usb 5-1: USB disconnect, device number 18 [ 306.912445][ T1835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.942190][ T1835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.975701][ T1835] bond0 (unregistering): Released all slaves [ 306.995084][ T5233] Bluetooth: hci1: command tx timeout [ 307.070861][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1921'. [ 307.334990][ T5278] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 307.588738][ T5278] usb 5-1: config 0 has no interfaces? [ 307.594364][ T5278] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.639855][T11169] ALSA: mixer_oss: invalid OSS volume '' [ 307.649887][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.726929][ T5278] usb 5-1: config 0 descriptor?? [ 307.894834][T11077] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.912253][T11077] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.943306][T11077] bridge_slave_0: entered allmulticast mode [ 307.962335][T11077] bridge_slave_0: entered promiscuous mode [ 307.979636][T11077] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.999345][T11077] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.019561][T11077] bridge_slave_1: entered allmulticast mode [ 308.048833][T11077] bridge_slave_1: entered promiscuous mode [ 308.233594][T11077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.413344][T11077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.625228][ T1835] hsr_slave_0: left promiscuous mode [ 308.636423][ T5278] usb 5-1: USB disconnect, device number 19 [ 308.696938][ T1835] hsr_slave_1: left promiscuous mode [ 308.723232][ T1835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.764518][ T1835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.822345][ T1835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.844532][ T1835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.919890][ T1835] veth1_macvtap: left promiscuous mode [ 308.953619][ T1835] veth0_macvtap: left promiscuous mode [ 308.968181][ T1835] veth1_vlan: left promiscuous mode [ 308.988280][ T1835] veth0_vlan: left allmulticast mode [ 308.993653][ T1835] veth0_vlan: left promiscuous mode [ 309.075139][ T5233] Bluetooth: hci1: command tx timeout [ 309.096716][ T29] kauditd_printk_skb: 2179 callbacks suppressed [ 309.096734][ T29] audit: type=1326 audit(1727033293.968:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.0.1937" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ca117def9 code=0x0 [ 310.421767][ T29] audit: type=1800 audit(1727033295.288:2211): pid=11225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1946" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 310.546768][ T1835] team0 (unregistering): Port device team_slave_1 removed [ 310.615004][ T1835] team0 (unregistering): Port device team_slave_0 removed [ 311.038285][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 311.123396][T11077] team0: Port device team_slave_0 added [ 311.154588][ T5233] Bluetooth: hci1: command tx timeout [ 311.168686][T11077] team0: Port device team_slave_1 added [ 311.194991][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 311.240744][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.275024][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.279570][T11077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.310412][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 311.319053][T11077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.372248][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.392932][ T9] usb 1-1: config 0 descriptor?? [ 311.424878][T11077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.463197][T11077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.533043][T11077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.597091][T11077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.843202][ T9] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 311.895956][T11077] hsr_slave_0: entered promiscuous mode [ 311.955098][ T9] hid-picolcd 0003:04D8:F002.0018: item fetching failed at offset 5/7 [ 311.963797][ T9] hid-picolcd 0003:04D8:F002.0018: device report parse failed [ 311.978822][T11077] hsr_slave_1: entered promiscuous mode [ 311.982316][ T9] hid-picolcd 0003:04D8:F002.0018: probe with driver hid-picolcd failed with error -22 [ 312.033869][T11077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.059107][T11077] Cannot create hsr debugfs directory [ 312.072352][ T5277] usb 1-1: USB disconnect, device number 12 [ 313.234538][ T5233] Bluetooth: hci1: command tx timeout [ 313.810231][T11077] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 313.846828][T11077] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 313.890202][T11077] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 313.921529][T11077] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 314.222534][T11077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.276653][T11077] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.388427][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.395620][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.418127][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.425284][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.435878][T11343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1987'. [ 315.411059][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.421361][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.430242][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.438591][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.447853][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 315.455309][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.696291][ T5765] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.937680][ T5765] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.034799][T11077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.070194][T11403] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2007'. [ 316.163591][ T5765] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.268864][T11077] veth0_vlan: entered promiscuous mode [ 316.321277][T11077] veth1_vlan: entered promiscuous mode [ 316.498675][ T5765] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.694219][T11077] veth0_macvtap: entered promiscuous mode [ 316.727889][T11376] chnl_net:caif_netlink_parms(): no params data found [ 316.778413][T11077] veth1_macvtap: entered promiscuous mode [ 316.932478][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.984487][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.994380][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.101896][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.132516][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.152899][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.163590][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.174580][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.194496][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.210806][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.246131][T11077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.296620][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.330018][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.353713][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.374762][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.399911][ T5275] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 317.405324][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.408047][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.434487][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.443791][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.455340][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.470161][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.485923][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.505095][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.526051][T11077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.554699][ T5228] Bluetooth: hci2: command tx timeout [ 317.605079][ T5275] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 317.642032][T11077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.654214][ T5275] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.674510][ T5275] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.702378][T11077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.714602][ T5275] usb 5-1: config 0 interface 0 has no altsetting 0 [ 317.730282][T11077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.764733][T11077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.773814][ T5275] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.795345][ T5275] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.837233][ T5275] usb 5-1: config 0 interface 0 has no altsetting 0 [ 317.898631][ T5275] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.908695][ T5275] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.920425][ T5275] usb 5-1: config 0 interface 0 has no altsetting 0 [ 317.930365][ T5275] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.940189][ T5275] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.955510][ T5275] usb 5-1: config 0 interface 0 has no altsetting 0 [ 317.964728][ T5275] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.973642][ T5275] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.984780][ T5275] usb 5-1: config 0 interface 0 has no altsetting 0 [ 318.085697][ T5275] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.095019][ T5275] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.106740][ T5275] usb 5-1: config 0 interface 0 has no altsetting 0 [ 318.116430][ T5275] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.129776][ T5275] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.142842][ T5275] usb 5-1: config 0 interface 0 has no altsetting 0 [ 318.207319][ T5765] bridge_slave_1: left allmulticast mode [ 318.214691][ T5765] bridge_slave_1: left promiscuous mode [ 318.220462][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.245040][ T5275] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.260983][ T5275] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.276144][ T5275] usb 5-1: config 0 interface 0 has no altsetting 0 [ 318.285798][ T5275] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 318.295663][ T5275] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 318.304024][ T5275] usb 5-1: Product: syz [ 318.308599][ T5275] usb 5-1: Manufacturer: syz [ 318.313228][ T5275] usb 5-1: SerialNumber: syz [ 318.321583][ T5765] bridge_slave_0: left allmulticast mode [ 318.329552][ T5275] usb 5-1: config 0 descriptor?? [ 318.336709][ T5765] bridge_slave_0: left promiscuous mode [ 318.347030][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.354931][ T5275] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 318.577993][ T5278] usb 5-1: USB disconnect, device number 20 [ 318.588665][ T5278] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 318.837586][ T5277] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 319.024639][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 319.036735][ T5765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.037537][ T5277] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 319.056105][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.064141][ T5277] usb 4-1: Product: syz [ 319.068462][ T5277] usb 4-1: Manufacturer: syz [ 319.073073][ T5277] usb 4-1: SerialNumber: syz [ 319.093316][ T5277] usb 4-1: config 0 descriptor?? [ 319.124988][ T5765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.152917][ T5765] bond0 (unregistering): Released all slaves [ 319.193952][T11376] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.214550][T11376] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.222130][T11376] bridge_slave_0: entered allmulticast mode [ 319.262715][T11376] bridge_slave_0: entered promiscuous mode [ 319.283944][T11376] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.297087][T11376] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.308280][T11376] bridge_slave_1: entered allmulticast mode [ 319.317303][ T5277] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 319.325415][T11376] bridge_slave_1: entered promiscuous mode [ 319.587265][T11376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.635447][ T5228] Bluetooth: hci2: command tx timeout [ 319.906757][T11376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.954075][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.990352][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.997542][T11376] team0: Port device team_slave_0 added [ 320.047386][ T5277] usb write operation failed. (-71) [ 320.079656][ T5277] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 320.108287][ T5277] dvbdev: DVB: registering new adapter (Terratec H7) [ 320.118188][T11376] team0: Port device team_slave_1 added [ 320.144502][ T5277] usb 4-1: media controller created [ 320.150356][ T5765] hsr_slave_0: left promiscuous mode [ 320.164791][ T5277] usb read operation failed. (-71) [ 320.174571][ T5277] usb write operation failed. (-71) [ 320.181423][ T5765] hsr_slave_1: left promiscuous mode [ 320.197943][ T5277] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 320.210752][ T5765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.226924][ T5277] usb 4-1: USB disconnect, device number 14 [ 320.242303][ T5765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.280552][ T5765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.303519][ T5765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.363621][ T5765] veth1_macvtap: left promiscuous mode [ 320.372918][ T5765] veth0_macvtap: left promiscuous mode [ 320.387736][ T5765] veth1_vlan: left promiscuous mode [ 320.393135][ T5765] veth0_vlan: left promiscuous mode [ 320.984647][ T5258] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 321.020578][ T5765] team0 (unregistering): Port device team_slave_1 removed [ 321.071149][ T5765] team0 (unregistering): Port device team_slave_0 removed [ 321.144720][ T5258] usb 4-1: Using ep0 maxpacket: 32 [ 321.155776][ T5258] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 321.177584][ T5258] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 321.193582][ T5258] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 321.203462][ T5258] usb 4-1: Product: syz [ 321.209255][ T5258] usb 4-1: Manufacturer: syz [ 321.214047][ T5258] usb 4-1: SerialNumber: syz [ 321.225251][ T5258] usb 4-1: config 0 descriptor?? [ 321.233666][T11539] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 321.532130][ T5277] usb 4-1: USB disconnect, device number 15 [ 321.667015][T11376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.679560][T11376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.720790][ T5228] Bluetooth: hci2: command tx timeout [ 321.738992][T11376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.766662][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.779915][T11376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.788628][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.804276][T11376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.836208][T11376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.004880][T11376] hsr_slave_0: entered promiscuous mode [ 322.031910][T11376] hsr_slave_1: entered promiscuous mode [ 322.043542][T11376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.057083][T11376] Cannot create hsr debugfs directory [ 322.504557][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 322.690438][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 322.718337][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.734805][ T5273] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 322.749721][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.760190][ T8] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 322.769535][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.786973][ T8] usb 5-1: config 0 descriptor?? [ 322.935899][ T5273] usb 2-1: Using ep0 maxpacket: 8 [ 322.947314][ T5273] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 322.956876][ T5273] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 322.964548][ T5258] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 322.974483][ T5273] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.976472][ T5273] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.029429][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.039398][T11376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.060624][ T5273] usb 2-1: Product: syz [ 323.061451][T11376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.100772][ T5273] usb 2-1: Manufacturer: syz [ 323.107267][ T5273] usb 2-1: SerialNumber: syz [ 323.116996][T11376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.144335][T11376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.169039][ T5258] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 323.177851][ T5258] usb 4-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 323.203299][ T5258] usb 4-1: config 0 has no interface number 0 [ 323.225399][ T8] playstation 0003:054C:05C4.0019: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 323.225955][ T5258] usb 4-1: config 0 interface 204 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 323.265838][ T5258] usb 4-1: config 0 interface 204 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 323.339838][ T5258] usb 4-1: config 0 interface 204 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 323.371732][ T5258] usb 4-1: config 0 interface 204 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 323.389582][T11376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.404482][ T5258] usb 4-1: config 0 interface 204 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 323.416813][ T8] playstation 0003:054C:05C4.0019: Invalid byte count transferred, expected 16 got 0 [ 323.435606][T11376] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.442355][ T5258] usb 4-1: config 0 interface 204 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 323.447985][ T8] playstation 0003:054C:05C4.0019: Failed to retrieve DualShock4 pairing info: -22 [ 323.480166][ T2562] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.483768][ T8] playstation 0003:054C:05C4.0019: Failed to get MAC address from DualShock4 [ 323.487325][ T2562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.488494][ T5258] usb 4-1: config 0 interface 204 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 323.512926][ T8] playstation 0003:054C:05C4.0019: Failed to create dualshock4. [ 323.547717][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.554986][ T5765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.567914][ T5258] usb 4-1: config 0 interface 204 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 323.584388][ T8] playstation 0003:054C:05C4.0019: probe with driver playstation failed with error -22 [ 323.590554][ T5258] usb 4-1: config 0 interface 204 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 323.657502][ T5258] usb 4-1: config 0 interface 204 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 323.658737][ T8] usb 5-1: USB disconnect, device number 21 [ 323.714000][ T5258] usb 4-1: config 0 interface 204 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 323.761706][ T5258] usb 4-1: config 0 interface 204 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 323.764039][ T5273] usb 2-1: 0:2 : does not exist [ 323.784039][T11376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.812277][ T5228] Bluetooth: hci2: command tx timeout [ 323.820333][ T5258] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 323.830502][ T5258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.839851][ T5258] usb 4-1: Product: syz [ 323.849420][ T5258] usb 4-1: Manufacturer: syz [ 323.854081][ T5258] usb 4-1: SerialNumber: syz [ 323.904700][ T5258] usb 4-1: config 0 descriptor?? [ 323.917108][T11577] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 323.935408][ T5258] ems_usb 4-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -8 [ 323.944350][T11376] veth0_vlan: entered promiscuous mode [ 323.974732][ T5258] ems_usb 4-1:0.204: probe with driver ems_usb failed with error -8 [ 323.985363][ T8] usb 2-1: USB disconnect, device number 23 [ 324.013201][T11376] veth1_vlan: entered promiscuous mode [ 324.040552][T11376] veth0_macvtap: entered promiscuous mode [ 324.051355][T11376] veth1_macvtap: entered promiscuous mode [ 324.066202][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.076957][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.087048][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.097598][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.107536][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.119800][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.130156][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.140663][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.150574][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.161060][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.172261][T11376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.185305][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.195869][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.206485][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.217445][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.285112][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.303031][ T5258] usb 4-1: USB disconnect, device number 16 [ 324.364444][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.374309][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.411617][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.421876][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.432573][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.445014][T11376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.455292][T11376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.464026][T11376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.472971][T11376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.481746][T11376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.724812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 324.840597][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.854050][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.945006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 324.989303][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.009731][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.192859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 325.201701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 325.210392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 325.434912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 325.602009][T11632] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 326.181513][T11665] netlink: 'syz.1.2082': attribute type 9 has an invalid length. [ 326.640537][T11676] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2086'. [ 326.984460][ T29] audit: type=1326 audit(1727033311.848:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.1.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6737def9 code=0x7ffc0000 [ 327.019154][T11691] delete_channel: no stack [ 327.032172][ T29] audit: type=1326 audit(1727033311.888:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.1.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c6737def9 code=0x7ffc0000 [ 327.069666][ T29] audit: type=1326 audit(1727033311.888:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.1.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6737def9 code=0x7ffc0000 [ 327.107807][ T29] audit: type=1326 audit(1727033311.888:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.1.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6737def9 code=0x7ffc0000 [ 327.173405][ T29] audit: type=1326 audit(1727033311.888:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.1.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c6737def9 code=0x7ffc0000 [ 327.228000][ T29] audit: type=1326 audit(1727033311.888:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.1.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6737def9 code=0x7ffc0000 [ 327.272768][ T29] audit: type=1326 audit(1727033311.888:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.1.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6737def9 code=0x7ffc0000 [ 327.354732][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 327.403731][ T29] audit: type=1326 audit(1727033311.888:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.1.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f1c6737def9 code=0x7ffc0000 [ 327.492452][ T29] audit: type=1326 audit(1727033311.938:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.1.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6737def9 code=0x7ffc0000 [ 327.536199][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 327.551732][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 327.560724][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 327.599984][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.631453][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 327.670942][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 327.715893][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 327.723738][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 327.755788][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.810497][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 327.830365][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 327.847611][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 327.855622][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 327.867214][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.890103][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 327.902838][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 327.969544][ T9] usb 1-1: string descriptor 0 read error: -22 [ 327.977715][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 327.998210][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.011291][T11720] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2105'. [ 328.029403][T11720] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 328.045670][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 328.128689][T11726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2108'. [ 328.325444][ T5277] usb 1-1: USB disconnect, device number 13 [ 328.363304][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 328.488343][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2115'. [ 328.505113][ T5258] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 328.528126][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 328.580676][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.592028][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.602110][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 328.615330][ T9] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 328.624899][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.646091][ T9] usb 4-1: config 0 descriptor?? [ 328.703574][ T5258] usb 2-1: Using ep0 maxpacket: 32 [ 328.720541][ T5258] usb 2-1: unable to get BOS descriptor or descriptor too short [ 328.750499][ T5258] usb 2-1: config 127 has an invalid interface number: 25 but max is 1 [ 328.763754][ T5258] usb 2-1: config 127 has an invalid interface number: 4 but max is 1 [ 328.781099][ T5258] usb 2-1: config 127 has no interface number 0 [ 328.790161][ T5258] usb 2-1: config 127 has no interface number 1 [ 328.803115][ T5258] usb 2-1: config 127 interface 25 has no altsetting 0 [ 328.810508][ T5258] usb 2-1: config 127 interface 4 has no altsetting 0 [ 328.829394][ T5258] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 328.858971][ T5258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.872389][ T5258] usb 2-1: Product: syz [ 328.879314][ T5258] usb 2-1: Manufacturer: syz [ 328.884030][ T5258] usb 2-1: SerialNumber: syz [ 329.075769][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input27 [ 329.150316][ T5258] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 329.180789][ T9] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 329.208926][ T9] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 329.308511][T11727] random: crng reseeded on system resumption [ 329.944489][ T8] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 329.958306][ T9] usb 4-1: USB disconnect, device number 17 [ 329.970069][ T8] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 329.986037][ T5258] ueagle-atm 2-1:127.25: usbatm_usb_probe: bind failed: -19! [ 329.994584][ T8] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 330.020727][ T8] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 330.020793][ T5258] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 330.082883][ T5258] ueagle-atm 2-1:127.4: usbatm_usb_probe: bind failed: -19! [ 330.103213][ T5258] usb 2-1: USB disconnect, device number 24 [ 330.243702][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2125'. [ 331.986283][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 332.144538][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 332.156678][ T8] usb 3-1: config 0 has no interfaces? [ 332.164316][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.211004][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.224627][ T8] usb 3-1: Product: syz [ 332.228837][ T8] usb 3-1: Manufacturer: syz [ 332.233449][ T8] usb 3-1: SerialNumber: syz [ 332.266384][ T8] usb 3-1: config 0 descriptor?? [ 332.481498][T11837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.495781][T11837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.550208][ T8] usb 3-1: USB disconnect, device number 18 [ 332.624755][ T5275] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 332.695379][ T5278] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 332.774605][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 332.781560][ T5275] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 332.793576][ T5275] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 332.806394][ T5275] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.819353][ T5275] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.832870][ T5275] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.842472][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.872709][ T5278] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 332.886978][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.908276][ T2562] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.916361][ T5278] usb 5-1: config 0 descriptor?? [ 332.948327][ T5278] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 332.998530][ T2562] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.072645][ T5275] usb 4-1: GET_CAPABILITIES returned 0 [ 333.079200][ T5275] usbtmc 4-1:16.0: can't read capabilities [ 333.193575][ T2562] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.289731][ T5277] usb 4-1: USB disconnect, device number 18 [ 333.312441][ T2562] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.533821][ T2562] bridge_slave_1: left allmulticast mode [ 333.553826][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.568502][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.577122][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.588987][ T2562] bridge_slave_1: left promiscuous mode [ 333.595166][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.620327][ T2562] bridge_slave_0: left allmulticast mode [ 333.628234][ T2562] bridge_slave_0: left promiscuous mode [ 333.634051][ T2562] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.645160][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.656230][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.663676][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.787615][ T5278] gp8psk: usb in 146 operation failed. [ 333.793207][ T5278] gp8psk: failed to get FW version [ 333.798951][ T5278] gp8psk: usb in 149 operation failed. [ 333.804715][ T5278] gp8psk: failed to get FPGA version [ 333.812188][ T5278] gp8psk: usb out operation failed. [ 333.817644][ T5278] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 333.828479][ T5278] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 333.877740][ T5278] usb 5-1: USB disconnect, device number 22 [ 334.154735][ T5279] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 334.186791][ T2562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.199645][ T2562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.211445][ T2562] bond0 (unregistering): Released all slaves [ 334.305406][ T5279] usb 4-1: Using ep0 maxpacket: 32 [ 334.370298][ T5279] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 334.395134][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.423687][ T5279] usb 4-1: Product: syz [ 334.452915][ T5279] usb 4-1: Manufacturer: syz [ 334.483881][ T5279] usb 4-1: SerialNumber: syz [ 334.552615][ T5279] usb 4-1: config 0 descriptor?? [ 335.152993][ T2562] hsr_slave_0: left promiscuous mode [ 335.175597][ T2562] hsr_slave_1: left promiscuous mode [ 335.190576][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.199332][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.215559][ T5279] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 335.229312][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.235603][ T5279] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 335.243819][ T5279] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 335.246228][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.293142][ T2562] veth1_macvtap: left promiscuous mode [ 335.304611][ T2562] veth0_macvtap: left promiscuous mode [ 335.310291][ T2562] veth1_vlan: left promiscuous mode [ 335.334589][ T2562] veth0_vlan: left promiscuous mode [ 335.717328][ T5228] Bluetooth: hci2: command tx timeout [ 336.087334][ T29] audit: type=1326 audit(1727033320.958:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8548d7def9 code=0x7ffc0000 [ 336.163147][ T29] audit: type=1326 audit(1727033320.958:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8548d7def9 code=0x7ffc0000 [ 336.675282][ T29] audit: type=1326 audit(1727033321.518:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8548d7def9 code=0x7ffc0000 [ 336.733746][ T29] audit: type=1326 audit(1727033321.528:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8548d7def9 code=0x7ffc0000 [ 336.823137][ T29] audit: type=1326 audit(1727033321.688:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f8548d7def9 code=0x7ffc0000 [ 336.899716][ T29] audit: type=1326 audit(1727033321.758:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8548d7def9 code=0x7ffc0000 [ 336.954369][ T2562] team0 (unregistering): Port device team_slave_1 removed [ 336.958358][ T29] audit: type=1326 audit(1727033321.758:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8548d7def9 code=0x7ffc0000 [ 337.077340][ T2562] team0 (unregistering): Port device team_slave_0 removed [ 337.174688][ T8] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 337.325348][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 337.340904][ T8] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 337.357905][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.375320][ T8] usb 5-1: config 0 descriptor?? [ 337.386573][ T8] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 337.749424][T11874] chnl_net:caif_netlink_parms(): no params data found [ 337.777335][T11934] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 337.795496][ T5228] Bluetooth: hci2: command tx timeout [ 337.820052][ T5279] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 337.821201][T11932] mac80211_hwsim hwsim43 wlan0: left promiscuous mode [ 337.838807][ T5279] usb 4-1: USB disconnect, device number 19 [ 338.168595][T11874] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.203346][ T8] gspca_nw80x: reg_r err -71 [ 338.204509][T11874] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.215800][ T8] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 338.254096][T11874] bridge_slave_0: entered allmulticast mode [ 338.259942][ T8] usb 5-1: USB disconnect, device number 23 [ 338.285339][T11874] bridge_slave_0: entered promiscuous mode [ 338.305358][T11874] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.331504][T11874] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.342041][T11874] bridge_slave_1: entered allmulticast mode [ 338.355559][T11874] bridge_slave_1: entered promiscuous mode [ 338.409023][T11874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.422467][T11874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.492711][ T2562] bridge_slave_1: left allmulticast mode [ 338.501469][ T2562] bridge_slave_1: left promiscuous mode [ 338.510517][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.520503][ T2562] bridge_slave_0: left allmulticast mode [ 338.549637][ T2562] bridge_slave_0: left promiscuous mode [ 338.567915][ T2562] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.605410][ T5279] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 338.795418][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 338.817253][ T5279] usb 4-1: config 0 has no interfaces? [ 338.826156][ T5279] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 338.839719][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.853799][ T5279] usb 4-1: Product: syz [ 338.861485][ T5279] usb 4-1: Manufacturer: syz [ 338.868618][ T5279] usb 4-1: SerialNumber: syz [ 338.879164][ T5279] usb 4-1: config 0 descriptor?? [ 338.904773][ T5278] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 339.075663][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 339.085226][ T5278] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=29.8c [ 339.100048][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.108971][ T5275] usb 4-1: USB disconnect, device number 20 [ 339.117143][ T5278] usb 3-1: Product: syz [ 339.121725][ T5278] usb 3-1: Manufacturer: syz [ 339.137255][ T5278] usb 3-1: SerialNumber: syz [ 339.166590][ T5278] usb 3-1: config 0 descriptor?? [ 339.175354][ T5278] gspca_main: se401-2.14.0 probing 047d:5003 [ 339.433412][ T2562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.448891][ T2562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.460930][ T2562] bond0 (unregistering): Released all slaves [ 339.482594][T11874] team0: Port device team_slave_0 added [ 339.562877][T11874] team0: Port device team_slave_1 added [ 339.742457][T11874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.751528][T11874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.779884][T11874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.828500][T11874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.848468][T11874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.877882][ T5228] Bluetooth: hci2: command tx timeout [ 339.899574][T11874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.938503][T12000] dummy0: entered promiscuous mode [ 340.015224][ T5278] usb 3-1: reset high-speed USB device number 19 using dummy_hcd [ 340.050312][ T5278] usb 3-1: device reset changed ep0 maxpacket size! [ 340.070899][ T5278] gspca_se401: read req failed req 0x06 error -19 [ 340.097786][ T5278] usb 3-1: USB disconnect, device number 19 [ 340.178488][T11874] hsr_slave_0: entered promiscuous mode [ 340.188318][T11874] hsr_slave_1: entered promiscuous mode [ 340.201530][T11874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.211867][T11874] Cannot create hsr debugfs directory [ 340.254795][ T5278] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 340.306515][ T2562] hsr_slave_0: left promiscuous mode [ 340.336506][ T5327] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 340.346301][ T2562] hsr_slave_1: left promiscuous mode [ 340.360775][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.374126][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.397462][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.410236][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.455041][ T5278] usb 3-1: Using ep0 maxpacket: 32 [ 340.477855][ T2562] veth1_macvtap: left promiscuous mode [ 340.483408][ T2562] veth0_macvtap: left promiscuous mode [ 340.492651][ T5278] usb 3-1: config 0 has no interfaces? [ 340.505648][ T5278] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 340.522302][ T2562] veth1_vlan: left promiscuous mode [ 340.528135][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.537764][ T5327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.549489][ T5278] usb 3-1: Product: syz [ 340.553752][ T5327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.571120][ T5278] usb 3-1: Manufacturer: syz [ 340.582633][ T5278] usb 3-1: SerialNumber: syz [ 340.590290][ T5327] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 340.606332][ T5278] usb 3-1: config 0 descriptor?? [ 340.620570][ T5327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.648672][ T5327] usb 5-1: config 0 descriptor?? [ 340.829789][ T5278] usb 3-1: USB disconnect, device number 20 [ 341.334269][ T2562] team0 (unregistering): Port device team_slave_1 removed [ 341.385940][ T2562] team0 (unregistering): Port device team_slave_0 removed [ 341.425761][ T8] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 341.475819][ T5327] hid-led 0003:27B8:01ED.001B: probe with driver hid-led failed with error -71 [ 341.490209][ T5327] usb 5-1: USB disconnect, device number 24 [ 341.586985][ T8] usb 2-1: config 0 has no interfaces? [ 341.601566][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.612131][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.627669][ T8] usb 2-1: config 0 descriptor?? [ 341.954922][ T5228] Bluetooth: hci2: command tx timeout [ 342.291170][ T5278] usb 2-1: USB disconnect, device number 25 [ 343.061448][ T29] audit: type=1800 audit(1727033327.928:2228): pid=12065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2238" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 343.148528][ T2562] IPVS: stop unused estimator thread 0... [ 343.288531][T12077] netlink: 'syz.3.2241': attribute type 3 has an invalid length. [ 343.365386][T12078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2240'. [ 343.495195][T12082] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2242'. [ 343.821890][T11874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 343.914511][T11874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 343.946576][T11874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 343.998444][T11874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.315015][T11874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.369924][T11874] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.429616][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.436813][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.497126][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.504278][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.647966][T11874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.747515][T11874] veth0_vlan: entered promiscuous mode [ 344.780081][T12122] syz.3.2257 (12122) used greatest stack depth: 17536 bytes left [ 344.790337][T11874] veth1_vlan: entered promiscuous mode [ 344.891700][T11874] veth0_macvtap: entered promiscuous mode [ 344.931551][T11874] veth1_macvtap: entered promiscuous mode [ 344.988523][T11874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.035658][T11874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.078220][ T5233] Bluetooth: hci4: command 0x0406 tx timeout [ 345.079650][T11874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.134628][T11874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.164767][T11874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.184464][T11874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.194314][T11874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.214048][T11874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.233567][T11874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.266483][T11874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.365880][T11874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.410845][T11874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.454011][T11874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.493221][T11874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.529666][T11874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.561601][T11874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.601034][T11874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.639752][T11874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.752126][T11874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.794181][T11874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.810664][T11874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.822362][T11874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.843147][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2264'. [ 346.130184][ T2562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.156869][ T2562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.266247][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.298664][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.348614][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2270'. [ 346.632347][T12199] input: syz1 as /devices/virtual/input/input28 [ 346.675596][ T5277] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 346.856177][ T5277] usb 3-1: New USB device found, idVendor=0b05, idProduct=171f, bcdDevice=9d.6b [ 346.884838][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.923594][ T5277] usb 3-1: Product: syz [ 346.949810][ T5277] usb 3-1: Manufacturer: syz [ 346.966259][ T5277] usb 3-1: SerialNumber: syz [ 346.985950][ T5277] usb 3-1: config 0 descriptor?? [ 347.295382][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 347.488606][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 347.517442][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 347.530048][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 347.542046][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.563497][ T9] usb 4-1: Product: syz [ 347.580378][ T9] usb 4-1: Manufacturer: syz [ 347.605078][ T9] usb 4-1: SerialNumber: syz [ 347.617461][ T9] usb 4-1: config 0 descriptor?? [ 347.636299][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 347.675855][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 347.865177][ T5277] dvb-usb: found a 'ASUS My Cinema U3000 Mini DVBT Tuner' in warm state. [ 347.904751][ T5277] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 347.941215][ T5277] dvbdev: DVB: registering new adapter (ASUS My Cinema U3000 Mini DVBT Tuner) [ 347.976720][ T5277] usb 3-1: media controller created [ 348.007768][ T5277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 348.253089][ T5277] DVB: Unable to find symbol dib7000p_attach() [ 348.260010][ T5277] dvb-usb: no frontend was attached by 'ASUS My Cinema U3000 Mini DVBT Tuner' [ 348.350149][ T9] em28xx 4-1:0.0: chip ID is em2860 [ 348.404949][ T5277] rc_core: IR keymap rc-dib0700-rc5 not found [ 348.411275][ T5277] Registered IR keymap rc-empty [ 348.422117][ T5277] dvb-usb: could not initialize remote control. [ 348.448967][ T5277] dvb-usb: ASUS My Cinema U3000 Mini DVBT Tuner successfully initialized and connected. [ 348.503990][ T5277] usb 3-1: USB disconnect, device number 21 [ 348.539596][ T5277] dvb-usb: ASUS My Cinema U3000 Mini DVBT Tuner successfully deinitialized and disconnected. [ 348.732047][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 348.741002][ T9] em28xx 4-1:0.0: board has no eeprom [ 348.814487][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 348.832852][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 348.844493][ T5277] em28xx 4-1:0.0: Binding DVB extension [ 348.875960][ T9] usb 4-1: USB disconnect, device number 21 [ 348.882680][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 348.922040][ T5277] em28xx 4-1:0.0: Registering input extension [ 348.954567][ T5278] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 348.994482][ T1172] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 349.045093][ T5277] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 349.063801][ T5277] Registered IR keymap rc-empty [ 349.093132][ T5277] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 349.121884][ T5277] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 349.124506][ T5278] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 349.164311][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.186009][ T1172] usb 5-1: Using ep0 maxpacket: 16 [ 349.209749][ T1172] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 349.213789][ T5278] usb 1-1: config 0 descriptor?? [ 349.235229][ T5277] em28xx 4-1:0.0: Input extension successfully initialized [ 349.264653][ T9] em28xx 4-1:0.0: Closing input extension [ 349.272572][ T5278] cp210x 1-1:0.0: cp210x converter detected [ 349.279968][ T1172] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 349.301244][ T1172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.335187][ T1172] usb 5-1: Product: syz [ 349.339404][ T1172] usb 5-1: Manufacturer: syz [ 349.352080][ T1172] usb 5-1: SerialNumber: syz [ 349.362106][ T1172] usb 5-1: config 0 descriptor?? [ 349.413174][ T1172] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 349.436071][ T9] em28xx 4-1:0.0: Freeing device [ 349.456660][ T1172] usb 5-1: Detected FT232R [ 349.637985][ T1172] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 349.698470][ T5278] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 349.738867][ T5278] usb 1-1: cp210x converter now attached to ttyUSB1 [ 349.870445][T12317] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2306'. [ 349.871682][ T1172] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 349.945787][ T5327] usb 1-1: USB disconnect, device number 14 [ 349.969247][ T5327] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 350.019105][ T5327] cp210x 1-1:0.0: device disconnected [ 350.121919][ T5275] usb 5-1: USB disconnect, device number 25 [ 350.171638][ T5275] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 350.195171][ T5275] ftdi_sio 5-1:0.0: device disconnected [ 350.285487][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2312'. [ 350.300038][T12333] vlan2: entered allmulticast mode [ 350.615108][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 350.764544][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 350.788049][ T8] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 350.824138][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.842490][ T8] usb 3-1: Product: syz [ 350.846948][ T8] usb 3-1: Manufacturer: syz [ 350.851570][ T8] usb 3-1: SerialNumber: syz [ 350.863449][ T8] r8152-cfgselector 3-1: Unknown version 0x0000 [ 350.870384][ T8] r8152-cfgselector 3-1: config 0 descriptor?? [ 351.308896][ T1172] r8152-cfgselector 3-1: USB disconnect, device number 22 [ 351.449871][T12374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2330'. [ 351.748794][T12381] sctp: [Deprecated]: syz.0.2332 (pid 12381) Use of int in maxseg socket option. [ 351.748794][T12381] Use struct sctp_assoc_value instead [ 351.953374][T12384] bond1: entered promiscuous mode [ 351.984813][T12384] bond1: entered allmulticast mode [ 351.990604][T12384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.162189][T12384] bond1 (unregistering): Released all slaves [ 352.211575][T12392] team0: Port device team_slave_1 removed [ 352.220942][T12395] team_slave_0: entered promiscuous mode [ 352.323466][T12395] team0: Port device team_slave_0 removed [ 352.649305][T12409] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2342'. [ 352.660445][T12409] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 352.934628][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 353.121822][ T8] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 353.143219][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.194512][ T8] usb 2-1: Product: syz [ 353.198739][ T8] usb 2-1: Manufacturer: syz [ 353.230197][ T8] usb 2-1: SerialNumber: syz [ 353.249941][ T8] usb 2-1: config 0 descriptor?? [ 353.486775][ T5327] usb 2-1: USB disconnect, device number 26 [ 353.526930][ T72] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.625125][ T72] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.817126][ T72] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.735454][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.746008][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.755935][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.775307][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 354.782992][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 354.790448][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.898463][ T72] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.187873][T12466] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 355.434597][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 355.616265][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.632553][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 355.666328][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.702332][ T8] usb 2-1: config 0 descriptor?? [ 355.960943][ T8] usb 2-1: USB disconnect, device number 27 [ 356.834704][ T5233] Bluetooth: hci3: command tx timeout [ 358.914607][ T5233] Bluetooth: hci3: command tx timeout [ 360.994803][ T5233] Bluetooth: hci3: command tx timeout [ 363.074626][ T5233] Bluetooth: hci3: command tx timeout [ 366.300919][ T5228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.314597][ T5228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.331088][ T5228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.346001][ T5228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.353818][ T5228] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 366.364335][ T5228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.618089][ T5233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.629128][ T5233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.639168][ T5233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.647574][ T5233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.656119][ T5233] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 366.667249][ T5233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 367.564088][ T5228] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 367.573909][ T5228] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 367.586547][ T5228] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 367.617061][ T5228] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 367.627328][ T5228] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 367.638295][ T5228] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.707328][ T5228] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 367.725199][ T5228] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 367.741617][ T5228] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 367.755656][ T5228] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 367.763323][ T5228] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 367.772353][ T5228] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 368.440187][ T5228] Bluetooth: hci5: command tx timeout [ 368.754634][ T5228] Bluetooth: hci6: command tx timeout [ 369.714707][ T5228] Bluetooth: hci7: command tx timeout [ 369.875299][ T5233] Bluetooth: hci8: command tx timeout [ 370.515238][ T5228] Bluetooth: hci5: command tx timeout [ 370.834614][ T5228] Bluetooth: hci6: command tx timeout [ 371.795291][ T5228] Bluetooth: hci7: command tx timeout [ 371.954936][ T5228] Bluetooth: hci8: command tx timeout [ 372.594659][ T5228] Bluetooth: hci5: command tx timeout [ 372.914521][ T5228] Bluetooth: hci6: command tx timeout [ 373.874651][ T5228] Bluetooth: hci7: command tx timeout [ 374.035015][ T5228] Bluetooth: hci8: command tx timeout [ 374.674658][ T5228] Bluetooth: hci5: command tx timeout [ 374.995655][ T5228] Bluetooth: hci6: command tx timeout [ 375.954651][ T5228] Bluetooth: hci7: command tx timeout [ 376.114871][ T5228] Bluetooth: hci8: command tx timeout [ 377.197343][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'. [ 378.395636][ T72] bridge_slave_1: left allmulticast mode [ 378.401352][ T72] bridge_slave_1: left promiscuous mode [ 378.460580][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.538452][ T72] bridge_slave_0: left allmulticast mode [ 378.544162][ T72] bridge_slave_0: left promiscuous mode [ 378.571220][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.895587][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.901924][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.902269][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.929903][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.953589][ T72] bond0 (unregistering): Released all slaves [ 415.297804][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.316397][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.325515][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.333476][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.344579][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 415.355742][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 417.394593][ T5233] Bluetooth: hci0: command tx timeout [ 419.474506][ T5233] Bluetooth: hci0: command tx timeout [ 421.554589][ T5233] Bluetooth: hci0: command tx timeout [ 423.634636][ T5233] Bluetooth: hci0: command tx timeout [ 427.001364][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.026750][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.041864][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.060801][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.068823][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 427.078965][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.265362][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.284811][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.293338][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.302559][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.310345][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 427.320503][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 427.723679][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 427.740233][ T5233] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 427.748383][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 427.756901][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 427.765379][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 427.772775][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 428.035057][ T5228] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 428.053399][ T5228] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 428.063845][ T5228] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 428.075894][ T5228] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 428.087322][ T5228] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 428.094986][ T5228] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 429.154772][ T5228] Bluetooth: hci1: command tx timeout [ 429.394576][ T5228] Bluetooth: hci2: command tx timeout [ 429.874939][ T5228] Bluetooth: hci4: command tx timeout [ 430.194804][ T5228] Bluetooth: hci9: command tx timeout [ 431.234637][ T5228] Bluetooth: hci1: command tx timeout [ 431.474524][ T5228] Bluetooth: hci2: command tx timeout [ 431.954623][ T5233] Bluetooth: hci4: command tx timeout [ 432.274789][ T5228] Bluetooth: hci9: command tx timeout [ 433.314615][ T5228] Bluetooth: hci1: command tx timeout [ 433.554675][ T5228] Bluetooth: hci2: command tx timeout [ 434.036734][ T5228] Bluetooth: hci4: command tx timeout [ 434.354857][ T5228] Bluetooth: hci9: command tx timeout [ 435.394612][ T5228] Bluetooth: hci1: command tx timeout [ 435.634608][ T5228] Bluetooth: hci2: command tx timeout [ 436.123485][ T5228] Bluetooth: hci4: command tx timeout [ 436.434934][ T5228] Bluetooth: hci9: command tx timeout [ 440.277829][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.284190][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.837308][T12559] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 476.865965][T12559] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 476.893447][T12559] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 476.998982][T12559] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 477.041962][T12559] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 477.082147][T12559] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 478.274531][ T5228] Bluetooth: hci3: command 0x0406 tx timeout [ 479.234674][ T5228] Bluetooth: hci10: command tx timeout [ 481.317819][ T5228] Bluetooth: hci10: command tx timeout [ 483.394675][ T5228] Bluetooth: hci10: command tx timeout [ 485.474560][ T5228] Bluetooth: hci10: command tx timeout [ 487.151771][ T5233] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 487.178073][ T5233] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 487.186747][ T5233] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 487.195096][ T5233] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 487.204708][ T5233] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 487.213617][ T5233] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 487.564105][ T5233] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 487.594712][ T5233] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 487.606032][ T5233] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 487.614091][ T5233] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 487.624112][ T5233] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 487.631595][ T5233] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 488.227613][ T5228] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 488.238535][ T5228] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 488.250926][ T5228] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 488.259042][ T5228] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 488.268984][ T5228] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 488.277956][ T5228] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 488.367302][ T5233] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 488.383442][ T5233] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 488.395568][ T5233] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 488.403654][ T5233] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 488.415051][ T5233] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 488.422594][ T5233] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 489.314598][ T5233] Bluetooth: hci11: command tx timeout [ 489.714810][ T5233] Bluetooth: hci12: command tx timeout [ 490.354656][ T5233] Bluetooth: hci13: command tx timeout [ 490.514757][ T5233] Bluetooth: hci14: command tx timeout [ 491.394691][ T5233] Bluetooth: hci11: command tx timeout [ 491.794548][T12580] Bluetooth: hci12: command tx timeout [ 492.434604][T12580] Bluetooth: hci13: command tx timeout [ 492.594865][T12580] Bluetooth: hci14: command tx timeout [ 493.474617][T12580] Bluetooth: hci11: command tx timeout [ 493.565009][T12580] Bluetooth: hci6: command 0x0406 tx timeout [ 493.634827][T12559] Bluetooth: hci8: command 0x0406 tx timeout [ 493.644558][T12580] Bluetooth: hci7: command 0x0406 tx timeout [ 493.650691][T12559] Bluetooth: hci5: command 0x0406 tx timeout [ 493.874489][T12558] Bluetooth: hci12: command tx timeout [ 494.514617][T12558] Bluetooth: hci13: command tx timeout [ 494.675146][T12558] Bluetooth: hci14: command tx timeout [ 495.554586][T12558] Bluetooth: hci11: command tx timeout [ 495.954605][T12558] Bluetooth: hci12: command tx timeout [ 496.598844][T12558] Bluetooth: hci13: command tx timeout [ 496.754759][T12558] Bluetooth: hci14: command tx timeout [ 501.721103][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.727693][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.298919][ T5228] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 537.328006][ T5228] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 537.356737][ T5228] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 537.441214][ T5228] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 537.503516][ T5228] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 537.556038][ T5228] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 539.656317][T12559] Bluetooth: hci0: command 0x0406 tx timeout [ 539.724525][T12559] Bluetooth: hci15: command tx timeout [ 541.794637][T12559] Bluetooth: hci15: command tx timeout [ 543.874533][T12559] Bluetooth: hci15: command tx timeout [ 544.594791][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 544.602505][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 544.644371][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 544.653344][ T30] task:kworker/u8:1 state:D stack:21872 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 544.794363][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 544.801407][ T30] Call Trace: [ 544.844165][ T30] [ 544.853374][ T30] __schedule+0x1895/0x4b30 [ 544.858384][ T30] ? __pfx___schedule+0x10/0x10 [ 544.863273][ T30] ? __pfx_lock_release+0x10/0x10 [ 544.874351][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 544.882135][ T30] ? kthread_data+0x52/0xd0 [ 544.891694][ T30] ? schedule+0x90/0x320 [ 544.897901][ T30] ? wq_worker_sleeping+0x66/0x240 [ 544.903054][ T30] ? schedule+0x90/0x320 [ 544.914081][ T30] schedule+0x14b/0x320 [ 544.919839][ T30] schedule_preempt_disabled+0x13/0x30 [ 544.930612][ T30] __mutex_lock+0x6a7/0xd70 [ 544.936585][ T30] ? __mutex_lock+0x52a/0xd70 [ 544.941299][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 544.952571][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 544.959039][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 544.971183][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 544.978706][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 544.991696][ T30] ? process_scheduled_works+0x976/0x1850 [ 545.010912][ T30] process_scheduled_works+0xa63/0x1850 [ 545.021339][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 545.028808][ T30] ? assign_work+0x364/0x3d0 [ 545.033456][ T30] worker_thread+0x870/0xd30 [ 545.043335][ T30] ? __kthread_parkme+0x169/0x1d0 [ 545.049903][ T30] ? __pfx_worker_thread+0x10/0x10 [ 545.061199][ T30] kthread+0x2f0/0x390 [ 545.066690][ T30] ? __pfx_worker_thread+0x10/0x10 [ 545.071842][ T30] ? __pfx_kthread+0x10/0x10 [ 545.082745][ T30] ret_from_fork+0x4b/0x80 [ 545.089734][ T30] ? __pfx_kthread+0x10/0x10 [ 545.097192][ T30] ret_from_fork_asm+0x1a/0x30 [ 545.102014][ T30] [ 545.110247][ T30] INFO: task kworker/u8:4:72 blocked for more than 143 seconds. [ 545.123938][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 545.136655][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.149011][ T30] task:kworker/u8:4 state:D stack:20472 pid:72 tgid:72 ppid:2 flags:0x00004000 [ 545.164107][ T30] Workqueue: netns cleanup_net [ 545.171489][ T30] Call Trace: [ 545.178389][ T30] [ 545.181357][ T30] __schedule+0x1895/0x4b30 [ 545.189810][ T30] ? __pfx___schedule+0x10/0x10 [ 545.198403][ T30] ? __pfx_lock_release+0x10/0x10 [ 545.203479][ T30] ? kthread_data+0x52/0xd0 [ 545.211785][ T30] ? wq_worker_sleeping+0x66/0x240 [ 545.220591][ T30] ? schedule+0x90/0x320 [ 545.227621][ T30] schedule+0x14b/0x320 [ 545.231818][ T30] schedule_timeout+0xb0/0x310 [ 545.244447][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 545.249926][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 545.264552][ T30] ? wait_for_completion+0x2fe/0x620 [ 545.269884][ T30] ? wait_for_completion+0x2fe/0x620 [ 545.280438][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 545.285996][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 545.292478][ T30] ? wait_for_completion+0x2fe/0x620 [ 545.305332][ T30] wait_for_completion+0x355/0x620 [ 545.310509][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 545.322825][ T30] ? __flush_work+0xe7/0xc50 [ 545.327887][ T30] __flush_work+0xa37/0xc50 [ 545.332434][ T30] ? __flush_work+0xe7/0xc50 [ 545.343335][ T30] ? __pfx___flush_work+0x10/0x10 [ 545.349846][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 545.361213][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 545.368307][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 545.373482][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 545.384378][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 545.392356][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 545.405851][ T30] ? __pfx_lock_release+0x10/0x10 [ 545.413791][ T30] ? up_write+0x1a9/0x590 [ 545.420850][ T30] unregister_netdevice_queue+0x303/0x370 [ 545.430265][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 545.439275][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 545.450099][ T30] _cfg80211_unregister_wdev+0x162/0x560 [ 545.458367][ T30] ieee80211_remove_interfaces+0x4db/0x700 [ 545.464223][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 545.474595][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 545.480009][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 545.493417][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 545.502888][ T30] hwsim_exit_net+0x5c1/0x670 [ 545.513120][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 545.519836][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 545.530505][ T30] cleanup_net+0x802/0xcc0 [ 545.536439][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 545.541424][ T30] ? process_scheduled_works+0x976/0x1850 [ 545.553335][ T30] process_scheduled_works+0xa63/0x1850 [ 545.560553][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 545.571513][ T30] ? assign_work+0x364/0x3d0 [ 545.577551][ T30] worker_thread+0x870/0xd30 [ 545.582190][ T30] ? __kthread_parkme+0x169/0x1d0 [ 545.593282][ T30] ? __pfx_worker_thread+0x10/0x10 [ 545.601575][ T30] kthread+0x2f0/0x390 [ 545.610459][ T30] ? __pfx_worker_thread+0x10/0x10 [ 545.617446][ T30] ? __pfx_kthread+0x10/0x10 [ 545.622073][ T30] ret_from_fork+0x4b/0x80 [ 545.631524][ T30] ? __pfx_kthread+0x10/0x10 [ 545.639873][ T30] ret_from_fork_asm+0x1a/0x30 [ 545.649595][ T30] [ 545.652759][ T30] INFO: task kworker/u8:6:1835 blocked for more than 144 seconds. [ 545.662315][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 545.674521][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.683232][ T30] task:kworker/u8:6 state:D stack:20024 pid:1835 tgid:1835 ppid:2 flags:0x00004000 [ 545.698848][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 545.711489][ T30] Call Trace: [ 545.717210][ T30] [ 545.720564][ T30] __schedule+0x1895/0x4b30 [ 545.730135][ T30] ? __pfx___schedule+0x10/0x10 [ 545.737776][ T30] ? __pfx_lock_release+0x10/0x10 [ 545.742847][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 545.753312][ T30] ? kthread_data+0x52/0xd0 [ 545.759269][ T30] ? schedule+0x90/0x320 [ 545.763547][ T30] ? wq_worker_sleeping+0x66/0x240 [ 545.773782][ T30] ? schedule+0x90/0x320 [ 545.779684][ T30] schedule+0x14b/0x320 [ 545.783878][ T30] schedule_preempt_disabled+0x13/0x30 [ 545.794515][ T30] __mutex_lock+0x6a7/0xd70 [ 545.803838][ T30] ? mark_lock+0x9a/0x360 [ 545.812936][ T30] ? __mutex_lock+0x52a/0xd70 [ 545.822108][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 545.829988][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 545.839380][ T30] addrconf_dad_work+0xd0/0x16f0 [ 545.848982][ T30] ? preempt_schedule+0xe1/0xf0 [ 545.853885][ T30] ? __pfx_preempt_schedule+0x10/0x10 [ 545.860975][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 545.871189][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 545.882151][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 545.894009][ T30] ? process_scheduled_works+0x976/0x1850 [ 545.902480][ T30] process_scheduled_works+0xa63/0x1850 [ 545.912858][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 545.920408][ T30] ? assign_work+0x364/0x3d0 [ 545.930573][ T30] worker_thread+0x870/0xd30 [ 545.937763][ T30] ? __kthread_parkme+0x169/0x1d0 [ 545.942842][ T30] ? __pfx_worker_thread+0x10/0x10 [ 545.952818][ T30] kthread+0x2f0/0x390 [ 545.957128][T12559] Bluetooth: hci15: command tx timeout [ 545.964179][ T30] ? __pfx_worker_thread+0x10/0x10 [ 545.974070][ T30] ? __pfx_kthread+0x10/0x10 [ 545.980176][ T30] ret_from_fork+0x4b/0x80 [ 545.989599][ T30] ? __pfx_kthread+0x10/0x10 [ 545.994231][ T30] ret_from_fork_asm+0x1a/0x30 [ 546.001789][ T30] [ 546.010886][ T30] INFO: task jbd2/sda1-8:4643 blocked for more than 144 seconds. [ 546.020289][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 546.032856][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.053437][ T30] task:jbd2/sda1-8 state:D stack:24824 pid:4643 tgid:4643 ppid:2 flags:0x00004000 [ 546.069772][ T30] Call Trace: [ 546.073142][ T30] [ 546.076599][ T30] __schedule+0x1895/0x4b30 [ 546.081166][ T30] ? __pfx___schedule+0x10/0x10 [ 546.093479][ T30] ? __pfx_lock_release+0x10/0x10 [ 546.098937][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 546.107199][ T30] ? schedule+0x90/0x320 [ 546.111488][ T30] schedule+0x14b/0x320 [ 546.122395][ T30] io_schedule+0x8d/0x110 [ 546.127593][ T30] bit_wait_io+0x12/0xd0 [ 546.131876][ T30] __wait_on_bit+0xb0/0x2f0 [ 546.143752][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 546.149456][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 546.160805][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 546.166122][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 546.172142][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 546.183786][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 546.191790][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 546.204351][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 546.210921][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 546.221995][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 546.229687][ T30] ? __timer_delete_sync+0x15c/0x310 [ 546.241568][ T30] ? __timer_delete_sync+0x25d/0x310 [ 546.248552][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 546.254224][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 546.264361][ T30] ? prepare_to_wait+0x186/0x210 [ 546.269350][ T30] ? schedule+0x90/0x320 [ 546.273619][ T30] kjournald2+0x41c/0x7b0 [ 546.285041][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 546.291442][ T30] ? __pfx_kjournald2+0x10/0x10 [ 546.303086][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 546.310707][ T30] ? __kthread_parkme+0x169/0x1d0 [ 546.321627][ T30] ? __pfx_kjournald2+0x10/0x10 [ 546.328084][ T30] kthread+0x2f0/0x390 [ 546.332633][ T30] ? __pfx_kjournald2+0x10/0x10 [ 546.343849][ T30] ? __pfx_kthread+0x10/0x10 [ 546.350026][ T30] ret_from_fork+0x4b/0x80 [ 546.359283][ T30] ? __pfx_kthread+0x10/0x10 [ 546.363926][ T30] ret_from_fork_asm+0x1a/0x30 [ 546.370770][ T30] [ 546.373903][ T30] INFO: task dhcpcd:4894 blocked for more than 145 seconds. [ 546.386001][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 546.393355][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.407459][ T30] task:dhcpcd state:D stack:20608 pid:4894 tgid:4894 ppid:4893 flags:0x00000002 [ 546.421487][ T30] Call Trace: [ 546.429776][ T30] [ 546.432831][ T30] __schedule+0x1895/0x4b30 [ 546.443337][ T30] ? __pfx___schedule+0x10/0x10 [ 546.451972][ T30] ? __pfx_lock_release+0x10/0x10 [ 546.459789][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 546.469028][ T30] ? schedule+0x90/0x320 [ 546.473319][ T30] schedule+0x14b/0x320 [ 546.480554][ T30] schedule_preempt_disabled+0x13/0x30 [ 546.493712][ T30] __mutex_lock+0x6a7/0xd70 [ 546.500855][ T30] ? __mutex_lock+0x52a/0xd70 [ 546.509244][ T30] ? devinet_ioctl+0x2ce/0x1aa0 [ 546.514199][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 546.524775][ T30] ? apparmor_capable+0x13b/0x1b0 [ 546.529855][ T30] ? bpf_lsm_capable+0x9/0x10 [ 546.541263][ T30] devinet_ioctl+0x2ce/0x1aa0 [ 546.546399][ T30] ? get_user_ifreq+0x1bb/0x200 [ 546.551385][ T30] inet_ioctl+0x3d7/0x4f0 [ 546.561640][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 546.566887][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 546.572165][ T30] sock_do_ioctl+0x158/0x460 [ 546.582679][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 546.589724][ T30] ? __pfx_lock_release+0x10/0x10 [ 546.600746][ T30] sock_ioctl+0x626/0x8e0 [ 546.605456][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 546.610339][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 546.623580][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 546.632529][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 546.643819][ T30] __se_sys_ioctl+0xf9/0x170 [ 546.648807][ T30] do_syscall_64+0xf3/0x230 [ 546.653345][ T30] ? clear_bhb_loop+0x35/0x90 [ 546.664072][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.670456][ T30] RIP: 0033:0x7f2ded77ad49 [ 546.683762][ T30] RSP: 002b:00007ffd44c7c8e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.692629][ T30] RAX: ffffffffffffffda RBX: 00007f2ded6ac6c0 RCX: 00007f2ded77ad49 [ 546.704357][ T30] RDX: 00007ffd44c8cad8 RSI: 0000000000008914 RDI: 0000000000000018 [ 546.712368][ T30] RBP: 00007ffd44c9cc98 R08: 00007ffd44c8ca98 R09: 00007ffd44c8ca48 [ 546.727905][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.740072][ T30] R13: 00007ffd44c8cad8 R14: 0000000000000028 R15: 0000000000008914 [ 546.750692][ T30] [ 546.753825][ T30] INFO: task kworker/u8:9:5765 blocked for more than 145 seconds. [ 546.767950][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 546.778966][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.790244][ T30] task:kworker/u8:9 state:D stack:19168 pid:5765 tgid:5765 ppid:2 flags:0x00004000 [ 546.804164][ T30] Workqueue: events_unbound linkwatch_event [ 546.813064][ T30] Call Trace: [ 546.821472][ T30] [ 546.828100][ T30] __schedule+0x1895/0x4b30 [ 546.832662][ T30] ? __pfx___schedule+0x10/0x10 [ 546.842474][ T30] ? __pfx_lock_release+0x10/0x10 [ 546.850596][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 546.860170][ T30] ? kthread_data+0x52/0xd0 [ 546.869364][ T30] ? schedule+0x90/0x320 [ 546.873650][ T30] ? wq_worker_sleeping+0x66/0x240 [ 546.882511][ T30] ? schedule+0x90/0x320 [ 546.889314][ T30] schedule+0x14b/0x320 [ 546.893506][ T30] schedule_preempt_disabled+0x13/0x30 [ 546.902711][ T30] __mutex_lock+0x6a7/0xd70 [ 546.909850][ T30] ? __mutex_lock+0x52a/0xd70 [ 546.920934][ T30] ? linkwatch_event+0xe/0x60 [ 546.929327][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 546.938012][ T30] ? process_scheduled_works+0x976/0x1850 [ 546.943769][ T30] linkwatch_event+0xe/0x60 [ 546.951438][ T30] process_scheduled_works+0xa63/0x1850 [ 546.961605][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 546.970221][ T30] ? assign_work+0x364/0x3d0 [ 546.978423][ T30] worker_thread+0x870/0xd30 [ 546.983060][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 546.991669][ T30] ? __kthread_parkme+0x169/0x1d0 [ 547.000379][ T30] ? __pfx_worker_thread+0x10/0x10 [ 547.009638][ T30] kthread+0x2f0/0x390 [ 547.013738][ T30] ? __pfx_worker_thread+0x10/0x10 [ 547.022611][ T30] ? __pfx_kthread+0x10/0x10 [ 547.031316][ T30] ret_from_fork+0x4b/0x80 [ 547.039389][ T30] ? __pfx_kthread+0x10/0x10 [ 547.044017][ T30] ret_from_fork_asm+0x1a/0x30 [ 547.054037][ T30] [ 547.060830][ T30] INFO: task syz-executor:12460 blocked for more than 145 seconds. [ 547.071278][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 547.090504][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.103929][ T30] task:syz-executor state:D stack:21728 pid:12460 tgid:12460 ppid:1 flags:0x00004006 [ 547.117857][ T30] Call Trace: [ 547.121171][ T30] [ 547.124122][ T30] __schedule+0x1895/0x4b30 [ 547.132471][ T30] ? __pfx___schedule+0x10/0x10 [ 547.140246][ T30] ? __pfx_lock_release+0x10/0x10 [ 547.150797][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 547.162697][ T30] ? schedule+0x90/0x320 [ 547.171809][ T30] schedule+0x14b/0x320 [ 547.177422][ T30] schedule_preempt_disabled+0x13/0x30 [ 547.182915][ T30] __mutex_lock+0x6a7/0xd70 [ 547.192453][ T30] ? __mutex_lock+0x52a/0xd70 [ 547.198623][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 547.203868][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 547.214368][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 547.219343][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 547.230195][ T30] ? __lock_acquire+0x1384/0x2050 [ 547.236818][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 547.242330][ T30] netlink_rcv_skb+0x1e3/0x430 [ 547.253683][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 547.261028][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 547.271304][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 547.278176][ T30] netlink_unicast+0x7f6/0x990 [ 547.282985][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 547.293194][ T30] ? __virt_addr_valid+0x183/0x530 [ 547.299859][ T30] ? __check_object_size+0x48e/0x900 [ 547.310920][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 547.318720][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.324054][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 547.333831][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.341742][ T30] __sock_sendmsg+0x221/0x270 [ 547.352744][ T30] __sys_sendto+0x398/0x4f0 [ 547.360639][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 547.369376][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 547.377122][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 547.383238][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 547.393079][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 547.403504][ T30] __x64_sys_sendto+0xde/0x100 [ 547.412008][ T30] do_syscall_64+0xf3/0x230 [ 547.419122][ T30] ? clear_bhb_loop+0x35/0x90 [ 547.423845][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.433537][ T30] RIP: 0033:0x7f17ddf7fd8c [ 547.443587][ T30] RSP: 002b:00007f17de25f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 547.456234][ T30] RAX: ffffffffffffffda RBX: 00007f17dec64620 RCX: 00007f17ddf7fd8c [ 547.464244][ T30] RDX: 000000000000003c RSI: 00007f17dec64670 RDI: 0000000000000003 [ 547.476697][ T30] RBP: 0000000000000000 R08: 00007f17de25f704 R09: 000000000000000c [ 547.492533][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 547.503117][ T30] R13: 0000000000000000 R14: 00007f17dec64670 R15: 0000000000000000 [ 547.515044][ T30] [ 547.518178][ T30] INFO: task syz-executor:12503 blocked for more than 146 seconds. [ 547.531168][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 547.542307][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.554617][ T30] task:syz-executor state:D stack:23600 pid:12503 tgid:12503 ppid:1 flags:0x00004004 [ 547.571451][ T30] Call Trace: [ 547.575523][ T30] [ 547.578487][ T30] __schedule+0x1895/0x4b30 [ 547.583032][ T30] ? __pfx___schedule+0x10/0x10 [ 547.595353][ T30] ? __pfx_lock_release+0x10/0x10 [ 547.600428][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 547.612023][ T30] ? schedule+0x90/0x320 [ 547.616640][ T30] schedule+0x14b/0x320 [ 547.620837][ T30] schedule_preempt_disabled+0x13/0x30 [ 547.632466][ T30] __mutex_lock+0x6a7/0xd70 [ 547.641647][ T30] ? __mutex_lock+0x52a/0xd70 [ 547.653433][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 547.659266][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 547.670710][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 547.676041][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 547.681220][ T30] ? __lock_acquire+0x1384/0x2050 [ 547.694849][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 547.700383][ T30] netlink_rcv_skb+0x1e3/0x430 [ 547.711352][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 547.718376][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 547.723728][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 547.734355][ T30] netlink_unicast+0x7f6/0x990 [ 547.739175][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 547.751579][ T30] ? __virt_addr_valid+0x183/0x530 [ 547.757154][ T30] ? __check_object_size+0x48e/0x900 [ 547.762488][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 547.773793][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.780612][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 547.791702][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.810969][ T30] __sock_sendmsg+0x221/0x270 [ 547.816222][ T30] __sys_sendto+0x398/0x4f0 [ 547.820789][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 547.833696][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 547.840101][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 547.853563][ T30] __x64_sys_sendto+0xde/0x100 [ 547.858737][ T30] do_syscall_64+0xf3/0x230 [ 547.863285][ T30] ? clear_bhb_loop+0x35/0x90 [ 547.877547][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.883592][ T30] RIP: 0033:0x7f600fb7fd8c [ 547.894107][ T30] RSP: 002b:00007f600fe5fe00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 547.902941][ T30] RAX: ffffffffffffffda RBX: 00007f6010864620 RCX: 00007f600fb7fd8c [ 547.914351][ T30] RDX: 0000000000000030 RSI: 00007f6010864670 RDI: 0000000000000003 [ 547.922368][ T30] RBP: 0000000000000000 R08: 00007f600fe5fe54 R09: 000000000000000c [ 547.937398][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 547.949131][ T30] R13: 0000000000000000 R14: 00007f6010864670 R15: 0000000000000000 [ 547.962136][ T30] [ 547.970543][ T30] INFO: task syz-executor:12506 blocked for more than 146 seconds. [ 547.981029][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 547.992063][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.003425][ T30] task:syz-executor state:D stack:26016 pid:12506 tgid:12506 ppid:1 flags:0x00000004 [ 548.018952][ T30] Call Trace: [ 548.022269][ T30] [ 548.027891][ T30] __schedule+0x1895/0x4b30 [ 548.032458][ T30] ? __pfx___schedule+0x10/0x10 [ 548.040850][ T30] ? __pfx_lock_release+0x10/0x10 [ 548.049470][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 548.058644][ T30] ? schedule+0x90/0x320 [ 548.062933][ T30] schedule+0x14b/0x320 [ 548.073205][ T30] schedule_preempt_disabled+0x13/0x30 [ 548.081760][ T30] __mutex_lock+0x6a7/0xd70 [ 548.090131][ T30] ? __mutex_lock+0x52a/0xd70 [ 548.097407][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 548.102558][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 548.111394][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 548.129805][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 548.137835][ T30] ? __lock_acquire+0x1384/0x2050 [ 548.142906][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 548.155550][ T30] netlink_rcv_skb+0x1e3/0x430 [ 548.160372][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 548.172869][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 548.179019][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 548.184262][ T30] netlink_unicast+0x7f6/0x990 [ 548.194793][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 548.200124][ T30] ? __virt_addr_valid+0x183/0x530 [ 548.211593][ T30] ? __check_object_size+0x48e/0x900 [ 548.218593][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 548.223413][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.234431][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 548.239436][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.250125][ T30] __sock_sendmsg+0x221/0x270 [ 548.255630][ T30] __sys_sendto+0x398/0x4f0 [ 548.261386][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 548.274349][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 548.280404][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 548.293320][ T30] __x64_sys_sendto+0xde/0x100 [ 548.300202][ T30] do_syscall_64+0xf3/0x230 [ 548.312005][ T30] ? clear_bhb_loop+0x35/0x90 [ 548.317070][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.323007][ T30] RIP: 0033:0x7f05a937fd8c [ 548.333501][ T30] RSP: 002b:00007f05a965fe10 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 548.342321][ T30] RAX: ffffffffffffffda RBX: 00007f05aa064620 RCX: 00007f05a937fd8c [ 548.354830][ T30] RDX: 0000000000000028 RSI: 00007f05aa064670 RDI: 0000000000000003 [ 548.369504][ T30] RBP: 0000000000000000 R08: 00007f05a965fe64 R09: 000000000000000c [ 548.381394][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 548.395314][ T30] R13: 0000000000000000 R14: 00007f05aa064670 R15: 0000000000000000 [ 548.403358][ T30] [ 548.412861][ T30] INFO: task syz-executor:12510 blocked for more than 147 seconds. [ 548.422944][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 548.434645][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.453093][ T30] task:syz-executor state:D stack:21728 pid:12510 tgid:12510 ppid:1 flags:0x00000004 [ 548.466004][ T30] Call Trace: [ 548.469323][ T30] [ 548.472276][ T30] __schedule+0x1895/0x4b30 [ 548.481912][ T30] ? __pfx___schedule+0x10/0x10 [ 548.489187][ T30] ? __pfx_lock_release+0x10/0x10 [ 548.494264][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 548.505976][ T30] ? schedule+0x90/0x320 [ 548.510270][ T30] schedule+0x14b/0x320 [ 548.524767][ T30] schedule_preempt_disabled+0x13/0x30 [ 548.530367][ T30] __mutex_lock+0x6a7/0xd70 [ 548.540689][ T30] ? __mutex_lock+0x52a/0xd70 [ 548.546927][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 548.552125][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 548.563185][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 548.569678][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 548.580855][ T30] ? __lock_acquire+0x1384/0x2050 [ 548.586318][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 548.591877][ T30] netlink_rcv_skb+0x1e3/0x430 [ 548.606683][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 548.612205][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 548.622652][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 548.628213][ T30] netlink_unicast+0x7f6/0x990 [ 548.633033][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 548.644395][ T30] ? __virt_addr_valid+0x183/0x530 [ 548.649566][ T30] ? __check_object_size+0x48e/0x900 [ 548.661698][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 548.669147][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.679646][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 548.686524][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.692213][ T30] __sock_sendmsg+0x221/0x270 [ 548.703081][ T30] __sys_sendto+0x398/0x4f0 [ 548.709535][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 548.719598][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 548.727135][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 548.733515][ T30] __x64_sys_sendto+0xde/0x100 [ 548.743247][ T30] do_syscall_64+0xf3/0x230 [ 548.750651][ T30] ? clear_bhb_loop+0x35/0x90 [ 548.761394][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.769208][ T30] RIP: 0033:0x7f5705f7fd8c [ 548.773659][ T30] RSP: 002b:00007f570625f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 548.790227][ T30] RAX: ffffffffffffffda RBX: 00007f5706c64620 RCX: 00007f5705f7fd8c [ 548.799761][ T30] RDX: 0000000000000044 RSI: 00007f5706c64670 RDI: 0000000000000003 [ 548.812992][ T30] RBP: 0000000000000000 R08: 00007f570625f704 R09: 000000000000000c [ 548.822951][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 548.836772][ T30] R13: 0000000000000000 R14: 00007f5706c64670 R15: 0000000000000000 [ 548.850655][ T30] [ 548.853896][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 548.863603][ T30] [ 548.863603][ T30] Showing all locks held in the system: [ 548.874768][ T30] 3 locks held by kworker/0:0/8: [ 548.879749][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 548.897309][ T30] #1: ffffc900000d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 548.912527][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 548.926889][ T30] 3 locks held by kworker/0:1/9: [ 548.931864][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 548.951994][ T30] #1: ffffc900000e7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 548.963508][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 548.980266][ T30] 3 locks held by kworker/u8:1/12: [ 548.986975][ T30] #0: ffff888146682948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 549.004652][ T30] #1: ffffc90000117d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 549.025076][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 549.042554][ T30] 1 lock held by khungtaskd/30: [ 549.049016][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 549.064227][ T30] 6 locks held by kworker/u8:4/72: [ 549.070864][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 549.090443][ T30] #1: ffffc900020bfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 549.103158][ T30] #2: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 549.117537][ T30] #3: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 549.131295][ T30] #4: ffff888040e80768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x12b/0x700 [ 549.148477][ T30] #5: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 549.169600][ T30] 3 locks held by kworker/u8:6/1835: [ 549.182786][ T30] #0: ffff88802e060148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 549.201117][ T30] #1: ffffc9000494fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 549.222548][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 549.232444][ T30] 1 lock held by dhcpcd/4894: [ 549.244342][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 549.253581][ T30] 2 locks held by getty/4990: [ 549.264348][ T30] #0: ffff88814c3470a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 549.274188][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 549.293402][ T30] 3 locks held by kworker/u9:3/5228: [ 549.299623][ T30] #0: ffff88807d1e2948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 549.317939][ T30] #1: ffffc900041c7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 549.334762][ T30] #2: ffff888031ddcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 549.349718][ T30] 4 locks held by kworker/1:4/5275: [ 549.356453][ T30] 3 locks held by kworker/u8:9/5765: [ 549.361780][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 549.379558][ T30] #1: ffffc90003b17d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 549.392455][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 549.411424][ T30] 1 lock held by syz-executor/12460: [ 549.417154][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 549.432605][ T30] 1 lock held by syz-executor/12503: [ 549.438445][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 549.454133][ T30] 1 lock held by syz-executor/12506: [ 549.461052][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 549.474350][ T30] 1 lock held by syz-executor/12510: [ 549.479673][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 549.499268][ T30] 2 locks held by syz-executor/12512: [ 549.510630][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 549.523834][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 549.536064][ T30] 2 locks held by syz-executor/12540: [ 549.541473][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 549.554892][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 549.572959][ T30] 2 locks held by syz-executor/12548: [ 549.578755][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 549.594372][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 549.611578][ T30] 2 locks held by syz-executor/12551: [ 549.617720][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 549.633166][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 549.646802][ T30] 2 locks held by syz-executor/12554: [ 549.652210][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 549.667979][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 549.679708][ T30] 2 locks held by syz-executor/12556: [ 549.689916][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 549.703402][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 549.719226][ T30] 3 locks held by kworker/u9:1/12559: [ 549.727015][ T30] #0: ffff88805f7c7948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 549.744068][ T30] #1: ffffc900031efd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 549.762627][ T30] #2: ffff888074200d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 549.774237][ T30] 2 locks held by syz-executor/12561: [ 549.784347][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 549.803404][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 549.814392][ T30] 2 locks held by syz-executor/12571: [ 549.819797][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 549.834768][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 549.852524][ T30] 2 locks held by syz-executor/12574: [ 549.858745][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 549.874246][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 549.885007][ T5233] Bluetooth: hci1: command 0x0406 tx timeout [ 549.891131][ T5233] Bluetooth: hci2: command 0x0406 tx timeout [ 549.912689][ T30] 2 locks held by syz-executor/12577: [ 549.918917][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 549.935694][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 549.950652][ T30] 2 locks held by syz-executor/12579: [ 549.959071][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 549.973412][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 549.986878][ T30] 2 locks held by syz-executor/12587: [ 549.992287][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 550.009163][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 550.034576][ T30] [ 550.036957][ T30] ============================================= [ 550.036957][ T30] [ 550.052988][ T30] NMI backtrace for cpu 0 [ 550.057373][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 550.067560][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 550.077639][ T30] Call Trace: [ 550.080934][ T30] [ 550.083882][ T30] dump_stack_lvl+0x241/0x360 [ 550.088591][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.093813][ T30] ? __pfx__printk+0x10/0x10 [ 550.098436][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 550.103407][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 550.108891][ T30] ? _printk+0xd5/0x120 [ 550.113072][ T30] ? __pfx__printk+0x10/0x10 [ 550.117683][ T30] ? __wake_up_klogd+0xcc/0x110 [ 550.122555][ T30] ? __pfx__printk+0x10/0x10 [ 550.127166][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 550.132215][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 550.138216][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 550.144222][ T30] watchdog+0xff4/0x1040 [ 550.148491][ T30] ? watchdog+0x1ea/0x1040 [ 550.152940][ T30] ? __pfx_watchdog+0x10/0x10 [ 550.157636][ T30] kthread+0x2f0/0x390 [ 550.161724][ T30] ? __pfx_watchdog+0x10/0x10 [ 550.166421][ T30] ? __pfx_kthread+0x10/0x10 [ 550.171030][ T30] ret_from_fork+0x4b/0x80 [ 550.175732][ T30] ? __pfx_kthread+0x10/0x10 [ 550.180344][ T30] ret_from_fork_asm+0x1a/0x30 [ 550.185142][ T30] [ 550.189010][ T30] Sending NMI from CPU 0 to CPUs 1: [ 550.194252][ C1] NMI backtrace for cpu 1 [ 550.194265][ C1] CPU: 1 UID: 0 PID: 5275 Comm: kworker/1:4 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 550.194285][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 550.194299][ C1] Workqueue: events nsim_dev_trap_report_work [ 550.194324][ C1] RIP: 0010:__lock_acquire+0x4dc/0x2050 [ 550.194346][ C1] Code: 13 00 00 44 89 3b 44 89 c3 48 89 d8 48 c1 e8 06 48 8d 3c c5 c0 97 25 94 be 08 00 00 00 e8 6c 49 8e 00 48 0f a3 1d 04 71 b5 12 <73> 27 48 69 c3 c8 00 00 00 48 8d 98 c0 16 c2 93 48 ba 00 00 00 00 [ 550.194359][ C1] RSP: 0018:ffffc90000a17bb0 EFLAGS: 00000057 [ 550.194371][ C1] RAX: 0000000000000001 RBX: 0000000000000022 RCX: ffffffff817026b4 [ 550.194382][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942597c0 [ 550.194393][ C1] RBP: 000000000000001e R08: ffffffff942597c7 R09: 1ffffffff284b2f8 [ 550.194405][ C1] R10: dffffc0000000000 R11: fffffbfff284b2f9 R12: ffff88802cd6bc00 [ 550.194416][ C1] R13: 0000000000000022 R14: 0000000000022022 R15: 0000000000000000 [ 550.194427][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 550.194439][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.194450][ C1] CR2: 0000001b31617ff8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 550.194464][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 550.194474][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 550.194486][ C1] Call Trace: [ 550.194492][ C1] [ 550.194499][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 550.194522][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 550.194544][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 550.194572][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 550.194592][ C1] ? nmi_handle+0x14f/0x5a0 [ 550.194607][ C1] ? nmi_handle+0x2a/0x5a0 [ 550.194623][ C1] ? __lock_acquire+0x4dc/0x2050 [ 550.194644][ C1] ? default_do_nmi+0x63/0x160 [ 550.194660][ C1] ? exc_nmi+0x123/0x1f0 [ 550.194675][ C1] ? end_repeat_nmi+0xf/0x53 [ 550.194696][ C1] ? __lock_acquire+0x4d4/0x2050 [ 550.194715][ C1] ? __lock_acquire+0x4dc/0x2050 [ 550.194734][ C1] ? __lock_acquire+0x4dc/0x2050 [ 550.194754][ C1] ? __lock_acquire+0x4dc/0x2050 [ 550.194773][ C1] [ 550.194778][ C1] [ 550.194790][ C1] lock_acquire+0x1ed/0x550 [ 550.194808][ C1] ? ip_route_me_harder+0x4d6/0x1300 [ 550.194826][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 550.194846][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 550.194865][ C1] ? process_scheduled_works+0xa63/0x1850 [ 550.194884][ C1] ? kthread+0x2f0/0x390 [ 550.194901][ C1] ? l3mdev_fib_table+0x14b/0x160 [ 550.194916][ C1] ? ip_route_me_harder+0x4d6/0x1300 [ 550.194931][ C1] ip_route_me_harder+0x4f3/0x1300 [ 550.194945][ C1] ? ip_route_me_harder+0x4d6/0x1300 [ 550.194964][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 550.194979][ C1] ? trace_kmalloc+0x1f/0xd0 [ 550.194997][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 550.195022][ C1] synproxy_send_tcp+0x356/0x6c0 [ 550.195041][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 550.195061][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 550.195079][ C1] ? synproxy_pernet+0x45/0x270 [ 550.195104][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 550.195124][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 550.195140][ C1] ? validate_chain+0x11e/0x5920 [ 550.195157][ C1] ? nf_ip_checksum+0x13a/0x500 [ 550.195176][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 550.195195][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 550.195211][ C1] ? validate_chain+0x11e/0x5920 [ 550.195229][ C1] ? __pfx_validate_chain+0x10/0x10 [ 550.195248][ C1] nft_do_chain+0x4ad/0x1da0 [ 550.195270][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 550.195286][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 550.195312][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 550.195332][ C1] nft_do_chain_inet+0x418/0x6b0 [ 550.195350][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 550.195367][ C1] ? ipt_do_table+0x312/0x1860 [ 550.195388][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 550.195405][ C1] nf_hook_slow+0xc3/0x220 [ 550.195420][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 550.195441][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 550.195460][ C1] NF_HOOK+0x29e/0x450 [ 550.195480][ C1] ? NF_HOOK+0x9a/0x450 [ 550.195498][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 550.195518][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 550.195540][ C1] ? ip_rcv_finish+0x406/0x560 [ 550.195560][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 550.195580][ C1] NF_HOOK+0x3a4/0x450 [ 550.195598][ C1] ? __lock_acquire+0x1384/0x2050 [ 550.195617][ C1] ? NF_HOOK+0x9a/0x450 [ 550.195636][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 550.195653][ C1] ? ip_rcv_core+0x801/0xd10 [ 550.195672][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 550.195694][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 550.195713][ C1] __netif_receive_skb+0x2bf/0x650 [ 550.195729][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 550.195748][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 550.195762][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 550.195782][ C1] ? __pfx_lock_release+0x10/0x10 [ 550.195801][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 550.195822][ C1] process_backlog+0x662/0x15b0 [ 550.195839][ C1] ? process_backlog+0x33b/0x15b0 [ 550.195857][ C1] ? __pfx_process_backlog+0x10/0x10 [ 550.195872][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 550.195893][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 550.195913][ C1] __napi_poll+0xcb/0x490 [ 550.195929][ C1] net_rx_action+0x89b/0x1240 [ 550.195951][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 550.195966][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 550.195997][ C1] handle_softirqs+0x2c5/0x980 [ 550.196016][ C1] ? do_softirq+0x11b/0x1e0 [ 550.196034][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 550.196055][ C1] do_softirq+0x11b/0x1e0 [ 550.196071][ C1] [ 550.196076][ C1] [ 550.196082][ C1] ? __pfx_do_softirq+0x10/0x10 [ 550.196104][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 550.196125][ C1] ? rcu_is_watching+0x15/0xb0 [ 550.196141][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 550.196159][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 550.196178][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 550.196196][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 550.196214][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 550.196234][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 550.196258][ C1] ? process_scheduled_works+0x976/0x1850 [ 550.196276][ C1] process_scheduled_works+0xa63/0x1850 [ 550.196303][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.196324][ C1] ? assign_work+0x364/0x3d0 [ 550.196343][ C1] worker_thread+0x870/0xd30 [ 550.196366][ C1] ? __kthread_parkme+0x169/0x1d0 [ 550.196386][ C1] ? __pfx_worker_thread+0x10/0x10 [ 550.196404][ C1] kthread+0x2f0/0x390 [ 550.196417][ C1] ? __pfx_worker_thread+0x10/0x10 [ 550.196435][ C1] ? __pfx_kthread+0x10/0x10 [ 550.196450][ C1] ret_from_fork+0x4b/0x80 [ 550.196469][ C1] ? __pfx_kthread+0x10/0x10 [ 550.196482][ C1] ret_from_fork_asm+0x1a/0x30 [ 550.196506][ C1] [ 550.943493][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 550.950407][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 550.960580][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 550.970656][ T30] Call Trace: [ 550.973949][ T30] [ 550.976892][ T30] dump_stack_lvl+0x241/0x360 [ 550.981598][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.986907][ T30] ? __pfx__printk+0x10/0x10 [ 550.991513][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 550.997526][ T30] ? vscnprintf+0x5d/0x90 [ 551.001883][ T30] panic+0x349/0x880 [ 551.005800][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 551.011982][ T30] ? __pfx_panic+0x10/0x10 [ 551.016419][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 551.021822][ T30] ? __irq_work_queue_local+0x137/0x410 [ 551.027396][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 551.032789][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 551.038974][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 551.045162][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 551.051355][ T30] watchdog+0x1033/0x1040 [ 551.055708][ T30] ? watchdog+0x1ea/0x1040 [ 551.060145][ T30] ? __pfx_watchdog+0x10/0x10 [ 551.064846][ T30] kthread+0x2f0/0x390 [ 551.068928][ T30] ? __pfx_watchdog+0x10/0x10 [ 551.073624][ T30] ? __pfx_kthread+0x10/0x10 [ 551.078229][ T30] ret_from_fork+0x4b/0x80 [ 551.082670][ T30] ? __pfx_kthread+0x10/0x10 [ 551.087276][ T30] ret_from_fork_asm+0x1a/0x30 [ 551.092076][ T30] [ 551.095367][ T30] Kernel Offset: disabled [ 551.099683][ T30] Rebooting in 86400 seconds..