last executing test programs: 1m19.254231507s ago: executing program 1 (id=1358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008}) 1m2.238107803s ago: executing program 1 (id=1358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008}) 45.636722091s ago: executing program 1 (id=1358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008}) 33.544257949s ago: executing program 1 (id=1358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008}) 23.251415186s ago: executing program 1 (id=1358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008}) 12.864849222s ago: executing program 2 (id=2175): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62881) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 12.652803511s ago: executing program 2 (id=2176): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001940)="1f18e395312d0af6d9de516f9695d0191a15a3d0c6def581b80f341767d56ac6", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000240)=""/78, 0x4e, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x5) 12.408754593s ago: executing program 2 (id=2179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) io_setup(0x5, &(0x7f0000000000)=0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x3, "420600753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a0400", 0xffffffffffffffff}) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000040)=0x8001) 11.913712581s ago: executing program 2 (id=2182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000040)) 11.732037722s ago: executing program 2 (id=2184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000680)={[0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2104c9, 0x8c5, 0x0, 0x100000000000000, 0x0, 0x0, 0x200000000000, 0x20000000000], 0x80a0000, 0x2c0710}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.268855567s ago: executing program 2 (id=2190): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @none}, 0xe) listen(r1, 0x0) r2 = socket(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x0) 9.657435285s ago: executing program 1 (id=1358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008}) 7.880996152s ago: executing program 4 (id=2222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000400)=""/169, 0xa9}], 0x1}}], 0x40, 0x40000062, 0x0) 7.692438402s ago: executing program 4 (id=2223): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x9362, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) 7.561401062s ago: executing program 4 (id=2225): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0100f3ff"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "84e5821a"}]}}, 0x0}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) ioctl$VT_OPENQRY(r1, 0x4b4c, &(0x7f0000000080)) 5.667360547s ago: executing program 4 (id=2240): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='.\x00') 5.536709533s ago: executing program 4 (id=2241): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x19) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x15, r2, r0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4.777159584s ago: executing program 4 (id=2243): r0 = io_uring_setup(0x3b4a, &(0x7f0000000ac0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') close_range(r0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0xc, 0x12) 3.245992336s ago: executing program 3 (id=2252): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x1, 0x1}) 3.180859658s ago: executing program 3 (id=2254): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c5a29b}}, 0x50) creat(&(0x7f0000000180)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.970068613s ago: executing program 3 (id=2256): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0xffffc000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'erspan0\x00', {}, 0x81}) fadvise64(r0, 0x0, 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.410515574s ago: executing program 3 (id=2260): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000280)=@abs={0x1}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(r1, &(0x7f0000000000)=@abs, 0x0) 2.294725715s ago: executing program 3 (id=2261): dup(0xffffffffffffffff) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x2000c000) 1.386869043s ago: executing program 3 (id=2269): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc4c85512, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a9f15000000000109022d00010000000009040000050300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x18, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) syz_usb_control_io(r0, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="3aee9df5bfdd8a7d8ec4d602c7d68e110d83b6c6", 0x14}], 0x1) 937.453198ms ago: executing program 0 (id=2272): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) close(r0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 556.853133ms ago: executing program 0 (id=2273): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4088, 0xff8) 417.807086ms ago: executing program 0 (id=2274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 304.857976ms ago: executing program 0 (id=2275): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa08, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 87.233303ms ago: executing program 0 (id=2276): set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendto$packet(r1, &(0x7f00000000c0)="3f030278a8900100db901e0089e9aaa911d7c2290f2b86dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x10048, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 0 (id=2277): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x2, &(0x7f0000001180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000500)=0x0) timer_settime(r1, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) kernel console output (not intermixed with test programs): T9448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.940001][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.959090][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.972067][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.990360][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.000954][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.012834][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.023794][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.060491][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.071816][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.082347][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.093002][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.103521][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.113894][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.130949][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.169042][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.206965][ T9490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.221070][ T9448] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.231400][ T9448] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.274711][ T9448] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.287248][ T9448] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.380199][ T9666] syzkaller0: entered promiscuous mode [ 273.386101][ T9666] syzkaller0: entered allmulticast mode [ 273.825355][ T9682] loop2: detected capacity change from 0 to 7 [ 273.855374][ T9682] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 273.861989][ T9682] loop2: partition table partially beyond EOD, truncated [ 273.869515][ T9682] loop2: p1 size 6333 extends beyond EOD, truncated [ 274.398749][ T9696] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 274.439408][ T9698] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 275.215838][ T5224] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 275.399016][ T5224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.421685][ T5224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.440410][ T5224] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 275.449742][ T5224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.481161][ T5224] usb 4-1: config 0 descriptor?? [ 275.930082][ T5224] isku 0003:1E7D:319C.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 276.375243][ T5224] usb 4-1: USB disconnect, device number 17 [ 276.688704][ T7433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.711698][ T7433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.760156][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.770079][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.781935][ T29] audit: type=1326 audit(1728624199.728:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9713 comm="syz.0.1643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1102b7dff9 code=0x0 [ 276.838144][ T9490] veth0_vlan: entered promiscuous mode [ 276.870008][ T9490] veth1_vlan: entered promiscuous mode [ 277.023271][ T9490] veth0_macvtap: entered promiscuous mode [ 277.037036][ T9490] veth1_macvtap: entered promiscuous mode [ 277.068619][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.080602][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.090724][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.101434][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.111573][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.122225][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.132144][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.142985][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.153168][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.163688][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.173654][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.184192][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.194112][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.204735][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.214698][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.225350][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.237374][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.252815][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.263351][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.273525][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.284051][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.293971][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.304642][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.314548][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.325367][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.335378][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.346127][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.356289][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.366863][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.376778][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.387341][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.397290][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.407822][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.419154][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.429977][ T9490] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.438821][ T9490] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.447812][ T9490] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.456852][ T9490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.537384][ T7452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.548050][ T7452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.682184][ T7452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.753156][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.775010][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.846997][ T7452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.971113][ T7452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.478888][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.511181][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.520991][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.540366][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.555285][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.562836][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.718305][ T9746] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1652'. [ 278.810092][ T9741] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 278.822372][ T9741] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 278.832765][ T9741] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 278.832879][ T7452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.862366][ T9741] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 278.879027][ T9741] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 278.885632][ T9741] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 278.891877][ T9741] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 278.901126][ T9741] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 278.908141][ T9741] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 278.918021][ T9741] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 278.934408][ T9741] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.940786][ T9741] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 278.966125][ T9741] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 279.053497][ T7452] bridge_slave_1: left allmulticast mode [ 279.059519][ T7452] bridge_slave_1: left promiscuous mode [ 279.065537][ T7452] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.116080][ T7452] bridge_slave_0: left allmulticast mode [ 279.121806][ T7452] bridge_slave_0: left promiscuous mode [ 279.127666][ T7452] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.324861][ T938] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 279.483038][ T938] usb 5-1: Using ep0 maxpacket: 8 [ 279.557814][ T938] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 279.582458][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.595292][ T938] usb 5-1: Product: syz [ 279.599519][ T938] usb 5-1: Manufacturer: syz [ 279.604296][ T938] usb 5-1: SerialNumber: syz [ 279.627048][ T938] usb 5-1: config 0 descriptor?? [ 279.636523][ T938] gspca_main: sq930x-2.14.0 probing 2770:930c [ 280.127506][ T7452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.162464][ T7452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.253690][ T5276] IPVS: starting estimator thread 0... [ 280.306406][ T7452] bond0 (unregistering): Released all slaves [ 280.324918][ T938] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 280.374891][ T9786] IPVS: using max 18 ests per chain, 43200 per kthread [ 280.554877][ T938] gspca_sq930x: Sensor ov9630 not yet treated [ 280.593833][ T938] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 280.620276][ T938] usb 5-1: USB disconnect, device number 15 [ 280.766284][ T5239] Bluetooth: hci1: command 0x0c1a tx timeout [ 280.845215][ T5239] Bluetooth: hci2: command 0x040f tx timeout [ 280.851308][ T5227] Bluetooth: hci5: command 0x0c1a tx timeout [ 280.925885][ T5239] Bluetooth: hci8: command 0x0405 tx timeout [ 280.932429][ T5227] Bluetooth: hci7: command 0x0405 tx timeout [ 280.932817][ T5237] Bluetooth: hci6: command 0x0c1a tx timeout [ 280.938796][ T5239] Bluetooth: hci4: command 0x0c1a tx timeout [ 280.944949][ T5240] Bluetooth: hci3: command 0x0c1a tx timeout [ 281.005752][ T5240] Bluetooth: hci0: command 0x041b tx timeout [ 281.167968][ T9731] chnl_net:caif_netlink_parms(): no params data found [ 281.293906][ T7452] hsr_slave_0: left promiscuous mode [ 281.374198][ T7452] hsr_slave_1: left promiscuous mode [ 281.390767][ T7452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.398870][ T7452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.415638][ T7452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.444835][ T7452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.568243][ T7452] veth1_macvtap: left promiscuous mode [ 281.573873][ T7452] veth0_macvtap: left promiscuous mode [ 281.579612][ T7452] veth1_vlan: left promiscuous mode [ 281.585111][ T7452] veth0_vlan: left promiscuous mode [ 281.893008][ T9823] kvm: emulating exchange as write [ 282.820334][ T5276] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 282.993612][ T5276] usb 5-1: config 0 has no interfaces? [ 283.006983][ T5240] Bluetooth: hci8: command 0x0405 tx timeout [ 283.017425][ T5276] usb 5-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 283.035845][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 283.055438][ T5276] usb 5-1: Product: syz [ 283.059763][ T5276] usb 5-1: Manufacturer: syz [ 283.064402][ T5276] usb 5-1: SerialNumber: syz [ 283.095212][ T5240] Bluetooth: hci0: command 0x041b tx timeout [ 283.116793][ T5276] usb 5-1: config 0 descriptor?? [ 283.139624][ T7452] team0 (unregistering): Port device team_slave_1 removed [ 283.239568][ T7452] team0 (unregistering): Port device team_slave_0 removed [ 284.105294][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 284.385857][ T5276] usb 5-1: USB disconnect, device number 16 [ 284.468030][ T9731] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.504739][ T9731] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.513033][ T9731] bridge_slave_0: entered allmulticast mode [ 284.546224][ T9731] bridge_slave_0: entered promiscuous mode [ 284.574820][ T9731] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.581967][ T9731] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.601814][ T9731] bridge_slave_1: entered allmulticast mode [ 284.612451][ T9731] bridge_slave_1: entered promiscuous mode [ 284.641091][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1700'. [ 284.763717][ T9731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.807614][ T9731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.895018][ T9731] team0: Port device team_slave_0 added [ 284.911451][ T9731] team0: Port device team_slave_1 added [ 284.958148][ T9731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.983891][ T9731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.026628][ T9731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.052528][ T9731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.060475][ T9731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.088057][ T5240] Bluetooth: hci8: command 0x0405 tx timeout [ 285.100143][ T9731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.136144][ T938] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 285.153234][ T9731] hsr_slave_0: entered promiscuous mode [ 285.163198][ T9731] hsr_slave_1: entered promiscuous mode [ 285.169717][ T5240] Bluetooth: hci0: command 0x041b tx timeout [ 285.188203][ T9731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.197288][ T9731] Cannot create hsr debugfs directory [ 285.306441][ T938] usb 1-1: Using ep0 maxpacket: 32 [ 285.318250][ T938] usb 1-1: config 0 has no interfaces? [ 285.323829][ T938] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 285.364901][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.379879][ T938] usb 1-1: config 0 descriptor?? [ 285.454454][ T9900] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1707'. [ 285.469770][ T9899] xt_hashlimit: size too large, truncated to 1048576 [ 285.474288][ T9900] netlink: 'syz.2.1707': attribute type 1 has an invalid length. [ 285.508815][ T9900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1707'. [ 285.692929][ T5224] usb 1-1: USB disconnect, device number 18 [ 285.972943][ T9731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 285.985914][ T9731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 285.997348][ T9731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 286.008409][ T9731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 286.130808][ T9731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.162606][ T9731] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.187582][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.194825][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.237527][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.244723][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.567418][ T9731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.634054][ T9731] veth0_vlan: entered promiscuous mode [ 286.651082][ T9731] veth1_vlan: entered promiscuous mode [ 286.681969][ T9731] veth0_macvtap: entered promiscuous mode [ 286.693188][ T9731] veth1_macvtap: entered promiscuous mode [ 286.721606][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.732851][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.744201][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.758154][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.781052][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.802721][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.823293][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.844413][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.874610][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.893250][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.913810][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.935357][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.945951][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.957445][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.980094][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.000964][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.016297][ T9731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.041760][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.063187][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.086228][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.106449][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.124684][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.144876][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.164407][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.193690][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.210406][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.221494][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.231749][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.242684][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.253782][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.254902][ T5240] Bluetooth: hci0: command 0x041b tx timeout [ 287.264895][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.290789][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.316152][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.339114][ T9731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.361546][ T9731] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.381021][ T9731] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.393845][ T9731] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.414125][ T9731] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.543686][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.560823][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.593513][ T7446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.614651][ T7446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.869214][ T3024] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.793048][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 289.804481][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 289.813934][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 289.872365][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 289.881929][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 289.890115][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.193195][ T9948] capability: warning: `syz.0.1722' uses 32-bit capabilities (legacy support in use) [ 290.483157][ T5279] kernel read not supported for file /sync/info (pid: 5279 comm: kworker/0:6) [ 290.495861][ T3024] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.515840][ T938] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 290.651980][ T3024] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.683699][ T938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.703529][ T938] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 290.733057][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.766475][ T9922] chnl_net:caif_netlink_parms(): no params data found [ 290.777281][ T938] usb 4-1: config 0 descriptor?? [ 290.821690][ T938] pwc: Askey VC010 type 2 USB webcam detected. [ 290.926405][ T3024] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.023437][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.030698][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.038057][ T9922] bridge_slave_0: entered allmulticast mode [ 291.045386][ T9922] bridge_slave_0: entered promiscuous mode [ 291.053523][ T9922] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.061917][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.069271][ T9922] bridge_slave_1: entered allmulticast mode [ 291.076576][ T9922] bridge_slave_1: entered promiscuous mode [ 291.079310][ T938] pwc: send_video_command error -71 [ 291.097585][ T938] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 291.114727][ T938] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 291.128699][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1733'. [ 291.137109][ T938] usb 4-1: USB disconnect, device number 18 [ 291.158718][ T9922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.199175][ T9922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.211094][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1733'. [ 291.338490][ T9922] team0: Port device team_slave_0 added [ 291.373619][ T9922] team0: Port device team_slave_1 added [ 291.381973][ T3024] bridge_slave_1: left allmulticast mode [ 291.388471][ T3024] bridge_slave_1: left promiscuous mode [ 291.397298][ T3024] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.423071][ T3024] bridge_slave_0: left allmulticast mode [ 291.430337][ T3024] bridge_slave_0: left promiscuous mode [ 291.442877][ T3024] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.604749][ T938] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 291.768862][ T938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.797099][ T938] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 291.814454][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.895871][ T938] usb 4-1: config 0 descriptor?? [ 291.917033][ T938] pwc: Askey VC010 type 2 USB webcam detected. [ 291.965499][ T5237] Bluetooth: hci0: command tx timeout [ 292.340742][ T938] pwc: recv_control_msg error -32 req 02 val 2b00 [ 292.550562][ T938] pwc: recv_control_msg error -32 req 02 val 2c00 [ 292.557600][ T938] pwc: recv_control_msg error -71 req 04 val 1000 [ 292.564752][ T938] pwc: recv_control_msg error -71 req 04 val 1300 [ 292.574867][ T938] pwc: recv_control_msg error -71 req 04 val 1400 [ 292.585101][ T938] pwc: recv_control_msg error -71 req 02 val 2000 [ 292.599172][ T938] pwc: recv_control_msg error -71 req 02 val 2100 [ 292.618383][ T938] pwc: recv_control_msg error -71 req 04 val 1500 [ 292.625856][ T938] pwc: recv_control_msg error -71 req 02 val 2500 [ 292.650601][ T938] pwc: recv_control_msg error -71 req 02 val 2400 [ 292.659755][ T938] pwc: recv_control_msg error -71 req 02 val 2600 [ 292.667533][ T938] pwc: recv_control_msg error -71 req 02 val 2900 [ 292.676105][ T938] pwc: recv_control_msg error -71 req 02 val 2800 [ 292.688075][ T938] pwc: recv_control_msg error -71 req 04 val 1100 [ 292.696517][ T938] pwc: recv_control_msg error -71 req 04 val 1200 [ 292.716668][ T938] pwc: Registered as video71. [ 292.749454][ T938] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 292.780321][ T938] usb 4-1: USB disconnect, device number 19 [ 292.795617][ T3024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.851914][ T3024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.898526][ T3024] bond0 (unregistering): Released all slaves [ 293.059838][T10002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.078377][T10002] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 293.095460][T10002] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 293.159311][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.167150][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.212507][ T9922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.342482][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.349628][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.376176][ T9922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.882465][T10010] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1745'. [ 293.931860][ T9922] hsr_slave_0: entered promiscuous mode [ 293.980499][ T9922] hsr_slave_1: entered promiscuous mode [ 294.014919][ T9922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.034810][ T9922] Cannot create hsr debugfs directory [ 294.045494][ T5237] Bluetooth: hci0: command tx timeout [ 294.144982][ T3024] hsr_slave_0: left promiscuous mode [ 294.151000][ T3024] hsr_slave_1: left promiscuous mode [ 294.164478][ T3024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.196423][ T3024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.215613][ T3024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.229200][ T3024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.236713][T10038] vivid-007: ================= START STATUS ================= [ 294.236862][T10038] vivid-007: Enable Output Cropping: true [ 294.236940][T10038] vivid-007: Enable Output Composing: true [ 294.236969][T10038] vivid-007: Enable Output Scaler: true [ 294.237028][T10038] vivid-007: Tx RGB Quantization Range: Automatic [ 294.237057][T10038] vivid-007: Transmit Mode: HDMI [ 294.237084][T10038] vivid-007: Hotplug Present: 0x00000000 [ 294.237113][T10038] vivid-007: RxSense Present: 0x00000000 [ 294.237140][T10038] vivid-007: EDID Present: 0x00000000 [ 294.237181][T10038] vivid-007: ================== END STATUS ================== [ 294.426609][ T3024] veth1_macvtap: left promiscuous mode [ 294.450776][ T3024] veth0_macvtap: left promiscuous mode [ 294.466771][ T3024] veth1_vlan: left promiscuous mode [ 294.484143][ T3024] veth0_vlan: left promiscuous mode [ 296.127802][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 296.164769][ T5237] Bluetooth: hci0: command tx timeout [ 298.404605][ T5237] Bluetooth: hci0: command tx timeout [ 300.651982][ T3024] team0 (unregistering): Port device team_slave_1 removed [ 300.722258][ T3024] team0 (unregistering): Port device team_slave_0 removed [ 300.885041][ T941] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 301.095420][ T941] usb 5-1: Using ep0 maxpacket: 8 [ 301.106004][ T941] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 301.124915][ T941] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.144625][ T941] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.164702][ T941] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.180656][ T941] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.209702][ T941] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 301.245128][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.474048][T10085] netlink: 'syz.0.1775': attribute type 4 has an invalid length. [ 301.497164][ T941] usb 5-1: usb_control_msg returned -32 [ 301.525301][ T941] usbtmc 5-1:16.0: can't read capabilities [ 302.391896][ T9922] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 302.409604][ T9922] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 302.419260][T10116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.433631][ T9922] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 302.483667][ T9922] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 302.611105][ T9922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.637296][ T9922] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.652802][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.660010][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.676910][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.684136][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.983081][ T9922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.986346][T10136] kvm: pic: non byte read [ 303.101554][ T9922] veth0_vlan: entered promiscuous mode [ 303.134325][ T9922] veth1_vlan: entered promiscuous mode [ 303.216126][ T9922] veth0_macvtap: entered promiscuous mode [ 303.230137][ T9922] veth1_macvtap: entered promiscuous mode [ 303.274247][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.318359][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.334727][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.356978][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.374925][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.396385][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.421804][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.434041][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.444120][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.460538][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.471086][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.481734][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.493612][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.504193][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.522423][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.532970][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.556474][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.577510][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.604669][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.617746][ T938] usb 5-1: USB disconnect, device number 17 [ 303.630285][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.640859][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.651791][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.663975][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.674165][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.691030][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.710954][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.721525][ T29] audit: type=1804 audit(1728624482.659:55): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1803" name="/newroot/135/file0/bus" dev="ramfs" ino=38308 res=1 errno=0 [ 303.756184][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.774673][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.788046][ T29] audit: type=1800 audit(1728624482.739:56): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1803" name="bus" dev="ramfs" ino=38308 res=0 errno=0 [ 303.808135][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.818488][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.838838][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.859001][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.880036][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.906095][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.937882][ T9922] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.951825][ T9922] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.982495][ T9922] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.002523][ T9922] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.143179][ T7431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.162402][ T7431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.203405][ T7431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.216612][ T7431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.647071][T10178] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 304.976953][T10189] syzkaller0: entered promiscuous mode [ 304.982477][T10189] syzkaller0: entered allmulticast mode [ 305.486189][ T5237] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 305.493159][ T5239] Bluetooth: hci9: command 0x1003 tx timeout [ 305.660248][T10197] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 305.737594][T10192] block nbd2: shutting down sockets [ 307.081923][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.104241][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.112919][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.146742][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.162917][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 307.174006][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.559796][ T5275] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 307.747945][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.760469][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.772324][ T5275] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.794159][ T5275] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 307.803479][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.814073][ T5275] usb 5-1: config 0 descriptor?? [ 308.268255][ T5275] acrux 0003:1A34:0802.001E: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 308.292026][ T5275] acrux 0003:1A34:0802.001E: no inputs found [ 308.299804][ T5275] acrux 0003:1A34:0802.001E: Failed to enable force feedback support, error: -19 [ 308.821765][ T7446] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.994133][ T7446] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.146844][ T7446] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.248304][ T5240] Bluetooth: hci0: command tx timeout [ 309.314826][ T5275] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 309.352109][ T7446] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.474715][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 309.482061][ T5275] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 309.502386][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.523027][ T5275] usb 3-1: config 0 descriptor?? [ 309.545968][ T5275] gspca_main: sunplus-2.14.0 probing 041e:400b [ 310.080246][T10266] netlink: 'syz.4.1846': attribute type 1 has an invalid length. [ 310.210346][ T5224] usb 5-1: USB disconnect, device number 18 [ 310.272081][T10272] evm: overlay not supported [ 310.544907][ T5224] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 310.700593][ T29] audit: type=1326 audit(2000000006.220:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.3.1852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f661bb7dff9 code=0x0 [ 310.743899][ T5224] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.762257][ T5224] usb 5-1: config 0 has no interface number 0 [ 310.768344][ T5275] gspca_sunplus: reg_w_riv err -71 [ 310.774161][ T5275] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 310.774620][ T5224] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.785306][ T5275] usb 3-1: USB disconnect, device number 23 [ 310.817761][ T5224] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.833422][ T5224] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 310.842736][ T5224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.874976][ T5224] usb 5-1: config 0 descriptor?? [ 311.325138][ T5240] Bluetooth: hci0: command tx timeout [ 311.326022][ T5224] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.001F/input/input28 [ 311.639703][ T5224] holtek_kbd 0003:04D9:A055.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 311.686331][ T5224] usb 5-1: USB disconnect, device number 19 [ 313.357966][ T7446] bridge_slave_1: left allmulticast mode [ 313.363658][ T7446] bridge_slave_1: left promiscuous mode [ 313.369765][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.409966][ T5240] Bluetooth: hci0: command tx timeout [ 313.418287][ T7446] bridge_slave_0: left allmulticast mode [ 313.424466][ T7446] bridge_slave_0: left promiscuous mode [ 313.430387][ T7446] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.814879][ T5224] psmouse serio5: Failed to reset mouse on : -5 [ 314.144849][T10342] input: syz0 as /devices/virtual/input/input30 [ 314.372991][ T7446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.394313][ T7446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.420394][ T7446] bond0 (unregistering): Released all slaves [ 314.462866][T10217] chnl_net:caif_netlink_parms(): no params data found [ 314.787913][T10217] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.796999][T10217] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.804440][T10217] bridge_slave_0: entered allmulticast mode [ 314.832247][T10217] bridge_slave_0: entered promiscuous mode [ 314.852436][T10217] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.869397][T10217] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.885332][T10217] bridge_slave_1: entered allmulticast mode [ 314.898127][T10217] bridge_slave_1: entered promiscuous mode [ 314.977256][T10368] netlink: 'syz.2.1886': attribute type 4 has an invalid length. [ 315.059152][T10371] program syz.4.1887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.116233][T10217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.125028][ T7440] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 315.134683][T10366] netlink: 'syz.2.1886': attribute type 4 has an invalid length. [ 315.158667][T10217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.322926][T10217] team0: Port device team_slave_0 added [ 315.410961][T10217] team0: Port device team_slave_1 added [ 315.486923][ T5240] Bluetooth: hci0: command tx timeout [ 315.505697][T10217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.522842][T10217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.568478][T10217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.624677][ T7446] hsr_slave_0: left promiscuous mode [ 315.636406][ T7446] hsr_slave_1: left promiscuous mode [ 315.644170][ T7446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.665013][ T7446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.695688][ T7446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.703180][ T7446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.738503][ T7446] veth1_macvtap: left promiscuous mode [ 315.744139][ T7446] veth0_macvtap: left promiscuous mode [ 315.760094][ T7446] veth1_vlan: left promiscuous mode [ 315.765794][ T7446] veth0_vlan: left promiscuous mode [ 315.824793][ T46] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 315.996141][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 316.003130][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.024641][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.045984][ T46] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 316.074623][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.095299][ T46] usb 5-1: config 0 descriptor?? [ 316.553035][ T46] hid-steam 0003:28DE:1142.0020: item fetching failed at offset 2/5 [ 316.569673][ T46] hid-steam 0003:28DE:1142.0020: steam_probe:parse of hid interface failed [ 316.612134][ T46] hid-steam 0003:28DE:1142.0020: probe with driver hid-steam failed with error -22 [ 316.791409][ T5430] usb 5-1: USB disconnect, device number 20 [ 316.894135][ T7446] team0 (unregistering): Port device team_slave_1 removed [ 316.963289][ T7446] team0 (unregistering): Port device team_slave_0 removed [ 317.253819][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.260356][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.654693][ T5224] misc userio: Buffer overflowed, userio client isn't keeping up [ 317.756774][T10217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.763769][T10217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.803894][T10217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.939349][T10217] hsr_slave_0: entered promiscuous mode [ 317.946249][T10217] hsr_slave_1: entered promiscuous mode [ 317.952599][T10217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.960649][T10217] Cannot create hsr debugfs directory [ 318.392699][T10437] ip6gretap1: entered allmulticast mode [ 318.464937][ T5430] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 318.641602][ T5430] usb 1-1: Using ep0 maxpacket: 32 [ 318.656926][ T5430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.688890][ T5430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.715767][ T5224] input: PS/2 Generic Mouse as /devices/serio5/input/input29 [ 318.727907][ T5430] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 318.754009][ T5430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.769910][ T5430] usb 1-1: config 0 descriptor?? [ 318.787661][ T5430] hub 1-1:0.0: USB hub found [ 318.872113][T10217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 318.883389][T10217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 318.901005][T10217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 318.948170][T10217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 318.976331][ T5224] psmouse serio5: Failed to enable mouse on [ 319.015523][ T5430] hub 1-1:0.0: 1 port detected [ 319.162567][T10217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.183940][T10217] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.199588][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.206773][ T7440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.235601][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.242826][ T7440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.371848][T10460] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 319.627064][ T5430] hub 1-1:0.0: activate --> -90 [ 319.639667][T10217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.701350][T10217] veth0_vlan: entered promiscuous mode [ 319.716580][T10217] veth1_vlan: entered promiscuous mode [ 319.753755][T10217] veth0_macvtap: entered promiscuous mode [ 319.782108][T10217] veth1_macvtap: entered promiscuous mode [ 319.789409][ T5275] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 319.828605][ T5430] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 319.828922][ T46] usb 1-1: USB disconnect, device number 19 [ 319.852259][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.867656][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.880100][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.891595][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.902624][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.913151][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.923384][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.942671][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.952906][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.975319][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.985763][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.997486][ T5275] usb 5-1: config 0 has an invalid interface number: 100 but max is 0 [ 320.006606][ T5275] usb 5-1: config 0 has no interface number 0 [ 320.013922][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.023990][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.034961][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.047412][ T5275] usb 5-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=39.f0 [ 320.060786][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.064986][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.069840][ T5275] usb 5-1: Product: syz [ 320.083935][ T5275] usb 5-1: Manufacturer: syz [ 320.088913][ T5275] usb 5-1: SerialNumber: syz [ 320.090663][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.096039][ T5275] usb 5-1: config 0 descriptor?? [ 320.106100][T10217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.131148][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.146094][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.164797][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.176868][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.187166][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.198105][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.209526][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.221385][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.224817][ T5430] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 320.233845][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.251544][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.262839][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.273714][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.284047][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.296071][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.306506][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.317702][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.330822][T10217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.359674][T10217] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.385166][ T5240] Bluetooth: hci8: unexpected event 0x32 length: 3 < 9 [ 320.388663][T10217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.406482][ T5275] HFC-S_USB 5-1:0.100: probe with driver HFC-S_USB failed with error -5 [ 320.424634][T10217] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.433427][T10217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.442204][ T5430] usb 4-1: Using ep0 maxpacket: 8 [ 320.552977][ T5430] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 320.564477][ T5430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.574854][ T5430] usb 4-1: Product: syz [ 320.579073][ T5430] usb 4-1: Manufacturer: syz [ 320.583827][ T5430] usb 4-1: SerialNumber: syz [ 320.594493][ T5430] usb 4-1: config 0 descriptor?? [ 320.672205][ T5279] usb 5-1: USB disconnect, device number 21 [ 320.695506][ T7433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.721559][ T7433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.762981][ T7440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.773471][ T7440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.802639][ T5430] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 321.234256][ T5430] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 321.253103][ T5430] usb 4-1: USB disconnect, device number 20 [ 321.503218][T10496] Dead loop on virtual device ipvlan1, fix it urgently! [ 321.573132][T10496] syz.0.1936 (10496) used greatest stack depth: 7128 bytes left [ 322.044434][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1949'. [ 322.074756][T10521] bridge_slave_1: left allmulticast mode [ 322.080503][T10521] bridge_slave_1: left promiscuous mode [ 322.096506][T10521] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.142746][T10521] bridge_slave_0: left allmulticast mode [ 322.148652][T10521] bridge_slave_0: left promiscuous mode [ 322.154416][T10521] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.194672][ T46] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 322.419803][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 322.447443][ T46] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 322.456783][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.490423][ T46] usb 1-1: Product: syz [ 322.504739][ T46] usb 1-1: Manufacturer: syz [ 322.509409][ T46] usb 1-1: SerialNumber: syz [ 322.516158][ T7431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.526894][ T46] usb 1-1: config 0 descriptor?? [ 322.733291][ T46] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 323.713619][ T7431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.860334][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.871199][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.889727][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.908757][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.929235][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 323.937931][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.007582][ T7431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.158061][ T46] usb write operation failed. (-71) [ 324.185907][ T46] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 324.197058][ T46] dvbdev: DVB: registering new adapter (Terratec H7) [ 324.204156][ T46] usb 1-1: media controller created [ 324.224768][ T46] usb read operation failed. (-71) [ 324.245603][ T46] usb write operation failed. (-71) [ 324.254755][ T5279] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 324.279391][ T46] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 324.297897][ T7431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.344724][ T46] usb 1-1: USB disconnect, device number 20 [ 324.424842][ T5279] usb 3-1: Using ep0 maxpacket: 32 [ 324.432072][ T5279] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 324.440873][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.454624][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.464976][ T5279] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 324.474117][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.487954][ T5279] usb 3-1: config 0 descriptor?? [ 324.684013][ T7431] bridge_slave_1: left allmulticast mode [ 324.711330][ T7431] bridge_slave_1: left promiscuous mode [ 324.741703][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.837546][ T7431] bridge_slave_0: left allmulticast mode [ 324.843311][ T7431] bridge_slave_0: left promiscuous mode [ 324.895866][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.949963][ T5279] logitech 0003:046D:C29C.0021: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 325.357511][ T5279] logitech 0003:046D:C29C.0021: no inputs found [ 325.424841][ T5279] usb 3-1: USB disconnect, device number 24 [ 325.976044][ T5237] Bluetooth: hci0: command tx timeout [ 326.505658][T10606] block nbd0: shutting down sockets [ 326.595179][T10606] block nbd0: NBD_DISCONNECT [ 326.600003][T10606] block nbd0: Send disconnect failed -32 [ 326.614684][T10606] block nbd0: Send disconnect failed -32 [ 326.660079][ T7431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.745700][ T7431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.778799][ T7431] bond0 (unregistering): Released all slaves [ 326.924362][T10562] chnl_net:caif_netlink_parms(): no params data found [ 327.741501][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1992'. [ 328.044716][ T5237] Bluetooth: hci0: command tx timeout [ 328.099667][T10562] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.107194][T10562] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.114628][T10562] bridge_slave_0: entered allmulticast mode [ 328.121810][T10562] bridge_slave_0: entered promiscuous mode [ 328.131173][T10562] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.138536][T10562] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.145965][T10562] bridge_slave_1: entered allmulticast mode [ 328.153059][T10562] bridge_slave_1: entered promiscuous mode [ 328.401585][ T7431] hsr_slave_0: left promiscuous mode [ 328.407982][ T7431] hsr_slave_1: left promiscuous mode [ 328.419624][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.434240][ T7431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.451824][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.459841][ T7431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.491308][ T7431] veth1_macvtap: left promiscuous mode [ 328.497051][ T7431] veth0_macvtap: left promiscuous mode [ 328.502656][ T7431] veth1_vlan: left promiscuous mode [ 328.509216][ T7431] veth0_vlan: left promiscuous mode [ 329.403878][ T7431] team0 (unregistering): Port device team_slave_1 removed [ 329.563394][ T7431] team0 (unregistering): Port device team_slave_0 removed [ 329.639547][ T29] audit: type=1326 audit(2000000281.159:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10658 comm="syz.4.2001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c9877dff9 code=0x0 [ 330.134991][ T5237] Bluetooth: hci0: command tx timeout [ 330.309991][T10562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.348640][T10562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.529295][T10562] team0: Port device team_slave_0 added [ 330.538607][T10562] team0: Port device team_slave_1 added [ 330.645511][ T29] audit: type=1326 audit(2000000282.159:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10678 comm="syz.4.2008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c9877dff9 code=0x0 [ 330.696281][T10562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.703304][T10562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.748136][T10562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.807336][T10562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.820560][T10562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.847593][T10562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.948857][T10562] hsr_slave_0: entered promiscuous mode [ 330.957014][T10562] hsr_slave_1: entered promiscuous mode [ 330.965696][T10562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.973537][T10562] Cannot create hsr debugfs directory [ 331.240910][ T29] audit: type=1326 audit(2000000282.759:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10694 comm="syz.0.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1102b7dff9 code=0x7ffc0000 [ 331.275892][ T29] audit: type=1326 audit(2000000282.759:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10694 comm="syz.0.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1102b7dff9 code=0x7ffc0000 [ 331.313166][ T29] audit: type=1326 audit(2000000282.789:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10694 comm="syz.0.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1102b7dff9 code=0x7ffc0000 [ 331.334700][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.354743][ T29] audit: type=1326 audit(2000000282.789:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10694 comm="syz.0.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1102b7dff9 code=0x7ffc0000 [ 331.405377][ T29] audit: type=1326 audit(2000000282.789:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10694 comm="syz.0.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1102b7dff9 code=0x7ffc0000 [ 331.496314][ T29] audit: type=1326 audit(2000000282.789:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10694 comm="syz.0.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f1102b7dff9 code=0x7ffc0000 [ 331.558651][T10562] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.588725][ T29] audit: type=1326 audit(2000000282.789:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10694 comm="syz.0.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1102b7dff9 code=0x7ffc0000 [ 331.630604][T10562] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.665706][T10562] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 331.692936][ T29] audit: type=1326 audit(2000000282.789:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10694 comm="syz.0.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1102b7dff9 code=0x7ffc0000 [ 331.721076][T10562] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 331.974251][T10562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.013879][T10562] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.040286][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.047505][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.068049][ T941] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 332.099266][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.106480][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.218676][ T5237] Bluetooth: hci0: command tx timeout [ 332.248137][ T941] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.268074][ T941] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.284388][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.293124][ T941] usb 3-1: Product: syz [ 332.303051][ T941] usb 3-1: Manufacturer: syz [ 332.313172][ T941] usb 3-1: SerialNumber: syz [ 332.471854][T10723] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 332.485798][T10723] netlink: 9380 bytes leftover after parsing attributes in process `syz.4.2023'. [ 332.502183][T10562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.576917][T10562] veth0_vlan: entered promiscuous mode [ 332.591062][T10562] veth1_vlan: entered promiscuous mode [ 332.641705][T10562] veth0_macvtap: entered promiscuous mode [ 332.652998][T10562] veth1_macvtap: entered promiscuous mode [ 332.672457][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.683712][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.695076][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.705705][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.715657][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.726387][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.736699][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.747718][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.757788][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.768479][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.778641][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.789160][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.799055][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.809597][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.819467][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.830067][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.841946][T10562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.867237][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.878037][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.888180][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.899158][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.923286][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.963515][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.984713][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.005367][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.015772][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.026315][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.036434][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.053687][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.073119][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.083667][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.104181][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.128316][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.144973][T10562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.178739][T10562] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.187713][T10729] nbd0: detected capacity change from 0 to 12 [ 333.204402][T10562] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.213247][T10562] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.222384][T10562] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.231354][ T5275] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 333.265455][T10727] nbd0: detected capacity change from 12 to 6 [ 333.379254][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.386835][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.395936][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.402081][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.412483][ T941] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 333.419512][ T941] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 333.424906][ T5275] usb 5-1: Using ep0 maxpacket: 32 [ 333.431882][ T941] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 333.447224][ T5275] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 333.475374][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.483496][ T5275] usb 5-1: Product: syz [ 333.494139][ T5275] usb 5-1: Manufacturer: syz [ 333.504957][ T5275] usb 5-1: SerialNumber: syz [ 333.517732][ T5275] usb 5-1: config 0 descriptor?? [ 333.540330][T10728] block nbd0: shutting down sockets [ 333.548540][ T5275] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 333.831816][ T941] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 333.896332][ T941] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 333.915046][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.922273][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.937958][ T941] usb 3-1: USB disconnect, device number 25 [ 333.942291][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.946937][ T941] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 333.972269][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.982258][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.013499][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.022941][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.042832][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.062287][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.102751][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.132816][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.173115][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.193243][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.221754][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.234357][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.252335][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.274281][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.292280][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.322299][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.342308][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.352271][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.362273][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.382297][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.402291][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.472274][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.483485][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.515834][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.534387][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.577002][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.602522][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.630940][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.644472][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.656472][ T7431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.689702][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.692321][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.719204][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.732292][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.756349][T10745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.987706][ T5275] gspca_stk1135: reg_w 0xf err -71 [ 335.003323][ T5275] gspca_stk1135: serial bus timeout: status=0x00 [ 335.009862][ T5275] gspca_stk1135: Sensor write failed [ 335.015385][ T5275] gspca_stk1135: serial bus timeout: status=0x00 [ 335.021757][ T5275] gspca_stk1135: Sensor write failed [ 335.027427][ T5275] gspca_stk1135: serial bus timeout: status=0x00 [ 335.033816][ T5275] gspca_stk1135: Sensor read failed [ 335.039491][ T5275] gspca_stk1135: serial bus timeout: status=0x00 [ 335.048379][ T5275] gspca_stk1135: Sensor read failed [ 335.053620][ T5275] gspca_stk1135: Detected sensor type unknown (0x0) [ 335.060475][ T5275] gspca_stk1135: serial bus timeout: status=0x00 [ 335.067054][ T5275] gspca_stk1135: Sensor read failed [ 335.072298][ T5275] gspca_stk1135: serial bus timeout: status=0x00 [ 335.078852][ T5275] gspca_stk1135: Sensor read failed [ 335.084146][ T5275] gspca_stk1135: serial bus timeout: status=0x00 [ 335.090971][ T5275] gspca_stk1135: Sensor write failed [ 335.097883][ T5275] gspca_stk1135: serial bus timeout: status=0x00 [ 335.104286][ T5275] gspca_stk1135: Sensor write failed [ 335.109850][ T5275] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 335.119393][ T5275] usb 5-1: USB disconnect, device number 22 [ 335.480500][ T7431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.807487][T10759] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 335.807487][T10759] The task syz.0.2035 (10759) triggered the difference, watch for misbehavior. [ 335.835241][T10760] fuse: root generation should be zero [ 335.859122][ T7431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.965011][ T5306] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 336.016678][ T7431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.086243][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.101633][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.111076][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.120544][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.128682][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.137146][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.168656][ T5306] usb 5-1: config 1 interface 0 has no altsetting 0 [ 336.192888][ T5306] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 336.244675][ T941] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 336.248089][ T5306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.294974][ T5306] usb 5-1: Product: syz [ 336.313130][ T5306] usb 5-1: Manufacturer: syz [ 336.331432][ T5306] usb 5-1: SerialNumber: syz [ 336.361641][ T7431] bridge_slave_1: left allmulticast mode [ 336.374725][ T7431] bridge_slave_1: left promiscuous mode [ 336.390327][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.406532][ T941] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 336.428612][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.433510][ T7431] bridge_slave_0: left allmulticast mode [ 336.451005][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.465570][ T7431] bridge_slave_0: left promiscuous mode [ 336.471429][ T941] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 336.496785][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.498235][ T941] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 336.518879][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.564827][ T941] usb 3-1: config 0 descriptor?? [ 336.977922][ T5306] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 336.995532][ T941] nintendo 0003:057E:2009.0022: unknown main item tag 0x0 [ 337.031900][ T941] nintendo 0003:057E:2009.0022: unknown main item tag 0x0 [ 337.067712][ T941] nintendo 0003:057E:2009.0022: item fetching failed at offset 2/5 [ 337.095133][ T941] nintendo 0003:057E:2009.0022: HID parse failed [ 337.125884][ T941] nintendo 0003:057E:2009.0022: probe - fail = -22 [ 337.135884][ T941] nintendo 0003:057E:2009.0022: probe with driver nintendo failed with error -22 [ 337.195275][ T5279] usb 3-1: USB disconnect, device number 26 [ 337.389161][ T7431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.406054][ T7431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.427443][ T7431] bond0 (unregistering): Released all slaves [ 337.635519][T10769] chnl_net:caif_netlink_parms(): no params data found [ 337.826453][ T7431] hsr_slave_0: left promiscuous mode [ 337.836792][ T7431] hsr_slave_1: left promiscuous mode [ 337.850754][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.865959][ T7431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.886122][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.893713][ T7431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.938309][ T7431] veth1_macvtap: left promiscuous mode [ 337.944299][ T7431] veth0_macvtap: left promiscuous mode [ 337.950394][ T7431] veth1_vlan: left promiscuous mode [ 337.956532][ T7431] veth0_vlan: left promiscuous mode [ 338.205223][ T5240] Bluetooth: hci0: command tx timeout [ 338.260768][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'. [ 338.356728][ T5279] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 338.545389][ T5279] usb 3-1: Using ep0 maxpacket: 16 [ 338.555529][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 338.586662][ T5279] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 338.606218][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.629530][ T5279] usb 3-1: config 0 descriptor?? [ 338.734814][ T5275] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 338.755979][ T5306] usb 5-1: USB disconnect, device number 23 [ 338.774392][ T5306] usblp0: removed [ 338.916460][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.928865][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.952785][ T5275] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 338.962373][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.007700][ T5275] usb 4-1: config 0 descriptor?? [ 339.050790][ T7431] team0 (unregistering): Port device team_slave_1 removed [ 339.059834][T10801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.090078][T10801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.104028][ T5279] hid (null): invalid report_size 24429 [ 339.129852][ T7431] team0 (unregistering): Port device team_slave_0 removed [ 339.140798][ T5279] hid (null): unknown global tag 0x83 [ 339.158468][ T5279] hid (null): unknown global tag 0xc [ 339.167981][ T5279] hid-generic 0003:0158:0100.0023: unknown main item tag 0x1 [ 339.189918][ T5279] hid-generic 0003:0158:0100.0023: unexpected long global item [ 339.229367][ T5279] hid-generic 0003:0158:0100.0023: probe with driver hid-generic failed with error -22 [ 339.326154][ T5279] usb 3-1: USB disconnect, device number 27 [ 339.641024][ T5275] usb 4-1: string descriptor 0 read error: -22 [ 339.677340][ T941] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 339.874956][ T5275] uclogic 0003:256C:006D.0024: interface is invalid, ignoring [ 339.886756][ T941] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 339.907907][ T5275] usb 4-1: USB disconnect, device number 21 [ 339.909685][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.964814][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.974962][ T941] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 340.001128][ T941] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 340.023804][ T941] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 340.047069][ T941] usb 5-1: Manufacturer: syz [ 340.069640][ T941] usb 5-1: config 0 descriptor?? [ 340.099071][T10769] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.107017][T10769] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.115959][T10769] bridge_slave_0: entered allmulticast mode [ 340.123291][T10769] bridge_slave_0: entered promiscuous mode [ 340.151904][T10769] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.170521][T10769] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.183957][T10769] bridge_slave_1: entered allmulticast mode [ 340.201706][T10769] bridge_slave_1: entered promiscuous mode [ 340.287734][ T5240] Bluetooth: hci0: command tx timeout [ 340.296742][T10769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.349218][T10769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.463450][T10831] netlink: 'syz.2.2065': attribute type 10 has an invalid length. [ 340.485687][ T941] appleir 0003:05AC:8243.0025: unknown main item tag 0x0 [ 340.493517][ T941] appleir 0003:05AC:8243.0025: No inputs registered, leaving [ 340.502252][T10831] syz_tun: entered promiscuous mode [ 340.511121][ T941] appleir 0003:05AC:8243.0025: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 340.536741][T10831] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 340.596164][T10769] team0: Port device team_slave_0 added [ 340.624454][T10769] team0: Port device team_slave_1 added [ 340.747380][ T5224] usb 5-1: USB disconnect, device number 24 [ 340.775486][T10769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.803187][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.846063][T10769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.895346][T10769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.902431][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.986177][T10769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.098072][T10769] hsr_slave_0: entered promiscuous mode [ 341.112037][T10769] hsr_slave_1: entered promiscuous mode [ 341.126251][T10769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.145115][T10769] Cannot create hsr debugfs directory [ 341.501505][T10870] input: syz0 as /devices/virtual/input/input31 [ 341.525907][ T46] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 341.688189][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 341.696880][T10877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.715859][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.767046][ T46] usb 4-1: config 0 descriptor?? [ 341.777952][ T46] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 341.822287][T10769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.833852][T10769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.834971][ T5224] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 341.862263][T10769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.885737][T10769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.016531][ T5224] usb 5-1: config 0 has no interfaces? [ 342.029286][ T5224] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 342.038491][T10769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.060307][T10769] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.073230][ T5224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.096450][ T5224] usb 5-1: config 0 descriptor?? [ 342.116581][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.123779][ T7440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.153652][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.160848][ T7440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.329428][ T941] usb 5-1: USB disconnect, device number 25 [ 342.365772][ T5240] Bluetooth: hci0: command tx timeout [ 342.487943][T10769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.530665][T10769] veth0_vlan: entered promiscuous mode [ 342.544078][T10769] veth1_vlan: entered promiscuous mode [ 342.588305][T10769] veth0_macvtap: entered promiscuous mode [ 342.646594][T10769] veth1_macvtap: entered promiscuous mode [ 342.676155][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.687128][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.708680][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.721117][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.731627][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.742432][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.752390][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.763494][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.782828][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.793506][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.803609][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.816846][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.827270][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.838195][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.852541][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.863490][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.877343][T10769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.926270][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.964899][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.005131][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.024774][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.037295][ T46] usb 4-1: USB disconnect, device number 22 [ 343.052424][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.072106][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.093996][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.118786][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.155461][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.200776][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.223551][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.249008][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.268886][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.304768][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.331833][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.352845][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.377592][T10769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.444443][T10769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.457874][T10769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.467408][T10769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.476513][T10769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.644751][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.652676][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.720877][ T7431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.744606][ T7431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.151869][ T3024] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 346.525636][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.553820][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.564636][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.597001][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.616119][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 346.628355][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.502759][T10943] netlink: zone id is out of range [ 347.512035][T10943] netlink: zone id is out of range [ 347.521831][T10943] netlink: set zone limit has 4 unknown bytes [ 347.530988][T10943] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.2108'. [ 347.691084][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.779897][T10941] IPVS: Error joining to the multicast group [ 347.951910][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.323647][T10938] chnl_net:caif_netlink_parms(): no params data found [ 348.523835][T10938] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.543564][T10938] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.555204][T10938] bridge_slave_0: entered allmulticast mode [ 348.562550][T10938] bridge_slave_0: entered promiscuous mode [ 348.578173][T10938] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.609725][T10938] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.629619][T10938] bridge_slave_1: entered allmulticast mode [ 348.647159][T10938] bridge_slave_1: entered promiscuous mode [ 348.685084][ T5240] Bluetooth: hci0: command tx timeout [ 348.714786][ T5224] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 348.747600][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.830986][T10938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.873036][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.904231][T10938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.933922][ T5224] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.945593][ T5224] usb 1-1: config 0 has no interface number 0 [ 348.951890][ T5224] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.981851][ T5224] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.993591][ T5224] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 349.012527][ T5224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.041916][T10938] team0: Port device team_slave_0 added [ 349.052428][ T5224] usb 1-1: config 0 descriptor?? [ 349.064401][T10938] team0: Port device team_slave_1 added [ 349.108822][T10938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.117001][T10938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.145096][T10938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.158907][T10938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.167047][T10938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.193251][T10938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.311660][T10938] hsr_slave_0: entered promiscuous mode [ 349.318685][T10938] hsr_slave_1: entered promiscuous mode [ 349.330738][T10938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.338718][T10938] Cannot create hsr debugfs directory [ 349.373451][ T12] bridge_slave_1: left allmulticast mode [ 349.379622][ T12] bridge_slave_1: left promiscuous mode [ 349.386180][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.396275][ T12] bridge_slave_0: left allmulticast mode [ 349.402007][ T12] bridge_slave_0: left promiscuous mode [ 349.410398][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.516136][ T5224] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0026/input/input32 [ 349.662506][ T5224] holtek_kbd 0003:04D9:A055.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 349.715545][ T5224] usb 1-1: USB disconnect, device number 21 [ 349.805654][ T5240] Bluetooth: hci8: unexpected event for opcode 0x041a [ 350.325505][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.417171][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.504179][ T12] bond0 (unregistering): Released all slaves [ 350.765716][ T5240] Bluetooth: hci0: command tx timeout [ 350.904739][ T5275] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 351.057798][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 351.070208][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.100989][ T5275] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 351.124805][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.144994][ T5275] usb 5-1: config 0 descriptor?? [ 351.159580][ T5275] hub 5-1:0.0: USB hub found [ 351.463777][ T5275] hub 5-1:0.0: 1 port detected [ 352.051209][T11058] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 352.080811][T11058] overlayfs: failed to set xattr on upper [ 352.107150][T11058] overlayfs: ...falling back to redirect_dir=nofollow. [ 352.121909][ T5275] hub 5-1:0.0: activate --> -90 [ 352.129402][ T12] hsr_slave_0: left promiscuous mode [ 352.152295][T11058] overlayfs: ...falling back to index=off. [ 352.187345][ T12] hsr_slave_1: left promiscuous mode [ 352.206731][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.214315][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.243001][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.271878][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.330094][ T12] veth1_macvtap: left promiscuous mode [ 352.343160][ T12] veth0_macvtap: left promiscuous mode [ 352.349819][ T12] veth1_vlan: left promiscuous mode [ 352.355975][ T12] veth0_vlan: left promiscuous mode [ 352.537816][ T5278] usb 5-1: USB disconnect, device number 26 [ 352.538317][ T5275] usb 5-1-port1: attempt power cycle [ 352.564186][ T5224] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 352.732729][ T5224] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 352.747968][ T5224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.777530][ T5224] usb 3-1: config 0 descriptor?? [ 352.849690][ T5240] Bluetooth: hci0: command tx timeout [ 353.043235][ T12] team0 (unregistering): Port device team_slave_1 removed [ 353.186266][ T12] team0 (unregistering): Port device team_slave_0 removed [ 354.224380][ T5224] usb 3-1: Cannot set autoneg [ 354.229610][ T5224] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 354.253336][ T5224] usb 3-1: USB disconnect, device number 28 [ 354.421288][T10938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 354.448033][T10938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 354.473429][T10938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 354.483432][T10938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 354.619370][T10938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.675305][T10938] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.695929][ T7435] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.703081][ T7435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.744923][ T7431] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.752161][ T7431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.798739][T10938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 354.809242][T10938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.925148][ T5240] Bluetooth: hci0: command tx timeout [ 354.998696][T11109] IPVS: Scheduler module ip_vs_sip not found [ 355.025611][T11116] IPVS: length: 8 != 11240 [ 355.050347][T10938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.118057][T10938] veth0_vlan: entered promiscuous mode [ 355.124938][ T5278] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 355.160920][T10938] veth1_vlan: entered promiscuous mode [ 355.274767][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 355.319558][T10938] veth0_macvtap: entered promiscuous mode [ 355.329465][ T5278] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.340052][ T5278] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 355.349335][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.359708][ T5278] usb 4-1: config 0 descriptor?? [ 355.368500][ T5278] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 355.387387][T10938] veth1_macvtap: entered promiscuous mode [ 355.439032][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.514990][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.538773][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.560614][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.591815][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.603329][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.624868][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.635475][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.657670][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.668230][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.679928][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.691914][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.702246][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.713184][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.723548][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.735097][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.746870][T10938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.767765][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.779625][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.791681][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.805828][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.821348][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.835710][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.847144][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.858167][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.868595][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.890859][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.901235][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.913383][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.923584][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.934675][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.945944][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.956814][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.969428][T10938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.039205][T10938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.065048][T10938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.075516][T10938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.086273][T10938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.255252][ T7431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.273724][ T7431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.334213][ T7431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.342808][ T7431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.810369][ T5278] gspca_vc032x: reg_w err -71 [ 356.815645][ T5278] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 356.825085][ T5278] usb 4-1: USB disconnect, device number 23 [ 357.139365][T11177] vti0: entered allmulticast mode [ 357.152246][T11177] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2198'. [ 358.428198][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.535295][ T5430] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 358.707677][ T5430] usb 5-1: config 128 has too many interfaces: 254, using maximum allowed: 32 [ 358.716970][ T5430] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 254 [ 358.728081][ T5430] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.737474][ T5430] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 358.747721][ T5430] usb 5-1: SerialNumber: syz [ 358.967659][ T5430] usb 5-1: USB disconnect, device number 31 [ 359.136288][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.220702][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.283669][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.378832][ T12] bridge_slave_1: left allmulticast mode [ 359.384778][ T12] bridge_slave_1: left promiscuous mode [ 359.390533][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.399436][ T12] bridge_slave_0: left allmulticast mode [ 359.405678][ T12] bridge_slave_0: left promiscuous mode [ 359.411437][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.606410][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2217'. [ 359.963052][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.980077][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.989366][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.998234][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.018654][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 360.026993][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.262035][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.277736][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.300858][ T12] bond0 (unregistering): Released all slaves [ 360.716863][ T5224] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 360.754863][ T12] hsr_slave_0: left promiscuous mode [ 360.791239][ T12] hsr_slave_1: left promiscuous mode [ 360.809220][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.828106][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.837887][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.855475][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.894750][ T5224] usb 5-1: Using ep0 maxpacket: 16 [ 360.904114][ T12] veth1_macvtap: left promiscuous mode [ 360.906710][ T5224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.911266][ T12] veth0_macvtap: left promiscuous mode [ 360.924740][ T5224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.937130][ T5224] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 360.950263][ T5224] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 360.959413][ T5224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.959940][ T12] veth1_vlan: left promiscuous mode [ 360.976247][ T5224] usb 5-1: config 0 descriptor?? [ 360.986938][ T12] veth0_vlan: left promiscuous mode [ 361.418893][ T5224] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0027/input/input34 [ 361.518955][ T5224] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 361.695775][ T5224] usb 5-1: USB disconnect, device number 32 [ 362.061016][ T12] team0 (unregistering): Port device team_slave_1 removed [ 362.095652][ T941] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 362.119634][ T12] team0 (unregistering): Port device team_slave_0 removed [ 362.143948][ T5237] Bluetooth: hci0: command tx timeout [ 362.255353][ T941] usb 1-1: Using ep0 maxpacket: 8 [ 362.265766][ T941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.317061][ T941] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.342770][ T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.362760][ T941] usb 1-1: Product: syz [ 362.369166][ T941] usb 1-1: Manufacturer: syz [ 362.373817][ T941] usb 1-1: SerialNumber: syz [ 363.031374][T11235] chnl_net:caif_netlink_parms(): no params data found [ 363.216713][T11235] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.244815][T11235] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.274947][T11235] bridge_slave_0: entered allmulticast mode [ 363.296566][T11235] bridge_slave_0: entered promiscuous mode [ 363.326530][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 363.341503][T11235] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.349129][T11235] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.384889][T11235] bridge_slave_1: entered allmulticast mode [ 363.404464][T11235] bridge_slave_1: entered promiscuous mode [ 363.458420][ T941] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 363.474846][ T941] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 363.489332][T11235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.516173][T11235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.582569][T11235] team0: Port device team_slave_0 added [ 363.595470][T11235] team0: Port device team_slave_1 added [ 363.674330][T11235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.704908][T11235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.741811][T11235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.790909][T11235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.808493][T11235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.859572][T11235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.891354][ T941] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 363.924739][ T941] usb 1-1: USB disconnect, device number 22 [ 363.934973][ T5240] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 363.948104][ T5240] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 363.961158][ T5240] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 363.963105][ T941] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 363.980534][ T5240] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 364.004717][ T5240] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 364.021659][T11235] hsr_slave_0: entered promiscuous mode [ 364.027855][ T5240] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 364.036260][T11235] hsr_slave_1: entered promiscuous mode [ 364.073549][T11235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.081966][T11235] Cannot create hsr debugfs directory [ 364.205078][ T5237] Bluetooth: hci0: command tx timeout [ 364.641934][T11314] 9pnet: p9_errstr2errno: server reported unknown error œæçæÎsÅ‚Ün02ÖÌü䧑̼§6þ [ 364.667563][T11298] chnl_net:caif_netlink_parms(): no params data found [ 364.845277][T11321] input: syz0 as /devices/virtual/input/input35 [ 364.860094][T11298] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.867834][T11298] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.875647][T11298] bridge_slave_0: entered allmulticast mode [ 364.882740][T11298] bridge_slave_0: entered promiscuous mode [ 364.894120][T11298] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.903195][T11298] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.910579][T11298] bridge_slave_1: entered allmulticast mode [ 364.917804][T11298] bridge_slave_1: entered promiscuous mode [ 365.012419][T11298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.037519][T11298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.113164][T11298] team0: Port device team_slave_0 added [ 365.185898][T11298] team0: Port device team_slave_1 added [ 365.298888][T11298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.310727][T11298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.362870][T11298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.385794][T11235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.397925][ T25] kernel write not supported for file /638/attr/keycreate (pid: 25 comm: kworker/1:0) [ 365.441811][T11235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.495879][T11298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.503197][T11298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.529570][T11298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.545335][T11235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 365.578872][ T5224] kernel write not supported for file /640/projid_map (pid: 5224 comm: kworker/0:3) [ 365.586595][T11235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 365.678480][T11298] hsr_slave_0: entered promiscuous mode [ 365.691677][T11298] hsr_slave_1: entered promiscuous mode [ 365.745108][T11298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.752736][T11298] Cannot create hsr debugfs directory [ 366.126188][ T5237] Bluetooth: hci8: command tx timeout [ 366.139256][T11298] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.285064][ T5237] Bluetooth: hci0: command tx timeout [ 366.309434][T11298] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.431929][T11235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.537106][T11298] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.606698][T11235] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.730475][T11298] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.804080][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.811280][ T7452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.840371][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.847618][ T7452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.935138][ T5430] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 367.095625][ T5430] usb 4-1: Using ep0 maxpacket: 32 [ 367.106367][ T5430] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.134956][ T5430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.141484][T11298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.168885][ T5430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.174240][T11298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.190740][ T5430] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 367.229033][T11375] netlink: 'syz.0.2272': attribute type 4 has an invalid length. [ 367.235066][ T5430] usb 4-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 367.247628][T11298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.254579][ T5430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.275523][ T5430] usb 4-1: config 0 descriptor?? [ 367.283366][T11298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 367.437638][ T5240] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 367.449445][ T5240] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 367.464205][ T5240] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 367.478232][ T5240] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 367.488131][ T5240] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 367.497361][T11235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.504391][ T5240] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 367.670596][T11235] veth0_vlan: entered promiscuous mode [ 367.691312][ T5430] hid-generic 0003:1B96:9F0A.0028: unknown main item tag 0x0 [ 367.715626][ T5430] hid-generic 0003:1B96:9F0A.0028: unknown main item tag 0x0 [ 367.733847][T11235] veth1_vlan: entered promiscuous mode [ 367.739524][ T5430] hid-generic 0003:1B96:9F0A.0028: unknown main item tag 0x0 [ 367.771086][ T5430] hid-generic 0003:1B96:9F0A.0028: unknown main item tag 0x0 [ 367.774326][T11298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.787615][ T5430] hid-generic 0003:1B96:9F0A.0028: unknown main item tag 0x0 [ 367.841661][T11298] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.863208][ T5430] hid-generic 0003:1B96:9F0A.0028: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.3-1/input0 [ 367.905127][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.912317][ T7431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.970192][T11235] veth0_macvtap: entered promiscuous mode [ 367.989065][T11235] veth1_macvtap: entered promiscuous mode [ 368.001444][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.008694][ T7452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.105419][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.118381][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.129594][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.140639][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.151014][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.162075][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.173405][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.194894][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.205031][ T5237] Bluetooth: hci8: command tx timeout [ 368.215255][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.234853][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.260438][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.289641][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.310060][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.330969][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.351355][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.365122][ T5237] Bluetooth: hci0: command tx timeout [ 368.377676][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.389461][T11235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.412590][T11380] chnl_net:caif_netlink_parms(): no params data found [ 368.431218][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.442216][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.450854][ T30] INFO: task syz-executor:5222 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 368.457819][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.462970][ T30] Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 368.489493][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.501708][ T30] task:syz-executor state:D stack:20440 pid:5222 tgid:5222 ppid:1 flags:0x00004004 [ 368.510907][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.517298][ T30] Call Trace: [ 368.546146][ T5306] usb 4-1: USB disconnect, device number 24 [ 368.583654][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.605198][ T30] [ 368.608235][ T30] __schedule+0x1843/0x4ae0 [ 368.634588][ T30] ? __pfx___schedule+0x10/0x10 [ 368.639522][ T30] ? __pfx_lock_release+0x10/0x10 [ 368.644750][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.664579][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 368.670646][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 368.677386][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.690118][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.700068][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 368.716330][ T30] ? schedule+0x90/0x320 [ 368.720651][ T30] schedule+0x14b/0x320 [ 368.725416][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.735995][ T30] schedule_preempt_disabled+0x13/0x30 [ 368.741502][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 368.747748][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.757954][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 368.763920][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 368.770353][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.782036][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 368.787447][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.797621][ T30] ? exit_mmap+0x28b/0xc40 [ 368.802100][ T30] down_write+0x1d7/0x220 [ 368.807543][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.818082][ T30] ? __pfx_down_write+0x10/0x10 [ 368.822988][ T30] exit_mmap+0x2bd/0xc40 [ 368.829217][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.839150][ T30] ? __mutex_lock+0x2ef/0xd70 [ 368.843857][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 368.852622][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.860034][ T30] ? __pfx_exit_aio+0x10/0x10 [ 368.864851][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.868392][ T30] ? uprobe_clear_state+0x271/0x290 [ 368.884119][ T30] ? mm_update_next_owner+0xa2/0x8a0 [ 368.889788][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 368.892437][T11235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.902112][ T30] __mmput+0x115/0x380 [ 368.915060][ T30] exit_mm+0x220/0x310 [ 368.919193][ T30] ? __pfx_exit_mm+0x10/0x10 [ 368.923806][ T30] ? taskstats_exit+0x326/0xa60 [ 368.954364][ T30] do_exit+0x9b2/0x28e0 [ 368.964667][ T30] ? __pfx_do_exit+0x10/0x10 [ 368.969418][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 368.988181][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 368.994234][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 369.006833][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 369.011991][ T30] do_group_exit+0x207/0x2c0 [ 369.017578][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.022838][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 369.031024][ T30] get_signal+0x16a3/0x1740 [ 369.036047][ T30] ? __pfx_get_signal+0x10/0x10 [ 369.040961][ T30] arch_do_signal_or_restart+0x96/0x860 [ 369.046723][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 369.052917][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 369.060590][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 369.067002][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 369.072702][ T30] do_syscall_64+0x100/0x230 [ 369.077728][ T30] ? clear_bhb_loop+0x35/0x90 [ 369.082443][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.089523][ T30] RIP: 0033:0x7f8c30d74257 [ 369.093992][ T30] RSP: 002b:00007ffd05350a70 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 369.102953][ T30] RAX: fffffffffffffe00 RBX: 0000000000000244 RCX: 00007f8c30d74257 [ 369.111485][ T30] RDX: 0000000040000000 RSI: 00007ffd05350acc RDI: 00000000ffffffff [ 369.119740][ T30] RBP: 00007ffd05350acc R08: 0000000000000000 R09: 7fffffffffffffff [ 369.127992][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555773eb5eb [ 369.136286][ T30] R13: 00005555773eb590 R14: 0000000000034263 R15: 00007ffd05350b20 [ 369.144297][ T30] [ 369.147666][ T30] INFO: task syz-executor:6826 blocked for more than 144 seconds. [ 369.156236][ T30] Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 369.163896][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.174761][ T30] task:syz-executor state:D stack:20656 pid:6826 tgid:6826 ppid:1 flags:0x00004004 [ 369.185424][ T30] Call Trace: [ 369.189170][ T30] [ 369.200799][ T30] __schedule+0x1843/0x4ae0 [ 369.206317][ T30] ? __pfx___schedule+0x10/0x10 [ 369.211226][ T30] ? __pfx_lock_release+0x10/0x10 [ 369.216687][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 369.222735][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 369.229217][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 369.234580][ T30] ? schedule+0x90/0x320 [ 369.238874][ T30] schedule+0x14b/0x320 [ 369.243071][ T30] schedule_preempt_disabled+0x13/0x30 [ 369.249137][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 369.255027][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 369.261138][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 369.267417][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 369.272689][ T30] ? exit_mmap+0x28b/0xc40 [ 369.278676][ T30] down_write+0x1d7/0x220 [ 369.283078][ T30] ? __pfx_down_write+0x10/0x10 [ 369.288231][ T30] exit_mmap+0x2bd/0xc40 [ 369.292728][ T30] ? __mutex_lock+0x2ef/0xd70 [ 369.298261][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 369.303093][ T30] ? __pfx_exit_aio+0x10/0x10 [ 369.311676][ T30] ? uprobe_clear_state+0x271/0x290 [ 369.321533][ T30] ? mm_update_next_owner+0xa2/0x8a0 [ 369.327167][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 369.332421][ T30] __mmput+0x115/0x380 [ 369.336895][ T30] exit_mm+0x220/0x310 [ 369.341004][ T30] ? __pfx_exit_mm+0x10/0x10 [ 369.345688][ T30] ? taskstats_exit+0x326/0xa60 [ 369.350708][ T30] do_exit+0x9b2/0x28e0 [ 369.354949][ T30] ? __pfx_do_exit+0x10/0x10 [ 369.359705][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 369.365202][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 369.371445][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 369.378025][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 369.383281][ T30] do_group_exit+0x207/0x2c0 [ 369.389008][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.394437][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 369.400203][ T30] get_signal+0x16a3/0x1740 [ 369.414131][ T30] ? __pfx_get_signal+0x10/0x10 [ 369.419157][ T30] arch_do_signal_or_restart+0x96/0x860 [ 369.425002][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 369.431202][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 369.437298][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 369.443048][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 369.448668][ T30] do_syscall_64+0x100/0x230 [ 369.453310][ T30] ? clear_bhb_loop+0x35/0x90 [ 369.458221][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.464149][ T30] RIP: 0033:0x7f0d18f74853 [ 369.468658][ T30] RSP: 002b:00007ffc20e3fde8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 369.477188][ T30] RAX: fffffffffffffff4 RBX: 0000000000000000 RCX: 00007f0d18f74853 [ 369.485357][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 369.493381][ T30] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 369.503433][ T30] R10: 0000555573a997d0 R11: 0000000000000246 R12: 0000000000000000 [ 369.511519][ T30] R13: 00000000000343a3 R14: 0000000000033ef1 R15: 00007ffc20e3ff70 [ 369.519601][ T30] [ 369.522666][ T30] INFO: task syz.4.1241:8620 blocked for more than 144 seconds. [ 369.556943][ T30] Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 369.565224][ T5237] Bluetooth: hci9: command tx timeout [ 369.614751][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.623574][ T30] task:syz.4.1241 state:D stack:26288 pid:8620 tgid:8611 ppid:5995 flags:0x00004000 [ 369.669201][ T30] Call Trace: [ 369.672562][ T30] [ 369.675714][ T30] __schedule+0x1843/0x4ae0 [ 369.680298][ T30] ? __pfx___schedule+0x10/0x10 [ 369.685301][ T30] ? __pfx_lock_release+0x10/0x10 [ 369.690507][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 369.696718][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 369.704461][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 369.721388][ T30] ? schedule+0x90/0x320 [ 369.734704][ T30] schedule+0x14b/0x320 [ 369.738947][ T30] schedule_preempt_disabled+0x13/0x30 [ 369.744482][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 369.760902][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 369.794731][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 369.800983][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 369.834580][ T30] ? exit_mmap+0x28b/0xc40 [ 369.839093][ T30] down_write+0x1d7/0x220 [ 369.843506][ T30] ? __pfx_down_write+0x10/0x10 [ 369.869587][ T30] exit_mmap+0x2bd/0xc40 [ 369.873907][ T30] ? __mutex_lock+0x2ef/0xd70 [ 369.914685][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 369.919664][ T30] ? __pfx_exit_aio+0x10/0x10 [ 369.924412][ T30] ? uprobe_clear_state+0x271/0x290 [ 369.948758][ T30] ? mm_update_next_owner+0xa2/0x8a0 [ 369.954148][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 369.975710][ T30] __mmput+0x115/0x380 [ 369.979877][ T30] exit_mm+0x220/0x310 [ 369.984006][ T30] ? __pfx_exit_mm+0x10/0x10 [ 369.988767][ T30] ? taskstats_exit+0x326/0xa60 [ 369.993782][ T30] do_exit+0x9b2/0x28e0 [ 369.998089][ T30] ? __pfx_do_exit+0x10/0x10 [ 370.002718][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 370.008649][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 370.018347][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 370.024859][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 370.030033][ T30] do_group_exit+0x207/0x2c0 [ 370.039040][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.044299][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 370.055384][ T30] get_signal+0x16a3/0x1740 [ 370.059957][ T30] ? __pfx_get_signal+0x10/0x10 [ 370.065151][ T30] arch_do_signal_or_restart+0x96/0x860 [ 370.070771][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 370.077071][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 370.083103][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 370.088997][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 370.094827][ T30] do_syscall_64+0x100/0x230 [ 370.099565][ T30] ? clear_bhb_loop+0x35/0x90 [ 370.104251][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.110570][ T30] RIP: 0033:0x7f24a977dff9 [ 370.115519][ T30] RSP: 002b:00007f24aa4dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 370.123998][ T30] RAX: fffffffffffffe00 RBX: 00007f24a9936060 RCX: 00007f24a977dff9 [ 370.132189][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f24a9936060 [ 370.140362][ T30] RBP: 00007f24a9936058 R08: 0000000000000000 R09: 0000000000000000 [ 370.148466][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f24a9936064 [ 370.158005][ T30] R13: 0000000000000000 R14: 00007ffcf96c4d10 R15: 00007ffcf96c4df8 [ 370.166248][ T30] [ 370.169350][ T30] INFO: task syz.2.1243:8622 blocked for more than 145 seconds. [ 370.177149][ T30] Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 370.201320][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.210520][ T30] task:syz.2.1243 state:D stack:23512 pid:8622 tgid:8621 ppid:5222 flags:0x00004000 [ 370.221544][ T30] Call Trace: [ 370.225448][ T30] [ 370.228419][ T30] __schedule+0x1843/0x4ae0 [ 370.232993][ T30] ? __pfx___schedule+0x10/0x10 [ 370.238173][ T30] ? __pfx_lock_release+0x10/0x10 [ 370.243261][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 370.249550][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 370.256152][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 370.261319][ T30] ? schedule+0x90/0x320 [ 370.265970][ T30] schedule+0x14b/0x320 [ 370.270195][ T30] schedule_preempt_disabled+0x13/0x30 [ 370.275920][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 370.281684][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 370.288068][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 370.294270][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 370.299630][ T30] ? exit_mmap+0x28b/0xc40 [ 370.304655][ T30] down_write+0x1d7/0x220 [ 370.309037][ T30] ? __pfx_down_write+0x10/0x10 [ 370.314728][ T30] exit_mmap+0x2bd/0xc40 [ 370.320223][ T30] ? __mutex_lock+0x2ef/0xd70 [ 370.325139][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 370.329969][ T30] ? __pfx_exit_aio+0x10/0x10 [ 370.334801][ T30] ? uprobe_clear_state+0x271/0x290 [ 370.340043][ T30] ? mm_update_next_owner+0xa2/0x8a0 [ 370.344744][ T5237] Bluetooth: hci8: command tx timeout [ 370.345477][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 370.355981][ T30] __mmput+0x115/0x380 [ 370.360056][ T30] exit_mm+0x220/0x310 [ 370.364124][ T30] ? __pfx_exit_mm+0x10/0x10 [ 370.368853][ T30] ? taskstats_exit+0x326/0xa60 [ 370.373755][ T30] do_exit+0x9b2/0x28e0 [ 370.377996][ T30] ? __pfx_do_exit+0x10/0x10 [ 370.382591][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 370.388055][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 370.394093][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 370.400601][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 370.406006][ T30] do_group_exit+0x207/0x2c0 [ 370.410636][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.415962][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 370.421529][ T30] get_signal+0x16a3/0x1740 [ 370.426470][ T30] ? __pfx_get_signal+0x10/0x10 [ 370.431381][ T30] arch_do_signal_or_restart+0x96/0x860 [ 370.437064][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 370.443258][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 370.449503][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 370.455399][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 370.461012][ T30] do_syscall_64+0x100/0x230 [ 370.465742][ T30] ? clear_bhb_loop+0x35/0x90 [ 370.470465][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.476444][ T30] RIP: 0033:0x7f8c30d7dff9 [ 370.480898][ T30] RSP: 002b:00007f8c31be10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 370.489442][ T30] RAX: fffffffffffffe00 RBX: 00007f8c30f35f88 RCX: 00007f8c30d7dff9 [ 370.497719][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8c30f35f88 [ 370.505952][ T30] RBP: 00007f8c30f35f80 R08: 0000000000000000 R09: 0000000000000000 [ 370.513961][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8c30f35f8c [ 370.522342][ T30] R13: 0000000000000000 R14: 00007ffd05350620 R15: 00007ffd05350708 [ 370.530845][ T30] [ 370.533974][ T30] [ 370.533974][ T30] Showing all locks held in the system: [ 370.542096][ T30] 2 locks held by kworker/1:0/25: [ 370.547411][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 370.558713][ T30] #1: ffffc900001f7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 370.569489][ T30] 1 lock held by khungtaskd/30: [ 370.574362][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 370.584776][ T30] 2 locks held by getty/4980: [ 370.589550][ T30] #0: ffff88802eb450a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 370.599672][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 370.610138][ T30] 1 lock held by syz-executor/5222: [ 370.615931][ T30] #0: ffff888028c76a18 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 370.625714][ T30] 4 locks held by kworker/1:5/5306: [ 370.630963][ T30] #0: ffff8880b873ea58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 370.641484][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 370.653183][ T30] #2: ffffffff9a5abae8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x158/0x390 [ 370.664195][ T30] #3: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: mld_sendpack+0x1e8/0xdb0 [ 370.673697][ T30] 1 lock held by syz-executor/6826: [ 370.679114][ T30] #0: ffff888077e08b18 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 370.688493][ T30] 1 lock held by syz.4.1241/8620: [ 370.693558][ T30] #0: ffff88807ab50b18 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 370.703013][ T30] 1 lock held by syz.2.1243/8622: [ 370.708267][ T30] #0: ffff88806ae84418 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 370.717725][ T30] 3 locks held by syz-executor/11235: [ 370.723123][ T30] #0: ffff88805c6f4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 370.733701][ T30] #1: ffff88805c6f4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 370.744229][ T30] #2: ffffffff8fe2c528 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 370.754349][ T30] 2 locks held by syz-executor/11298: [ 370.759793][ T30] #0: ffff8880246d0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 370.769922][ T30] #1: ffff8880246d0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 370.779769][ T30] 2 locks held by syz.3.2269/11361: [ 370.785057][ T30] #0: ffffffff8fcbfc08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 370.794097][ T30] #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 370.805114][ T30] 3 locks held by syz-executor/11380: [ 370.810519][ T30] #0: ffff888062e20d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 370.820716][ T30] #1: ffff888062e20078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 370.830710][ T30] #2: ffffffff8fe2c528 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 370.841191][ T30] [ 370.843566][ T30] ============================================= [ 370.843566][ T30] [ 370.852303][ T30] NMI backtrace for cpu 0 [ 370.856681][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 370.867224][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 370.877305][ T30] Call Trace: [ 370.880686][ T30] [ 370.883615][ T30] dump_stack_lvl+0x241/0x360 [ 370.888325][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.893554][ T30] ? __pfx__printk+0x10/0x10 [ 370.898260][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 370.903297][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 370.908772][ T30] ? _printk+0xd5/0x120 [ 370.912968][ T30] ? __pfx__printk+0x10/0x10 [ 370.917566][ T30] ? __wake_up_klogd+0xcc/0x110 [ 370.922434][ T30] ? __pfx__printk+0x10/0x10 [ 370.927036][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 370.932081][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 370.938117][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 370.944116][ T30] watchdog+0xff4/0x1040 [ 370.948410][ T30] ? watchdog+0x1ea/0x1040 [ 370.952841][ T30] ? __pfx_watchdog+0x10/0x10 [ 370.957529][ T30] kthread+0x2f0/0x390 [ 370.961608][ T30] ? __pfx_watchdog+0x10/0x10 [ 370.966309][ T30] ? __pfx_kthread+0x10/0x10 [ 370.970910][ T30] ret_from_fork+0x4b/0x80 [ 370.975349][ T30] ? __pfx_kthread+0x10/0x10 [ 370.979949][ T30] ret_from_fork_asm+0x1a/0x30 [ 370.984754][ T30] [ 370.988541][ T30] Sending NMI from CPU 0 to CPUs 1: [ 370.993843][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 370.994891][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 370.994908][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 370.994944][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 370.994961][ T30] Call Trace: [ 370.994969][ T30] [ 370.994992][ T30] dump_stack_lvl+0x241/0x360 [ 370.995024][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.995050][ T30] ? __pfx__printk+0x10/0x10 [ 370.995070][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 370.995113][ T30] ? vscnprintf+0x5d/0x90 [ 370.995145][ T30] panic+0x349/0x880 [ 370.995169][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 370.995201][ T30] ? __pfx_panic+0x10/0x10 [ 370.995220][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 370.995247][ T30] ? __irq_work_queue_local+0x137/0x410 [ 370.995281][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 370.995306][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 370.995335][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 370.995367][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 370.995400][ T30] watchdog+0x1033/0x1040 [ 370.995432][ T30] ? watchdog+0x1ea/0x1040 [ 370.995468][ T30] ? __pfx_watchdog+0x10/0x10 [ 370.995499][ T30] kthread+0x2f0/0x390 [ 370.995522][ T30] ? __pfx_watchdog+0x10/0x10 [ 370.995551][ T30] ? __pfx_kthread+0x10/0x10 [ 370.995576][ T30] ret_from_fork+0x4b/0x80 [ 370.995607][ T30] ? __pfx_kthread+0x10/0x10 [ 370.995630][ T30] ret_from_fork_asm+0x1a/0x30 [ 370.995676][ T30] [ 371.154228][ T30] Kernel Offset: disabled [ 371.158558][ T30] Rebooting in 86400 seconds..