last executing test programs: 51.919928364s ago: executing program 3 (id=887): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 51.572920344s ago: executing program 3 (id=890): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e4e22560c"], 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='xprtrdma_cb_setup\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sysfs$1(0x1, 0x0) sysfs$1(0x1, &(0x7f0000000140)='\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES64=r1, @ANYBLOB="49dc996f49cc10349b87e0ebcc1e092834eb70eb72e5bf3d6e7b74bf9bf603b4e74d7b7df0a100b6bd4332c51c2337c308146cbc39927429628ac04f9debd9703bde847e79f759bc37c58a916518436e74c4fb3ca20ad2923c188d621f54c5b438223a9fd3199ba51b148817bf8669f0e94d99a75e61ec426933c07a52c0e762fe838013db49960337376270c35623586dc2819835d4e9093016040d454828a5e59a906b828e4ea76e3506d5c47323bcbe2b286ed03d9749fb8eb4a3d20fb963f5793c0dc529686df6633c2992364d", @ANYBLOB="040000a809aa522c00000007000000f0f45ea2175f23fbb15d52352bc3550b0d17fb71f7e75efcca84deef4ed61a80bca1bab5dee40e3ba5eb8709e65dade8f488405f2cce86392966e9c9220c9ccad9fafeeb93d38a501049f60535a7b64920bdf69cb4fa3cde962d32202ec1023a182a208c702d7d38065b3441b7e0fd8f34e57c8fa24c998927a044973c9f6221c7eb81449fb758edb45da1aac345c92af960af3d450a507a3b89e8d6eff026dc65428683455ddfbc1b1e0e60e7e387b1cd59d99b169e9792acadc2c7508507f0b0f77bae6172255141b7c6f586f900"/233, @ANYBLOB="04044895e56de3c4c25d3df331e22a61c8f22922e51ce4a19d112a6d14343e"], 0x54}, 0x1, 0x0, 0x0, 0x4000064}, 0x4004800) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x4) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f00000012c0)='\xd9j\xff\xabk0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}]) keyctl$dh_compute(0x17, &(0x7f0000000180)={r6, r6, r4}, &(0x7f000001fa40)=""/209, 0xd1, &(0x7f0000000200)={&(0x7f00000002c0)={'rmd256-generic\x00'}, 0x0, 0x19}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x40, 0xc8, 0x8}}}, 0x9) 41.534996076s ago: executing program 3 (id=892): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000200)={0x3, @raw_data="71f5125f891320cf2efdded3052f2069770e4a1f1300f9dd2f2186795e0dc3fd27fb4bb120baf8c897b0520103911d7dcf90925343b9563c2841577b853d068d3888ab05ac5cee08e2d94e9073136856835f3f59c43413c54d89f4103a5d755cf0e7dbc2325fcaf95678228f75894eada6862997ebe54e427de68ac62275e55c487e06dfd657498dda82f22ea8abe5ecbb5d35e0df4f4303f9257af77cc6dc145441e925d1478944ca52558e6ed65c1d25dbd2a5a118c58ca59e91aab3507f57cf52eaa42c978fd2"}) 41.383746904s ago: executing program 3 (id=945): r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x200048c0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 40.959117361s ago: executing program 1 (id=950): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 40.795696755s ago: executing program 1 (id=952): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x3) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x80040, 0x0) 40.673035515s ago: executing program 1 (id=956): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xbf) 40.5447499s ago: executing program 1 (id=958): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x30, 0xffffffffffffffff, 0x0) close(r0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x19}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x10) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x8, &(0x7f0000000000), 0x8) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) unshare(0x2000400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002040)={&(0x7f0000002080)='page_pool_release\x00'}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) 40.521460404s ago: executing program 0 (id=960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.431035363s ago: executing program 3 (id=961): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000001000000000000000000000091120f000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 40.335846632s ago: executing program 0 (id=964): socket$nl_xfrm(0x10, 0x3, 0x6) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x80c80, 0x0) r0 = syz_io_uring_setup(0x206c, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 40.25970924s ago: executing program 3 (id=965): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) r0 = gettid() r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000740)={'wlan0\x00'}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='rcu_stall_warning\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000101c0)=@chain) r7 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) preadv(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/4080, 0xff0}], 0x1, 0x2000000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005680)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001480)="86d55f3f15c1a2f1d23508ad98c8615a94017a07b22422390102c453b083f55926c4cfaab80dd95fd707a31a6fb722c057", 0x31}], 0x1}], 0x1, 0x0) 40.170549522s ago: executing program 0 (id=966): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) 39.657052289s ago: executing program 1 (id=967): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000200)={0x3, @raw_data="71f5125f891320cf2efdded3052f2069770e4a1f1300f9dd2f2186795e0dc3fd27fb4bb120baf8c897b0520103911d7dcf90925343b9563c2841577b853d068d3888ab05ac5cee08e2d94e9073136856835f3f59c43413c54d89f4103a5d755cf0e7dbc2325fcaf95678228f75894eada6862997ebe54e427de68ac62275e55c487e06dfd657498dda82f22ea8abe5ecbb5d35e0df4f4303f9257af77cc6dc145441e925d1478944ca52558e6ed65c1d25dbd2a5a118c58ca59e91aab3507f57cf52eaa42c978fd2"}) 38.949260567s ago: executing program 1 (id=968): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000040)={0x20002000}) r4 = socket$packet(0x11, 0x3, 0x300) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x12040, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/78, 0x0}) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000040)={&(0x7f0000002200)=[0x0], 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, r7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x5, 0xfd, 0x0, 0x8e4}]}, 0x10) sendto(r0, &(0x7f0000000440)="1db4d479c5faee911d50fbdf12a30d564a0e992d5f77ad426077a9f0ca1475183db32443011ff101251bcef8f165533aacd8c755793dc1ae99ad602c7cca2944de604d849a1e3b22905b0d26e9ff30b83f38a29b2530d22bdb6e73ef2a359249c3e29408dd3e0eb42bf3d6ecf7d9f6a38e6c0818e746843a829db24da275daaa1af5754e2aba22b617f1367566fd3b8892e4774e", 0x94, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) 38.882675272s ago: executing program 0 (id=970): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xbf) 37.967315869s ago: executing program 0 (id=971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x28}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "ed"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) 36.650773264s ago: executing program 0 (id=972): r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x200048c0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 32.236908666s ago: executing program 4 (id=976): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) 22.708287002s ago: executing program 4 (id=981): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xbf) 21.647707966s ago: executing program 4 (id=982): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000c00)="e9", 0x1}], 0x1}, 0xe0) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000440)='\\', 0x1}], 0x1}, 0x4000040) close(r0) 20.023123185s ago: executing program 4 (id=983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.894951646s ago: executing program 2 (id=984): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) capset(&(0x7f0000000180)={0x19980330}, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r0, 0x0) capset(&(0x7f00000000c0), 0x0) 17.834837721s ago: executing program 4 (id=985): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800058004000280"], 0x2c}}, 0x0) 17.275581464s ago: executing program 2 (id=986): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x6, 0x20000000, 0x4) 16.145688471s ago: executing program 2 (id=987): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000040)=0x4, 0x5, 0x3) 15.107991517s ago: executing program 4 (id=988): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) r0 = gettid() r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000740)={'wlan0\x00'}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='rcu_stall_warning\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000101c0)=@chain) r7 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) preadv(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/4080, 0xff0}], 0x1, 0x2000000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005680)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001480)="86d55f3f15c1a2f1d23508ad98c8615a94017a07b22422390102c453b083f55926c4cfaab80dd95fd707a31a6fb722c057", 0x31}], 0x1}], 0x1, 0x0) 13.919530795s ago: executing program 2 (id=989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13.919219215s ago: executing program 2 (id=990): open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x90) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @multicast1=0xe000c800}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) futex_waitv(&(0x7f0000001c80)=[{0x0, 0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=991): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001200010a000000000020000080"], 0x26}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) kernel console output (not intermixed with test programs): i_le_conn_complete_evt+0x18c/0x420 [ 89.151292][ T5249] hci_event_packet+0xa53/0x1540 [ 89.156227][ T5249] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 89.161526][ T5249] ? __pfx_hci_event_packet+0x10/0x10 [ 89.166999][ T5249] ? do_raw_spin_unlock+0x13c/0x8b0 [ 89.172195][ T5249] ? hci_send_to_monitor+0xd8/0x7f0 [ 89.177377][ T5249] ? kcov_remote_start+0x9e/0x7e0 [ 89.182392][ T5249] hci_rx_work+0x3e8/0xca0 [ 89.186818][ T5249] ? process_scheduled_works+0x945/0x1830 [ 89.192532][ T5249] process_scheduled_works+0xa2c/0x1830 [ 89.198079][ T5249] ? __pfx_process_scheduled_works+0x10/0x10 [ 89.204140][ T5249] ? assign_work+0x364/0x3d0 [ 89.208719][ T5249] worker_thread+0x86d/0xd50 [ 89.213313][ T5249] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 89.219236][ T5249] ? __kthread_parkme+0x169/0x1d0 [ 89.224252][ T5249] ? __pfx_worker_thread+0x10/0x10 [ 89.229349][ T5249] kthread+0x2f0/0x390 [ 89.233430][ T5249] ? __pfx_worker_thread+0x10/0x10 [ 89.238545][ T5249] ? __pfx_kthread+0x10/0x10 [ 89.243125][ T5249] ret_from_fork+0x4b/0x80 [ 89.247533][ T5249] ? __pfx_kthread+0x10/0x10 [ 89.252109][ T5249] ret_from_fork_asm+0x1a/0x30 [ 89.256896][ T5249] [ 89.260004][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.267224][ T5240] Bluetooth: hci0: command tx timeout [ 89.273897][ T5249] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 89.288054][ T5249] Bluetooth: hci4: failed to register connection device [ 89.757434][ T5817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.978611][ T5817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.997922][ T5822] team_slave_0: entered promiscuous mode [ 90.003728][ T5822] team_slave_1: entered promiscuous mode [ 90.036010][ T5822] vlan2: entered promiscuous mode [ 90.060432][ T5822] team0: entered promiscuous mode [ 90.102800][ T5822] team0: left promiscuous mode [ 90.119711][ T5822] team_slave_0: left promiscuous mode [ 90.125483][ T5822] team_slave_1: left promiscuous mode [ 90.275268][ T5825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.329849][ T5823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.617944][ T5820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.890659][ T5835] netlink: 'syz.4.324': attribute type 4 has an invalid length. [ 91.143759][ T5838] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.528588][ T5849] vivid-000: disconnect [ 91.616432][ T5847] vivid-000: reconnect [ 92.610835][ T5328] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.826062][ T5328] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 92.846760][ T5328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.867268][ T5328] usb 4-1: config 0 descriptor?? [ 92.894103][ T5328] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 92.912299][ T5328] dw2102: su3000_power_ctrl: 1, initialized 0 [ 92.918430][ T5328] dvb-usb: bulk message failed: -22 (2/0) [ 92.952516][ T5328] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.972090][ T5883] kAFS: unable to lookup cell '' [ 92.975206][ T5328] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 92.978262][ T5881] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 92.999299][ T5328] usb 4-1: media controller created [ 93.015377][ T5328] dvb-usb: bulk message failed: -22 (6/0) [ 93.025706][ T5328] dw2102: i2c transfer failed. [ 93.037975][ T5328] dvb-usb: bulk message failed: -22 (6/0) [ 93.046028][ T5328] dw2102: i2c transfer failed. [ 93.051851][ T5328] dvb-usb: bulk message failed: -22 (6/0) [ 93.062804][ T5328] dw2102: i2c transfer failed. [ 93.067839][ T5328] dvb-usb: bulk message failed: -22 (6/0) [ 93.074065][ T29] audit: type=1326 audit(1720310511.926:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.4.344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54fd175bd9 code=0x0 [ 93.095543][ T5328] dw2102: i2c transfer failed. [ 93.103803][ T5328] dvb-usb: bulk message failed: -22 (6/0) [ 93.110457][ T5328] dw2102: i2c transfer failed. [ 93.115264][ T5328] dvb-usb: bulk message failed: -22 (6/0) [ 93.122722][ T5328] dw2102: i2c transfer failed. [ 93.127520][ T5328] dvb-usb: MAC address: 02:02:02:02:02:02 [ 93.160939][ T5328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.194154][ T5328] dvb-usb: bulk message failed: -22 (3/0) [ 93.200645][ T5328] dw2102: command 0x0e transfer failed. [ 93.217825][ T5328] dvb-usb: bulk message failed: -22 (3/0) [ 93.227940][ T5328] dw2102: command 0x0e transfer failed. [ 93.376581][ T29] audit: type=1326 audit(1720310512.236:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5895 comm="syz.1.348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f314c975bd9 code=0x0 [ 93.550786][ T5328] dvb-usb: bulk message failed: -22 (3/0) [ 93.557235][ T5328] dw2102: command 0x0e transfer failed. [ 93.746926][ T5328] dvb-usb: bulk message failed: -22 (3/0) [ 93.752808][ T5328] dw2102: command 0x0e transfer failed. [ 93.759247][ T5328] dvb-usb: bulk message failed: -22 (1/0) [ 93.765011][ T5328] dw2102: command 0x51 transfer failed. [ 93.772944][ T5328] dvb-usb: bulk message failed: -22 (5/0) [ 93.778710][ T5328] dw2102: i2c probe for address 0x68 failed. [ 93.784831][ T5328] dvb-usb: bulk message failed: -22 (5/0) [ 93.790642][ T5328] dw2102: i2c probe for address 0x69 failed. [ 93.796731][ T5328] dvb-usb: bulk message failed: -22 (5/0) [ 93.803796][ T5328] dw2102: i2c probe for address 0x6a failed. [ 94.551637][ T5328] dw2102: probing for demodulator failed. Is the external power switched on? [ 94.561029][ T5328] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 94.708957][ T5328] rc_core: IR keymap rc-tt-1500 not found [ 94.714735][ T5328] Registered IR keymap rc-empty [ 94.780071][ T5328] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 94.868007][ T5328] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6 [ 95.762266][ T5328] dvb-usb: schedule remote query interval to 250 msecs. [ 95.773715][ T5328] dw2102: su3000_power_ctrl: 0, initialized 1 [ 95.780250][ T5328] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 95.790859][ T5328] usb 4-1: USB disconnect, device number 5 [ 95.929813][ T5328] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 96.131164][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.351521][ T45] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 96.367317][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.381984][ T45] usb 1-1: config 0 descriptor?? [ 96.391228][ T45] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 96.437833][ T45] dw2102: su3000_power_ctrl: 1, initialized 0 [ 96.497139][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 96.771509][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.979018][ T45] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 97.024449][ T5328] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.147634][ T45] usb 1-1: media controller created [ 97.155089][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 97.160933][ T45] dw2102: i2c transfer failed. [ 97.165763][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 97.171938][ T45] dw2102: i2c transfer failed. [ 97.178951][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 97.184719][ T45] dw2102: i2c transfer failed. [ 97.219020][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 97.224808][ T45] dw2102: i2c transfer failed. [ 97.246493][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 97.255218][ T5328] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.278912][ T45] dw2102: i2c transfer failed. [ 97.283765][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 97.295344][ T5328] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.308368][ T45] dw2102: i2c transfer failed. [ 97.328380][ T5328] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.330006][ T45] dvb-usb: MAC address: 02:02:02:02:02:02 [ 97.383535][ T5328] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.423753][ T5328] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.442179][ T5328] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.467022][ T5328] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.468183][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.495869][ T5328] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.526833][ T5328] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.570523][ T45] dvb-usb: bulk message failed: -22 (3/0) [ 97.576301][ T45] dw2102: command 0x0e transfer failed. [ 97.604827][ T5328] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.612620][ T45] dvb-usb: bulk message failed: -22 (3/0) [ 97.634229][ T5328] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.642999][ T45] dw2102: command 0x0e transfer failed. [ 97.679266][ T5328] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.697724][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'. [ 97.703769][ T5965] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.727237][ T5328] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.757291][ T5328] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.783152][ T5328] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.812974][ T5328] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.839089][ T5328] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.850465][ T5328] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.890180][ T5328] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.913670][ T5328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.954376][ T5328] usb 4-1: Product: syz [ 97.958591][ T5328] usb 4-1: Manufacturer: syz [ 97.990371][ T45] dvb-usb: bulk message failed: -22 (3/0) [ 97.992608][ T5328] usb 4-1: SerialNumber: syz [ 98.011098][ T45] dw2102: command 0x0e transfer failed. [ 98.027157][ T45] dvb-usb: bulk message failed: -22 (3/0) [ 98.058636][ T45] dw2102: command 0x0e transfer failed. [ 98.089786][ T45] dvb-usb: bulk message failed: -22 (1/0) [ 98.110277][ T45] dw2102: command 0x51 transfer failed. [ 98.122656][ T45] dvb-usb: bulk message failed: -22 (5/0) [ 98.138784][ T45] dw2102: i2c probe for address 0x68 failed. [ 98.147427][ T45] dvb-usb: bulk message failed: -22 (5/0) [ 98.160226][ T45] dw2102: i2c probe for address 0x69 failed. [ 98.190066][ T45] dvb-usb: bulk message failed: -22 (5/0) [ 98.207473][ T45] dw2102: i2c probe for address 0x6a failed. [ 98.225330][ T45] dw2102: probing for demodulator failed. Is the external power switched on? [ 98.258244][ T45] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 98.277143][ T5328] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 98.389032][ T45] rc_core: IR keymap rc-tt-1500 not found [ 98.404738][ T45] Registered IR keymap rc-empty [ 98.440553][ T45] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 98.491856][ T45] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input7 [ 98.525455][ T5283] usb 4-1: USB disconnect, device number 6 [ 98.545461][ T45] dvb-usb: schedule remote query interval to 250 msecs. [ 98.555124][ T5283] usblp0: removed [ 98.587269][ T45] dw2102: su3000_power_ctrl: 0, initialized 1 [ 98.614621][ T45] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 98.648202][ T45] usb 1-1: USB disconnect, device number 2 [ 98.886985][ T45] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 99.421650][ T6014] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.781852][ T6027] Invalid ELF header magic: != ELF [ 99.878546][ T6027] Bluetooth: MGMT ver 1.22 [ 100.615180][ T6035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.791150][ T6035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.931644][ T6040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.287949][ T6035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.406253][ T6071] netlink: 36 bytes leftover after parsing attributes in process `syz.0.410'. [ 101.432286][ T6071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'. [ 101.442415][ T6071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.410'. [ 101.676041][ T6082] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.681025][ T6081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.696434][ T29] audit: type=1326 audit(1720310520.546:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3175bd9 code=0x7ffc0000 [ 101.751340][ T29] audit: type=1326 audit(1720310520.546:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3175bd9 code=0x7ffc0000 [ 101.815484][ T29] audit: type=1326 audit(1720310520.546:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39b3175bd9 code=0x7ffc0000 [ 101.848290][ T29] audit: type=1326 audit(1720310520.546:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3175bd9 code=0x7ffc0000 [ 101.887153][ T29] audit: type=1326 audit(1720310520.546:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3175bd9 code=0x7ffc0000 [ 101.925991][ T29] audit: type=1326 audit(1720310520.546:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f39b3175bd9 code=0x7ffc0000 [ 102.030599][ T29] audit: type=1326 audit(1720310520.546:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3175bd9 code=0x7ffc0000 [ 102.127772][ T29] audit: type=1326 audit(1720310520.566:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3175bd9 code=0x7ffc0000 [ 102.209158][ T29] audit: type=1326 audit(1720310520.566:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39b3175bd9 code=0x7ffc0000 [ 102.273731][ T29] audit: type=1326 audit(1720310520.566:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6077 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3175bd9 code=0x7ffc0000 [ 102.509144][ T5284] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 102.589137][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.720873][ T5284] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.739693][ T5284] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 102.754490][ T5284] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 102.799784][ T8] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 102.822836][ T5284] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 102.836062][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.844322][ T6110] dccp_close: ABORT with 2 bytes unread [ 102.853434][ T8] usb 3-1: config 0 descriptor?? [ 102.872866][ T5284] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.891332][ T8] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 102.901104][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.916098][ T8] dw2102: su3000_power_ctrl: 1, initialized 0 [ 102.922317][ T5284] usb 2-1: SerialNumber: syz [ 102.927371][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 102.941543][ T6092] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.953035][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.971650][ T6092] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.972699][ T6115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.989840][ T8] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 102.997401][ T8] usb 3-1: media controller created [ 103.006105][ T5284] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 103.015309][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 103.024686][ T8] dw2102: i2c transfer failed. [ 103.030085][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 103.035858][ T8] dw2102: i2c transfer failed. [ 103.041691][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 103.047475][ T8] dw2102: i2c transfer failed. [ 103.053009][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 103.058816][ T8] dw2102: i2c transfer failed. [ 103.083440][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 103.098958][ T8] dw2102: i2c transfer failed. [ 103.108818][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 103.110939][ T6115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.146490][ T8] dw2102: i2c transfer failed. [ 103.152343][ T8] dvb-usb: MAC address: 02:02:02:02:02:02 [ 103.228647][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.268574][ T6115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.282961][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 103.289385][ T5284] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 103.316758][ T8] dw2102: command 0x0e transfer failed. [ 103.321772][ T6115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.333921][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 103.344149][ T5284] usb 2-1: USB disconnect, device number 3 [ 103.359313][ T8] dw2102: command 0x0e transfer failed. [ 103.433623][ T6115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.699828][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 103.719447][ T8] dw2102: command 0x0e transfer failed. [ 103.725060][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 103.739311][ T8] dw2102: command 0x0e transfer failed. [ 103.744912][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 103.758310][ T8] dw2102: command 0x51 transfer failed. [ 103.764109][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 103.769936][ T8] dw2102: i2c probe for address 0x68 failed. [ 103.776029][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 103.781889][ T8] dw2102: i2c probe for address 0x69 failed. [ 103.787900][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 103.793732][ T8] dw2102: i2c probe for address 0x6a failed. [ 103.799811][ T8] dw2102: probing for demodulator failed. Is the external power switched on? [ 103.819674][ T8] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 103.989949][ T8] rc_core: IR keymap rc-tt-1500 not found [ 104.009048][ T8] Registered IR keymap rc-empty [ 104.020230][ T8] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 104.043131][ T8] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input8 [ 104.169246][ T8] dvb-usb: schedule remote query interval to 250 msecs. [ 104.785496][ T6145] syz.1.438[6145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.785650][ T6145] syz.1.438[6145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.828146][ T8] dw2102: su3000_power_ctrl: 0, initialized 1 [ 105.253082][ T6146] netlink: 'syz.0.436': attribute type 30 has an invalid length. [ 105.261197][ T6146] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 105.270425][ T6146] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 105.293044][ T5284] dvb-usb: bulk message failed: -22 (1/0) [ 105.334422][ T5284] dw2102: i2c transfer failed. [ 105.348823][ T8] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 105.380644][ T8] usb 3-1: USB disconnect, device number 2 [ 105.387527][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.476768][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 105.577435][ T8] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 105.637051][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 105.679592][ T45] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 105.688680][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.737101][ T6161] program syz.1.445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.737915][ T45] usb 5-1: config 0 descriptor?? [ 106.202351][ T25] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 106.420921][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.452490][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 106.484061][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 106.519003][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 106.552201][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.570140][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 106.586880][ T6171] dccp_close: ABORT with 2 bytes unread [ 106.592796][ T25] usb 2-1: SerialNumber: syz [ 106.613995][ T6163] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 106.653843][ T6163] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 106.680775][ T25] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 107.125408][ T45] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 107.134711][ T25] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 107.147917][ T45] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 107.159891][ T25] usb 2-1: USB disconnect, device number 4 [ 107.170868][ T45] [drm:udl_init] *ERROR* Selecting channel failed [ 107.215126][ T45] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 107.238928][ T45] [drm] Initialized udl on minor 2 [ 107.248032][ T45] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 107.271368][ T45] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 107.285472][ T5283] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 107.306439][ T45] usb 5-1: USB disconnect, device number 2 [ 107.322376][ T5283] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 107.886282][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.688957][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 108.696185][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 108.733240][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 108.769767][ T6220] ubi0: attaching mtd0 [ 108.776671][ T6220] ubi0: scanning is finished [ 108.781479][ T6220] ubi0: empty MTD device detected [ 108.838141][ T8] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 108.870292][ T6220] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 108.877925][ T6220] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 108.885505][ T6220] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 108.888946][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.892485][ T6220] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 108.908014][ T6220] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 108.914935][ T6220] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 108.923141][ T6220] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 139301726 [ 108.933924][ T6220] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 108.956760][ T6221] ubi0: background thread "ubi_bgt0d" started, PID 6221 [ 109.626569][ T8] usb 1-1: config 0 descriptor?? [ 109.694297][ T6225] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.107532][ T6234] Invalid ELF header magic: != ELF [ 111.186155][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.221443][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.331022][ T8] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 111.348970][ T8] hid-generic 0003:0158:0100.0002: unexpected long global item [ 111.357293][ T8] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 111.557477][ T45] usb 1-1: USB disconnect, device number 3 [ 111.684430][ T6254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.476'. [ 111.849696][ T6256] evm: overlay not supported [ 111.888975][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 111.888994][ T29] audit: type=1804 audit(1720310530.746:27): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.478" name="/newroot/78/bus/file0" dev="overlay" ino=433 res=1 errno=0 [ 112.470798][ T6268] syz.1.480[6268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.471393][ T6268] syz.1.480[6268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.421871][ T6277] netlink: 224 bytes leftover after parsing attributes in process `syz.2.485'. [ 113.471204][ T6281] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 113.585549][ T6285] netlink: 'syz.1.487': attribute type 7 has an invalid length. [ 114.470918][ T6294] vivid-002: disconnect [ 114.501003][ T6286] vivid-002: reconnect [ 114.742671][ T6306] netlink: 'syz.2.493': attribute type 10 has an invalid length. [ 115.149854][ T6319] binder: 6318:6319 ioctl c018620c 0 returned -14 [ 115.237292][ T6320] netlink: 224 bytes leftover after parsing attributes in process `syz.0.501'. [ 115.783687][ T6337] TCP: Unexpected MD5 Hash found for 0.0.0.0.0->255.255.255.255.20002 [] [ 115.998805][ T6345] program syz.1.512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.305278][ T6355] netlink: 'syz.3.511': attribute type 10 has an invalid length. [ 116.389092][ T5328] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.613445][ T5328] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 116.705802][ T5328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.766008][ T5328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.844865][ T5328] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 117.050781][ T5328] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 117.063912][ T5328] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 117.126445][ T5328] usb 3-1: Manufacturer: syz [ 117.159827][ T5328] usb 3-1: config 0 descriptor?? [ 117.832679][ T5328] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 117.877525][ T5328] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 117.936957][ T5328] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 118.125724][ T6380] netlink: 152 bytes leftover after parsing attributes in process `syz.3.525'. [ 118.370883][ T5283] usb 3-1: USB disconnect, device number 3 [ 118.499099][ T6389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.722921][ T6406] netlink: 152 bytes leftover after parsing attributes in process `syz.3.537'. [ 119.202344][ T5328] kernel write not supported for file /media0 (pid: 5328 comm: kworker/0:7) [ 119.219411][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.598961][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 119.610555][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18106, setting to 1024 [ 119.959922][ T29] audit: type=1326 audit(1720310538.816:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.3.552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dffd75bd9 code=0x0 [ 120.332403][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 120.341615][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.373165][ T6411] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 120.398368][ T25] hub 5-1:4.0: USB hub found [ 120.607422][ T25] hub 5-1:4.0: 2 ports detected [ 120.625517][ T25] hub 5-1:4.0: insufficient power available to use all downstream ports [ 120.679296][ T6452] netlink: 224 bytes leftover after parsing attributes in process `syz.1.556'. [ 120.814324][ T25] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 120.824519][ T25] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 120.871447][ T25] usb 5-1: USB disconnect, device number 3 [ 120.954791][ T45] kernel write not supported for file /media0 (pid: 45 comm: kworker/1:1) [ 120.969176][ T5328] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.189094][ T5328] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 121.238647][ T29] audit: type=1326 audit(1720310540.096:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6472 comm="syz.1.565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f314c975bd9 code=0x0 [ 121.269024][ T5328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.649765][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 121.947797][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 121.971028][ T5328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.983342][ T5328] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 121.993172][ T25] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 122.004367][ T5328] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 122.015758][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.026054][ T5328] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 122.037250][ T5328] usb 3-1: Manufacturer: syz [ 122.041061][ T25] usb 4-1: config 0 descriptor?? [ 122.051195][ T5328] usb 3-1: config 0 descriptor?? [ 122.718076][ T5328] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 122.740618][ T5328] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 122.763086][ T5328] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 123.099813][ T6491] netlink: 224 bytes leftover after parsing attributes in process `syz.4.571'. [ 124.034710][ T25] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 124.048411][ T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 124.056938][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 124.090613][ T25] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 124.145645][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.152971][ T25] [drm] Initialized udl on minor 2 [ 124.158451][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.173736][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.244871][ T1032] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.294735][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.300370][ T25] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 124.304370][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 124.321881][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.341936][ T25] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 124.409603][ T5283] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 124.420025][ T8] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 124.427445][ T25] usb 4-1: USB disconnect, device number 7 [ 124.467317][ T5283] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 124.501610][ T6507] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.521292][ T1032] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.532178][ T5283] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 124.802540][ T783] kernel write not supported for file /media0 (pid: 783 comm: kworker/0:2) [ 124.898630][ T6511] Invalid ELF header magic: != ELF [ 125.072855][ T1032] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.680845][ T1032] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.792102][ T5328] usb 3-1: USB disconnect, device number 4 [ 126.179766][ T6516] trusted_key: syz.0.576 sent an empty control message without MSG_MORE. [ 126.275349][ T1032] bridge_slave_1: left allmulticast mode [ 126.295509][ T1032] bridge_slave_1: left promiscuous mode [ 126.316405][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.353541][ T6534] capability: warning: `syz.4.582' uses 32-bit capabilities (legacy support in use) [ 126.372725][ T5240] Bluetooth: hci1: command tx timeout [ 126.386789][ T1032] bridge_slave_0: left allmulticast mode [ 126.434379][ T6527] netlink: 'syz.3.580': attribute type 10 has an invalid length. [ 126.471060][ T1032] bridge_slave_0: left promiscuous mode [ 126.476860][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.620476][ T6540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'. [ 126.805036][ T6548] syz.3.583 uses obsolete (PF_INET,SOCK_PACKET) [ 126.849795][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.061666][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 127.086789][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.122102][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.155031][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 127.184480][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 127.207804][ T25] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 127.225608][ T25] usb 5-1: Manufacturer: syz [ 127.239279][ T25] usb 5-1: config 0 descriptor?? [ 127.691516][ T25] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 127.729484][ T25] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 127.768947][ T25] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 127.835505][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.863114][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.876695][ T1032] bond0 (unregistering): Released all slaves [ 127.946498][ T6540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.583'. [ 128.108459][ T6498] chnl_net:caif_netlink_parms(): no params data found [ 128.189519][ T6568] IPv6: sit1: Disabled Multicast RS [ 128.449262][ T5240] Bluetooth: hci1: command tx timeout [ 128.712859][ T6597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.779082][ T5283] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.815878][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.845158][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.861145][ T6604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.871252][ T6498] bridge_slave_0: entered allmulticast mode [ 128.894765][ T6498] bridge_slave_0: entered promiscuous mode [ 128.945293][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.976647][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.994387][ T6498] bridge_slave_1: entered allmulticast mode [ 129.001394][ T5283] usb 3-1: Using ep0 maxpacket: 16 [ 129.027704][ T5283] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 129.042296][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.046406][ T6600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.052861][ T6610] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 129.079214][ T6498] bridge_slave_1: entered promiscuous mode [ 129.094135][ T5283] usb 3-1: Product: syz [ 129.096359][ T6597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.107490][ T5283] usb 3-1: Manufacturer: syz [ 129.121112][ T5283] usb 3-1: SerialNumber: syz [ 129.135744][ T5283] usb 3-1: config 0 descriptor?? [ 129.202101][ T1032] hsr_slave_0: left promiscuous mode [ 129.238095][ T1032] hsr_slave_1: left promiscuous mode [ 129.258051][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.266529][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.298479][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.309248][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.355701][ T6604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.363526][ T1032] veth1_macvtap: left promiscuous mode [ 129.389313][ T1032] veth0_macvtap: left promiscuous mode [ 129.399076][ T5283] usb 3-1: USB disconnect, device number 5 [ 129.411363][ T1032] veth1_vlan: left promiscuous mode [ 129.430124][ T1032] veth0_vlan: left promiscuous mode [ 129.769082][ T9] usb 5-1: USB disconnect, device number 4 [ 130.471178][ T5249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.481502][ T5249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.497602][ T5249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.506747][ T5249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.526102][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 130.534242][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.539908][ T53] Bluetooth: hci1: command tx timeout [ 130.582316][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 130.671587][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 131.952711][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.118559][ T6643] hsr0: entered promiscuous mode [ 132.141047][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.157111][ T6644] ubi: mtd0 is already attached to ubi0 [ 132.318728][ T6498] team0: Port device team_slave_0 added [ 132.342283][ T6498] team0: Port device team_slave_1 added [ 132.612604][ T53] Bluetooth: hci0: command tx timeout [ 132.620944][ T53] Bluetooth: hci1: command tx timeout [ 132.790717][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.798396][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.831463][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.910815][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.918291][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.012293][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.617'. [ 133.014653][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.033523][ T5338] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.259054][ T5338] usb 5-1: Using ep0 maxpacket: 8 [ 133.261172][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.270522][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.271984][ T5338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 133.288128][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.617'. [ 133.306614][ T5338] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 133.326660][ T5338] usb 5-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=dd.34 [ 133.359155][ T5338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.394049][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.424569][ T5338] usb 5-1: config 0 descriptor?? [ 133.441385][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.441395][ T5338] option 5-1:0.0: GSM modem (1-port) converter detected [ 133.677501][ T5338] usb 5-1: USB disconnect, device number 5 [ 133.696955][ T1032] IPVS: stop unused estimator thread 0... [ 133.768560][ T5338] option 5-1:0.0: device disconnected [ 134.479393][ T6498] hsr_slave_0: entered promiscuous mode [ 134.533819][ T6498] hsr_slave_1: entered promiscuous mode [ 134.594190][ T6684] ALSA: seq fatal error: cannot create timer (-22) [ 134.606510][ T6684] ALSA: seq fatal error: cannot create timer (-22) [ 134.624577][ T6498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.649440][ T6498] Cannot create hsr debugfs directory [ 134.692556][ T53] Bluetooth: hci0: command tx timeout [ 134.894094][ T25] IPVS: starting estimator thread 0... [ 134.983285][ T1032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.019247][ T6698] IPVS: using max 32 ests per chain, 76800 per kthread [ 135.183398][ T6700] 9pnet_fd: Insufficient options for proto=fd [ 135.298570][ T1032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.051713][ T1032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.328032][ T1032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.770047][ T53] Bluetooth: hci0: command tx timeout [ 137.018491][ T6726] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.634'. [ 137.109081][ T5328] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 137.226344][ T6626] chnl_net:caif_netlink_parms(): no params data found [ 137.309539][ T5328] usb 4-1: Using ep0 maxpacket: 8 [ 137.322263][ T5328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.337451][ T5328] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 137.357690][ T5328] usb 4-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=dd.34 [ 137.377515][ T5328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.405916][ T5328] usb 4-1: config 0 descriptor?? [ 137.417504][ T5328] option 4-1:0.0: GSM modem (1-port) converter detected [ 137.525934][ T1032] bridge_slave_1: left allmulticast mode [ 137.532142][ T1032] bridge_slave_1: left promiscuous mode [ 137.537877][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.549569][ T1032] bridge_slave_0: left allmulticast mode [ 137.555265][ T1032] bridge_slave_0: left promiscuous mode [ 137.561246][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.686737][ T5328] usb 4-1: USB disconnect, device number 8 [ 137.716857][ T5328] option 4-1:0.0: device disconnected [ 137.968910][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.994181][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.008051][ T1032] bond0 (unregistering): Released all slaves [ 138.066540][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.083911][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.088963][ T5338] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.099885][ T6626] bridge_slave_0: entered allmulticast mode [ 138.121724][ T6626] bridge_slave_0: entered promiscuous mode [ 138.136639][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.293503][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.304651][ T6626] bridge_slave_1: entered allmulticast mode [ 138.310568][ T5338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 138.330686][ T5338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 138.341329][ T6626] bridge_slave_1: entered promiscuous mode [ 138.347416][ T5338] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.379985][ T5338] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.389619][ T5338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.410166][ T5338] usb 5-1: config 0 descriptor?? [ 138.849679][ T53] Bluetooth: hci0: command tx timeout [ 139.096415][ T6753] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.643'. [ 139.102710][ T5338] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 139.129760][ T5338] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 139.155618][ T5338] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 139.166029][ T5338] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 139.184167][ T6626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.199551][ T5338] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 139.208382][ T29] audit: type=1804 audit(1720310558.066:30): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.642" name="/newroot/104/bus/file0" dev="overlay" ino=569 res=1 errno=0 [ 139.232944][ T6626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.246981][ T5338] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 139.275788][ T5338] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 139.313750][ T5338] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 139.342302][ T5338] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 139.375313][ T5338] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 139.393343][ T5338] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 139.445030][ T5338] usb 5-1: USB disconnect, device number 6 [ 139.451496][ T6626] team0: Port device team_slave_0 added [ 139.502896][ T1032] hsr_slave_0: left promiscuous mode [ 139.517288][ T1032] hsr_slave_1: left promiscuous mode [ 139.533818][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.548601][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.557393][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.564948][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.591646][ T1032] veth1_macvtap: left promiscuous mode [ 139.597403][ T1032] veth0_macvtap: left promiscuous mode [ 139.603996][ T1032] veth1_vlan: left promiscuous mode [ 139.609554][ T1032] veth0_vlan: left promiscuous mode [ 140.151352][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 140.187016][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 140.530780][ T6626] team0: Port device team_slave_1 added [ 140.598318][ T6758] IPv6: sit1: Disabled Multicast RS [ 140.619157][ T6498] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 140.689449][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.696438][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.758651][ T6626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.790330][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.838917][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.892378][ T6626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.939376][ T6498] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 140.973045][ T6498] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 141.065007][ T6498] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.128607][ T6626] hsr_slave_0: entered promiscuous mode [ 141.141339][ T6626] hsr_slave_1: entered promiscuous mode [ 141.147626][ T6626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.161962][ T6626] Cannot create hsr debugfs directory [ 141.583915][ T6786] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.655'. [ 141.825754][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.854423][ T9] IPVS: starting estimator thread 0... [ 141.925914][ T6498] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.958943][ T6794] IPVS: using max 23 ests per chain, 55200 per kthread [ 141.976817][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.984008][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.003508][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.010664][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.526874][ T6626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.615159][ T6626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.679139][ T6626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.704307][ T6626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.899420][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 143.159935][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 143.173665][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 143.190577][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.227559][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.264585][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.291006][ T45] usb 4-1: config 0 descriptor?? [ 143.536466][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.634827][ T6498] veth0_vlan: entered promiscuous mode [ 143.692326][ T6498] veth1_vlan: entered promiscuous mode [ 143.759850][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 143.789544][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 143.800714][ T6626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.830405][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 143.847208][ T6498] veth0_macvtap: entered promiscuous mode [ 143.868507][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 143.893822][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 143.897488][ T6498] veth1_macvtap: entered promiscuous mode [ 143.932838][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 143.955019][ T6626] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.986225][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 144.002970][ T5328] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.011068][ T5328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.034917][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 144.045066][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.087243][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.090073][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 144.098373][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.123848][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.136257][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.148981][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.159754][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.162002][ T45] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 144.170738][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.212247][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.221893][ T45] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 144.261971][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.310501][ T45] usb 4-1: USB disconnect, device number 9 [ 144.336814][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.404263][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.426714][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.456294][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.485938][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.510279][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.537937][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.577411][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.636329][ T5328] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.643649][ T5328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.672673][ T6498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.685191][ T6498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.696681][ T6498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.715987][ T6498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.974242][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.003971][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.061717][ T2473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.070367][ T29] audit: type=1804 audit(1720310563.926:31): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.670" name="/newroot/114/bus/file0" dev="overlay" ino=630 res=1 errno=0 [ 145.101632][ T2473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.494289][ T6626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.678995][ T6883] sp0: Synchronizing with TNC [ 145.815502][ T6883] Driver unsupported XDP return value 0 on prog (id 88) dev N/A, expect packet loss! [ 145.865977][ T29] audit: type=1326 audit(1720310564.726:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.3.674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dffd75bd9 code=0x0 [ 145.985606][ T6626] veth0_vlan: entered promiscuous mode [ 146.092592][ T6626] veth1_vlan: entered promiscuous mode [ 146.245473][ T6626] veth0_macvtap: entered promiscuous mode [ 146.292955][ T6626] veth1_macvtap: entered promiscuous mode [ 146.579902][ T29] audit: type=1326 audit(1720310565.446:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6908 comm="syz.3.680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dffd75bd9 code=0x0 [ 146.617107][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.650991][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.678940][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.681135][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.722886][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.753533][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.788221][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.808560][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.838875][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.859319][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.879023][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.881951][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 146.900932][ T6626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.917480][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 146.926638][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.954823][ T9] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 146.975170][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.989152][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.001575][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.033901][ T9] usb 3-1: config 0 descriptor?? [ 147.061400][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.111182][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.144477][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.175267][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.212211][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.251269][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.284537][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.331851][ T6626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.393205][ T6923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.680'. [ 147.463245][ T6626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.489163][ T6626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.539068][ T6626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.559091][ T6626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.574793][ T6944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.617983][ T6944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.656170][ T9] hid (null): invalid report_size 829317484 [ 147.710227][ T9] hid (null): report_id 2838798905 is invalid [ 147.735092][ T9] hid (null): unknown global tag 0xc [ 147.766842][ T9] hid (null): unknown global tag 0xa5 [ 147.810842][ T9] hid (null): unknown global tag 0xd [ 147.862491][ T9] hid (null): unknown global tag 0xc [ 147.885903][ T9] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 147.915397][ T4135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.925245][ T9] hid-generic 0003:0158:0100.0008: unexpected long global item [ 147.936683][ T9] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 147.963892][ T4135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.972802][ T9] usb 3-1: USB disconnect, device number 6 [ 148.023868][ T2473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.051009][ T2473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.100473][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 148.145925][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 148.400213][ T6965] netlink: 'syz.4.689': attribute type 11 has an invalid length. [ 148.439192][ T6965] netlink: 'syz.4.689': attribute type 11 has an invalid length. [ 148.479097][ T6965] debugfs: Directory 'netdev:' with parent 'phy3' already present! [ 149.064856][ T6980] netlink: 'syz.1.695': attribute type 10 has an invalid length. [ 149.079025][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 149.297253][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 149.338047][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 149.357934][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 149.395934][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 149.414071][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.445369][ T25] usb 5-1: config 0 descriptor?? [ 149.467058][ T6984] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.505116][ T25] appletouch 5-1:0.0: Could not find int-in endpoint [ 149.532033][ T25] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 149.561765][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 149.681880][ T53] Bluetooth: hci0: unexpected cc 0x2007 length: 100 > 2 [ 149.715732][ T7007] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 149.722466][ T7007] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 149.740441][ T7007] vhci_hcd vhci_hcd.0: Device attached [ 149.768053][ T9] usb 5-1: USB disconnect, device number 7 [ 149.933036][ T7017] fuse: Bad value for 'rootmode' [ 149.950061][ T7003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.704'. [ 150.059102][ T5287] usb 10-1: SetAddress Request (2) to port 0 [ 150.066262][ T5287] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 150.300843][ T7009] vhci_hcd: connection reset by peer [ 150.328980][ T2462] vhci_hcd: stop threads [ 150.344578][ T2462] vhci_hcd: release socket [ 150.354961][ T2462] vhci_hcd: disconnect device [ 151.221982][ T7049] netlink: 165 bytes leftover after parsing attributes in process `syz.2.721'. [ 151.266593][ T7049] netlink: 277 bytes leftover after parsing attributes in process `syz.2.721'. [ 151.411142][ T29] audit: type=1800 audit(1720310570.246:34): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.719" name="/newroot/16/file0" dev="tmpfs" ino=104 res=0 errno=0 [ 151.492976][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'. [ 151.679734][ T5285] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 151.699070][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 151.893816][ T5285] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.910752][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 151.926680][ T5285] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.944162][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 151.972219][ T5285] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 151.985671][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 152.000637][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.026094][ T5285] usb 1-1: Product: syz [ 152.031245][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 152.043453][ T5285] usb 1-1: Manufacturer: syz [ 152.048153][ T5285] usb 1-1: SerialNumber: syz [ 152.056686][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.077033][ T5285] usb 1-1: config 0 descriptor?? [ 152.088516][ T9] usb 3-1: config 0 descriptor?? [ 152.107424][ T7058] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 152.118778][ T9] appletouch 3-1:0.0: Could not find int-in endpoint [ 152.144225][ T9] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 152.177715][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 152.266182][ T53] Bluetooth: hci2: unexpected cc 0x2007 length: 100 > 2 [ 152.323689][ T7071] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 152.330246][ T7071] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.341006][ T7071] vhci_hcd vhci_hcd.0: Device attached [ 152.371048][ T53] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 152.380768][ T53] Bluetooth: hci2: Injecting HCI hardware error event [ 152.388658][ T5240] Bluetooth: hci2: hardware error 0x00 [ 152.453059][ T9] usb 3-1: USB disconnect, device number 7 [ 152.505058][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.729'. [ 152.755399][ T45] usb 18-1: SetAddress Request (2) to port 0 [ 152.769534][ T45] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 152.925482][ T29] audit: type=1326 audit(1720310571.786:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7055 comm="syz.0.722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc95575bd9 code=0x0 [ 152.954371][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 153.015006][ T7077] vhci_hcd: connection reset by peer [ 153.042822][ T1032] vhci_hcd: stop threads [ 153.050319][ T1032] vhci_hcd: release socket [ 153.056668][ T1032] vhci_hcd: disconnect device [ 153.805357][ T53] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 153.814326][ T53] Bluetooth: hci0: Injecting HCI hardware error event [ 153.824798][ T53] Bluetooth: hci0: hardware error 0x00 [ 154.449051][ T5240] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 155.170319][ T5287] usb 10-1: device descriptor read/8, error -110 [ 155.899359][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 155.907743][ T5287] usb usb10-port1: attempt power cycle [ 156.102360][ T7131] overlay: Bad value for 'nfs_export' [ 156.143149][ T7131] virtio-fs: tag <(null)> not found [ 156.463705][ T5285] usb 1-1: USB disconnect, device number 4 [ 156.559225][ T5240] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 156.621188][ T5287] usb usb10-port1: unable to enumerate USB device [ 157.621543][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.756'. [ 157.760573][ T7153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.826098][ T7153] bond0: (slave bond1): Enslaving as an active interface with an up link [ 157.889104][ T45] usb 18-1: device descriptor read/8, error -110 [ 158.067488][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.078436][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.087118][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.095676][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.103636][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.112526][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.424921][ T45] usb usb18-port1: attempt power cycle [ 159.220647][ T45] usb usb18-port1: unable to enumerate USB device [ 159.236154][ T29] audit: type=1326 audit(1720310578.096:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7168 comm="syz.3.759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dffd75bd9 code=0x0 [ 159.348680][ T1032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.430673][ T5287] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 159.513178][ T1032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.629255][ T5287] usb 5-1: Using ep0 maxpacket: 8 [ 159.638260][ T5287] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 159.649722][ T5287] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 159.664290][ T5287] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.674296][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.682729][ T5287] usb 5-1: Product: syz [ 159.687219][ T5287] usb 5-1: Manufacturer: syz [ 159.690503][ T1032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.692536][ T5287] usb 5-1: SerialNumber: syz [ 159.710197][ T7171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.720456][ T7171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.846045][ T1032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.869046][ T7157] chnl_net:caif_netlink_parms(): no params data found [ 159.963101][ T7171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.995523][ T7171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.041945][ T5287] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 160.067500][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.081295][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.097152][ T7157] bridge_slave_0: entered allmulticast mode [ 160.100569][ T5287] usb 5-1: USB disconnect, device number 8 [ 160.116842][ T7157] bridge_slave_0: entered promiscuous mode [ 160.140024][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.166276][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.197366][ T7157] bridge_slave_1: entered allmulticast mode [ 160.210475][ T53] Bluetooth: hci5: command tx timeout [ 160.226817][ T7157] bridge_slave_1: entered promiscuous mode [ 160.358572][ T7157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.421824][ T7157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.446116][ T29] audit: type=1800 audit(1720310579.306:37): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.3.766" name="/newroot/137/file0" dev="tmpfs" ino=749 res=0 errno=0 [ 160.593000][ T7157] team0: Port device team_slave_0 added [ 160.618521][ T7157] team0: Port device team_slave_1 added [ 160.634973][ T1032] bridge_slave_1: left allmulticast mode [ 160.645723][ T1032] bridge_slave_1: left promiscuous mode [ 160.660660][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.686169][ T1032] bridge_slave_0: left allmulticast mode [ 160.694172][ T1032] bridge_slave_0: left promiscuous mode [ 160.714871][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.510028][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.537551][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.573045][ T1032] bond0 (unregistering): Released all slaves [ 161.656821][ T7227] veth1_macvtap: left promiscuous mode [ 161.911379][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.928518][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.997341][ T7157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.065939][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.106342][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.132353][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.304934][ T53] Bluetooth: hci5: command tx timeout [ 162.524451][ T7157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.164856][ T7157] hsr_slave_0: entered promiscuous mode [ 163.240261][ T7157] hsr_slave_1: entered promiscuous mode [ 163.267208][ T7157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.292753][ T7157] Cannot create hsr debugfs directory [ 163.381977][ T1032] hsr_slave_0: left promiscuous mode [ 163.434638][ T1032] hsr_slave_1: left promiscuous mode [ 163.459774][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.479126][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.529871][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.549651][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.647601][ T1032] veth1_macvtap: left promiscuous mode [ 163.680538][ T1032] veth0_macvtap: left promiscuous mode [ 163.703035][ T1032] veth1_vlan: left promiscuous mode [ 163.715457][ T1032] veth0_vlan: left promiscuous mode [ 163.822382][ T7254] could not allocate digest TFM handle rmd256-generic [ 164.110632][ T29] audit: type=1326 audit(1720310582.976:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7291 comm="syz.4.797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54fd175bd9 code=0x0 [ 164.371357][ T53] Bluetooth: hci5: command tx timeout [ 164.446521][ T7301] netlink: 'syz.2.798': attribute type 2 has an invalid length. [ 164.456894][ T7301] netlink: 244 bytes leftover after parsing attributes in process `syz.2.798'. [ 164.851561][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 164.899930][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 165.428686][ T7272] veth1_macvtap: left promiscuous mode [ 165.499964][ T7298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.797'. [ 165.589901][ T7322] Cannot find set identified by id 0 to match [ 165.794422][ T7330] netlink: 3 bytes leftover after parsing attributes in process `syz.1.810'. [ 166.237775][ T7344] veth1_macvtap: left promiscuous mode [ 166.449046][ T53] Bluetooth: hci5: command tx timeout [ 167.044897][ T7373] netlink: 3 bytes leftover after parsing attributes in process `syz.3.823'. [ 167.051775][ T7157] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.094381][ T7157] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.176573][ T7157] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.243990][ T7157] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.539079][ T5283] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.758570][ T5283] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 168.110566][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.129545][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.148916][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 168.188939][ T5283] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 168.198023][ T5283] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 168.245710][ T5283] usb 5-1: Manufacturer: syz [ 168.258309][ T5283] usb 5-1: config 0 descriptor?? [ 168.351826][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.417433][ T7157] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.464692][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.471879][ T5338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.564145][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.571359][ T5338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.681951][ T7393] veth1_macvtap: left promiscuous mode [ 168.746436][ T5283] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 168.793695][ T5283] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 168.870200][ T5283] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 169.262827][ T7385] could not allocate digest TFM handle rmd256-generic [ 170.189229][ T5338] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 170.350942][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.588483][ T7157] veth0_vlan: entered promiscuous mode [ 170.626485][ T7157] veth1_vlan: entered promiscuous mode [ 170.712685][ T7157] veth0_macvtap: entered promiscuous mode [ 170.749027][ T7157] veth1_macvtap: entered promiscuous mode [ 170.817389][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.885574][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.905430][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.942704][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.983164][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.017671][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.030029][ T5283] usb 5-1: USB disconnect, device number 9 [ 171.077753][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.114411][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.134704][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.194109][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.236615][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.277764][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.309393][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.346067][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.426387][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.477303][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.518468][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.576240][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.596884][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.699072][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.731159][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.792574][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.886493][ T7459] warning: `syz.2.838' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 171.992547][ T7157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.035791][ T7157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.064920][ T7157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.086109][ T7157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.517357][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.590211][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.685923][ T2440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.748633][ T2440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.751025][ T29] audit: type=1326 audit(1720310591.606:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7488 comm="syz.3.845" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dffd75bd9 code=0x0 [ 172.891735][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.845'. [ 173.138514][ T7497] block nbd0: NBD_DISCONNECT [ 173.177768][ T7497] block nbd0: Disconnected due to user request. [ 173.197296][ T7497] block nbd0: shutting down sockets [ 174.646450][ T7541] input: syz1 as /devices/virtual/input/input10 [ 174.661714][ T7530] usb usb8: usbfs: process 7530 (syz.1.853) did not claim interface 0 before use [ 174.764593][ T7544] mmap: syz.4.856 (7544) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.079813][ T53] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 175.101699][ T7556] xt_addrtype: ipv6 does not support BROADCAST matching [ 175.377710][ T7563] 9pnet: p9_errstr2errno: server reported unknown error I; [ 176.871690][ T7568] ======================================================= [ 176.871690][ T7568] WARNING: The mand mount option has been deprecated and [ 176.871690][ T7568] and is ignored by this kernel. Remove the mand [ 176.871690][ T7568] option from the mount to silence this warning. [ 176.871690][ T7568] ======================================================= [ 179.669600][ T7640] block nbd0: Device being setup by another task [ 179.709291][ T5284] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 179.728942][ T7643] block nbd0: shutting down sockets [ 179.909668][ T5284] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 179.925230][ T5284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.948755][ T5284] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.973127][ T5284] usb 5-1: config 0 interface 0 has no altsetting 0 [ 179.995947][ T5284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.008889][ T5284] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.021666][ T5284] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.065680][ T5284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.081050][ T5284] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.218995][ T5284] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.259870][ T5284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.274732][ T5284] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.427755][ T5284] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.495263][ T5284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.666280][ T5284] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.761788][ T5284] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.796479][ T5284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.796519][ T5284] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.796535][ T5284] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.797981][ T5284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.798011][ T5284] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.798028][ T5284] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.799313][ T5284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.799359][ T5284] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.799386][ T5284] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.801673][ T5284] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 180.801701][ T5284] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 180.801722][ T5284] usb 5-1: Product: syz [ 180.801737][ T5284] usb 5-1: Manufacturer: syz [ 180.801752][ T5284] usb 5-1: SerialNumber: syz [ 180.815425][ T5284] usb 5-1: config 0 descriptor?? [ 180.850933][ T7651] usb usb8: usbfs: process 7651 (syz.2.894) did not claim interface 0 before use [ 180.872585][ T5284] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 180.976467][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.978111][ T7659] 9pnet: p9_errstr2errno: server reported unknown error I; [ 180.978471][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.982720][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.985362][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.986202][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 180.986634][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.432910][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 181.510409][ T5284] usb 5-1: USB disconnect, device number 10 [ 181.599055][ T5338] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 181.616575][ T5284] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 181.788924][ T7661] chnl_net:caif_netlink_parms(): no params data found [ 181.809023][ T5338] usb 3-1: Using ep0 maxpacket: 16 [ 181.827362][ T5338] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 181.855560][ T5338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.884778][ T5338] usb 3-1: Product: syz [ 181.909435][ T5338] usb 3-1: Manufacturer: syz [ 181.925325][ T5338] usb 3-1: SerialNumber: syz [ 181.974417][ T5338] usb 3-1: config 0 descriptor?? [ 181.984548][ T5338] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 182.000851][ T5338] usb 3-1: Detected FT-X [ 182.207421][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.235613][ T7661] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.246781][ T5338] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 182.256059][ T7661] bridge_slave_0: entered allmulticast mode [ 182.285083][ T7661] bridge_slave_0: entered promiscuous mode [ 182.351788][ T7661] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.361028][ T7661] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.369101][ T7661] bridge_slave_1: entered allmulticast mode [ 182.377212][ T7661] bridge_slave_1: entered promiscuous mode [ 182.500727][ T7661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.553333][ T7661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.669337][ T5338] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 182.700958][ T5338] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 182.753643][ T5338] usb 3-1: USB disconnect, device number 8 [ 182.797275][ T5338] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 182.814511][ T7661] team0: Port device team_slave_0 added [ 182.843422][ T7661] team0: Port device team_slave_1 added [ 182.859203][ T5338] ftdi_sio 3-1:0.0: device disconnected [ 183.021394][ T7661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.039269][ T53] Bluetooth: hci0: command tx timeout [ 183.046661][ T53] Bluetooth: hci5: unexpected cc 0x2007 length: 100 > 2 [ 183.074867][ T7661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.118953][ T7689] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 183.125616][ T7689] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 183.135285][ T7689] vhci_hcd vhci_hcd.0: Device attached [ 183.246752][ T7661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.479280][ T5338] usb 10-1: SetAddress Request (6) to port 0 [ 183.601250][ T7661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.632523][ T5283] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 183.646123][ T5338] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd [ 183.748616][ T7661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.796036][ T7661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.837361][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.900'. [ 183.980627][ T5283] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 184.000574][ T7692] vhci_hcd: connection reset by peer [ 184.008971][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.028715][ T2440] vhci_hcd: stop threads [ 184.037989][ T2440] vhci_hcd: release socket [ 184.047034][ T7661] hsr_slave_0: entered promiscuous mode [ 184.051039][ T2440] vhci_hcd: disconnect device [ 184.057677][ T7661] hsr_slave_1: entered promiscuous mode [ 184.077686][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.088186][ T7661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.104181][ T7661] Cannot create hsr debugfs directory [ 184.109634][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 184.112081][ T5283] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 184.153407][ T5283] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 184.175051][ T5283] usb 5-1: Manufacturer: syz [ 184.185323][ T5283] usb 5-1: config 0 descriptor?? [ 184.332457][ T7661] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.437292][ T7661] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.526559][ T7661] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.615404][ T5283] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 184.622929][ T7661] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.636032][ T5283] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 184.653614][ T5283] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 184.922080][ T7661] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.925872][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 184.981059][ T7661] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.996072][ T7661] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.016981][ T7661] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.090564][ T5240] Bluetooth: hci0: command tx timeout [ 185.194632][ T7661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.252987][ T7661] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.280421][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.287545][ T5284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.308538][ T25] usb 5-1: USB disconnect, device number 11 [ 185.359391][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.366578][ T5284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.535182][ T5240] Bluetooth: hci4: command 0x0406 tx timeout [ 186.784774][ T7661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.982752][ T7661] veth0_vlan: entered promiscuous mode [ 187.030564][ T7661] veth1_vlan: entered promiscuous mode [ 187.090137][ T53] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 187.099974][ T53] Bluetooth: hci5: Injecting HCI hardware error event [ 187.108794][ T53] Bluetooth: hci5: hardware error 0x00 [ 187.170432][ T5240] Bluetooth: hci0: command tx timeout [ 187.178761][ T7661] veth0_macvtap: entered promiscuous mode [ 187.251827][ T7661] veth1_macvtap: entered promiscuous mode [ 187.324287][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.369332][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.397396][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.418947][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.430545][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.441744][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.452439][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.481598][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.505842][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.517744][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.528528][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.539373][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.580390][ T7661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.635118][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.640474][ T7773] netlink: 'syz.0.930': attribute type 3 has an invalid length. [ 187.694112][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.717042][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.717724][ T7775] netlink: 'syz.1.931': attribute type 1 has an invalid length. [ 187.749919][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.755864][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'. [ 187.768875][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.791935][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.826464][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.879029][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.889843][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.901435][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.912473][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.924939][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.972706][ T7661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.037710][ T7661] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.051274][ T7661] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.220053][ T7661] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.283898][ T7661] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.146922][ T5338] usb 10-1: device descriptor read/8, error -110 [ 189.249001][ T5240] Bluetooth: hci0: command tx timeout [ 189.254487][ T53] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 189.282740][ T7792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.938'. [ 189.482141][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.552377][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.600729][ T5338] usb usb10-port1: attempt power cycle [ 189.619880][ T2440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.622804][ T7799] netlink: 'syz.1.941': attribute type 3 has an invalid length. [ 189.636773][ T2440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.994513][ T7808] netlink: 'syz.4.944': attribute type 1 has an invalid length. [ 190.012150][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 190.227078][ T7813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.946'. [ 190.262248][ T5338] usb usb10-port1: unable to enumerate USB device [ 190.727260][ T61] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 190.835753][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.957'. [ 191.182877][ C0] hrtimer: interrupt took 8134719 ns [ 191.228995][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.326215][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.412824][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.491725][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.665500][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.861189][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.082226][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.015623][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.021977][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.055685][ T7881] ax25_connect(): syz.4.974 uses autobind, please contact jreuter@yaina.de [ 210.144374][ T53] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 210.735773][ T5249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.747456][ T5249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.756376][ T5249] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.764902][ T5249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.796303][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.804123][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.811746][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.819271][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.826445][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.850509][ T5245] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 211.858240][ T5245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.336482][ T5245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.343951][ T5245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.351160][ T5245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.359426][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.367575][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.375182][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.382569][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.389745][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.417244][ T7893] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 213.949566][ T53] Bluetooth: hci3: command tx timeout [ 214.489119][ T53] Bluetooth: hci5: command tx timeout [ 215.140446][ T5240] Bluetooth: hci6: command tx timeout [ 215.173010][ T1032] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.150880][ T5240] Bluetooth: hci3: command tx timeout [ 216.318075][ T7895] chnl_net:caif_netlink_parms(): no params data found [ 217.385084][ T5240] Bluetooth: hci5: command tx timeout [ 217.392839][ T53] Bluetooth: hci6: command tx timeout [ 218.239065][ T5240] Bluetooth: hci3: command tx timeout [ 220.449971][ T7925] sched: RT throttling activated [ 221.122851][ T5240] Bluetooth: hci5: command tx timeout [ 221.128319][ T5240] Bluetooth: hci3: command tx timeout [ 225.352085][ T53] Bluetooth: hci6: command tx timeout [ 231.304658][ T5240] Bluetooth: hci6: command tx timeout [ 231.311543][ T5240] Bluetooth: hci5: command tx timeout [ 241.105010][ T1032] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.968925][ T7889] chnl_net:caif_netlink_parms(): no params data found [ 259.741087][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.484458][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.490857][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.561863][ T5249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.630726][ T5249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.639735][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.647945][ T5249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 262.655393][ T5249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.663472][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.462472][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.464177][ T7895] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.485220][ T7895] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.492445][ T7895] bridge_slave_0: entered allmulticast mode [ 263.499179][ T7895] bridge_slave_0: entered promiscuous mode [ 263.507828][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.515459][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.523708][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 263.530941][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 264.896359][ T1032] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.479537][ T7895] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.486650][ T7895] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.493808][ T7895] bridge_slave_1: entered allmulticast mode [ 265.500633][ T7895] bridge_slave_1: entered promiscuous mode [ 265.985627][ T5245] Bluetooth: hci1: command tx timeout [ 266.545879][ T5249] Bluetooth: hci4: command tx timeout [ 268.162136][ T5245] Bluetooth: hci1: command tx timeout [ 268.870895][ T5245] Bluetooth: hci4: command tx timeout [ 269.541656][ T5249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 269.550433][ T5249] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 269.558076][ T5249] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 269.565634][ T5249] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.577351][ T5249] Bluetooth: hci1: command tx timeout [ 271.082155][ T5249] Bluetooth: hci4: command tx timeout [ 271.131968][ T5249] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.139234][ T5249] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 271.657260][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 271.666140][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 272.109397][ T1032] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.123419][ T7889] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 272.156499][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 272.175246][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 272.183049][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 272.596605][ T53] Bluetooth: hci1: command tx timeout [ 272.605024][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 272.613271][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 272.620493][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 272.651154][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 272.673645][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 272.681093][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 272.688269][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 273.117206][ T5245] Bluetooth: hci4: command tx timeout [ 274.717427][ T5240] Bluetooth: hci7: command tx timeout [ 274.723582][ T5240] Bluetooth: hci8: command tx timeout [ 275.288890][ T1032] bridge_slave_1: left allmulticast mode [ 275.294549][ T1032] bridge_slave_1: left promiscuous mode [ 275.300221][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.308816][ T1032] bridge_slave_0: left allmulticast mode [ 275.314450][ T1032] bridge_slave_0: left promiscuous mode [ 275.320151][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.384642][ T5249] Bluetooth: hci9: command tx timeout [ 277.030692][ T5249] Bluetooth: hci8: command tx timeout [ 277.037302][ T5240] Bluetooth: hci7: command tx timeout [ 277.672887][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.683753][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.694216][ T1032] bond0 (unregistering): Released all slaves [ 278.812894][ T5249] Bluetooth: hci9: command tx timeout [ 278.877279][ T7950] chnl_net:caif_netlink_parms(): no params data found [ 278.903847][ T7944] chnl_net:caif_netlink_parms(): no params data found [ 279.507272][ T5249] Bluetooth: hci8: command tx timeout [ 279.507317][ T5240] Bluetooth: hci7: command tx timeout [ 280.836686][ T7965] chnl_net:caif_netlink_parms(): no params data found [ 280.849088][ T5240] Bluetooth: hci9: command tx timeout [ 281.519010][ T5240] Bluetooth: hci7: command tx timeout [ 282.179864][ T5240] Bluetooth: hci8: command tx timeout [ 282.332792][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.340061][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.349696][ T7944] bridge_slave_0: entered allmulticast mode [ 282.368908][ T7944] bridge_slave_0: entered promiscuous mode [ 282.392248][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.403989][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.411900][ T7944] bridge_slave_1: entered allmulticast mode [ 282.419685][ T7944] bridge_slave_1: entered promiscuous mode [ 282.939739][ T5249] Bluetooth: hci9: command tx timeout [ 284.695744][ T7944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.012133][ T7962] chnl_net:caif_netlink_parms(): no params data found [ 286.981260][ T7965] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.988409][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.995549][ T7965] bridge_slave_0: entered allmulticast mode [ 287.684281][ T7965] bridge_slave_0: entered promiscuous mode [ 287.692642][ T7965] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.699715][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.706864][ T7965] bridge_slave_1: entered allmulticast mode [ 287.713582][ T7965] bridge_slave_1: entered promiscuous mode [ 287.735665][ T7965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.747169][ T7965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.391535][ T7965] team0: Port device team_slave_0 added [ 288.400106][ T7965] team0: Port device team_slave_1 added [ 288.421275][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.428328][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.348171][ T7965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.190762][ T7944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.212203][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.219377][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.229533][ T7950] bridge_slave_0: entered allmulticast mode [ 291.236904][ T7950] bridge_slave_0: entered promiscuous mode [ 291.244738][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.251809][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.259030][ T7950] bridge_slave_1: entered allmulticast mode [ 294.902683][ T7950] bridge_slave_1: entered promiscuous mode [ 294.963750][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.970714][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.948315][ T7965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.915742][ T7959] chnl_net:caif_netlink_parms(): no params data found [ 303.936620][ T7944] team0: Port device team_slave_0 added [ 303.945522][ T7944] team0: Port device team_slave_1 added [ 303.967650][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.974605][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.357144][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 307.864085][ T7944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.864539][ T7965] hsr_slave_0: entered promiscuous mode [ 308.870789][ T7965] hsr_slave_1: entered promiscuous mode [ 308.876775][ T7965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.884321][ T7965] Cannot create hsr debugfs directory [ 308.902114][ T1032] hsr_slave_0: left promiscuous mode [ 308.907846][ T1032] hsr_slave_1: left promiscuous mode [ 308.913627][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.921064][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.928942][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.632775][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.651450][ T1032] veth0_macvtap: left promiscuous mode [ 309.657064][ T1032] veth1_vlan: left promiscuous mode [ 309.662312][ T1032] veth0_vlan: left promiscuous mode [ 311.641161][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 311.673166][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 315.395636][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.407815][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.416288][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.425335][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.433716][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 315.441190][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.161367][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.168337][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.194282][ T7944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.598445][ T5249] Bluetooth: hci3: command tx timeout [ 318.637222][ T7962] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.644327][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.454925][ T7962] bridge_slave_0: entered allmulticast mode [ 319.462225][ T7962] bridge_slave_0: entered promiscuous mode [ 319.469781][ T7962] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.476852][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.483992][ T7962] bridge_slave_1: entered allmulticast mode [ 319.490720][ T7962] bridge_slave_1: entered promiscuous mode [ 319.512780][ T7962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.523846][ T7962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.191071][ T7962] team0: Port device team_slave_0 added [ 320.198890][ T7962] team0: Port device team_slave_1 added [ 320.218905][ T7962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.225857][ T7962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.251722][ T7962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.821875][ T5249] Bluetooth: hci3: command tx timeout [ 320.830483][ T7962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.837438][ T7962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.863301][ T7962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.992985][ T7962] hsr_slave_0: entered promiscuous mode [ 322.000104][ T7962] hsr_slave_1: entered promiscuous mode [ 322.573988][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.582805][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.590669][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.598944][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.078926][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.085257][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.094098][ T53] Bluetooth: hci3: command tx timeout [ 323.099926][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 323.107093][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.132956][ T7962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.140522][ T7962] Cannot create hsr debugfs directory [ 324.223426][ T7965] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.235361][ T5240] Bluetooth: hci3: command tx timeout [ 326.269618][ T5240] Bluetooth: hci1: command tx timeout [ 326.806852][ T7959] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.813947][ T7959] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.821107][ T7959] bridge_slave_0: entered allmulticast mode [ 326.827883][ T7959] bridge_slave_0: entered promiscuous mode [ 326.835657][ T7959] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.842757][ T7959] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.849896][ T7959] bridge_slave_1: entered allmulticast mode [ 326.856622][ T7959] bridge_slave_1: entered promiscuous mode [ 326.880004][ T7959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.335405][ T7959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.361263][ T7959] team0: Port device team_slave_0 added [ 327.368952][ T7959] team0: Port device team_slave_1 added [ 327.390424][ T7959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.397419][ T7959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.417881][ T53] Bluetooth: hci1: command tx timeout [ 330.134669][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.143402][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.601930][ T5249] Bluetooth: hci1: command tx timeout [ 330.609101][ T7959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.113724][ T5249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.164204][ T5249] Bluetooth: hci1: command tx timeout [ 333.176419][ T5245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.218976][ T5245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.228362][ T5245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.236016][ T5245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.243608][ T5245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.250981][ T5245] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.726335][ T5245] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.747050][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.754487][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.762436][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.798452][ T7965] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.266910][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.275319][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.282960][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.291659][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 334.298878][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.892438][ T7965] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.830547][ T5249] Bluetooth: hci4: command tx timeout [ 337.837006][ T5249] Bluetooth: hci5: command tx timeout [ 337.843412][ T5245] Bluetooth: hci6: command tx timeout [ 337.947369][ T8034] chnl_net:caif_netlink_parms(): no params data found [ 340.668883][ T5249] Bluetooth: hci5: command tx timeout [ 340.675763][ T5249] Bluetooth: hci6: command tx timeout [ 340.681209][ T5249] Bluetooth: hci4: command tx timeout [ 345.018975][ T5245] Bluetooth: hci4: command tx timeout [ 345.024603][ T5240] Bluetooth: hci5: command tx timeout [ 345.033083][ T5249] Bluetooth: hci6: command tx timeout [ 348.842361][ T5249] Bluetooth: hci6: command tx timeout [ 348.847829][ T5249] Bluetooth: hci4: command tx timeout [ 348.853254][ T5249] Bluetooth: hci5: command tx timeout [ 353.718644][ T7965] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.946758][ T8065] chnl_net:caif_netlink_parms(): no params data found [ 362.497037][ T8037] chnl_net:caif_netlink_parms(): no params data found [ 365.626740][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.633893][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.641139][ T8034] bridge_slave_0: entered allmulticast mode [ 365.648450][ T8034] bridge_slave_0: entered promiscuous mode [ 375.028844][ T5249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.038606][ T5249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.059019][ T5249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.069587][ T5249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.077642][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 375.085453][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.797179][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.059617][ T5249] Bluetooth: hci0: command tx timeout [ 380.067430][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.087624][ T8034] bridge_slave_1: entered allmulticast mode [ 380.099393][ T8034] bridge_slave_1: entered promiscuous mode [ 381.716572][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.727645][ T5249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.736926][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.745941][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.754027][ T5249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 381.762761][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.003847][ T8114] chnl_net:caif_netlink_parms(): no params data found [ 382.159490][ T5249] Bluetooth: hci0: command tx timeout [ 383.849073][ T5249] Bluetooth: hci2: command tx timeout [ 384.190203][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.196548][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.258782][ T5249] Bluetooth: hci0: command tx timeout [ 388.866296][ T5249] Bluetooth: hci2: command tx timeout [ 388.872656][ T5249] Bluetooth: hci0: command tx timeout [ 391.127555][ T5249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 391.137462][ T5249] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 391.160892][ T5249] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 391.170492][ T5249] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 391.178224][ T5249] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 391.186027][ T5249] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 392.098029][ T5245] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 392.108679][ T5245] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 392.117614][ T5245] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 392.125678][ T5245] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 392.133788][ T5245] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 392.143166][ T5245] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 393.120569][ T5249] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 393.138934][ T5249] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 393.147455][ T5249] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 393.157309][ T5249] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 393.166476][ T5249] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 393.174299][ T5249] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 393.280026][ T5245] Bluetooth: hci7: command tx timeout [ 394.230031][ T5245] Bluetooth: hci8: command tx timeout [ 395.279972][ T5245] Bluetooth: hci9: command tx timeout [ 395.329460][ T5245] Bluetooth: hci7: command tx timeout [ 395.520116][ T5245] Bluetooth: hci2: command tx timeout [ 405.378837][ T5245] Bluetooth: hci8: command tx timeout [ 405.384476][ T5245] Bluetooth: hci9: command tx timeout [ 405.398994][ T5245] Bluetooth: hci7: command tx timeout [ 405.404461][ T5245] Bluetooth: hci2: command tx timeout [ 405.502558][ T5243] syz-executor (5243) used greatest stack depth: 18672 bytes left [ 419.520387][ T5249] Bluetooth: hci7: command tx timeout [ 419.522692][ T5245] Bluetooth: hci9: command tx timeout [ 419.525834][ T5249] Bluetooth: hci8: command tx timeout [ 507.179432][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.185829][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 539.454613][ T5245] Bluetooth: hci9: command tx timeout [ 539.461402][ T5245] Bluetooth: hci8: command tx timeout [ 539.478045][ T30] INFO: task kworker/u8:5:1032 blocked for more than 143 seconds. [ 539.485926][ T30] Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 539.493587][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.502514][ T30] task:kworker/u8:5 state:D stack:20272 pid:1032 tgid:1032 ppid:2 flags:0x00004000 [ 539.512742][ T30] Workqueue: netns cleanup_net [ 539.518736][ T30] Call Trace: [ 539.522034][ T30] [ 539.524976][ T30] __schedule+0x1796/0x49d0 [ 539.529555][ T30] ? __pfx___schedule+0x10/0x10 [ 539.534417][ T30] ? __pfx_lock_release+0x10/0x10 [ 539.539489][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 539.544971][ T30] ? kthread_data+0x52/0xd0 [ 539.549593][ T30] ? schedule+0x90/0x320 [ 539.553849][ T30] ? wq_worker_sleeping+0x66/0x240 [ 539.559005][ T30] ? schedule+0x90/0x320 [ 539.563253][ T30] schedule+0x14b/0x320 [ 539.567422][ T30] schedule_preempt_disabled+0x13/0x30 [ 539.572922][ T30] __mutex_lock+0x6a4/0xd70 [ 539.577443][ T30] ? __mutex_lock+0x527/0xd70 [ 539.585572][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 539.590712][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 539.595765][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 539.601276][ T30] ? wg_socket_reinit+0x326/0x380 [ 539.606324][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 539.620919][ T30] cleanup_net+0x615/0xcc0 [ 539.625386][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 539.630949][ T30] ? process_scheduled_works+0x945/0x1830 [ 539.636690][ T30] process_scheduled_works+0xa2c/0x1830 [ 539.642318][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 539.648327][ T30] ? assign_work+0x364/0x3d0 [ 539.653148][ T30] worker_thread+0x86d/0xd50 [ 539.657768][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 539.663718][ T30] ? __kthread_parkme+0x169/0x1d0 [ 539.668797][ T30] ? __pfx_worker_thread+0x10/0x10 [ 539.673920][ T30] kthread+0x2f0/0x390 [ 539.678004][ T30] ? __pfx_worker_thread+0x10/0x10 [ 539.688672][ T30] ? __pfx_kthread+0x10/0x10 [ 539.693295][ T30] ret_from_fork+0x4b/0x80 [ 539.697741][ T30] ? __pfx_kthread+0x10/0x10 [ 539.709185][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 539.715513][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 539.738536][ T30] ret_from_fork_asm+0x1a/0x30 [ 539.743423][ T30] [ 539.746526][ T30] INFO: task kworker/1:8:5338 blocked for more than 144 seconds. [ 539.756963][ T30] Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 539.764661][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.773364][ T30] task:kworker/1:8 state:D stack:19984 pid:5338 tgid:5338 ppid:2 flags:0x00004000 [ 539.783575][ T30] Workqueue: events linkwatch_event [ 539.788828][ T30] Call Trace: [ 539.792113][ T30] [ 539.795057][ T30] __schedule+0x1796/0x49d0 [ 539.799765][ T30] ? __pfx___schedule+0x10/0x10 [ 539.804630][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 539.810696][ T30] ? __pfx_lock_release+0x10/0x10 [ 539.815749][ T30] ? kick_pool+0x1bd/0x620 [ 539.820236][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.826603][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 539.831880][ T30] ? schedule+0x90/0x320 [ 539.836134][ T30] schedule+0x14b/0x320 [ 539.840337][ T30] schedule_preempt_disabled+0x13/0x30 [ 539.845804][ T30] __mutex_lock+0x6a4/0xd70 [ 539.850976][ T30] ? __mutex_lock+0x527/0xd70 [ 539.855673][ T30] ? linkwatch_event+0xe/0x60 [ 539.860397][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 539.865448][ T30] ? process_scheduled_works+0x945/0x1830 [ 539.871205][ T30] linkwatch_event+0xe/0x60 [ 539.875742][ T30] process_scheduled_works+0xa2c/0x1830 [ 539.881412][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 539.887419][ T30] ? assign_work+0x364/0x3d0 [ 539.898767][ T30] worker_thread+0x86d/0xd50 [ 539.903404][ T30] ? __kthread_parkme+0x169/0x1d0 [ 539.908473][ T30] ? __pfx_worker_thread+0x10/0x10 [ 539.931654][ T30] kthread+0x2f0/0x390 [ 539.935785][ T30] ? __pfx_worker_thread+0x10/0x10 [ 539.940945][ T30] ? __pfx_kthread+0x10/0x10 [ 539.945547][ T30] ret_from_fork+0x4b/0x80 [ 539.950100][ T30] ? __pfx_kthread+0x10/0x10 [ 539.954707][ T30] ret_from_fork_asm+0x1a/0x30 [ 539.959535][ T30] [ 539.962680][ T30] INFO: task syz-executor:8060 blocked for more than 144 seconds. [ 539.970528][ T30] Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 539.978159][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.986864][ T30] task:syz-executor state:D stack:21024 pid:8060 tgid:8060 ppid:1 flags:0x00000004 [ 539.997074][ T30] Call Trace: [ 540.000601][ T30] [ 540.003561][ T30] __schedule+0x1796/0x49d0 [ 540.008113][ T30] ? __pfx___schedule+0x10/0x10 [ 540.013033][ T30] ? __pfx_lock_release+0x10/0x10 [ 540.018074][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 540.023591][ T30] ? schedule+0x90/0x320 [ 540.027842][ T30] schedule+0x14b/0x320 [ 540.032632][ T30] schedule_preempt_disabled+0x13/0x30 [ 540.038106][ T30] __mutex_lock+0x6a4/0xd70 [ 540.043158][ T30] ? __mutex_lock+0x527/0xd70 [ 540.047857][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 540.053267][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 540.058324][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 540.063411][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 540.068675][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 540.074150][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 540.079493][ T30] ? __pfx_validate_chain+0x10/0x10 [ 540.084706][ T30] ? __pfx_validate_chain+0x10/0x10 [ 540.089951][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 540.094915][ T30] ? mark_lock+0x9a/0x350 [ 540.099449][ T30] ? __pfx_validate_chain+0x10/0x10 [ 540.104685][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 540.109765][ T30] ? mark_lock+0x9a/0x350 [ 540.114111][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 540.119197][ T30] netlink_rcv_skb+0x1e3/0x430 [ 540.123978][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 540.129492][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.135927][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.141191][ T30] netlink_unicast+0x7ea/0x980 [ 540.145980][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 540.151433][ T30] ? __virt_addr_valid+0x183/0x520 [ 540.156589][ T30] ? __check_object_size+0x49c/0x900 [ 540.161971][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 540.167118][ T30] netlink_sendmsg+0x8db/0xcb0 [ 540.171958][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.177274][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 540.182603][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 540.188082][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.193421][ T30] __sock_sendmsg+0x221/0x270 [ 540.198111][ T30] __sys_sendto+0x3a4/0x4f0 [ 540.202788][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 540.207839][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 540.213082][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 540.219210][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 540.225210][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 540.231674][ T30] __x64_sys_sendto+0xde/0x100 [ 540.237550][ T30] do_syscall_64+0xf3/0x230 [ 540.242159][ T30] ? clear_bhb_loop+0x35/0x90 [ 540.246866][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.252976][ T30] RIP: 0033:0x7f5c6f57796c [ 540.257423][ T30] RSP: 002b:00007ffd37d06040 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 540.265969][ T30] RAX: ffffffffffffffda RBX: 00007f5c70234620 RCX: 00007f5c6f57796c [ 540.274298][ T30] RDX: 0000000000000038 RSI: 00007f5c70234670 RDI: 0000000000000003 [ 540.284329][ T30] RBP: 0000000000000000 R08: 00007ffd37d06094 R09: 000000000000000c [ 540.308683][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 540.316704][ T30] R13: 0000000000000000 R14: 00007f5c70234670 R15: 0000000000000000 [ 540.349227][ T30] [ 540.352306][ T30] INFO: task syz-executor:8067 blocked for more than 144 seconds. [ 540.368684][ T30] Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 540.377546][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 540.399470][ T30] task:syz-executor state:D stack:20592 pid:8067 tgid:8067 ppid:1 flags:0x00000004 [ 540.428673][ T30] Call Trace: [ 540.431997][ T30] [ 540.434964][ T30] __schedule+0x1796/0x49d0 [ 540.448068][ T30] ? __pfx___schedule+0x10/0x10 [ 540.453909][ T30] ? __pfx_lock_release+0x10/0x10 [ 540.458991][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 540.464510][ T30] ? schedule+0x90/0x320 [ 540.468794][ T30] schedule+0x14b/0x320 [ 540.472966][ T30] schedule_preempt_disabled+0x13/0x30 [ 540.478440][ T30] __mutex_lock+0x6a4/0xd70 [ 540.482998][ T30] ? __mutex_lock+0x527/0xd70 [ 540.487688][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 540.492934][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 540.497984][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 540.503109][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 540.508331][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 540.513835][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 540.519167][ T30] ? __pfx_validate_chain+0x10/0x10 [ 540.524382][ T30] ? __pfx_validate_chain+0x10/0x10 [ 540.529631][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 540.534627][ T30] ? mark_lock+0x9a/0x350 [ 540.539069][ T30] ? __pfx_validate_chain+0x10/0x10 [ 540.545475][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 540.550982][ T30] ? mark_lock+0x9a/0x350 [ 540.555353][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 540.560461][ T30] netlink_rcv_skb+0x1e3/0x430 [ 540.565247][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 540.570758][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.576101][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.581402][ T30] netlink_unicast+0x7ea/0x980 [ 540.586466][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 540.591813][ T30] ? __virt_addr_valid+0x183/0x520 [ 540.596946][ T30] ? __check_object_size+0x49c/0x900 [ 540.602382][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 540.607521][ T30] netlink_sendmsg+0x8db/0xcb0 [ 540.612348][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.617690][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 540.623085][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 540.628578][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.633922][ T30] __sock_sendmsg+0x221/0x270 [ 540.638707][ T30] __sys_sendto+0x3a4/0x4f0 [ 540.644399][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 540.649657][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 540.655659][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 540.662080][ T30] ? exc_page_fault+0x590/0x8c0 [ 540.666968][ T30] __x64_sys_sendto+0xde/0x100 [ 540.671805][ T30] do_syscall_64+0xf3/0x230 [ 540.676332][ T30] ? clear_bhb_loop+0x35/0x90 [ 540.681067][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.686978][ T30] RIP: 0033:0x7f1666b7796c [ 540.691435][ T30] RSP: 002b:00007fff1a855370 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 540.700005][ T30] RAX: ffffffffffffffda RBX: 00007f1667834620 RCX: 00007f1666b7796c [ 540.707990][ T30] RDX: 000000000000003c RSI: 00007f1667834670 RDI: 0000000000000003 [ 540.716015][ T30] RBP: 0000000000000000 R08: 00007fff1a8553c4 R09: 000000000000000c [ 540.724026][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 540.732038][ T30] R13: 0000000000000000 R14: 00007f1667834670 R15: 0000000000000000 [ 540.740071][ T30] [ 540.743110][ T30] INFO: task syz-executor:8104 blocked for more than 145 seconds. [ 540.751659][ T30] Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 540.759821][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 540.768501][ T30] task:syz-executor state:D stack:23920 pid:8104 tgid:8104 ppid:8103 flags:0x00004002 [ 540.778732][ T30] Call Trace: [ 540.782019][ T30] [ 540.784960][ T30] __schedule+0x1796/0x49d0 [ 540.789538][ T30] ? __pfx___schedule+0x10/0x10 [ 540.794405][ T30] ? __pfx_lock_release+0x10/0x10 [ 540.799479][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 540.804962][ T30] ? schedule+0x90/0x320 [ 540.809651][ T30] schedule+0x14b/0x320 [ 540.813825][ T30] schedule_preempt_disabled+0x13/0x30 [ 540.819342][ T30] __mutex_lock+0x6a4/0xd70 [ 540.823864][ T30] ? __mutex_lock+0x527/0xd70 [ 540.828552][ T30] ? register_nexthop_notifier+0x84/0x290 [ 540.834326][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 540.839403][ T30] ? __asan_memset+0x23/0x50 [ 540.844009][ T30] register_nexthop_notifier+0x84/0x290 [ 540.850181][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 540.856011][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 540.862905][ T30] ? __asan_memset+0x23/0x50 [ 540.867542][ T30] ops_init+0x359/0x610 [ 540.871761][ T30] setup_net+0x515/0xca0 [ 540.876014][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 540.881612][ T30] ? __pfx_setup_net+0x10/0x10 [ 540.886400][ T30] copy_net_ns+0x4e2/0x7b0 [ 540.894906][ T30] create_new_namespaces+0x425/0x7b0 [ 540.900421][ T30] ? bpf_lsm_capable+0x9/0x10 [ 540.905132][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 540.911016][ T30] ksys_unshare+0x619/0xc10 [ 540.915547][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 540.920616][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 540.926611][ T30] ? do_syscall_64+0x100/0x230 [ 540.931425][ T30] __x64_sys_unshare+0x38/0x40 [ 540.936200][ T30] do_syscall_64+0xf3/0x230 [ 540.940748][ T30] ? clear_bhb_loop+0x35/0x90 [ 540.945443][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.951993][ T30] RIP: 0033:0x7f6ed7f77337 [ 540.956423][ T30] RSP: 002b:00007ffe006eb858 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 540.965549][ T30] RAX: ffffffffffffffda RBX: 00007f6ed8103f20 RCX: 00007f6ed7f77337 [ 540.973575][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 540.981584][ T30] RBP: 00007f6ed8104a18 R08: 0000000000000000 R09: 0000000000000000 [ 540.989591][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 540.997569][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 541.005600][ T30] [ 541.008816][ T30] INFO: task syz-executor:8125 blocked for more than 145 seconds. [ 541.016626][ T30] Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 541.024493][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.033262][ T30] task:syz-executor state:D stack:24992 pid:8125 tgid:8125 ppid:8124 flags:0x00000000 [ 541.043825][ T30] Call Trace: [ 541.047109][ T30] [ 541.050077][ T30] __schedule+0x1796/0x49d0 [ 541.055733][ T30] ? __pfx___schedule+0x10/0x10 [ 541.060717][ T30] ? __pfx_lock_release+0x10/0x10 [ 541.065757][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 541.071279][ T30] ? schedule+0x90/0x320 [ 541.075535][ T30] schedule+0x14b/0x320 [ 541.079996][ T30] schedule_preempt_disabled+0x13/0x30 [ 541.085460][ T30] __mutex_lock+0x6a4/0xd70 [ 541.090009][ T30] ? __mutex_lock+0x527/0xd70 [ 541.094700][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 541.099946][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 541.104995][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 541.110199][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 541.115415][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.120919][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 541.126222][ T30] ? __pfx_validate_chain+0x10/0x10 [ 541.131468][ T30] ? __pfx_validate_chain+0x10/0x10 [ 541.136684][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 541.141681][ T30] ? mark_lock+0x9a/0x350 [ 541.146023][ T30] ? __pfx_validate_chain+0x10/0x10 [ 541.151483][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 541.157688][ T30] ? mark_lock+0x9a/0x350 [ 541.162196][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 541.167256][ T30] netlink_rcv_skb+0x1e3/0x430 [ 541.172077][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.177559][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.182967][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.188198][ T30] netlink_unicast+0x7ea/0x980 [ 541.193061][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 541.198391][ T30] ? __virt_addr_valid+0x183/0x520 [ 541.203614][ T30] ? __check_object_size+0x49c/0x900 [ 541.209207][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 541.214358][ T30] netlink_sendmsg+0x8db/0xcb0 [ 541.219209][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.224523][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 541.229859][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 541.235337][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.240668][ T30] __sock_sendmsg+0x221/0x270 [ 541.245362][ T30] __sys_sendto+0x3a4/0x4f0 [ 541.249915][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 541.254995][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 541.261885][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 541.268265][ T30] ? exc_page_fault+0x590/0x8c0 [ 541.273812][ T30] __x64_sys_sendto+0xde/0x100 [ 541.278695][ T30] do_syscall_64+0xf3/0x230 [ 541.283230][ T30] ? clear_bhb_loop+0x35/0x90 [ 541.287943][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.294024][ T30] RIP: 0033:0x7f3cfdb7796c [ 541.298658][ T30] RSP: 002b:00007ffd06451f00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 541.307107][ T30] RAX: ffffffffffffffda RBX: 00007f3cfe834620 RCX: 00007f3cfdb7796c [ 541.315306][ T30] RDX: 0000000000000028 RSI: 00007f3cfe834670 RDI: 0000000000000003 [ 541.323337][ T30] RBP: 0000000000000000 R08: 00007ffd06451f54 R09: 000000000000000c [ 541.331352][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 541.339409][ T30] R13: 0000000000000000 R14: 00007f3cfe834670 R15: 0000000000000000 [ 541.347426][ T30] [ 541.350511][ T30] INFO: task syz-executor:8128 blocked for more than 145 seconds. [ 541.358337][ T30] Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 541.367455][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.379465][ T30] task:syz-executor state:D stack:24992 pid:8128 tgid:8128 ppid:8127 flags:0x00000000 [ 541.391119][ T30] Call Trace: [ 541.394415][ T30] [ 541.397356][ T30] __schedule+0x1796/0x49d0 [ 541.409693][ T30] ? __pfx___schedule+0x10/0x10 [ 541.414604][ T30] ? __pfx_lock_release+0x10/0x10 [ 541.428676][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 541.434182][ T30] ? schedule+0x90/0x320 [ 541.438433][ T30] schedule+0x14b/0x320 [ 541.459122][ T30] schedule_preempt_disabled+0x13/0x30 [ 541.465777][ T30] __mutex_lock+0x6a4/0xd70 [ 541.478690][ T30] ? __mutex_lock+0x527/0xd70 [ 541.483420][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 541.498679][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 541.503841][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 541.518682][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 541.523924][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.538703][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 541.544028][ T30] ? __pfx_validate_chain+0x10/0x10 [ 541.553811][ T30] ? __pfx_validate_chain+0x10/0x10 [ 541.559552][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 541.565691][ T30] ? mark_lock+0x9a/0x350 [ 541.570089][ T30] ? __pfx_validate_chain+0x10/0x10 [ 541.575307][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 541.580396][ T30] ? mark_lock+0x9a/0x350 [ 541.584744][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 541.589850][ T30] netlink_rcv_skb+0x1e3/0x430 [ 541.594659][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.600222][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.605567][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.611483][ T30] netlink_unicast+0x7ea/0x980 [ 541.616297][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 541.621845][ T30] ? __virt_addr_valid+0x183/0x520 [ 541.626986][ T30] ? __check_object_size+0x49c/0x900 [ 541.632331][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 541.637464][ T30] netlink_sendmsg+0x8db/0xcb0 [ 541.642302][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.647613][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 541.652948][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 541.658429][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.663828][ T30] __sock_sendmsg+0x221/0x270 [ 541.669184][ T30] __sys_sendto+0x3a4/0x4f0 [ 541.673761][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 541.679367][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 541.685375][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 541.691756][ T30] ? exc_page_fault+0x590/0x8c0 [ 541.696628][ T30] __x64_sys_sendto+0xde/0x100 [ 541.701448][ T30] do_syscall_64+0xf3/0x230 [ 541.705971][ T30] ? clear_bhb_loop+0x35/0x90 [ 541.710844][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.716755][ T30] RIP: 0033:0x7f807dd7796c [ 541.721209][ T30] RSP: 002b:00007ffc55dbdf00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 541.729668][ T30] RAX: ffffffffffffffda RBX: 00007f807ea34620 RCX: 00007f807dd7796c [ 541.737650][ T30] RDX: 0000000000000028 RSI: 00007f807ea34670 RDI: 0000000000000003 [ 541.745681][ T30] RBP: 0000000000000000 R08: 00007ffc55dbdf54 R09: 000000000000000c [ 541.753695][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 541.761786][ T30] R13: 0000000000000000 R14: 00007f807ea34670 R15: 0000000000000000 [ 541.770433][ T30] [ 541.773470][ T30] INFO: task syz-executor:8132 blocked for more than 146 seconds. [ 541.781804][ T30] Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 541.789481][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.798168][ T30] task:syz-executor state:D stack:24992 pid:8132 tgid:8132 ppid:8131 flags:0x00000000 [ 541.808478][ T30] Call Trace: [ 541.811969][ T30] [ 541.814923][ T30] __schedule+0x1796/0x49d0 [ 541.819510][ T30] ? __pfx___schedule+0x10/0x10 [ 541.824383][ T30] ? __pfx_lock_release+0x10/0x10 [ 541.829452][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 541.834938][ T30] ? schedule+0x90/0x320 [ 541.839222][ T30] schedule+0x14b/0x320 [ 541.843388][ T30] schedule_preempt_disabled+0x13/0x30 [ 541.848883][ T30] __mutex_lock+0x6a4/0xd70 [ 541.853404][ T30] ? __mutex_lock+0x527/0xd70 [ 541.858114][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 541.863539][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 541.868606][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 541.874815][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 541.880092][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.885574][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 541.890915][ T30] ? __pfx_validate_chain+0x10/0x10 [ 541.896130][ T30] ? __pfx_validate_chain+0x10/0x10 [ 541.901376][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 541.906342][ T30] ? mark_lock+0x9a/0x350 [ 541.911058][ T30] ? __pfx_validate_chain+0x10/0x10 [ 541.916278][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 541.921373][ T30] ? mark_lock+0x9a/0x350 [ 541.925726][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 541.930817][ T30] netlink_rcv_skb+0x1e3/0x430 [ 541.935717][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.941294][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.946641][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.951897][ T30] netlink_unicast+0x7ea/0x980 [ 541.956701][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 541.962501][ T30] ? __virt_addr_valid+0x183/0x520 [ 541.967636][ T30] ? __check_object_size+0x49c/0x900 [ 541.977218][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 541.982429][ T30] netlink_sendmsg+0x8db/0xcb0 [ 541.987227][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.992611][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 541.997916][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 542.003446][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.010532][ T30] __sock_sendmsg+0x221/0x270 [ 542.015244][ T30] __sys_sendto+0x3a4/0x4f0 [ 542.019821][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 542.024885][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 542.031349][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 542.037688][ T30] ? exc_page_fault+0x590/0x8c0 [ 542.042590][ T30] __x64_sys_sendto+0xde/0x100 [ 542.047377][ T30] do_syscall_64+0xf3/0x230 [ 542.051973][ T30] ? clear_bhb_loop+0x35/0x90 [ 542.056685][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.062800][ T30] RIP: 0033:0x7fcc7597796c [ 542.067233][ T30] RSP: 002b:00007fffbeca9c30 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 542.075712][ T30] RAX: ffffffffffffffda RBX: 00007fcc76634620 RCX: 00007fcc7597796c [ 542.084456][ T30] RDX: 0000000000000028 RSI: 00007fcc76634670 RDI: 0000000000000003 [ 542.093067][ T30] RBP: 0000000000000000 R08: 00007fffbeca9c84 R09: 000000000000000c [ 542.101092][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 542.109293][ T30] R13: 0000000000000000 R14: 00007fcc76634670 R15: 0000000000000000 [ 542.117294][ T30] [ 542.120361][ T30] [ 542.120361][ T30] Showing all locks held in the system: [ 542.128077][ T30] 3 locks held by kworker/0:1/9: [ 542.133056][ T30] 1 lock held by khungtaskd/30: [ 542.137906][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 542.147818][ T30] 3 locks held by kworker/u9:0/53: [ 542.152961][ T30] 3 locks held by kworker/u8:4/61: [ 542.158073][ T30] #0: ffff88802a487148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 542.169868][ T30] #1: ffffc900015cfd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 542.184192][ T30] #2: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 542.194264][ T30] 4 locks held by kworker/u8:5/1032: [ 542.199591][ T30] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 542.210537][ T30] #1: ffffc900043d7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 542.221285][ T30] #2: ffffffff8f5c80d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 542.230771][ T30] #3: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 542.240172][ T30] 5 locks held by kworker/u8:7/2440: [ 542.245469][ T30] 2 locks held by getty/4831: [ 542.250183][ T30] #0: ffff88802ac970a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 542.260007][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 542.270271][ T30] 3 locks held by kworker/u9:5/5245: [ 542.275562][ T30] 3 locks held by kworker/u9:7/5249: [ 542.280884][ T30] #0: ffff88806e8df948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 542.292350][ T30] #1: ffffc900046c7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 542.305480][ T30] #2: ffff88802525cd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 542.315417][ T30] 3 locks held by kworker/1:5/5283: [ 542.320899][ T30] 3 locks held by kworker/1:6/5287: [ 542.326101][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 542.337141][ T30] #1: ffffc90004917d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 542.348178][ T30] #2: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 542.358603][ T30] 3 locks held by kworker/1:8/5338: [ 542.363832][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 542.375085][ T30] #1: ffffc900049e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 542.386733][ T30] #2: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 542.396389][ T30] 3 locks held by syz-executor/8034: [ 542.401728][ T30] #0: ffff88804354cd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 542.411726][ T30] #1: ffff88804354c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 542.421714][ T30] #2: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 542.432779][ T30] 1 lock held by syz-executor/8037: [ 542.438138][ T30] #0: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 542.449158][ T30] 1 lock held by syz-executor/8060: [ 542.454368][ T30] #0: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 542.468679][ T30] 3 locks held by syz-executor/8065: [ 542.473994][ T30] #0: ffff88802a008d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 542.499914][ T30] #1: ffff88802a008078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 542.529853][ T30] #2: ffffffff8f73f008 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 542.548676][ T30] 1 lock held by syz-executor/8067: [ 542.553908][ T30] #0: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 542.579128][ T30] 2 locks held by syz-executor/8104: [ 542.584455][ T30] #0: ffffffff8f5c80d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 542.608677][ T30] #1: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 542.629125][ T30] 1 lock held by syz-executor/8114: [ 542.634351][ T30] 1 lock held by syz-executor/8125: [ 542.648667][ T30] #0: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 542.658215][ T30] 1 lock held by syz-executor/8128: [ 542.674968][ T30] #0: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 542.685020][ T30] 1 lock held by syz-executor/8132: [ 542.690256][ T30] #0: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 542.700403][ T30] [ 542.702733][ T30] ============================================= [ 542.702733][ T30] [ 542.711708][ T30] NMI backtrace for cpu 1 [ 542.716039][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 542.725935][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 542.735995][ T30] Call Trace: [ 542.739281][ T30] [ 542.742215][ T30] dump_stack_lvl+0x241/0x360 [ 542.746914][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.752128][ T30] ? __pfx__printk+0x10/0x10 [ 542.756733][ T30] ? vprintk_emit+0x631/0x770 [ 542.761423][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 542.766463][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 542.771417][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 542.776881][ T30] ? _printk+0xd5/0x120 [ 542.781046][ T30] ? __pfx__printk+0x10/0x10 [ 542.785650][ T30] ? __wake_up_klogd+0xcc/0x110 [ 542.790510][ T30] ? __pfx__printk+0x10/0x10 [ 542.795123][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 542.800176][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 542.806172][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 542.812169][ T30] watchdog+0xfde/0x1020 [ 542.816424][ T30] ? watchdog+0x1ea/0x1020 [ 542.820853][ T30] ? __pfx_watchdog+0x10/0x10 [ 542.825622][ T30] kthread+0x2f0/0x390 [ 542.829793][ T30] ? __pfx_watchdog+0x10/0x10 [ 542.834474][ T30] ? __pfx_kthread+0x10/0x10 [ 542.839073][ T30] ret_from_fork+0x4b/0x80 [ 542.843497][ T30] ? __pfx_kthread+0x10/0x10 [ 542.848098][ T30] ret_from_fork_asm+0x1a/0x30 [ 542.852889][ T30] [ 542.856515][ T30] Sending NMI from CPU 1 to CPUs 0: [ 542.863112][ C0] NMI backtrace for cpu 0 [ 542.863126][ C0] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 542.863143][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 542.863155][ C0] Workqueue: events_power_efficient gc_worker [ 542.863181][ C0] RIP: 0010:check_preemption_disabled+0x42/0x120 [ 542.863209][ C0] Code: 08 65 8b 1d 6c 80 86 74 65 8b 05 61 80 86 74 a9 ff ff ff 7f 74 26 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 <89> d8 48 83 c4 10 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 04 24 [ 542.863223][ C0] RSP: 0018:ffffc90000007a28 EFLAGS: 00000046 [ 542.863236][ C0] RAX: 2609b9d8f531c900 RBX: 0000000000000000 RCX: ffffffff81728db0 [ 542.863248][ C0] RDX: 0000000000000000 RSI: ffffffff8bcac820 RDI: ffffffff8c1f1600 [ 542.863260][ C0] RBP: ffffc90000007b90 R08: ffffffff8fac1d2f R09: 1ffffffff1f583a5 [ 542.863273][ C0] R10: dffffc0000000000 R11: fffffbfff1f583a6 R12: 1ffff92000000f58 [ 542.863285][ C0] R13: ffffffff84ade2e5 R14: ffffc90000007b10 R15: dffffc0000000000 [ 542.863298][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 542.863311][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.863323][ C0] CR2: 00007f1f3d33c2ee CR3: 000000002d8fe000 CR4: 00000000003506f0 [ 542.863337][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 542.863348][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 542.863358][ C0] Call Trace: [ 542.863364][ C0] [ 542.863372][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 542.863395][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 542.863414][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 542.863431][ C0] ? nmi_handle+0x2a/0x5a0 [ 542.863463][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 542.863481][ C0] ? nmi_handle+0x14f/0x5a0 [ 542.863504][ C0] ? nmi_handle+0x2a/0x5a0 [ 542.863527][ C0] ? check_preemption_disabled+0x42/0x120 [ 542.863551][ C0] ? default_do_nmi+0x63/0x160 [ 542.863569][ C0] ? exc_nmi+0x123/0x1f0 [ 542.863586][ C0] ? end_repeat_nmi+0xf/0x53 [ 542.863609][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 542.863634][ C0] ? lock_release+0xb0/0x9f0 [ 542.863651][ C0] ? check_preemption_disabled+0x42/0x120 [ 542.863676][ C0] ? check_preemption_disabled+0x42/0x120 [ 542.863701][ C0] ? check_preemption_disabled+0x42/0x120 [ 542.863725][ C0] [ 542.863730][ C0] [ 542.863738][ C0] lock_release+0x191/0x9f0 [ 542.863758][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 542.863779][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 542.863801][ C0] ? __pfx_lock_release+0x10/0x10 [ 542.863823][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 542.863849][ C0] _raw_spin_unlock_irqrestore+0x79/0x140 [ 542.863874][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 542.863904][ C0] debug_object_deactivate+0x2d5/0x390 [ 542.863929][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 542.863954][ C0] ? timerqueue_add+0x260/0x290 [ 542.863970][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 542.863997][ C0] debug_deactivate+0x1b/0x220 [ 542.864020][ C0] __hrtimer_run_queues+0x305/0xd50 [ 542.864042][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 542.864069][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 542.864095][ C0] hrtimer_interrupt+0x396/0x990 [ 542.864129][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 542.864153][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 542.864175][ C0] [ 542.864180][ C0] [ 542.864185][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 542.864209][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x1e0/0x220 [ 542.864229][ C0] Code: f7 4d 85 ed 75 16 e8 bf de fe f7 eb 15 e8 b8 de fe f7 e8 a3 ee e5 01 4d 85 ed 74 ea e8 a9 de fe f7 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 542.864242][ C0] RSP: 0018:ffffc900000e79a0 EFLAGS: 00000293 [ 542.864256][ C0] RAX: ffffffff89974817 RBX: 0000000000000000 RCX: ffff8880176b0000 [ 542.864268][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.864277][ C0] RBP: ffffc900000e7a50 R08: ffffffff899747ed R09: 1ffffffff25ee2c1 [ 542.864289][ C0] R10: dffffc0000000000 R11: fffffbfff25ee2c2 R12: dffffc0000000000 [ 542.864301][ C0] R13: 0000000000000200 R14: 0000000000000046 R15: 1ffff9200001cf34 [ 542.864316][ C0] ? seqcount_lockdep_reader_access+0x1ad/0x220 [ 542.864334][ C0] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 542.864357][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 542.864389][ C0] gc_worker+0x316/0x1530 [ 542.864409][ C0] ? gc_worker+0x26b/0x1530 [ 542.864432][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 542.864450][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 542.864468][ C0] ? __pfx_gc_worker+0x10/0x10 [ 542.864492][ C0] ? process_scheduled_works+0x945/0x1830 [ 542.864509][ C0] process_scheduled_works+0xa2c/0x1830 [ 542.864540][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 542.864561][ C0] ? assign_work+0x364/0x3d0 [ 542.864579][ C0] worker_thread+0x86d/0xd50 [ 542.864601][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 542.864627][ C0] ? __kthread_parkme+0x169/0x1d0 [ 542.864646][ C0] ? __pfx_worker_thread+0x10/0x10 [ 542.864663][ C0] kthread+0x2f0/0x390 [ 542.864681][ C0] ? __pfx_worker_thread+0x10/0x10 [ 542.864697][ C0] ? __pfx_kthread+0x10/0x10 [ 542.864716][ C0] ret_from_fork+0x4b/0x80 [ 542.864736][ C0] ? __pfx_kthread+0x10/0x10 [ 542.864754][ C0] ret_from_fork_asm+0x1a/0x30 [ 542.864784][ C0] [ 543.406117][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 543.412990][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 543.422884][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 543.432944][ T30] Call Trace: [ 543.436231][ T30] [ 543.439163][ T30] dump_stack_lvl+0x241/0x360 [ 543.443859][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.449070][ T30] ? __pfx__printk+0x10/0x10 [ 543.453682][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 543.459711][ T30] ? vscnprintf+0x5d/0x90 [ 543.464060][ T30] panic+0x349/0x860 [ 543.467982][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 543.474149][ T30] ? __pfx_panic+0x10/0x10 [ 543.478576][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 543.483975][ T30] ? __irq_work_queue_local+0x137/0x410 [ 543.489530][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 543.494935][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 543.501099][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 543.507259][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 543.513421][ T30] watchdog+0x101d/0x1020 [ 543.517764][ T30] ? watchdog+0x1ea/0x1020 [ 543.522191][ T30] ? __pfx_watchdog+0x10/0x10 [ 543.526871][ T30] kthread+0x2f0/0x390 [ 543.530947][ T30] ? __pfx_watchdog+0x10/0x10 [ 543.535627][ T30] ? __pfx_kthread+0x10/0x10 [ 543.540223][ T30] ret_from_fork+0x4b/0x80 [ 543.544647][ T30] ? __pfx_kthread+0x10/0x10 [ 543.549246][ T30] ret_from_fork_asm+0x1a/0x30 [ 543.554039][ T30] [ 544.672947][ T30] Shutting down cpus with NMI [ 544.678017][ T30] Kernel Offset: disabled [ 544.682340][ T30] Rebooting in 86400 seconds..