last executing test programs: 19.212359262s ago: executing program 2 (id=693): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008000000000006001f00000000000800030004"], 0x7c}}, 0x0) 18.953941538s ago: executing program 2 (id=695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0xa4bc, 0x9}}]}) 18.475504998s ago: executing program 2 (id=702): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_pidfd_open(0x0, 0x0) 17.762796638s ago: executing program 2 (id=710): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)={0x29, 0x6, 0x0, {0x1, 0x0, 0x0, 0x2, '', 0x8}}, 0x29) 17.660441922s ago: executing program 2 (id=712): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045002, &(0x7f0000000300)) 17.330435723s ago: executing program 2 (id=714): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b16, 0x0) 17.037665762s ago: executing program 4 (id=717): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0xffffffff, 0x0, &(0x7f0000048000), 0x0) 15.971126983s ago: executing program 4 (id=734): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0xa, 0x4) 15.749110808s ago: executing program 1 (id=737): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000540)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 15.675040603s ago: executing program 1 (id=739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x5c, 0x33, @probe_response={{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}}}]}, 0x7c}}, 0x0) 15.001808908s ago: executing program 4 (id=744): r0 = epoll_create1(0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000004}) epoll_pwait(r0, &(0x7f00000002c0)=[{}], 0x1, 0x2000040, 0x0, 0x0) 14.995732603s ago: executing program 1 (id=745): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001b80)={0x2020}, 0x2020) 14.731434381s ago: executing program 4 (id=749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000001004d564b"]) 14.344989301s ago: executing program 3 (id=750): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x204}]}, 0x34}}, 0x0) 13.51369263s ago: executing program 3 (id=751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3904}]}, 0x24}}, 0x0) 13.212587193s ago: executing program 1 (id=752): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000005c0)={0x1, 0x0, [{0x7, 0x101, 0x4, 0x7ff, 0x9, 0xc, 0x41}]}) 13.178227699s ago: executing program 0 (id=753): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone3(&(0x7f0000000440)={0x11f000400, 0x0, 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12.83374712s ago: executing program 4 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, 0x120, 0x12006}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x6}}]}]}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12.827537281s ago: executing program 0 (id=755): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 12.350403389s ago: executing program 1 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502a6bfc2b36f092b496713"], 0x3c}}, 0x0) 11.80362713s ago: executing program 0 (id=757): unshare(0x2a020480) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) 11.68676688s ago: executing program 0 (id=758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000034c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf2, 0x2, 0x2, 0x1e, 0x1, 0x5, 0xfffffffa}}, {0x4}}]}]}, 0x64}}, 0x0) 3.658188959s ago: executing program 3 (id=759): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca510a223010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) 3.552778846s ago: executing program 4 (id=760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x40}}, 0x0) 3.536222452s ago: executing program 1 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r1, 0xaa3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x6}]}]}, 0x30}}, 0x0) 3.473677957s ago: executing program 0 (id=762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0xd000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 2.925901929s ago: executing program 0 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 276.437743ms ago: executing program 3 (id=764): r0 = io_uring_setup(0xc90, &(0x7f00000002c0)) r1 = io_uring_setup(0x63d3, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001880)=[{0x4, 0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}], 0x1) 119.62044ms ago: executing program 3 (id=765): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x63660000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000300)={0x17c04, 0xffffffffffffffff, 0xc900, 0x6780, 0x1000000}) 0s ago: executing program 3 (id=766): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@bridge_dellink={0x34, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): s! [ 57.030965][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.041533][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.051548][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.063130][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.074156][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.093200][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.104016][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.114554][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.125127][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.135031][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.146014][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.156192][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.167024][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.178392][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.200215][ T5255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.212668][ T5255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.221899][ T5255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.231613][ T5255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.256153][ T5254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.267528][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.274725][ T5254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.276120][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.284702][ T5254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.300880][ T5254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.337572][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.348174][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.372486][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.381424][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.413019][ T5251] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.556212][ T5298] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.790467][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.807572][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.821484][ T5305] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.849559][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.858038][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.926291][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.934529][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.024906][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.056816][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.112534][ T5236] Bluetooth: hci0: command tx timeout [ 58.123053][ T5236] Bluetooth: hci1: command tx timeout [ 58.134034][ T5236] Bluetooth: hci3: command tx timeout [ 58.201730][ T5245] Bluetooth: hci4: command tx timeout [ 58.206626][ T5236] Bluetooth: hci2: command tx timeout [ 58.252470][ T12] tipc: Subscription rejected, illegal request [ 58.462101][ T5327] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.835401][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 59.039166][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.065910][ T5340] UHID_CREATE from different security context by process 9 (syz.2.20), this is not allowed. [ 59.121200][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.378388][ T5293] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.483565][ T5350] VFS: Mount too revealing [ 59.557155][ T5293] usb 2-1: Using ep0 maxpacket: 16 [ 59.586011][ T5353] process 'syz.2.25' launched './file0' with NULL argv: empty string added [ 59.592437][ T5293] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 59.617553][ T5354] netlink: 36 bytes leftover after parsing attributes in process `syz.4.26'. [ 59.635911][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 59.669553][ T5293] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 59.681416][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.706348][ T5293] usb 2-1: Product: syz [ 59.725728][ T5293] usb 2-1: Manufacturer: syz [ 59.746702][ T5293] usb 2-1: SerialNumber: syz [ 59.765448][ T5293] usb 2-1: config 0 descriptor?? [ 59.803980][ T5293] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 59.837736][ T5293] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 59.860100][ T5362] netlink: 'syz.2.30': attribute type 12 has an invalid length. [ 59.901384][ T5362] netlink: 'syz.2.30': attribute type 11 has an invalid length. [ 59.912553][ T5362] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.30'. [ 59.986727][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.037592][ T5368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 60.050634][ T5368] netlink: 177 bytes leftover after parsing attributes in process `syz.4.34'. [ 60.167636][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.178785][ T5236] Bluetooth: hci3: command tx timeout [ 60.178810][ T5245] Bluetooth: hci1: command tx timeout [ 60.184195][ T5236] Bluetooth: hci0: command tx timeout [ 60.210216][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.239511][ T5373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.36'. [ 60.248921][ T25] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 60.254128][ T29] audit: type=1804 audit(1727465435.206:2): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.37" name="/" dev="pidfs" ino=5674 res=1 errno=0 [ 60.259901][ T5236] Bluetooth: hci4: command tx timeout [ 60.283258][ T5245] Bluetooth: hci2: command tx timeout [ 60.284922][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.311051][ T25] usb 1-1: config 0 descriptor?? [ 60.415809][ T5293] em28xx 2-1:0.0: chip ID is em2874 [ 60.466719][ T5289] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.553016][ T5385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.42'. [ 60.634839][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 60.674637][ T5285] usb 2-1: USB disconnect, device number 2 [ 60.682068][ T5285] em28xx 2-1:0.0: Disconnecting em28xx [ 60.692477][ T5285] em28xx 2-1:0.0: Freeing device [ 60.729890][ T5289] usb 4-1: Using ep0 maxpacket: 32 [ 60.739297][ T5289] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 60.749496][ T5289] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 60.776591][ T5289] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 60.806010][ T5289] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 60.832640][ T25] steelseries 0003:1038:12B6.0002: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 60.868423][ T5289] usb 4-1: config 0 interface 0 has no altsetting 0 [ 60.889241][ T5289] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 60.908096][ T5289] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 60.915171][ T5396] kAFS: unparsable volume name [ 60.935873][ T5289] usb 4-1: Product: syz [ 60.955114][ T5289] usb 4-1: Manufacturer: syz [ 60.986598][ T5289] usb 4-1: SerialNumber: syz [ 61.005254][ T5398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 61.005457][ T5289] usb 4-1: config 0 descriptor?? [ 61.029447][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.46'. [ 61.062103][ T5289] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 61.094251][ T5289] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 61.302450][ T5293] usb 1-1: USB disconnect, device number 2 [ 61.374071][ T5408] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 61.432025][ T8] usb 4-1: USB disconnect, device number 2 [ 61.438030][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 61.448988][ T8] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 61.701893][ T5375] ldusb: No device or device unplugged -19 [ 62.677168][ T5453] devpts: called with bogus options [ 63.046215][ T5472] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 524288, id = 0 [ 63.058674][ T5469] IPVS: stopping backup sync thread 5472 ... [ 63.282444][ T2905] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.427274][ T2905] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.568996][ T2905] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.833501][ T2905] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.836184][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.855389][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.864912][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.875942][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.884287][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.894616][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.904273][ T5488] netlink: 'syz.1.89': attribute type 49 has an invalid length. [ 64.704477][ T2905] bridge_slave_1: left allmulticast mode [ 64.710591][ T2905] bridge_slave_1: left promiscuous mode [ 64.728105][ T2905] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.798308][ T2905] bridge_slave_0: left allmulticast mode [ 64.804007][ T2905] bridge_slave_0: left promiscuous mode [ 64.817312][ T2905] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.406376][ T2905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.427307][ T2905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.447299][ T2905] bond0 (unregistering): Released all slaves [ 65.577491][ T5503] chnl_net:caif_netlink_parms(): no params data found [ 66.065918][ T5571] (unnamed net_device) (uninitialized): (slave team_slave_0): Device is not bonding slave [ 66.076728][ T5571] (unnamed net_device) (uninitialized): option active_slave: invalid value (team_slave_0) [ 66.097170][ T5236] Bluetooth: hci3: command tx timeout [ 66.322551][ T5594] __nla_validate_parse: 4 callbacks suppressed [ 66.322570][ T5594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 66.388911][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.423927][ T5503] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.444160][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.458304][ T5503] bridge_slave_0: entered allmulticast mode [ 66.480076][ T5503] bridge_slave_0: entered promiscuous mode [ 66.489065][ T5503] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.496186][ T5503] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.504192][ T5503] bridge_slave_1: entered allmulticast mode [ 66.512265][ T5503] bridge_slave_1: entered promiscuous mode [ 66.527381][ T5591] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (5) [ 66.561402][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 66.573377][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.604341][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 66.636791][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 66.654725][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 66.664527][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.688750][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 66.700695][ T25] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 66.708809][ T25] usb 5-1: Manufacturer: syz [ 66.727629][ T25] usb 5-1: config 0 descriptor?? [ 66.919035][ T5503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.978441][ T5503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.076618][ T25] rc_core: IR keymap rc-hauppauge not found [ 67.082758][ T25] Registered IR keymap rc-empty [ 67.089473][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 67.133347][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 67.219015][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 67.247065][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 67.294216][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 67.336741][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 67.379246][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 67.411340][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 67.441835][ T5503] team0: Port device team_slave_0 added [ 67.477424][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 67.520276][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 67.524711][ T5503] team0: Port device team_slave_1 added [ 67.550109][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 67.587304][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 67.617735][ T5503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.628681][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 67.635370][ T5503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.667484][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 67.717021][ T5503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.717139][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 67.794535][ T25] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 67.807039][ T2905] hsr_slave_0: left promiscuous mode [ 67.811412][ T25] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 67.832427][ T2905] hsr_slave_1: left promiscuous mode [ 67.842951][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.853894][ T25] usb 5-1: USB disconnect, device number 2 [ 67.861874][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.924497][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.945133][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.045716][ T2905] veth1_macvtap: left promiscuous mode [ 68.065458][ T2905] veth0_macvtap: left promiscuous mode [ 68.074661][ T2905] veth1_vlan: left promiscuous mode [ 68.086724][ T5285] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 68.095751][ T2905] veth0_vlan: left promiscuous mode [ 68.192759][ T5236] Bluetooth: hci3: command tx timeout [ 68.222845][ T29] audit: type=1326 audit(1727465443.186:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5645 comm="syz.3.146" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x0 [ 68.243978][ C1] vkms_vblank_simulate: vblank timer overrun [ 68.314799][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.327618][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.343958][ T5285] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 68.354263][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.373066][ T5285] usb 2-1: config 0 descriptor?? [ 68.829796][ T5285] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 68.849363][ T5285] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 68.870533][ T5285] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0003/input/input6 [ 68.888493][ T2905] team0 (unregistering): Port device team_slave_1 removed [ 68.935311][ T5285] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 69.021022][ T2905] team0 (unregistering): Port device team_slave_0 removed [ 69.080815][ T5288] usb 2-1: USB disconnect, device number 3 [ 69.258204][ T5285] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.385693][ T5503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.393464][ T5503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.419907][ T5503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.438823][ T5285] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.480369][ T5285] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.515332][ T5285] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 69.537022][ T5285] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 69.546159][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.605421][ T5503] hsr_slave_0: entered promiscuous mode [ 69.619356][ T5503] hsr_slave_1: entered promiscuous mode [ 69.619393][ T5657] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 69.922620][ T5668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 70.256689][ T5236] Bluetooth: hci3: command tx timeout [ 70.564374][ T5699] netlink: 48 bytes leftover after parsing attributes in process `syz.3.165'. [ 70.837280][ T5285] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 70.845594][ T5285] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input7 [ 70.894218][ T5285] usb 5-1: USB disconnect, device number 3 [ 70.894274][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 71.313609][ T5503] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.363975][ T5503] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.390385][ T5503] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.459894][ T5503] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.524457][ T29] audit: type=1326 audit(1727465446.486:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5729 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 71.547871][ T5288] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.637820][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.644643][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.709431][ T29] audit: type=1326 audit(1727465446.496:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5729 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 71.776794][ T5288] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.776797][ T29] audit: type=1326 audit(1727465446.496:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5729 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 71.776834][ T29] audit: type=1326 audit(1727465446.496:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5729 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 71.804001][ T5288] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.836623][ T29] audit: type=1326 audit(1727465446.496:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5729 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 71.896628][ T29] audit: type=1326 audit(1727465446.496:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5729 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 71.907815][ T5288] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 71.936616][ T29] audit: type=1326 audit(1727465446.506:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5729 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 71.979535][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 71.986633][ T29] audit: type=1326 audit(1727465446.506:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5729 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 72.025261][ T29] audit: type=1326 audit(1727465446.506:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5729 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 72.046063][ T5288] usb 4-1: SerialNumber: syz [ 72.327725][ T5503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.337083][ T5236] Bluetooth: hci3: command tx timeout [ 72.343814][ T5503] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.362660][ T5288] usb 4-1: 0:2 : does not exist [ 72.378416][ T5503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.388886][ T5503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.416959][ T5288] usb 4-1: USB disconnect, device number 3 [ 72.418984][ T5503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.458327][ T5503] veth0_vlan: entered promiscuous mode [ 72.469988][ T5503] veth1_vlan: entered promiscuous mode [ 72.494282][ T5503] veth0_macvtap: entered promiscuous mode [ 72.511402][ T5503] veth1_macvtap: entered promiscuous mode [ 72.525997][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.536666][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.546799][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.558030][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.568622][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.570859][ T5344] udevd[5344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.579251][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.579266][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.579282][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.580532][ T5503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.637139][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.647648][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.658142][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.669129][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.679056][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.689568][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.699496][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.709991][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.721653][ T5503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.731910][ T5503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.740932][ T5503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.749997][ T5503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.759443][ T5503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.795593][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.802871][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.818293][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.825439][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.931913][ T5757] binder: 5756:5757 ioctl c0306201 20000480 returned -22 [ 73.092255][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.105680][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.128877][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.152444][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.489717][ T29] audit: type=1326 audit(1727465448.456:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.0.187" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf749d579 code=0x0 [ 73.754794][ T5793] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 73.761453][ T5796] netlink: 'syz.4.194': attribute type 11 has an invalid length. [ 73.793713][ T5793] team0: Device ipvlan2 failed to register rx_handler [ 73.831315][ T5800] TCP: tcp_parse_options: Illegal window scaling value 127 > 14 received [ 74.154035][ T5809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 74.196933][ T5809] bataND2_0: renamed from lo (while UP) [ 74.326038][ T5816] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.201'. [ 74.398986][ T5819] netlink: 'syz.4.202': attribute type 1 has an invalid length. [ 74.417300][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.202'. [ 75.112910][ T5855] mmap: syz.0.215 (5855) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.546774][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.745446][ T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.770137][ T8] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 75.798045][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.834881][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 75.866015][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 75.900638][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.920265][ T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.930132][ T8] usb 3-1: Product: syz [ 75.935693][ T8] usb 3-1: Manufacturer: syz [ 75.966082][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 76.001576][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 76.032555][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 76.066878][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 76.143005][ T5906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.227'. [ 76.226758][ T5285] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.398518][ T5285] usb 2-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 76.424012][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.451692][ T5285] usb 2-1: config 0 descriptor?? [ 76.486395][ T5285] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 76.739224][ T46] cfg80211: failed to load regulatory.db [ 76.790422][ T46] usb 3-1: USB disconnect, device number 2 [ 76.894006][ T5924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.235'. [ 77.303115][ T5938] netlink: 'syz.4.240': attribute type 16 has an invalid length. [ 77.339488][ T5938] netlink: 'syz.4.240': attribute type 3 has an invalid length. [ 77.357117][ T5285] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 77.376678][ T5938] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 77.384373][ T5938] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 77.390469][ T5285] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 77.420394][ T5285] usb 2-1: USB disconnect, device number 4 [ 77.424393][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 77.442976][ T5938] netlink: 'syz.4.240': attribute type 2 has an invalid length. [ 77.478071][ T5938] netlink: 64006 bytes leftover after parsing attributes in process `syz.4.240'. [ 77.661691][ T5946] netlink: 108 bytes leftover after parsing attributes in process `syz.3.244'. [ 78.826042][ T5903] syz.0.226 (5903): drop_caches: 1 [ 79.031489][ T5998] capability: warning: `syz.2.268' uses 32-bit capabilities (legacy support in use) [ 79.343036][ T6007] pimreg: entered allmulticast mode [ 79.385145][ T6006] pimreg: left allmulticast mode [ 79.542387][ T6015] trusted_key: syz.4.275 sent an empty control message without MSG_MORE. [ 79.746651][ T29] audit: type=1326 audit(1727465454.706:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 79.768649][ T29] audit: type=1326 audit(1727465454.716:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 79.790811][ T29] audit: type=1326 audit(1727465454.716:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 79.812556][ T29] audit: type=1326 audit(1727465454.716:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 79.834849][ T29] audit: type=1326 audit(1727465454.716:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 79.857308][ T29] audit: type=1326 audit(1727465454.716:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 79.880113][ T29] audit: type=1326 audit(1727465454.716:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 79.902193][ T29] audit: type=1326 audit(1727465454.716:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 79.924499][ T29] audit: type=1326 audit(1727465454.716:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 79.947195][ T29] audit: type=1326 audit(1727465454.716:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 81.086742][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.261049][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.296734][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.338362][ T46] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 81.383046][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.421847][ T46] usb 4-1: config 0 descriptor?? [ 81.900984][ T46] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 81.979680][ T46] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 82.037494][ T46] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 82.063766][ T6100] netlink: 72 bytes leftover after parsing attributes in process `syz.1.312'. [ 82.101081][ T46] usb 4-1: USB disconnect, device number 4 [ 82.155562][ T46] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 82.533690][ T5288] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.729158][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.750997][ T5288] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 82.763621][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.775318][ T5288] usb 3-1: config 0 descriptor?? [ 83.042084][ T6138] netlink: 'syz.0.330': attribute type 16 has an invalid length. [ 83.213451][ T5288] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 83.233492][ T5288] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 83.241663][ T5288] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 83.250043][ T5288] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 83.257512][ T5288] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 83.279699][ T5288] lenovo 0003:17EF:6047.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 83.414571][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'. [ 83.615144][ T5288] lenovo 0003:17EF:6047.0006: Failed to switch middle button: -71 [ 83.624102][ T5288] lenovo 0003:17EF:6047.0006: Fn-lock setting failed: -71 [ 83.638853][ T5288] lenovo 0003:17EF:6047.0006: Sensitivity setting failed: -71 [ 83.670800][ T5288] usb 3-1: USB disconnect, device number 3 [ 83.891834][ T5293] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.058174][ T5293] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 84.068157][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.081082][ T5293] usb 5-1: config 0 descriptor?? [ 84.098003][ T5293] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 84.729060][ T5293] gspca_cpia1: usb_control_msg 01, error -71 [ 84.735113][ T5293] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 84.770214][ T5293] usb 5-1: USB disconnect, device number 4 [ 85.052292][ T6193] syz.0.355: attempt to access beyond end of device [ 85.052292][ T6193] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 85.447356][ T5299] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.560884][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 85.616924][ T5299] usb 3-1: Using ep0 maxpacket: 32 [ 85.629957][ T5299] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 85.656585][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.684927][ T5299] usb 3-1: config 0 descriptor?? [ 85.698452][ T46] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.886941][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.903720][ T5299] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 85.918189][ T5299] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.925890][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.927623][ T5293] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.946638][ T46] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 85.962210][ T5299] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 85.967030][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.988696][ T5299] usb 3-1: media controller created [ 86.014241][ T46] usb 2-1: config 0 descriptor?? [ 86.024090][ T5299] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.041948][ T2946] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.119191][ T5293] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.141073][ T5293] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.164763][ T5293] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.176356][ T5293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.191486][ T2946] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.194031][ T5293] usb 1-1: Product: syz [ 86.208225][ T5293] usb 1-1: Manufacturer: syz [ 86.213052][ T5293] usb 1-1: SerialNumber: syz [ 86.227099][ T5293] usb 1-1: selecting invalid altsetting 1 [ 86.314377][ T2946] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.454701][ T46] itetech 0003:258A:6A88.0007: item fetching failed at offset 0/1 [ 86.470763][ T46] itetech 0003:258A:6A88.0007: probe with driver itetech failed with error -22 [ 86.472514][ T2946] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.527884][ T5299] az6027: usb out operation failed. (-71) [ 86.534112][ T5299] stb0899_attach: Driver disabled by Kconfig [ 86.543103][ T5299] az6027: no front-end attached [ 86.543103][ T5299] [ 86.553431][ T5299] az6027: usb out operation failed. (-71) [ 86.576639][ T5299] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 86.613085][ T5299] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 86.653653][ T5299] dvb-usb: schedule remote query interval to 400 msecs. [ 86.692239][ T5299] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 86.704954][ T5245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.717059][ T5245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.729635][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.743957][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.758287][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.759744][ T5299] usb 3-1: USB disconnect, device number 4 [ 86.772645][ T5245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.854301][ T2946] bridge_slave_1: left allmulticast mode [ 86.863835][ T8] usb 2-1: USB disconnect, device number 5 [ 86.876628][ T5293] usb 1-1: selecting invalid altsetting 1 [ 86.882530][ T5293] cdc_ncm 1-1:1.0: bind() failure [ 86.897504][ T2946] bridge_slave_1: left promiscuous mode [ 86.921372][ T2946] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.987441][ T2946] bridge_slave_0: left allmulticast mode [ 87.012299][ T2946] bridge_slave_0: left promiscuous mode [ 87.021681][ T5299] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 87.041525][ T2946] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.184934][ T8] usb 1-1: USB disconnect, device number 3 [ 87.371110][ T6245] ALSA: mixer_oss: invalid OSS volume '' [ 87.575296][ T6253] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.980103][ T2946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.996988][ T2946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.029423][ T2946] bond0 (unregistering): Released all slaves [ 88.336717][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 88.526617][ T5288] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.536896][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 88.550216][ T8] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 88.596762][ T8] usb 4-1: config 179 has no interface number 0 [ 88.596953][ T46] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 88.616636][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 88.648740][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 88.675339][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 88.688731][ T5288] usb 3-1: Using ep0 maxpacket: 8 [ 88.698212][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 88.700318][ T5288] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.719601][ T8] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 88.719648][ T8] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 88.719671][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.736754][ T6270] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.785908][ T6232] chnl_net:caif_netlink_parms(): no params data found [ 88.793074][ T5288] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.804896][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 88.812535][ T46] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.822494][ T5236] Bluetooth: hci2: command tx timeout [ 88.823199][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.852569][ T5288] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.877591][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.910211][ T5288] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.925254][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.934528][ T2946] hsr_slave_0: left promiscuous mode [ 88.943770][ T46] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.958112][ T2946] hsr_slave_1: left promiscuous mode [ 88.958130][ T5288] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.963436][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.965039][ T46] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.994302][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.016140][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.018546][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.056472][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.064317][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.089791][ T2946] veth1_macvtap: left promiscuous mode [ 89.095526][ T2946] veth0_macvtap: left promiscuous mode [ 89.102270][ T2946] veth1_vlan: left promiscuous mode [ 89.107972][ T2946] veth0_vlan: left promiscuous mode [ 89.111234][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9 [ 89.135705][ T25] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 89.170203][ T25] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 89.203783][ T5288] usb 3-1: GET_CAPABILITIES returned 0 [ 89.210502][ T5288] usbtmc 3-1:16.0: can't read capabilities [ 89.228226][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 89.258322][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.284134][ T46] usb 2-1: GET_CAPABILITIES returned 0 [ 89.289756][ T46] usbtmc 2-1:16.0: can't read capabilities [ 89.317985][ T46] usb 4-1: USB disconnect, device number 5 [ 89.318131][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 89.334851][ T46] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 89.351418][ T6298] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 89.384054][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 89.563931][ T5285] usb 3-1: USB disconnect, device number 5 [ 89.637221][ T8] usb 2-1: USB disconnect, device number 6 [ 89.694804][ T5237] usb 1-1: USB disconnect, device number 4 [ 90.032228][ T2946] team0 (unregistering): Port device team_slave_1 removed [ 90.071535][ T2946] team0 (unregistering): Port device team_slave_0 removed [ 90.896729][ T5236] Bluetooth: hci2: command tx timeout [ 91.110917][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.137280][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.182157][ T6232] bridge_slave_0: entered allmulticast mode [ 91.227402][ T6232] bridge_slave_0: entered promiscuous mode [ 91.270227][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.296781][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.326744][ T6232] bridge_slave_1: entered allmulticast mode [ 91.333841][ T6232] bridge_slave_1: entered promiscuous mode [ 91.372240][ T6337] pim6reg: entered allmulticast mode [ 91.535297][ T6331] pim6reg: left allmulticast mode [ 91.669529][ T6232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.709844][ T6232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.933455][ T6232] team0: Port device team_slave_0 added [ 91.997956][ T6232] team0: Port device team_slave_1 added [ 92.148609][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.176785][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.266068][ T6232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.313088][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.344032][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.406749][ T6232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.612256][ T6386] netlink: 191384 bytes leftover after parsing attributes in process `syz.3.422'. [ 92.673711][ T6232] hsr_slave_0: entered promiscuous mode [ 92.758050][ T6232] hsr_slave_1: entered promiscuous mode [ 92.775756][ T6232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.809613][ T6232] Cannot create hsr debugfs directory [ 92.977107][ T5236] Bluetooth: hci2: command tx timeout [ 93.077420][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 93.238455][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 93.245858][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.256071][ T5237] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 93.278056][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.299460][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.335038][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.367715][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.379471][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.437237][ T5237] usb 3-1: Using ep0 maxpacket: 16 [ 93.465154][ T5237] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 93.479932][ T5237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.508556][ T5237] usb 3-1: Product: syz [ 93.512854][ T5237] usb 3-1: Manufacturer: syz [ 93.535301][ T5237] usb 3-1: SerialNumber: syz [ 93.558681][ T5237] usb 3-1: config 0 descriptor?? [ 93.588165][ T5237] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 93.637029][ T8] usb 2-1: GET_CAPABILITIES returned 0 [ 93.653738][ T8] usbtmc 2-1:16.0: can't read capabilities [ 93.800401][ T5237] gp8psk: usb in 128 operation failed. [ 93.813178][ T5237] gp8psk: usb in 137 operation failed. [ 93.819072][ T5237] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.834861][ T6425] netlink: 52 bytes leftover after parsing attributes in process `syz.0.432'. [ 93.838697][ T5237] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 93.853849][ T5237] usb 3-1: media controller created [ 93.867295][ T5237] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.895562][ T6232] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.913377][ T6232] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.921204][ T5285] usb 2-1: USB disconnect, device number 7 [ 93.921446][ T5237] gp8psk_fe: Frontend revision 1 attached [ 93.933418][ T5237] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 93.942276][ T5237] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 94.013654][ T5237] gp8psk: usb in 138 operation failed. [ 94.019699][ T5237] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 94.030076][ T5237] gp8psk: found Genpix USB device pID = 201 (hex) [ 94.064530][ T5237] usb 3-1: USB disconnect, device number 6 [ 94.111511][ T2905] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.179275][ T5237] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 94.194148][ T6232] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.287370][ T2905] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.328191][ T6232] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.431921][ T2905] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.595797][ T2905] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.861007][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.872424][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.881763][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.907052][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.916671][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.924065][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.040399][ T6441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.057127][ T5245] Bluetooth: hci2: command tx timeout [ 95.064463][ T6441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.078542][ T6441] bond0 (unregistering): Released all slaves [ 95.453453][ T6232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.487427][ T2905] bridge_slave_1: left allmulticast mode [ 95.528574][ T2905] bridge_slave_1: left promiscuous mode [ 95.534336][ T2905] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.563711][ T2905] bridge_slave_0: left allmulticast mode [ 95.571931][ T2905] bridge_slave_0: left promiscuous mode [ 95.582970][ T2905] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.156251][ T2905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.175673][ T2905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.203747][ T2905] bond0 (unregistering): Released all slaves [ 96.233603][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 96.389534][ T6232] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.629293][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.636436][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.706208][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.706595][ T5237] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 96.713377][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.800402][ T6453] chnl_net:caif_netlink_parms(): no params data found [ 96.930261][ T5237] usb 2-1: Using ep0 maxpacket: 16 [ 96.937899][ T5237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 96.965352][ T5237] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 96.974926][ T5237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.990895][ T5245] Bluetooth: hci4: command tx timeout [ 97.007699][ T5237] usb 2-1: Product: syz [ 97.012952][ T5237] usb 2-1: Manufacturer: syz [ 97.026647][ T5237] usb 2-1: SerialNumber: syz [ 97.057183][ T5237] usb 2-1: config 0 descriptor?? [ 97.077248][ T2905] hsr_slave_0: left promiscuous mode [ 97.085528][ T5237] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 97.095243][ T2905] hsr_slave_1: left promiscuous mode [ 97.105327][ T5237] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 97.141221][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.176210][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.200017][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.230010][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.425811][ T2905] veth1_macvtap: left promiscuous mode [ 97.440320][ T2905] veth0_macvtap: left promiscuous mode [ 97.446083][ T2905] veth1_vlan: left promiscuous mode [ 97.451550][ T2905] veth0_vlan: left promiscuous mode [ 97.651976][ T6539] vxcan1: tx address claim with dest, not broadcast [ 97.697889][ T5237] em28xx 2-1:0.0: chip ID is em2884 [ 97.778374][ T5288] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 97.864563][ T5245] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 97.873232][ T5245] Bluetooth: hci3: Injecting HCI hardware error event [ 97.882290][ T5245] Bluetooth: hci3: hardware error 0x00 [ 97.975703][ T5237] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 98.003865][ T5288] usb 3-1: unable to get BOS descriptor or descriptor too short [ 98.019693][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 98.030276][ T5288] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 98.040111][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 98.053372][ T5237] em28xx 2-1:0.0: board has no eeprom [ 98.056634][ T5288] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 98.088977][ T5288] usb 3-1: string descriptor 0 read error: -22 [ 98.097133][ T5288] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 98.116722][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.147683][ T5288] usb 3-1: config 0 descriptor?? [ 98.159267][ T5288] usb 3-1: NFC: Unable to get FW version [ 98.177085][ T5237] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 98.184967][ T5237] em28xx 2-1:0.0: dvb set to bulk mode. [ 98.190693][ T5288] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90 [ 98.234149][ T5293] em28xx 2-1:0.0: Binding DVB extension [ 98.287905][ T5237] usb 2-1: USB disconnect, device number 8 [ 98.294557][ T5237] em28xx 2-1:0.0: Disconnecting em28xx [ 98.352420][ T5293] em28xx 2-1:0.0: Registering input extension [ 98.464968][ T5288] usb 3-1: USB disconnect, device number 7 [ 98.487379][ T5293] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 98.493942][ T5293] Registered IR keymap rc-empty [ 98.525927][ T5293] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 98.557759][ T5293] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 98.618278][ T5293] em28xx 2-1:0.0: Input extension successfully initialized [ 98.636593][ T5237] em28xx 2-1:0.0: Closing input extension [ 98.797869][ T5237] em28xx 2-1:0.0: Freeing device [ 99.057447][ T5236] Bluetooth: hci4: command tx timeout [ 99.192610][ T2905] team0 (unregistering): Port device team_slave_1 removed [ 99.289673][ T2905] team0 (unregistering): Port device team_slave_0 removed [ 99.759093][ T6565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.459'. [ 99.771316][ T6565] veth1_macvtap: left promiscuous mode [ 99.782938][ T6565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.459'. [ 99.810569][ T6576] macvlan0: entered allmulticast mode [ 99.914252][ T6232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.937454][ T5245] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 100.037898][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.074834][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.092562][ T6591] io-wq is not configured for unbound workers [ 100.103473][ T6453] bridge_slave_0: entered allmulticast mode [ 100.138006][ T6453] bridge_slave_0: entered promiscuous mode [ 100.157949][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.187175][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.194443][ T6453] bridge_slave_1: entered allmulticast mode [ 100.217794][ T6453] bridge_slave_1: entered promiscuous mode [ 100.294244][ T6453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.336282][ T6453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.491797][ T6453] team0: Port device team_slave_0 added [ 100.561838][ T6453] team0: Port device team_slave_1 added [ 100.729748][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.729769][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.729792][ T6453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.732247][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.732263][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.732283][ T6453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.764270][ T6232] veth0_vlan: entered promiscuous mode [ 100.946887][ T6232] veth1_vlan: entered promiscuous mode [ 101.015376][ T6453] hsr_slave_0: entered promiscuous mode [ 101.051849][ T6453] hsr_slave_1: entered promiscuous mode [ 101.077468][ T6453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.085070][ T6453] Cannot create hsr debugfs directory [ 101.137790][ T5245] Bluetooth: hci4: command tx timeout [ 101.341036][ T2905] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.550118][ T2905] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.573405][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.588025][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.597381][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.598344][ T6232] veth0_macvtap: entered promiscuous mode [ 101.616441][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.629461][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.640226][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.764773][ T2905] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.804388][ T6232] veth1_macvtap: entered promiscuous mode [ 102.051961][ T2905] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.224451][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.241882][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.324071][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.338868][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.348994][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.360026][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.372340][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.387050][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.397663][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.409311][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.421694][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.433727][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.444698][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.463635][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.665231][ T6232] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.685238][ T6232] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.696921][ T6232] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.717406][ T6232] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.733342][ T2905] bridge_slave_1: left allmulticast mode [ 102.739343][ T2905] bridge_slave_1: left promiscuous mode [ 102.745154][ T2905] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.768064][ T2905] bridge_slave_0: left allmulticast mode [ 102.780191][ T2905] bridge_slave_0: left promiscuous mode [ 102.785951][ T2905] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.231844][ T5236] Bluetooth: hci4: command tx timeout [ 103.688789][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.697130][ T5236] Bluetooth: hci0: command tx timeout [ 103.801014][ T6629] chnl_net:caif_netlink_parms(): no params data found [ 103.848106][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.873509][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.885168][ T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.907260][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 103.915441][ T8] usb 1-1: SerialNumber: syz [ 104.068927][ T945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.077041][ T945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.084570][ T945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.092770][ T945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.156323][ T2905] hsr_slave_0: left promiscuous mode [ 104.180789][ T8] usb 1-1: 0:2 : does not exist [ 104.185759][ T8] usb 1-1: usbmixer: too many channels (61) in unit 5 [ 104.197443][ T2905] hsr_slave_1: left promiscuous mode [ 104.213127][ T8] usb 1-1: USB disconnect, device number 5 [ 104.228277][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.244318][ T5344] udevd[5344]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.245809][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.276443][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.288753][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.328941][ T2905] veth0_macvtap: left promiscuous mode [ 104.335833][ T2905] veth1_vlan: left promiscuous mode [ 104.341757][ T2905] veth0_vlan: left promiscuous mode [ 104.754228][ T2905] team0 (unregistering): Port device team_slave_1 removed [ 104.829327][ T2905] team0 (unregistering): Port device team_slave_0 removed [ 104.846702][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 104.846722][ T29] audit: type=1326 audit(1727465479.806:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.0.500" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x0 [ 105.274330][ T6453] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.284214][ T6453] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.354279][ T6453] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.374966][ T6453] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.498232][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.521366][ T6629] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.544828][ T6629] bridge_slave_0: entered allmulticast mode [ 105.554010][ T6629] bridge_slave_0: entered promiscuous mode [ 105.597974][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.606723][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.614443][ T6629] bridge_slave_1: entered allmulticast mode [ 105.634042][ T6629] bridge_slave_1: entered promiscuous mode [ 105.646591][ T6720] netlink: 92 bytes leftover after parsing attributes in process `syz.2.504'. [ 105.776404][ T6629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.777063][ T5236] Bluetooth: hci0: command tx timeout [ 105.826471][ T6629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.934344][ T6629] team0: Port device team_slave_0 added [ 105.968992][ T6629] team0: Port device team_slave_1 added [ 106.057543][ T5288] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.084844][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.098246][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.155973][ T6629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.172493][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.205499][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.231497][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.236836][ T5288] usb 1-1: Using ep0 maxpacket: 16 [ 106.253826][ T5288] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 106.269577][ T6629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.280437][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.292116][ T6746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.510'. [ 106.304331][ T6746] netlink: 104 bytes leftover after parsing attributes in process `syz.4.510'. [ 106.327005][ T6746] netlink: 104 bytes leftover after parsing attributes in process `syz.4.510'. [ 106.335117][ T5288] usb 1-1: Product: syz [ 106.354623][ T6453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.365324][ T5288] usb 1-1: Manufacturer: syz [ 106.374080][ T5288] usb 1-1: SerialNumber: syz [ 106.382534][ T5288] usb 1-1: config 0 descriptor?? [ 106.399297][ T5288] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 106.419115][ T6629] hsr_slave_0: entered promiscuous mode [ 106.429578][ T6629] hsr_slave_1: entered promiscuous mode [ 106.441169][ T6629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.456603][ T6629] Cannot create hsr debugfs directory [ 106.515401][ T6453] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.561457][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.568640][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.594048][ T5288] gp8psk: usb in 128 operation failed. [ 106.601401][ T5288] gp8psk: usb in 137 operation failed. [ 106.607375][ T5288] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.623484][ T5288] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 106.635665][ T5288] usb 1-1: media controller created [ 106.648760][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.655876][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.670294][ T5288] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.695619][ T5288] gp8psk_fe: Frontend revision 1 attached [ 106.701765][ T5288] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 106.709931][ T5288] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 106.931767][ T6453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.953001][ T5288] gp8psk: usb in 137 operation failed. [ 106.975636][ T5288] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 106.999074][ T5288] gp8psk: found Genpix USB device pID = 201 (hex) [ 107.055808][ T5288] usb 1-1: USB disconnect, device number 6 [ 107.245655][ T5288] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 107.257485][ T6453] veth0_vlan: entered promiscuous mode [ 107.297610][ T6453] veth1_vlan: entered promiscuous mode [ 107.395141][ T6453] veth0_macvtap: entered promiscuous mode [ 107.459122][ T6453] veth1_macvtap: entered promiscuous mode [ 107.512631][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.565422][ T6768] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.587501][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.633098][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.664685][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.685569][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.698228][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.713618][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.779330][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.801608][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.815219][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.841898][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.853624][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.866130][ T5236] Bluetooth: hci0: command tx timeout [ 107.873640][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.895132][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.959234][ T6453] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.975189][ T6453] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.987321][ T6453] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.996162][ T6453] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.041039][ T6629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.087673][ T6629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.135476][ T6629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.170283][ T6629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.220492][ T6791] program syz.4.521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.374905][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.434556][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.556300][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.575754][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.755330][ T6629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.970036][ T6629] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.041065][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.048268][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.107907][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.115073][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.355226][ T6629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.525066][ T6629] veth0_vlan: entered promiscuous mode [ 109.582584][ T6629] veth1_vlan: entered promiscuous mode [ 109.729797][ T6629] veth0_macvtap: entered promiscuous mode [ 109.769249][ T6629] veth1_macvtap: entered promiscuous mode [ 109.938926][ T5236] Bluetooth: hci0: command tx timeout [ 109.945770][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.976746][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.988787][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.999814][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.011335][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.032653][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.052962][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.110767][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.138509][ T6629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.317796][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.358200][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.388919][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.406600][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.426700][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.469203][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.523239][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.536840][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.563684][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.589027][ T6629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.705987][ T945] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.752693][ T25] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 110.792402][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.828170][ T29] audit: type=1326 audit(1727465485.786:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.4.547" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x0 [ 110.851145][ T25] usb 1-1: config 0 descriptor?? [ 110.871979][ T6629] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.880859][ T25] cp210x 1-1:0.0: cp210x converter detected [ 110.920068][ T6629] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.946687][ T6629] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.972604][ T6629] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.045956][ T945] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.114088][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.123518][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.132965][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.141490][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.151593][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 111.162289][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.205795][ T945] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.290673][ T25] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 111.335324][ T25] usb 1-1: cp210x converter now attached to ttyUSB0 [ 111.404597][ T945] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.530362][ T25] usb 1-1: USB disconnect, device number 7 [ 111.549989][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 111.605790][ T25] cp210x 1-1:0.0: device disconnected [ 111.625123][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.656976][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.815642][ T945] bridge_slave_1: left allmulticast mode [ 111.830463][ T945] bridge_slave_1: left promiscuous mode [ 111.836336][ T945] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.906765][ T945] bridge_slave_0: left allmulticast mode [ 111.924453][ T945] bridge_slave_0: left promiscuous mode [ 111.941258][ T945] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.288127][ T6919] sctp: [Deprecated]: syz.4.555 (pid 6919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.288127][ T6919] Use struct sctp_sack_info instead [ 113.031920][ T945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.061652][ T945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.077366][ T945] bond0 (unregistering): Released all slaves [ 113.098345][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.107458][ T6905] netlink: 'syz.3.551': attribute type 4 has an invalid length. [ 113.115628][ T6935] netlink: 'syz.4.559': attribute type 1 has an invalid length. [ 113.131351][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.218889][ T5245] Bluetooth: hci3: command tx timeout [ 113.339810][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 113.982147][ T6994] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.006009][ T6994] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.014975][ T6994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.157347][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.164491][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.188413][ T6888] bridge_slave_0: entered allmulticast mode [ 114.195403][ T6888] bridge_slave_0: entered promiscuous mode [ 114.281000][ T945] hsr_slave_0: left promiscuous mode [ 114.354662][ T945] hsr_slave_1: left promiscuous mode [ 114.372387][ T945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.389676][ T945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.398135][ T7007] tmpfs: Unknown parameter 'f' [ 114.417406][ T945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.430861][ T945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.473016][ T945] veth1_macvtap: left promiscuous mode [ 114.479359][ T945] veth0_macvtap: left promiscuous mode [ 114.493842][ T945] veth1_vlan: left promiscuous mode [ 114.500506][ T945] veth0_vlan: left promiscuous mode [ 115.056217][ T945] team0 (unregistering): Port device team_slave_1 removed [ 115.098784][ T945] team0 (unregistering): Port device team_slave_0 removed [ 115.302397][ T5245] Bluetooth: hci3: command tx timeout [ 115.514228][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.521885][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.532076][ T6888] bridge_slave_1: entered allmulticast mode [ 115.544752][ T6888] bridge_slave_1: entered promiscuous mode [ 115.595509][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.612260][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.783871][ T6888] team0: Port device team_slave_0 added [ 115.805115][ T6888] team0: Port device team_slave_1 added [ 115.931364][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.946594][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.972590][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.046261][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.097652][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.104657][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.163242][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.279063][ T7040] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.596'. [ 116.301749][ T7040] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 116.347985][ T6888] hsr_slave_0: entered promiscuous mode [ 116.377164][ T6888] hsr_slave_1: entered promiscuous mode [ 116.861742][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.870633][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.880842][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.890736][ T945] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.909929][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.917107][ T7069] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 116.927445][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.935345][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.996549][ T29] audit: type=1326 audit(1727465491.956:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.0.604" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x0 [ 117.131995][ T945] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.335832][ T945] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.378576][ T5236] Bluetooth: hci3: command tx timeout [ 117.462592][ T945] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.703431][ T29] audit: type=1326 audit(1727465492.666:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.1.614" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x0 [ 117.984184][ T7110] raw_sendmsg: syz.3.615 forgot to set AF_INET. Fix it! [ 118.146181][ T945] bridge_slave_1: left allmulticast mode [ 118.152103][ T945] bridge_slave_1: left promiscuous mode [ 118.167624][ T945] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.191390][ T945] bridge_slave_0: left allmulticast mode [ 118.199399][ T945] bridge_slave_0: left promiscuous mode [ 118.205146][ T945] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.842882][ T945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.855894][ T945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.872531][ T945] bond0 (unregistering): Released all slaves [ 118.949500][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 118.961989][ T5285] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.977799][ T5236] Bluetooth: hci2: command tx timeout [ 119.031500][ T7072] chnl_net:caif_netlink_parms(): no params data found [ 119.077465][ T6888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.087635][ T6888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.214837][ T5285] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 119.224299][ T6888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.231379][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.251095][ T6888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.272529][ T5285] usb 4-1: config 0 descriptor?? [ 119.316849][ T5285] cp210x 4-1:0.0: cp210x converter detected [ 119.457025][ T5236] Bluetooth: hci3: command tx timeout [ 119.547001][ T7151] netlink: 'syz.1.633': attribute type 4 has an invalid length. [ 119.758939][ T5285] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 119.767533][ T945] hsr_slave_0: left promiscuous mode [ 119.783441][ T5285] usb 4-1: cp210x converter now attached to ttyUSB0 [ 119.854270][ T945] hsr_slave_1: left promiscuous mode [ 119.868716][ T945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.876170][ T945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.907613][ T945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.917013][ T7167] netlink: 60 bytes leftover after parsing attributes in process `syz.1.637'. [ 119.934168][ T945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.991804][ T8] usb 4-1: USB disconnect, device number 6 [ 119.994650][ T945] veth1_macvtap: left promiscuous mode [ 120.013642][ T945] veth0_macvtap: left promiscuous mode [ 120.023116][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 120.027423][ T945] veth1_vlan: left promiscuous mode [ 120.054721][ T8] cp210x 4-1:0.0: device disconnected [ 120.062865][ T945] veth0_vlan: left promiscuous mode [ 120.934826][ T945] team0 (unregistering): Port device team_slave_1 removed [ 121.001532][ T945] team0 (unregistering): Port device team_slave_0 removed [ 121.077200][ T5236] Bluetooth: hci2: command tx timeout [ 121.766984][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.774285][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.791286][ T7072] bridge_slave_0: entered allmulticast mode [ 121.801549][ T7072] bridge_slave_0: entered promiscuous mode [ 121.829922][ T7167] : entered promiscuous mode [ 121.876939][ T7072] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.926941][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.934222][ T7072] bridge_slave_1: entered allmulticast mode [ 121.949190][ T7072] bridge_slave_1: entered promiscuous mode [ 122.095730][ T7072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.140745][ T7072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.323978][ T7072] team0: Port device team_slave_0 added [ 122.385545][ T7072] team0: Port device team_slave_1 added [ 122.446465][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.598729][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.610622][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.672418][ T7072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.719535][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.754782][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.784902][ T7072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.921532][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.970854][ T7072] hsr_slave_0: entered promiscuous mode [ 123.010957][ T7072] hsr_slave_1: entered promiscuous mode [ 123.025194][ T7072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.035932][ T7072] Cannot create hsr debugfs directory [ 123.052392][ T7221] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 123.095966][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 123.122895][ T7221] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 123.139079][ T5236] Bluetooth: hci2: command tx timeout [ 123.203961][ T945] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.211143][ T945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.230691][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.237885][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.246867][ T5289] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.452557][ T5289] usb 4-1: Using ep0 maxpacket: 8 [ 123.483015][ T5289] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 123.493103][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.530875][ T5289] usb 4-1: Product: syz [ 123.548608][ T5289] usb 4-1: Manufacturer: syz [ 123.553264][ T5289] usb 4-1: SerialNumber: syz [ 123.571400][ T5289] usb 4-1: config 0 descriptor?? [ 123.673118][ T7241] loop4: detected capacity change from 0 to 7 [ 123.713905][ T7241] Dev loop4: unable to read RDB block 7 [ 123.743044][ T7241] loop4: unable to read partition table [ 123.790718][ T7241] loop4: partition table beyond EOD, truncated [ 123.817066][ T7241] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 123.817066][ T7241] ) failed (rc=-5) [ 123.981202][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.002397][ T5289] kaweth 4-1:0.0: Firmware present in device. [ 124.031590][ T5289] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 124.050617][ T5289] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 124.065979][ T5289] usb 4-1: USB disconnect, device number 7 [ 124.081098][ T5290] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.215691][ T6888] veth0_vlan: entered promiscuous mode [ 124.229408][ T6888] veth1_vlan: entered promiscuous mode [ 124.312202][ T5290] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 124.330446][ T5290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.338726][ T5290] usb 1-1: Product: syz [ 124.342910][ T5290] usb 1-1: Manufacturer: syz [ 124.347601][ T5290] usb 1-1: SerialNumber: syz [ 124.361803][ T5290] usb 1-1: config 0 descriptor?? [ 124.373943][ T5290] ch341 1-1:0.0: ch341-uart converter detected [ 124.425542][ T6888] veth0_macvtap: entered promiscuous mode [ 124.436007][ T6888] veth1_macvtap: entered promiscuous mode [ 124.454814][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.465824][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.477077][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.487609][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.497538][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.508083][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.519779][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.665997][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.686842][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.706314][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.739428][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.764348][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.782789][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.845019][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.918784][ T6888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.932167][ T6888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.941399][ T6888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.950483][ T6888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.178965][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.188914][ T5290] usb 1-1: failed to send control message: -71 [ 125.195230][ T5290] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 125.220539][ T5236] Bluetooth: hci2: command tx timeout [ 125.223830][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.229506][ T5290] usb 1-1: USB disconnect, device number 8 [ 125.243176][ T5290] ch341 1-1:0.0: device disconnected [ 125.367606][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.375483][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.381553][ T7072] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.431482][ T7072] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.437365][ T7293] capability: warning: `syz.3.670' uses deprecated v2 capabilities in a way that may be insecure [ 125.495012][ T7072] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.533367][ T7072] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.785380][ T7072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.914185][ T7072] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.960403][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.967739][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.215636][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.222831][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.573562][ T7072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.789309][ T7072] veth0_vlan: entered promiscuous mode [ 126.911677][ T7072] veth1_vlan: entered promiscuous mode [ 126.999927][ T7353] netlink: 'syz.1.680': attribute type 16 has an invalid length. [ 127.021110][ T7072] veth0_macvtap: entered promiscuous mode [ 127.032971][ T7072] veth1_macvtap: entered promiscuous mode [ 127.040332][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 127.070962][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.081758][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.091833][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.102493][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.112378][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.122945][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.133425][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.144766][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.156147][ T7072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.199290][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.209846][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.219878][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.230361][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.241055][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.252471][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.262417][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.272972][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.284484][ T7072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.294753][ T7072] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.303963][ T7072] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.312794][ T7072] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.321579][ T7072] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.593001][ T7371] loop4: detected capacity change from 0 to 7 [ 127.626994][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.648394][ T7371] Buffer I/O error on dev loop4, logical block 0, async page read [ 127.653570][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.656325][ T7371] Buffer I/O error on dev loop4, logical block 0, async page read [ 127.671859][ T7371] Buffer I/O error on dev loop4, logical block 0, async page read [ 127.716279][ T7371] Buffer I/O error on dev loop4, logical block 0, async page read [ 127.724510][ T7371] Buffer I/O error on dev loop4, logical block 0, async page read [ 127.736804][ T7371] Buffer I/O error on dev loop4, logical block 0, async page read [ 127.757031][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.765847][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.778174][ T7371] Buffer I/O error on dev loop4, logical block 0, async page read [ 127.794538][ T7371] ldm_validate_partition_table(): Disk read failed. [ 127.803994][ T7371] Buffer I/O error on dev loop4, logical block 0, async page read [ 127.812640][ T7371] Buffer I/O error on dev loop4, logical block 0, async page read [ 127.821395][ T7371] Buffer I/O error on dev loop4, logical block 0, async page read [ 127.831382][ T7371] Dev loop4: unable to read RDB block 0 [ 127.840332][ T7371] loop4: unable to read partition table [ 127.846278][ T7371] loop4: partition table beyond EOD, truncated [ 127.859808][ T7371] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 127.859808][ T7371] ) failed (rc=-5) [ 127.947754][ T4687] ldm_validate_partition_table(): Disk read failed. [ 127.956299][ T4687] Dev loop4: unable to read RDB block 0 [ 127.962264][ T4687] loop4: unable to read partition table [ 127.968319][ T4687] loop4: partition table beyond EOD, truncated [ 127.988779][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 128.000664][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'. [ 128.187228][ T937] IPVS: starting estimator thread 0... [ 128.214389][ T7391] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 128.224147][ T7393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.693'. [ 128.327981][ T7395] IPVS: using max 26 ests per chain, 62400 per kthread [ 129.862363][ T29] audit: type=1326 audit(1727465504.816:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.1.713" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x0 [ 130.021624][ T2997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.299129][ T2997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.540315][ T2997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.645720][ T2997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.850098][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.723'. [ 130.904286][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.931080][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.939565][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.023201][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.083670][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 131.105338][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.183983][ T7489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.730'. [ 131.208564][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 131.224157][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 131.311926][ T2997] bridge_slave_1: left allmulticast mode [ 131.338698][ T2997] bridge_slave_1: left promiscuous mode [ 131.392571][ T2997] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.423905][ T2997] bridge_slave_0: left allmulticast mode [ 131.432661][ T2997] bridge_slave_0: left promiscuous mode [ 131.450835][ T2997] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.155160][ T2997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.171206][ T2997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.184169][ T2997] bond0 (unregistering): Released all slaves [ 133.064718][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.071784][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.236749][ T5245] Bluetooth: hci3: command tx timeout [ 133.685766][ T7495] chnl_net:caif_netlink_parms(): no params data found [ 135.296712][ T5245] Bluetooth: hci3: command tx timeout [ 137.376830][ T5245] Bluetooth: hci3: command tx timeout [ 139.458292][ T5245] Bluetooth: hci3: command tx timeout [ 143.537942][ T7568] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 144.048963][ T2997] hsr_slave_0: left promiscuous mode [ 144.086438][ T2997] hsr_slave_1: left promiscuous mode [ 144.092764][ T46] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 144.115416][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.139710][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.199975][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.224816][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.268884][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 144.282881][ T46] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a5, bcdDevice=23.a2 [ 144.328103][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.370236][ T2997] veth1_macvtap: left promiscuous mode [ 144.383343][ T46] usb 4-1: Product: syz [ 144.406154][ T46] usb 4-1: Manufacturer: syz [ 144.427240][ T46] usb 4-1: SerialNumber: syz [ 144.455281][ T46] usb 4-1: config 0 descriptor?? [ 144.489086][ T46] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 144.563866][ T46] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 144.573395][ T46] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 144.589976][ T2997] veth0_macvtap: left promiscuous mode [ 144.602976][ T2997] veth1_vlan: left promiscuous mode [ 144.612052][ T2997] veth0_vlan: left promiscuous mode [ 144.708674][ T46] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 144.721934][ T46] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 144.806689][ T46] usb 4-1: dvb_usb_v2: found a 'Terratec H7 Rev.4' in warm state [ 144.848399][ T46] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 144.884260][ T46] dvbdev: DVB: registering new adapter (Terratec H7 Rev.4) [ 144.912925][ T46] usb 4-1: media controller created [ 144.928243][ T46] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 144.963422][ T46] usb 4-1: dvb_usb_v2: MAC address: 00:00:00:00:00:00 [ 145.006242][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.945118][ T5289] usb 4-1: USB disconnect, device number 8 [ 154.914709][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.924216][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.932748][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.943205][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.956834][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.966449][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.978156][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.987831][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.006997][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.014387][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.023539][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.033710][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.606685][ T5245] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.616373][ T5245] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.625913][ T5245] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.638345][ T5245] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.647698][ T5245] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.655091][ T5245] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.143289][ T5236] Bluetooth: hci6: command tx timeout [ 157.150908][ T5245] Bluetooth: hci5: command tx timeout [ 157.696628][ T5245] Bluetooth: hci7: command tx timeout [ 157.838404][ T5236] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 157.848657][ T5236] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 157.860252][ T5236] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 157.869772][ T5236] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 157.877842][ T5236] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 157.887130][ T5236] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 159.216863][ T5236] Bluetooth: hci6: command tx timeout [ 159.223612][ T5245] Bluetooth: hci5: command tx timeout [ 159.776707][ T5245] Bluetooth: hci7: command tx timeout [ 159.936925][ T5245] Bluetooth: hci8: command tx timeout [ 160.346504][ C0] sched: DL replenish lagged too much [ 161.296910][ T5236] Bluetooth: hci5: command tx timeout [ 161.302385][ T5236] Bluetooth: hci6: command tx timeout [ 161.856936][ T5236] Bluetooth: hci7: command tx timeout [ 162.016860][ T5236] Bluetooth: hci8: command tx timeout [ 163.376882][ T5245] Bluetooth: hci5: command tx timeout [ 163.383621][ T5236] Bluetooth: hci6: command tx timeout [ 163.936687][ T5236] Bluetooth: hci7: command tx timeout [ 164.099686][ T5236] Bluetooth: hci8: command tx timeout [ 166.176689][ T5236] Bluetooth: hci8: command tx timeout [ 176.104354][ T5236] Bluetooth: hci1: command 0x0406 tx timeout [ 192.185716][ T5236] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 192.197797][ T5236] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 192.206238][ T5236] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 192.214766][ T5236] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 192.222730][ T5236] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 192.236647][ T5236] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 194.336702][ T5245] Bluetooth: hci9: command tx timeout [ 194.498056][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.504488][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.416817][ T5245] Bluetooth: hci9: command tx timeout [ 198.496746][ T5245] Bluetooth: hci9: command tx timeout [ 200.576662][ T5245] Bluetooth: hci9: command tx timeout [ 216.712051][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 216.721509][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 216.732573][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 216.753230][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 216.763507][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 216.772982][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 216.940077][ T5245] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 216.950109][ T5245] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 216.959183][ T5245] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 216.969679][ T5245] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 216.977644][ T5245] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 216.985114][ T5245] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 217.058717][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 217.144485][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 217.153935][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 217.163288][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 217.171886][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 217.186899][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 217.195601][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 218.323194][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 218.332582][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 218.347761][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 218.356152][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 218.364115][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 218.373997][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 218.816676][ T54] Bluetooth: hci10: command tx timeout [ 219.056749][ T54] Bluetooth: hci11: command tx timeout [ 219.296646][ T54] Bluetooth: hci12: command tx timeout [ 220.417930][ T54] Bluetooth: hci13: command tx timeout [ 220.896687][ T54] Bluetooth: hci10: command tx timeout [ 221.138789][ T54] Bluetooth: hci11: command tx timeout [ 221.376653][ T54] Bluetooth: hci12: command tx timeout [ 222.496792][ T54] Bluetooth: hci13: command tx timeout [ 222.976552][ T54] Bluetooth: hci10: command tx timeout [ 223.216643][ T54] Bluetooth: hci11: command tx timeout [ 223.456735][ T54] Bluetooth: hci12: command tx timeout [ 224.576741][ T5236] Bluetooth: hci13: command tx timeout [ 225.066150][ T54] Bluetooth: hci10: command tx timeout [ 225.296714][ T5236] Bluetooth: hci11: command tx timeout [ 225.537839][ T5236] Bluetooth: hci12: command tx timeout [ 226.656721][ T5236] Bluetooth: hci13: command tx timeout [ 227.302892][ T5236] Bluetooth: hci0: command 0x0406 tx timeout [ 242.662402][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 252.355104][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 252.364494][ T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 252.376207][ T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 252.387445][ T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 252.395250][ T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 252.404631][ T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 254.496761][ T5236] Bluetooth: hci14: command tx timeout [ 255.958368][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.964926][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.576765][ T54] Bluetooth: hci14: command tx timeout [ 258.026500][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 258.658370][ T5236] Bluetooth: hci14: command tx timeout [ 259.429649][ T2997] team0 (unregistering): Port device team_slave_1 removed [ 259.561059][ T2997] team0 (unregistering): Port device team_slave_0 removed [ 260.738918][ T5236] Bluetooth: hci14: command tx timeout [ 276.677326][ T5246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.690832][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.699887][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.714752][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.723927][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.731446][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.015339][ T4623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.025472][ T4623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.036304][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.056060][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.066982][ T4623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.078424][ T4623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.086919][ T4623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.095330][ T4623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.104268][ T4623] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.112036][ T4623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.119800][ T4623] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.128964][ T4623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.496695][ T4623] Bluetooth: hci5: command 0x0406 tx timeout [ 278.502840][ T4623] Bluetooth: hci6: command 0x0406 tx timeout [ 278.509085][ T5246] Bluetooth: hci7: command 0x0406 tx timeout [ 278.816684][ T54] Bluetooth: hci0: command tx timeout [ 278.939829][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.955991][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.969027][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.977275][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.985550][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.994236][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.216697][ T5236] Bluetooth: hci1: command tx timeout [ 279.224402][ T54] Bluetooth: hci2: command tx timeout [ 280.896634][ T54] Bluetooth: hci0: command tx timeout [ 281.056871][ T54] Bluetooth: hci3: command tx timeout [ 281.296586][ T54] Bluetooth: hci2: command tx timeout [ 281.302051][ T54] Bluetooth: hci1: command tx timeout [ 282.976603][ T5236] Bluetooth: hci0: command tx timeout [ 283.136649][ T5236] Bluetooth: hci3: command tx timeout [ 283.376692][ T5245] Bluetooth: hci2: command tx timeout [ 283.383324][ T5236] Bluetooth: hci1: command tx timeout [ 283.623642][ T5236] Bluetooth: hci8: command 0x0406 tx timeout [ 285.056744][ T54] Bluetooth: hci0: command tx timeout [ 285.216553][ T54] Bluetooth: hci3: command tx timeout [ 285.456657][ T5236] Bluetooth: hci2: command tx timeout [ 285.462163][ T54] Bluetooth: hci1: command tx timeout [ 287.296700][ T54] Bluetooth: hci3: command tx timeout [ 313.393798][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.452006][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.471790][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.546991][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.586075][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 313.622109][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.856704][ T5236] Bluetooth: hci4: command tx timeout [ 317.379534][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.385883][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.936603][ T54] Bluetooth: hci4: command tx timeout [ 319.456608][ T54] Bluetooth: hci9: command 0x0406 tx timeout [ 320.016743][ T5236] Bluetooth: hci4: command tx timeout [ 322.096873][ T5236] Bluetooth: hci4: command tx timeout [ 336.756984][ T54] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 336.776709][ T54] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 336.788252][ T54] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 336.798024][ T54] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 336.805749][ T54] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 336.814508][ T54] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 336.981424][ T54] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 336.996025][ T54] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 337.005551][ T54] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 337.021312][ T54] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 337.030466][ T54] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 337.038542][ T54] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 337.334697][ T5236] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 337.346232][ T5236] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 337.354941][ T5236] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 337.365126][ T5236] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 337.375943][ T5236] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 337.383471][ T5236] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 338.896721][ T5236] Bluetooth: hci15: command tx timeout [ 339.136672][ T5236] Bluetooth: hci16: command tx timeout [ 339.457398][ T5240] Bluetooth: hci17: command tx timeout [ 339.466546][ T5246] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 339.484501][ T5246] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 339.494394][ T5246] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 339.504129][ T5246] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 339.513331][ T5246] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 339.521192][ T5246] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 339.956504][ T5236] Bluetooth: hci12: command 0x0406 tx timeout [ 339.962684][ T5236] Bluetooth: hci11: command 0x0406 tx timeout [ 339.976499][ T5246] Bluetooth: hci10: command 0x0406 tx timeout [ 340.976585][ T5245] Bluetooth: hci15: command tx timeout [ 341.216762][ T5245] Bluetooth: hci16: command tx timeout [ 341.536581][ T5245] Bluetooth: hci17: command tx timeout [ 341.616581][ T5245] Bluetooth: hci18: command tx timeout [ 343.056734][ T5245] Bluetooth: hci15: command tx timeout [ 343.297851][ T5245] Bluetooth: hci16: command tx timeout [ 343.616614][ T4623] Bluetooth: hci17: command tx timeout [ 343.696557][ T5245] Bluetooth: hci18: command tx timeout [ 345.056948][ T5245] Bluetooth: hci13: command 0x0406 tx timeout [ 345.137824][ T54] Bluetooth: hci15: command tx timeout [ 345.376652][ T54] Bluetooth: hci16: command tx timeout [ 345.696541][ T54] Bluetooth: hci17: command tx timeout [ 345.776590][ T54] Bluetooth: hci18: command tx timeout [ 347.856677][ T54] Bluetooth: hci18: command tx timeout [ 374.439292][ T4623] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 374.461920][ T4623] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 374.487957][ T4623] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 374.557942][ T4623] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 374.608038][ T4623] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 374.636599][ T4623] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 375.776641][ T5245] Bluetooth: hci14: command 0x0406 tx timeout [ 376.819802][ T54] Bluetooth: hci19: command tx timeout [ 378.821788][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.831387][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.896535][ T54] Bluetooth: hci19: command tx timeout [ 380.976547][ T54] Bluetooth: hci19: command tx timeout [ 383.063359][ T54] Bluetooth: hci19: command tx timeout [ 398.457478][ T5245] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 398.476644][ T5245] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 398.489158][ T5245] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 398.498635][ T5245] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 398.506557][ T5245] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 398.515359][ T5245] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 398.869648][ T5245] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 398.881199][ T5245] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 398.890135][ T5245] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 398.902087][ T5245] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 398.916609][ T5245] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 398.924118][ T5245] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 399.118021][ T54] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 399.136981][ T54] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 399.145453][ T54] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 399.161319][ T54] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 399.172587][ T54] Bluetooth: hci22: unexpected cc 0x0c25 length: 249 > 3 [ 399.184848][ T54] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 400.433288][ T5245] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 400.448241][ T5245] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 400.457416][ T5245] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 400.465627][ T5245] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 400.474124][ T5245] Bluetooth: hci23: unexpected cc 0x0c25 length: 249 > 3 [ 400.483405][ T5245] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 400.576622][ T5245] Bluetooth: hci20: command tx timeout [ 400.983418][ T5245] Bluetooth: hci21: command tx timeout [ 401.296616][ T5245] Bluetooth: hci22: command tx timeout [ 401.395489][ T5246] Bluetooth: hci0: command 0x0406 tx timeout [ 401.402072][ T5245] Bluetooth: hci3: command 0x0406 tx timeout [ 401.408221][ T5246] Bluetooth: hci1: command 0x0406 tx timeout [ 401.414258][ T5246] Bluetooth: hci2: command 0x0406 tx timeout [ 402.576839][ T54] Bluetooth: hci23: command tx timeout [ 402.656589][ T54] Bluetooth: hci20: command tx timeout [ 403.056755][ T54] Bluetooth: hci21: command tx timeout [ 403.376560][ T54] Bluetooth: hci22: command tx timeout [ 404.656680][ T54] Bluetooth: hci23: command tx timeout [ 404.736685][ T54] Bluetooth: hci20: command tx timeout [ 405.136572][ T54] Bluetooth: hci21: command tx timeout [ 405.460798][ T54] Bluetooth: hci22: command tx timeout [ 406.736751][ T54] Bluetooth: hci23: command tx timeout [ 406.816644][ T54] Bluetooth: hci20: command tx timeout [ 407.216582][ T54] Bluetooth: hci21: command tx timeout [ 407.536541][ T54] Bluetooth: hci22: command tx timeout [ 408.816693][ T54] Bluetooth: hci23: command tx timeout [ 416.584760][ T30] INFO: task kworker/u8:10:2997 blocked for more than 143 seconds. [ 416.594379][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 416.634222][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.694507][ T30] task:kworker/u8:10 state:D stack:20088 pid:2997 tgid:2997 ppid:2 flags:0x00004000 [ 416.791602][ T30] Workqueue: netns cleanup_net [ 416.826502][ T30] Call Trace: [ 416.829869][ T30] [ 416.832829][ T30] __schedule+0x1895/0x4b30 [ 416.870066][ T30] ? __pfx___schedule+0x10/0x10 [ 416.874993][ T30] ? __pfx_lock_release+0x10/0x10 [ 416.943784][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 416.965317][ T30] ? kthread_data+0x52/0xd0 [ 416.996518][ T30] ? schedule+0x90/0x320 [ 417.000854][ T30] ? wq_worker_sleeping+0x66/0x240 [ 417.006104][ T30] ? schedule+0x90/0x320 [ 417.086417][ T30] schedule+0x14b/0x320 [ 417.090669][ T30] schedule_preempt_disabled+0x13/0x30 [ 417.096154][ T30] __mutex_lock+0x6a7/0xd70 [ 417.144046][ T30] ? __mutex_lock+0x52a/0xd70 [ 417.163081][ T30] ? wg_destruct+0x25/0x2e0 [ 417.176569][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 417.181666][ T30] ? __pfx_free_percpu+0x10/0x10 [ 417.213893][ T30] ? kobject_put+0x272/0x480 [ 417.235714][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 417.266481][ T30] wg_destruct+0x25/0x2e0 [ 417.271137][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 417.276277][ T30] netdev_run_todo+0xe1a/0x1000 [ 417.316559][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 417.321916][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 417.366429][ T30] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 417.372664][ T30] default_device_exit_batch+0xa24/0xaa0 [ 417.416548][ T30] ? __pfx___might_resched+0x10/0x10 [ 417.421910][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 417.467564][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 417.473102][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 417.509392][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 417.515715][ T30] cleanup_net+0x89d/0xcc0 [ 417.557006][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 417.562039][ T30] ? process_scheduled_works+0x976/0x1850 [ 417.596478][ T30] process_scheduled_works+0xa63/0x1850 [ 417.602141][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 417.626250][ T30] ? assign_work+0x364/0x3d0 [ 417.636588][ T30] worker_thread+0x870/0xd30 [ 417.642403][ T30] ? __kthread_parkme+0x169/0x1d0 [ 417.663213][ T30] ? __pfx_worker_thread+0x10/0x10 [ 417.686142][ T30] kthread+0x2f0/0x390 [ 417.697029][ T30] ? __pfx_worker_thread+0x10/0x10 [ 417.702207][ T30] ? __pfx_kthread+0x10/0x10 [ 417.729510][ T30] ret_from_fork+0x4b/0x80 [ 417.734000][ T30] ? __pfx_kthread+0x10/0x10 [ 417.756565][ T30] ret_from_fork_asm+0x1a/0x30 [ 417.761415][ T30] [ 417.785429][ T30] INFO: task dhcpcd:4900 blocked for more than 144 seconds. [ 417.803378][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 417.823917][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.852378][ T30] task:dhcpcd state:D stack:21632 pid:4900 tgid:4900 ppid:1 flags:0x00000002 [ 417.881272][ T30] Call Trace: [ 417.884622][ T30] [ 417.900497][ T30] __schedule+0x1895/0x4b30 [ 417.916470][ T30] ? __pfx___schedule+0x10/0x10 [ 417.921405][ T30] ? __pfx_lock_release+0x10/0x10 [ 417.934972][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 417.942156][ T30] ? schedule+0x90/0x320 [ 417.955591][ T30] schedule+0x14b/0x320 [ 417.960315][ T30] schedule_preempt_disabled+0x13/0x30 [ 417.965827][ T30] __mutex_lock+0x6a7/0xd70 [ 417.978496][ T30] ? __mutex_lock+0x52a/0xd70 [ 417.983227][ T30] ? vlan_ioctl_handler+0x112/0x9d0 [ 417.994835][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 418.001793][ T30] ? __might_fault+0xc6/0x120 [ 418.013415][ T30] vlan_ioctl_handler+0x112/0x9d0 [ 418.020064][ T30] ? sock_ioctl+0x661/0x8e0 [ 418.024617][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 418.036157][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 418.043481][ T30] sock_ioctl+0x680/0x8e0 [ 418.056518][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 418.061627][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 418.072822][ T30] __se_sys_ioctl+0xf9/0x170 [ 418.077855][ T30] do_syscall_64+0xf3/0x230 [ 418.082417][ T30] ? clear_bhb_loop+0x35/0x90 [ 418.095417][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.102402][ T30] RIP: 0033:0x7faa901ddd49 [ 418.114349][ T30] RSP: 002b:00007ffc868bd118 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.124235][ T30] RAX: ffffffffffffffda RBX: 0000562ddb8b4750 RCX: 00007faa901ddd49 [ 418.136670][ T30] RDX: 00007ffc868bd120 RSI: 0000000000008982 RDI: 0000000000000011 [ 418.144694][ T30] RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000 [ 418.162155][ T30] R10: 00007ffc868cd7a0 R11: 0000000000000246 R12: 00007ffc868bd120 [ 418.172995][ T30] R13: 00007ffc868bd1e0 R14: 0000562ddb8b4750 R15: 0000562ddba4f940 [ 418.189398][ T30] [ 418.192559][ T30] INFO: task syz.0.763:7599 blocked for more than 144 seconds. [ 418.205254][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 418.216264][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.230134][ T30] task:syz.0.763 state:D stack:25696 pid:7599 tgid:7598 ppid:5255 flags:0x20004002 [ 418.243078][ T30] Call Trace: [ 418.252236][ T30] [ 418.259819][ T30] __schedule+0x1895/0x4b30 [ 418.264570][ T30] ? __pfx___schedule+0x10/0x10 [ 418.274279][ T30] ? __pfx_lock_release+0x10/0x10 [ 418.283046][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 418.293269][ T30] ? schedule+0x90/0x320 [ 418.300203][ T30] schedule+0x14b/0x320 [ 418.304423][ T30] schedule_preempt_disabled+0x13/0x30 [ 418.314710][ T30] __mutex_lock+0x6a7/0xd70 [ 418.322976][ T30] ? __mutex_lock+0x52a/0xd70 [ 418.332788][ T30] ? tun_chr_close+0x3b/0x1b0 [ 418.340950][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 418.346034][ T30] ? __pfx_call_rcu+0x10/0x10 [ 418.361196][ T30] tun_chr_close+0x3b/0x1b0 [ 418.365768][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 418.375801][ T30] __fput+0x23f/0x880 [ 418.383490][ T30] task_work_run+0x24f/0x310 [ 418.392878][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 418.400751][ T30] ? __pfx_task_work_run+0x10/0x10 [ 418.405910][ T30] ? do_exit+0xa2a/0x28e0 [ 418.417058][ T30] ? kmem_cache_free+0x1a2/0x420 [ 418.422059][ T30] ? do_exit+0xa2a/0x28e0 [ 418.432870][ T30] do_exit+0xa2f/0x28e0 [ 418.437821][ T30] ? __pfx_do_exit+0x10/0x10 [ 418.442462][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 418.456108][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.464865][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.478452][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 418.483719][ T30] do_group_exit+0x207/0x2c0 [ 418.494054][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.502144][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 418.512193][ T30] get_signal+0x16a3/0x1740 [ 418.519878][ T30] ? __pfx_get_signal+0x10/0x10 [ 418.524813][ T30] ? fput+0x1a8/0x230 [ 418.533589][ T30] arch_do_signal_or_restart+0x96/0x860 [ 418.541742][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 418.553475][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 418.563690][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 418.574051][ T30] __do_fast_syscall_32+0xc4/0x110 [ 418.582562][ T30] ? exc_page_fault+0x590/0x8c0 [ 418.592329][ T30] do_fast_syscall_32+0x34/0x80 [ 418.599748][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.606124][ T30] RIP: 0023:0xf749d579 [ 418.616229][ T30] RSP: 002b:00000000f578656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 418.627509][ T30] RAX: 0000000000000034 RBX: 0000000000000003 RCX: 0000000020000080 [ 418.635540][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 418.651917][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 418.660839][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 418.679229][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 418.694006][ T30] [ 418.697409][ T30] INFO: task syz-executor:7625 blocked for more than 145 seconds. [ 418.705248][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 418.716399][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.725204][ T30] task:syz-executor state:D stack:24976 pid:7625 tgid:7625 ppid:1 flags:0x20004006 [ 418.743145][ T30] Call Trace: [ 418.753147][ T30] [ 418.756131][ T30] __schedule+0x1895/0x4b30 [ 418.767710][ T30] ? __pfx___schedule+0x10/0x10 [ 418.772634][ T30] ? __pfx_lock_release+0x10/0x10 [ 418.786151][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 418.792076][ T30] ? schedule+0x90/0x320 [ 418.803273][ T30] schedule+0x14b/0x320 [ 418.809080][ T30] schedule_preempt_disabled+0x13/0x30 [ 418.814605][ T30] __mutex_lock+0x6a7/0xd70 [ 418.826467][ T30] ? __mutex_lock+0x52a/0xd70 [ 418.831214][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 418.844493][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 418.849933][ T30] ? read_word_at_a_time+0xe/0x20 [ 418.855003][ T30] ? sized_strscpy+0x8d/0x220 [ 418.866456][ T30] ip_tunnel_init_net+0x20e/0x720 [ 418.874185][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 418.886915][ T30] vti_init_net+0x2e/0xf0 [ 418.891325][ T30] ops_init+0x31e/0x590 [ 418.895517][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 418.908416][ T30] setup_net+0x287/0x9e0 [ 418.912726][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 418.924322][ T30] ? __pfx_setup_net+0x10/0x10 [ 418.931684][ T30] copy_net_ns+0x33f/0x570 [ 418.936169][ T30] create_new_namespaces+0x425/0x7b0 [ 418.950379][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 418.960011][ T30] ksys_unshare+0x619/0xc10 [ 418.964694][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 418.975972][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.990335][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 419.000984][ T30] __ia32_sys_unshare+0x37/0x40 [ 419.005978][ T30] __do_fast_syscall_32+0xb4/0x110 [ 419.015983][ T30] ? exc_page_fault+0x590/0x8c0 [ 419.024502][ T30] do_fast_syscall_32+0x34/0x80 [ 419.033097][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 419.043331][ T30] RIP: 0023:0xf7fd5579 [ 419.052368][ T30] RSP: 002b:00000000f75bff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 419.064974][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 419.083199][ T30] RDX: 00000000f745bff4 RSI: 00000000f733215e RDI: 0000000030000000 [ 419.091863][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 419.107355][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 419.115383][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 419.131653][ T30] [ 419.134789][ T30] INFO: task syz-executor:7627 blocked for more than 145 seconds. [ 419.145616][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 419.156680][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.165411][ T30] task:syz-executor state:D stack:25624 pid:7627 tgid:7627 ppid:1 flags:0x20004006 [ 419.184413][ T30] Call Trace: [ 419.189361][ T30] [ 419.192333][ T30] __schedule+0x1895/0x4b30 [ 419.202868][ T30] ? __pfx___schedule+0x10/0x10 [ 419.210383][ T30] ? __pfx_lock_release+0x10/0x10 [ 419.215471][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 419.229802][ T30] ? schedule+0x90/0x320 [ 419.234113][ T30] schedule+0x14b/0x320 [ 419.241957][ T30] schedule_preempt_disabled+0x13/0x30 [ 419.252326][ T30] __mutex_lock+0x6a7/0xd70 [ 419.260948][ T30] ? __mutex_lock+0x52a/0xd70 [ 419.265826][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 419.275301][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 419.286553][ T30] ? read_word_at_a_time+0xe/0x20 [ 419.299607][ T30] ? sized_strscpy+0x8d/0x220 [ 419.304358][ T30] ip_tunnel_init_net+0x20e/0x720 [ 419.315364][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 419.324063][ T30] vti_init_net+0x2e/0xf0 [ 419.334545][ T30] ops_init+0x31e/0x590 [ 419.341487][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 419.353431][ T30] setup_net+0x287/0x9e0 [ 419.360298][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 419.366020][ T30] ? __pfx_setup_net+0x10/0x10 [ 419.375644][ T30] copy_net_ns+0x33f/0x570 [ 419.386567][ T30] create_new_namespaces+0x425/0x7b0 [ 419.398149][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 419.404985][ T30] ksys_unshare+0x619/0xc10 [ 419.418934][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 419.425925][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 419.443759][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 419.454742][ T30] __ia32_sys_unshare+0x37/0x40 [ 419.464838][ T30] __do_fast_syscall_32+0xb4/0x110 [ 419.472663][ T30] ? exc_page_fault+0x590/0x8c0 [ 419.484145][ T30] do_fast_syscall_32+0x34/0x80 [ 419.494168][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 419.503379][ T30] RIP: 0023:0xf7f47579 [ 419.513730][ T30] RSP: 002b:00000000f752ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 419.524890][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 419.535555][ T30] RDX: 00000000f73cbff4 RSI: 00000000f72a215e RDI: 0000000030000000 [ 419.551429][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 419.563074][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 419.574728][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 419.592873][ T30] [ 419.596122][ T30] INFO: task syz-executor:7632 blocked for more than 146 seconds. [ 419.604688][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 419.620301][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.632980][ T30] task:syz-executor state:D stack:24720 pid:7632 tgid:7632 ppid:1 flags:0x20004006 [ 419.651352][ T30] Call Trace: [ 419.654685][ T30] [ 419.660789][ T30] __schedule+0x1895/0x4b30 [ 419.665377][ T30] ? __pfx___schedule+0x10/0x10 [ 419.675684][ T30] ? __pfx_lock_release+0x10/0x10 [ 419.684531][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 419.696572][ T30] ? schedule+0x90/0x320 [ 419.701061][ T30] schedule+0x14b/0x320 [ 419.712913][ T30] schedule_preempt_disabled+0x13/0x30 [ 419.721245][ T30] __mutex_lock+0x6a7/0xd70 [ 419.725803][ T30] ? __mutex_lock+0x52a/0xd70 [ 419.736789][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 419.742145][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 419.755302][ T30] ? read_word_at_a_time+0xe/0x20 [ 419.760759][ T30] ? sized_strscpy+0x8d/0x220 [ 419.765571][ T30] ip_tunnel_init_net+0x20e/0x720 [ 419.777551][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 419.783182][ T30] ? ops_init+0x75/0x590 [ 419.801664][ T30] ops_init+0x31e/0x590 [ 419.805896][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 419.815283][ T30] setup_net+0x287/0x9e0 [ 419.824314][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 419.832572][ T30] ? __pfx_setup_net+0x10/0x10 [ 419.842277][ T30] copy_net_ns+0x33f/0x570 [ 419.850399][ T30] create_new_namespaces+0x425/0x7b0 [ 419.855757][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 419.866413][ T30] ksys_unshare+0x619/0xc10 [ 419.871070][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 419.876122][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 419.890680][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 419.902841][ T30] __ia32_sys_unshare+0x37/0x40 [ 419.911571][ T30] __do_fast_syscall_32+0xb4/0x110 [ 419.921556][ T30] ? exc_page_fault+0x590/0x8c0 [ 419.930161][ T30] do_fast_syscall_32+0x34/0x80 [ 419.935149][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 419.946204][ T30] RIP: 0023:0xf740d579 [ 419.954045][ T30] RSP: 002b:00000000f755ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 419.967276][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 419.975312][ T30] RDX: 00000000f73fbff4 RSI: 00000000f72d215e RDI: 0000000030000000 [ 419.989442][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 420.005103][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 420.020132][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 420.031821][ T30] [ 420.034966][ T30] INFO: task syz-executor:7653 blocked for more than 146 seconds. [ 420.046506][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 420.053831][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.070239][ T30] task:syz-executor state:D stack:25616 pid:7653 tgid:7653 ppid:1 flags:0x20004006 [ 420.084175][ T30] Call Trace: [ 420.093465][ T30] [ 420.102128][ T30] __schedule+0x1895/0x4b30 [ 420.110955][ T30] ? __pfx___schedule+0x10/0x10 [ 420.115955][ T30] ? __pfx_lock_release+0x10/0x10 [ 420.126014][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 420.135364][ T30] ? schedule+0x90/0x320 [ 420.146566][ T30] schedule+0x14b/0x320 [ 420.150787][ T30] schedule_preempt_disabled+0x13/0x30 [ 420.163792][ T30] __mutex_lock+0x6a7/0xd70 [ 420.168721][ T30] ? __mutex_lock+0x52a/0xd70 [ 420.173432][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 420.187328][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 420.192420][ T30] ? read_word_at_a_time+0xe/0x20 [ 420.206343][ T30] ? sized_strscpy+0x8d/0x220 [ 420.211730][ T30] ip_tunnel_init_net+0x20e/0x720 [ 420.224037][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 420.231347][ T30] ? ops_init+0x75/0x590 [ 420.235655][ T30] ops_init+0x31e/0x590 [ 420.246476][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 420.251915][ T30] setup_net+0x287/0x9e0 [ 420.256185][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 420.269893][ T30] ? __pfx_setup_net+0x10/0x10 [ 420.274730][ T30] copy_net_ns+0x33f/0x570 [ 420.284179][ T30] create_new_namespaces+0x425/0x7b0 [ 420.293358][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 420.303326][ T30] ksys_unshare+0x619/0xc10 [ 420.313071][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 420.320930][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 420.333191][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 420.341352][ T30] __ia32_sys_unshare+0x37/0x40 [ 420.346251][ T30] __do_fast_syscall_32+0xb4/0x110 [ 420.357839][ T30] ? exc_page_fault+0x590/0x8c0 [ 420.362747][ T30] do_fast_syscall_32+0x34/0x80 [ 420.374546][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 420.381275][ T30] RIP: 0023:0xf745d579 [ 420.385383][ T30] RSP: 002b:00000000f75aff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 420.402998][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 420.413340][ T30] RDX: 00000000f744bff4 RSI: 00000000f732215e RDI: 0000000030000000 [ 420.434594][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 420.443468][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 420.457838][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 420.465877][ T30] [ 420.475812][ T30] [ 420.475812][ T30] Showing all locks held in the system: [ 420.484145][ T30] 3 locks held by kworker/0:0/8: [ 420.497249][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 420.516403][ T30] #1: ffffc900000d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 420.534977][ T30] #2: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 420.545924][ T30] 1 lock held by khungtaskd/30: [ 420.557250][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 420.573596][ T30] 3 locks held by kworker/u8:4/71: [ 420.579375][ T30] #0: ffff88802d7d9948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 420.597816][ T30] #1: ffffc900022dfd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 420.620895][ T30] #2: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 420.634473][ T30] 3 locks held by kworker/u8:6/2905: [ 420.643384][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 420.659967][ T30] #1: ffffc90009d37d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 420.675236][ T30] #2: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 420.689220][ T30] 4 locks held by kworker/u8:10/2997: [ 420.694639][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 420.710535][ T30] #1: ffffc9000a2f7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 420.731281][ T30] #2: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 420.743541][ T30] #3: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 420.758513][ T30] 2 locks held by dhcpcd/4900: [ 420.763328][ T30] #0: ffffffff8fcb5f28 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x661/0x8e0 [ 420.778730][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 420.793750][ T30] 2 locks held by getty/4999: [ 420.802405][ T30] #0: ffff88814bfeb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 420.816416][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 420.844456][ T30] 5 locks held by kworker/0:3/5237: [ 420.853596][ T30] 2 locks held by syz-executor/7495: [ 420.863609][ T30] #0: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 420.875247][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 420.894612][ T30] 1 lock held by syz.0.763/7599: [ 420.900278][ T30] #0: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 420.921801][ T30] 2 locks held by syz-executor/7625: [ 420.932195][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 420.944227][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 420.961906][ T30] 2 locks held by syz-executor/7627: [ 420.967647][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 420.986518][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 420.996133][ T30] 2 locks held by syz-executor/7629: [ 421.009998][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.030047][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 421.042199][ T30] 2 locks held by syz-executor/7632: [ 421.053471][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.067424][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 421.084022][ T30] 2 locks held by syz-executor/7637: [ 421.090835][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.106210][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 421.117666][ T30] 2 locks held by syz-executor/7646: [ 421.124909][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.141216][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 421.153085][ T30] 2 locks held by syz-executor/7648: [ 421.164230][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.175595][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 421.192186][ T30] 2 locks held by syz-executor/7650: [ 421.199116][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.214402][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 421.234348][ T30] 2 locks held by syz-executor/7653: [ 421.240330][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.258382][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 421.273907][ T30] 2 locks held by syz-executor/7660: [ 421.280733][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.296757][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 421.306169][ T30] 2 locks held by syz-executor/7670: [ 421.319272][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.335461][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 421.348395][ T30] 2 locks held by syz-executor/7674: [ 421.353733][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.371996][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 421.385908][ T30] 2 locks held by syz-executor/7675: [ 421.396073][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.408189][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 421.424214][ T30] 2 locks held by syz-executor/7678: [ 421.433977][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.452234][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 421.466925][ T30] 2 locks held by syz-executor/7684: [ 421.472260][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.489828][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 421.504686][ T30] 2 locks held by syz-executor/7692: [ 421.512852][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.526459][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 421.545363][ T30] 2 locks held by syz-executor/7695: [ 421.552675][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.569306][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 421.583573][ T30] 2 locks held by syz-executor/7697: [ 421.594195][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.610910][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 421.626649][ T30] 2 locks held by syz-executor/7700: [ 421.632000][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.650783][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 421.664742][ T30] 2 locks held by syz-executor/7705: [ 421.674926][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.688164][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 421.705616][ T30] 2 locks held by syz-executor/7713: [ 421.713544][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.731205][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 421.744852][ T30] 2 locks held by syz-executor/7717: [ 421.756204][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.768453][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 421.784511][ T30] 2 locks held by syz-executor/7719: [ 421.791359][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.806841][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 421.823190][ T30] 2 locks held by syz-executor/7722: [ 421.830058][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 421.846436][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 421.870015][ T30] [ 421.872394][ T30] ============================================= [ 421.872394][ T30] [ 421.885598][ T30] NMI backtrace for cpu 1 [ 421.889977][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 421.900166][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 421.910247][ T30] Call Trace: [ 421.913549][ T30] [ 421.916503][ T30] dump_stack_lvl+0x241/0x360 [ 421.921207][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.926430][ T30] ? __pfx__printk+0x10/0x10 [ 421.931057][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 421.936026][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 421.941596][ T30] ? _printk+0xd5/0x120 [ 421.945792][ T30] ? __pfx__printk+0x10/0x10 [ 421.950516][ T30] ? __wake_up_klogd+0xcc/0x110 [ 421.955436][ T30] ? __pfx__printk+0x10/0x10 [ 421.960059][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 421.965116][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 421.971128][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 421.977234][ T30] watchdog+0xff4/0x1040 [ 421.981505][ T30] ? watchdog+0x1ea/0x1040 [ 421.985953][ T30] ? __pfx_watchdog+0x10/0x10 [ 421.990660][ T30] kthread+0x2f0/0x390 [ 421.994752][ T30] ? __pfx_watchdog+0x10/0x10 [ 421.999463][ T30] ? __pfx_kthread+0x10/0x10 [ 422.004074][ T30] ret_from_fork+0x4b/0x80 [ 422.008513][ T30] ? __pfx_kthread+0x10/0x10 [ 422.013121][ T30] ret_from_fork_asm+0x1a/0x30 [ 422.017925][ T30] [ 422.021920][ T30] Sending NMI from CPU 1 to CPUs 0: [ 422.027803][ C0] NMI backtrace for cpu 0 [ 422.027818][ C0] CPU: 0 UID: 0 PID: 5237 Comm: kworker/0:3 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 422.027838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.027850][ C0] Workqueue: events nsim_dev_trap_report_work [ 422.027872][ C0] RIP: 0010:debug_check_no_obj_freed+0x5/0x580 [ 422.027896][ C0] Code: b1 3e 3c fd e9 cf fe ff ff e8 e7 db 02 07 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 20 01 00 [ 422.027916][ C0] RSP: 0018:ffffc90000007060 EFLAGS: 00000246 [ 422.027929][ C0] RAX: ffff88801ac41ddc RBX: ffffffff898a3360 RCX: ffffea0000000000 [ 422.027942][ C0] RDX: dffffc0000000000 RSI: 0000000000000400 RDI: ffff88803cabd000 [ 422.027954][ C0] RBP: 0000000000212008 R08: 0000000000000000 R09: 1ffff1100fe07db0 [ 422.027965][ C0] R10: dffffc0000000000 R11: ffffed100fe07db1 R12: ffff88801ac41dc0 [ 422.027977][ C0] R13: ffff88803cabd000 R14: 0000000000000000 R15: ffffea0000f2ae00 [ 422.027989][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 422.028004][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.028015][ C0] CR2: 00007f851b787d28 CR3: 000000000e734000 CR4: 00000000003506f0 [ 422.028030][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.028040][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.028050][ C0] Call Trace: [ 422.028057][ C0] [ 422.028064][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 422.028082][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 422.028103][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 422.028120][ C0] ? nmi_handle+0x2a/0x5a0 [ 422.028142][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 422.028160][ C0] ? nmi_handle+0x14f/0x5a0 [ 422.028175][ C0] ? nmi_handle+0x2a/0x5a0 [ 422.028191][ C0] ? debug_check_no_obj_freed+0x5/0x580 [ 422.028209][ C0] ? default_do_nmi+0x63/0x160 [ 422.028228][ C0] ? exc_nmi+0x123/0x1f0 [ 422.028244][ C0] ? end_repeat_nmi+0xf/0x53 [ 422.028259][ C0] ? skb_release_data+0x6a0/0x8a0 [ 422.028279][ C0] ? debug_check_no_obj_freed+0x5/0x580 [ 422.028299][ C0] ? debug_check_no_obj_freed+0x5/0x580 [ 422.028319][ C0] ? debug_check_no_obj_freed+0x5/0x580 [ 422.028338][ C0] [ 422.028343][ C0] [ 422.028349][ C0] kfree+0x11f/0x440 [ 422.028366][ C0] ? rcuref_put+0x1e3/0x240 [ 422.028382][ C0] skb_release_data+0x6a0/0x8a0 [ 422.028402][ C0] consume_skb+0x9f/0xf0 [ 422.028416][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 422.028439][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 422.028460][ C0] ? nf_ip_checksum+0x13a/0x500 [ 422.028482][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 422.028512][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 422.028531][ C0] ? validate_chain+0x11e/0x5920 [ 422.028549][ C0] ? __pfx_validate_chain+0x10/0x10 [ 422.028569][ C0] nft_do_chain+0x4ad/0x1da0 [ 422.028596][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 422.028615][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 422.028646][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 422.028669][ C0] nft_do_chain_inet+0x418/0x6b0 [ 422.028690][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 422.028709][ C0] ? ipt_do_table+0x312/0x1860 [ 422.028736][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 422.028754][ C0] nf_hook_slow+0xc3/0x220 [ 422.028772][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 422.028789][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 422.028805][ C0] NF_HOOK+0x29e/0x450 [ 422.028822][ C0] ? NF_HOOK+0x9a/0x450 [ 422.028837][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 422.028854][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 422.028874][ C0] ? ip_rcv_finish+0x406/0x560 [ 422.028891][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 422.028907][ C0] NF_HOOK+0x3a4/0x450 [ 422.028921][ C0] ? __lock_acquire+0x1384/0x2050 [ 422.028942][ C0] ? NF_HOOK+0x9a/0x450 [ 422.028957][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 422.028971][ C0] ? ip_rcv_core+0x801/0xd10 [ 422.028988][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 422.029007][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 422.029023][ C0] __netif_receive_skb+0x2bf/0x650 [ 422.029042][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 422.029061][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 422.029077][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 422.029097][ C0] ? __pfx_lock_release+0x10/0x10 [ 422.029117][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 422.029141][ C0] process_backlog+0x662/0x15b0 [ 422.029161][ C0] ? process_backlog+0x33b/0x15b0 [ 422.029182][ C0] ? __pfx_process_backlog+0x10/0x10 [ 422.029199][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 422.029220][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.029242][ C0] __napi_poll+0xcb/0x490 [ 422.029260][ C0] net_rx_action+0x89b/0x1240 [ 422.029287][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 422.029308][ C0] ? sched_balance_domains+0x91b/0xa90 [ 422.029330][ C0] ? sched_balance_domains+0x1b2/0xa90 [ 422.029347][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.029371][ C0] handle_softirqs+0x2c5/0x980 [ 422.029391][ C0] ? do_softirq+0x11b/0x1e0 [ 422.029409][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 422.029431][ C0] do_softirq+0x11b/0x1e0 [ 422.029447][ C0] [ 422.029453][ C0] [ 422.029459][ C0] ? __pfx_do_softirq+0x10/0x10 [ 422.029476][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 422.029497][ C0] ? rcu_is_watching+0x15/0xb0 [ 422.029518][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 422.029536][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 422.029553][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 422.029571][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 422.029589][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 422.029608][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 422.029630][ C0] ? process_scheduled_works+0x976/0x1850 [ 422.029650][ C0] process_scheduled_works+0xa63/0x1850 [ 422.029680][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 422.029702][ C0] ? assign_work+0x364/0x3d0 [ 422.029722][ C0] worker_thread+0x870/0xd30 [ 422.029745][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 422.029765][ C0] ? __kthread_parkme+0x169/0x1d0 [ 422.029786][ C0] ? __pfx_worker_thread+0x10/0x10 [ 422.029805][ C0] kthread+0x2f0/0x390 [ 422.029819][ C0] ? __pfx_worker_thread+0x10/0x10 [ 422.029837][ C0] ? __pfx_kthread+0x10/0x10 [ 422.029851][ C0] ret_from_fork+0x4b/0x80 [ 422.029870][ C0] ? __pfx_kthread+0x10/0x10 [ 422.029883][ C0] ret_from_fork_asm+0x1a/0x30 [ 422.029908][ C0] [ 422.713139][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 422.720045][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 422.730222][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.740312][ T30] Call Trace: [ 422.743612][ T30] [ 422.746561][ T30] dump_stack_lvl+0x241/0x360 [ 422.751263][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.756481][ T30] ? __pfx__printk+0x10/0x10 [ 422.761094][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 422.767107][ T30] ? vscnprintf+0x5d/0x90 [ 422.771467][ T30] panic+0x349/0x880 [ 422.775412][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 422.781617][ T30] ? __pfx_panic+0x10/0x10 [ 422.786068][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 422.791472][ T30] ? __irq_work_queue_local+0x137/0x410 [ 422.797049][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 422.802448][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 422.808895][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 422.815088][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 422.821274][ T30] watchdog+0x1033/0x1040 [ 422.825639][ T30] ? watchdog+0x1ea/0x1040 [ 422.830089][ T30] ? __pfx_watchdog+0x10/0x10 [ 422.834791][ T30] kthread+0x2f0/0x390 [ 422.838884][ T30] ? __pfx_watchdog+0x10/0x10 [ 422.843599][ T30] ? __pfx_kthread+0x10/0x10 [ 422.848223][ T30] ret_from_fork+0x4b/0x80 [ 422.852666][ T30] ? __pfx_kthread+0x10/0x10 [ 422.857374][ T30] ret_from_fork_asm+0x1a/0x30 [ 422.862265][ T30] [ 422.865519][ T30] Kernel Offset: disabled [ 422.869870][ T30] Rebooting in 86400 seconds..