last executing test programs: 31.574685384s ago: executing program 0 (id=486): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f00000016c0)=""/4068, &(0x7f00000004c0)=0xfe4) 31.508094516s ago: executing program 0 (id=487): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0x0) 30.557758507s ago: executing program 0 (id=489): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 30.503991182s ago: executing program 0 (id=490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x300000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 30.347106835s ago: executing program 0 (id=494): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00'}}) 30.262551144s ago: executing program 0 (id=496): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x894b, &(0x7f0000000300)) 11.231517801s ago: executing program 2 (id=552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015", @ANYRES8=r0], 0x3c}}, 0x0) 10.838106194s ago: executing program 3 (id=553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)={0x2, 0x0, [{0x80000008, 0x4, 0x2, 0x51, 0xffffffff}, {0x80000000, 0xfff, 0x4, 0xfffffbff, 0x3, 0x3ff, 0x5}]}) 10.786130491s ago: executing program 4 (id=554): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) process_mrelease(0xffffffffffffffff, 0x0) 10.726192848s ago: executing program 2 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @initial, @device_b, @broadcast}, @a_msdu}}]}, 0x38}}, 0x0) 9.991453805s ago: executing program 2 (id=556): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 9.639157503s ago: executing program 3 (id=557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x30, r1, 0x417, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}}, 0x0) 9.057886983s ago: executing program 3 (id=558): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x1f}}}, 0x0) 8.901679069s ago: executing program 2 (id=559): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1d00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x8, {0x8, 0x9, "947afbf28097"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.672883592s ago: executing program 4 (id=561): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x98e328e576aa972c, 0xa, 0xd, {0xd, 0x21, "d48a3479e34a163525ef97"}}, 0x0}, 0x0) 6.869745728s ago: executing program 3 (id=563): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 6.500624456s ago: executing program 2 (id=564): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 6.099240639s ago: executing program 3 (id=566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}}, 0x0) 5.557955354s ago: executing program 3 (id=568): openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0xd}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd75243cb9a6418e", 0xa}], 0x1000000000000041) 5.3580249s ago: executing program 1 (id=569): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4040ae9e, &(0x7f0000000100)={{0x0, 0x0, 0xffffffffffffff5f}, "ad58f5a9b6d952a348c2c17c8662d8579db09b54445b27d4c5b199698da1e90db7e989981d9900b31fec0ced53d282980c212da0334a546f009dd48bffc6df4883f7ba7c5eaa721364df0b8778745715ded8c65f1599b7009234306d93d5b92d40729ea5a3f2b1abb86aad23357ee38076c1ed9d23ddddc97b5c922193d7271eef4e0146be214747f28cac946ed8a27ad963a29da00c45fa4150af19f7a942c3c974c7aca4fecb6a14337fd0778b883760fa124fc2ab55e79e42d7d9c76de00410aaed2116a4fe043795f5fbce145a12a50ec34ba951bc2990e47f58e731a34245e22d9cc9b206ce4ab22827bb58180327044976c1fb9438f9831ba3e149cab7eeb524ab9f8ac543a5177f202a247ac01feacb71c4140c8e6de9dd3b5f1345a615edc6e09ab1c4eb2e1e707c79535ad6fd70c635dd062b2439641e81b665fbf7221439861d1913872511e7a665de8dcf433b09cd2f06ab0998b149bbf9e82614fef4039fa8e0132eca43908721b58d428208c3684c21e60b75851f7c4cde23ac0c8f682d5019eefd3220818f8eb29d38dd621ea294e2faac69be3ba465e180dba5d03fa910c72d2786c78c391f29c283242380f4535631f93a3a17908f295275dcdbaf658a32f52801104c233d0aac1f06b954bc3c2e212972d8c08b5f68b70287f5d9a397a6a532fdf4afbf7420d51da41c26dcb95f3832093b8bb96d027e814cc8be58d7ecc89dbbac0be4f7612a916bda342e6e30830cf5888b156627d2dd0bbdfeef38618b393c50ec0ac51fed88626db06f8458734abd8dc5dac895f8513109df1804c83fe3a9236a73783493cb850d6105aa2dbebabb93774b9d6e3f3a2838e5c0a782aaf4cb5a2dcf1ed240c3c4994947fad0b5d9df64ac1e290bc2442b0ba0e1014dd406f78173724fce772fcd39309c78a589ef9b06ac81556dfb213097df7d4d07f55e8c7546b319bdf75fb46b305542c8c8c05cb634200fd85603f5c3c923e60401e964e75e4d0f72aac936ca78d24267fc71849431e0fb64299c6e07ff13de837614b51f6d2e6302e39065299379afdca1e683ad0da669b7e49f926bc8cadb85ca4d65880c0344f53adf7b5f1780032dd466df9285d251d7653b3c58fb4ad26c35bba1eb835a2ac13978ebce09a740f58a1b1dbba8d43b6961326b8f0979228b26befce6b48032e0981f567b7fa11398003866c4c74cbc43ec8180aab8008f6f7064d23ab4a270182f5e25f3a9a9d5b41117dda8968de3637856b18b7ae4f9bfbbe4f750e0267183e1c0b4f2407ee72c710d6b150329d84bc59a4406bf4eb58c2cae0082ac115fe33d3e5c3a650f83f8108e10d530409c3fd1f554b70bd83656f69203ec3d56d59c1ad90cb92b1644cd0f776f8364aa2c321eb7589ff8c9eb31652e920523bf93989d06ff8caa94f5d830e0d3f0c4d210e4dd8861a5d3a341dd0427ad10e72ccf2c3a08c212601b210c7e04877d199b2c976b17ba2ac5a1b2f955d6772cb6c3dcfdf76cf490153778f396a7936176e3c3e1c3c16dc471a04ee527880fcc7b1cf51086064f926cc3d95abd2ff988a02283b161e4e714d3578edb36bce571a8bfade7d4585cb4d92731127b65ec5d501bc943f53a1c23e2e20a60ed4d67cab25cadd0ecdbc361fbfe3c6d097971bc2ba8bb69d513c9940a444626101a31d5897c5e6b174aa7a50b6a7b7346e74278ce4a809f1d657642fa0d912eecdce93ea54e12dc03968e9dff06a8eb2fd5f6af0a676198e146e5ac9a2d6318d407f9e2f6b478a362ebf0893b706e742001353e86792d8eb9ce9dde09f89ceb37bd5519a4dd90074392f491fa156b099d61dde230f705262f30cc8c36462023f6e3ece5ca280ed760a2e133fd0709af6ad96aa80cb128059a6574f4a4f3bbef084bc60090dae5a67129eb003e217df0ccaa361d72e5d4d9b01972185d4748a3a723b8068be418be91dd44ff95d6846242154f6b44f997132211b157ffab9366cd1c5170b87adc03bbe00825cb22d7957c0a090f9feec50e03586bcddb1d8a632b0660263d5e8953892c8e49351edd475f76dff92146bf4aed97f560a69ad9ebd81822f61a3f62affd425820eccfc1a346ca8480cb88b28b33b5220881f9c564d02626d7d57ceb43599538262b8259d5263f1dfc0cce003d3da6f2b0d7f1fc9a232184e250e65c6acc160803ed8df0ad7a47928659401d62fc974aff6a306b629ca04d1b39069420ff3be9f7a27a14309a6567508ff65a2c8eb841d9fce8396fdefddf8d689f49c60c99f11f8999ccebcfdb3c8ad3a0bec32ed3cebea47ffe82177abb1e4a42110ee2722bd2337e53c7a82fa0d1a1b87b83d54c0709a148d0d938ba42052e20f78e7f17a2c68e779f290d607ec7537b5b9fc429a579c51a08fe1e8cd7842c94ff4c1552ead790b4784792258e0048c110eb38714161a0c3fa130344e887b8cf2d94a3494cce87d7ad5551c4767211e48258e919663b02f730aff0ad9437dc79599f67f7171d07be66cede41e3518090e6c156232a436a72a96aef5715a6796a391788e54cfd1a526543816599532cd08579cf435902117fbbdd89648537d46c1d21f88b354a05131c9b37935058839a9f7566e4e884240693e83793485d05089abc187f427d4a6a5d5a70133b6606952e0395a977fb17258503a924f4e16863a801562265c9d410899be3f55dec164f68413faeff611954a149aa94146bf9af90db25b6800411aaf73bb3a2634eb6572691f3f40b46ba4a66a775d4610ea13922cdc9b02ae49a430ad5a955aa4a69006eaf65876b481fd858206b4b2b1ae4607fa1c87c70d63824253c2953af2c814fe250a554a04b7a1b3d7b71a3352fedeee73e38f13f325ed98cadbaf9bd3325a1885cf7d2c4f23b912192d53e6821b009e46fede46d5f6148b908e0cf5137ec38b527af7e46f298f33e3d5ca35cb4928f7f83bc286345d2d22201a70de451c087f750d71b94b743ca77ecc15e6a26d56eddf80b9f0a13067edbb928548f542c0545d8630a2f196f4704807bf5f58b4d63fffa1a9dad658808d3ff4b3baa4e2186c5a599a022d0f93f72263c311096f2aa6f677c28a6a1dc2d843caf11e5a46254dc1e9467907ced4a1ad5389330cbee001e322be51394e086363683b25f34af5ffd50a1976ece6499c521506473f48c7b0f502290599ec773a0004f0c1dcdd260e455eed085111f08fe5ef76b58de4d79de6267481a2fc319454bdcf06a88ab498dac67de6a044c67d7ab39917ee9c825ed9dafe2aa55a7b3d9b4b7633eb0e2c0f51ce12f460d235b5cbd4dc95709061acd5870fb4ccdca46499002d3166e9815e7689d2364653c028212af3c45c0ca19265f48ee389c75aa99552ea4b0eab6bb2f341c35e37586afe8cb113dfa08bf661dcebdb0084a6cd48a86e61548225bd2dccf3d73a0bee544e55c63d1737fba3fa7be30ceeb27e315daaab98c8994319220d64b65accba86f15bbcff76febacfc11f49ed7e5dae74ba58ae973f937611c04b3dca2e02bba658adf5a7893c79857615373076042dfed35a816ad518943f4bc4eff21f272f269bd4a956477167c623c090b6ed597bc1643b1015aba0f36740bd257738ed57a2ac1ba1f3dff0cc2cd17565c91c20548563c8100e3dce8ea36d453251a2bc92effd34400e37e23116262bd9851057e3249988611fdf6d859e86a72ac1147c7e907c1bb333703035c7f542059dc55c23fc9af3c0c6d706b6152761e310ce0732e973c6f9496c560f49b2b1d18899544be3fb8c99a6274e741748dcc4c04a3a13eab12e72a43c9dbb2db5699f7a1b8729107468d6a48223306b28f7edac4862ef25b029c0923b25f030e8b2b755679b34983293d0f5f4c9bf1f2d575ffcef05421ebcc2080deff479a60171e518a0869338d65d51b05c6b44e5efcfbf495d75a82521371d927434434b25c3977a6c3cea077a56c5c7b09da6b5981d1719cebc3e1d6ec7b453226a91055a636b76a086e5bb060456c7e72ae6bbf1eb8eeca60269f0d788ce674d86863fa87f7e37fb9f23dce0023511db05083f6b7518e1e63258730a78ff169db4352384bd2bac7410ae02e539dab9ec0ae4dea2cbbfec4e1a1291774e9ce8a5738904ff02501dc628727074cf4d3d247a821e9b70c4c5e97b8a01afd0692f16c7a010ecdfec898d16de7873c14bb40b261f19a43f3bc5b07f575131af6c9af08ed4d2d11d86d1260fcd88cb03041b90e691b3342a76158cbff63324f3b7b0a680b010ec0932507185d29ac72b336c9015a1977305592f248edae18e9c9a78e8481f3f61d2dcadfbdba705dfdcdfe63bc75d65488a79e24716b3eb5327464cb66b5d77c4d20a85676d20e8761d5ef3f6987c6140883d99796c2d4e690bbbdff460a06cd1392bf4e0d3f14d4b58f3a37fe1b5d1f498719d5f2ac5bfa199687c8342db3c0ffc3bf64b51f3ccae2a9eaac7912b75d0aa245499cbb35a2e872dbaaaa827c6440884dc1ca29f8669875cdaa72416f65a215402da69087fb4c4cd751f6580a83a74f5e52ddc90139a00e0389cac6636c81790f0f60bb75a842704bbe440fe145ba9dcf121e46bf255027633a1a6a40c34c43e44d868e9314fb45c60619020446505b31f79d893f1cfcea9eeff2a9808fda0c97c8a857083b939cf6ffa4b436701028f64b65daf5f4a55411cac28b348375f7f1500eaf1572fa06f0b1c2bf836180fefe17d7bbef68f342d4b16658a8acf14dee98aa98bedba7e1b4ee8604e8de335a0de101c9503abcabc084b4946802c8082796a9909228458fb77e7b32ceb958c02ddca492230067751191a39f863491705faa2797f6284628db10568a675e93c10d4db8f86c95e755f04d5916429b1c2f53ade7693771f37feaa513d53cf65c8694f91fe35e871e9d6a88a1794fc1d4356ec17764faa9c89278dfcc1cfeaf3f3c41501a40e9c846ed0e0b6d91f90e01b962b1b3475e340e1eb1ba72abba30e94e1f46d5ad96e008ce170daf3bebbc539dbac8af3ea43d228fdb0b6af3b84d8da2a5693590de444f4fdda961964e7963cd84fe40daed10eb6f031ab70fb9465be209524ce63bc6a23bbffe1addf2c609e157c9173aee3fa36e4d3cbc6866683f165407f6d344308eddaab649a07b1833c54c56cfafe23a03633a4506a88a853093e8e55119ee8ff544f273f352875761f7e49f48e2485675cc4078467a1cd45439c7d67d361e57fe366744971d9e70e16c59a3108cdffc51a55537575fe3562ddc7e61edfc3dec002db7e8c170f5857e755c86a57ade771da6669eb5543a4e84949923e1b42fdd52b33ff2f1847908518486dd0c4fe3d23a2198b98ee9f53a964e7b2cdaacadf7a9dcc924fce2105d45297bc5d75ca8e32de01f0d66b9be920bb1ef9792b177444c2618a6d1cd603ac69db20524ab3921b49b0d22b843dc091733dfa245ff003e374ea91e84f7d3068a402f90e1e0fb370b6942d9001f2443223ad8f5535657ea29425e3fe63cf74175d6dffd5efe0fd8cd85dd4f6a7f108c412a10b130c4a4878e152dfcd13a2cff7c21e3f694668be896e5f5b53377b307565f0fbc5a384b3b98497da7d0ef260e2143d2716e3b11c639b324ed4980fbd2caef4e5b6d60c69ba8112909ccbf62ac5e557227f17f24837cb8ab321b8f294e45ab520018c97b45ec2f37093e3c89cbbfe43fc1bad7dc76052dc3957c59e20dca5fd23ed679e4cb272b6ef1cfd0841269e9fb6396111da0769381dcfa38d96ce3d9229ba935e3c7819768c187b57b93c8797367", "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"}) 5.189403561s ago: executing program 2 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0xec, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0xcf, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f", {0x0, 0x4}}, 0x0, 0x0, @random, @void, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x6, "d8a062cc132f"}, {0xdd, 0x9b, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44ffffffffee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f067b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9"}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 4.916449146s ago: executing program 4 (id=571): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 4.678579851s ago: executing program 4 (id=572): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000008dc0), 0x4000000000000d9, 0x0) 4.536714351s ago: executing program 4 (id=573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000020394000040"]) 4.353688419s ago: executing program 1 (id=574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 3.74412165s ago: executing program 1 (id=575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000ff07000002"]) 3.743536272s ago: executing program 4 (id=576): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0) 905.43461ms ago: executing program 1 (id=577): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgget$private(0x0, 0x62) 135.175915ms ago: executing program 1 (id=578): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 0s ago: executing program 1 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x20000000) kernel console output (not intermixed with test programs): hich could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.433612][ T6534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.552057][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 278.629280][ T6139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.735279][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.744704][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.803284][ T6534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.030448][ T6139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.234296][ T6789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.152110][ T5232] IPVS: starting estimator thread 0... [ 280.184947][ T6534] hsr_slave_0: entered promiscuous mode [ 280.740775][ T6790] IPVS: using max 16 ests per chain, 38400 per kthread [ 280.783655][ T6534] hsr_slave_1: entered promiscuous mode [ 281.545544][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 281.988318][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 282.006882][ T25] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 282.155417][ T25] usb 2-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 282.426507][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.461718][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 282.530644][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 282.570586][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.581233][ T6139] bridge_slave_1: left allmulticast mode [ 282.592133][ T25] usb 2-1: Product:   [ 282.596346][ T6139] bridge_slave_1: left promiscuous mode [ 282.596601][ T25] usb 2-1: Manufacturer: à – [ 282.602169][ T25] usb 2-1: SerialNumber: Д [ 282.631146][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.667831][ T6139] bridge_slave_0: left allmulticast mode [ 282.694287][ T6139] bridge_slave_0: left promiscuous mode [ 282.715373][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.848793][ T25] usb 2-1: 0:2 : does not exist [ 283.858086][ T54] block nbd0: Receive control failed (result -32) [ 283.945183][ T6811] block nbd0: shutting down sockets [ 283.971234][ T25] usb 2-1: USB disconnect, device number 13 [ 284.059024][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.706043][ T54] Bluetooth: hci3: unexpected event for opcode 0x200b [ 286.750566][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.772159][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.789280][ T6139] infiniband syz1: set down [ 286.841551][ T6139] bond0 (unregistering): Released all slaves [ 286.946876][ T937] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 287.118242][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.144467][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.158796][ T937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.187839][ T937] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 287.206573][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.281616][ T937] usb 1-1: config 0 descriptor?? [ 287.575719][ T54] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 288.729166][ T937] betop 0003:11C0:5506.0001: hidraw0: USB HID v0.00 Device [HID 11c0:5506] on usb-dummy_hcd.0-1/input0 [ 288.791300][ T6534] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 288.968364][ T6856] netlink: 68 bytes leftover after parsing attributes in process `syz.1.264'. [ 288.988531][ T937] betop 0003:11C0:5506.0001: no inputs found [ 289.237460][ T6534] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.806672][ T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 289.815332][ T54] Bluetooth: hci3: Injecting HCI hardware error event [ 289.828180][ T54] Bluetooth: hci3: hardware error 0x00 [ 289.922401][ T937] usb 1-1: USB disconnect, device number 6 [ 290.031372][ T6534] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.094985][ T6534] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 290.196947][ T6139] hsr_slave_0: left promiscuous mode [ 290.268633][ T6139] hsr_slave_1: left promiscuous mode [ 290.329929][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.403377][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.436630][ T5274] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 290.445696][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.486683][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.599349][ T6139] veth1_macvtap: left promiscuous mode [ 290.621925][ T6139] veth0_macvtap: left promiscuous mode [ 290.638553][ T5274] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.652047][ T6139] veth1_vlan: left promiscuous mode [ 290.658699][ T5274] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 290.679048][ T6139] veth0_vlan: left promiscuous mode [ 290.688661][ T5274] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.736876][ T5274] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 290.765575][ T5274] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 290.784705][ T5274] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.805698][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.821809][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.822546][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.837739][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.847093][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.859241][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 290.867356][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.924836][ T5274] usb 1-1: Product: syz [ 290.938023][ T5274] usb 1-1: Manufacturer: syz [ 290.975765][ T5274] cdc_wdm 1-1:1.0: skipping garbage [ 290.986720][ T5274] cdc_wdm 1-1:1.0: skipping garbage [ 290.993938][ T5274] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 291.001147][ T5274] cdc_wdm 1-1:1.0: Unknown control protocol [ 292.278326][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 293.433902][ T54] Bluetooth: hci1: command tx timeout [ 294.653762][ T6139] team0 (unregistering): Port device team_slave_1 removed [ 294.718435][ T6139] team0 (unregistering): Port device team_slave_0 removed [ 294.793785][ T6124] smc: removing ib device syz1 [ 294.850753][ T5274] usb 1-1: USB disconnect, device number 7 [ 295.667127][ T5227] Bluetooth: hci1: command tx timeout [ 296.843222][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.266'. [ 297.349751][ T6917] netlink: 'syz.1.274': attribute type 16 has an invalid length. [ 297.357883][ T6917] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.274'. [ 297.915611][ T5227] Bluetooth: hci1: command tx timeout [ 299.667846][ T6534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.937871][ T54] Bluetooth: hci1: command tx timeout [ 300.799943][ T6534] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.117540][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.124632][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.152548][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.159712][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.207322][ T6870] chnl_net:caif_netlink_parms(): no params data found [ 301.465611][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.473185][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.480548][ T6870] bridge_slave_0: entered allmulticast mode [ 301.487804][ T6870] bridge_slave_0: entered promiscuous mode [ 301.707740][ T5227] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 302.445060][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.455894][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.280903][ T6870] bridge_slave_1: entered allmulticast mode [ 303.303240][ T6870] bridge_slave_1: entered promiscuous mode [ 305.254872][ T6870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.439791][ T6139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.488486][ T6870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.549769][ T6979] bridge0: port 3(syz_tun) entered blocking state [ 305.578376][ T6979] bridge0: port 3(syz_tun) entered disabled state [ 305.616941][ T6979] syz_tun: entered allmulticast mode [ 305.658204][ T6969] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 305.664839][ T6969] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 305.691309][ T6979] syz_tun: entered promiscuous mode [ 305.713843][ T6969] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 305.723496][ T6979] bridge0: port 3(syz_tun) entered blocking state [ 305.730376][ T6979] bridge0: port 3(syz_tun) entered forwarding state [ 305.738429][ T6969] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 305.754965][ T6969] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 305.807138][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.820057][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.830331][ T6139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.847055][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.870864][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.879831][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 305.887989][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.037090][ T6139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.125850][ T6870] team0: Port device team_slave_0 added [ 306.130569][ T6870] team0: Port device team_slave_1 added [ 306.215523][ T6139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.393473][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.412203][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.452034][ T6870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.484137][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.504621][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.533257][ T6870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.654945][ T937] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 307.445458][ T29] audit: type=1326 audit(1727193627.019:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.1.286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f464f37def9 code=0x0 [ 307.467490][ T5227] Bluetooth: hci4: command 0x0406 tx timeout [ 307.470565][ T6870] hsr_slave_0: entered promiscuous mode [ 307.481298][ T6870] hsr_slave_1: entered promiscuous mode [ 307.488068][ T6870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.496335][ T6870] Cannot create hsr debugfs directory [ 307.501963][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 307.510177][ T937] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 307.534120][ T937] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.544166][ T937] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 307.586762][ T937] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.640882][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.655768][ T937] usb 1-1: Product:   [ 307.660238][ T937] usb 1-1: Manufacturer: à – [ 307.664881][ T937] usb 1-1: SerialNumber: Д [ 307.796204][ T5227] Bluetooth: hci1: command 0x0c1a tx timeout [ 307.946773][ T5227] Bluetooth: hci0: command tx timeout [ 308.091778][ T6973] chnl_net:caif_netlink_parms(): no params data found [ 308.113454][ T937] usb 1-1: 0:2 : does not exist [ 308.176056][ T937] usb 1-1: USB disconnect, device number 8 [ 308.294211][ T6139] bridge_slave_1: left allmulticast mode [ 308.300132][ T6139] bridge_slave_1: left promiscuous mode [ 308.313917][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.345990][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.385875][ T6139] bridge_slave_0: left allmulticast mode [ 308.392150][ T6139] bridge_slave_0: left promiscuous mode [ 308.436836][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.123419][ T937] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 309.306712][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 309.324375][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 309.369329][ T937] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 309.379691][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.395643][ T937] usb 1-1: config 0 descriptor?? [ 309.542530][ T5227] Bluetooth: hci4: command 0x0406 tx timeout [ 309.741252][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.755914][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.779303][ T6139] bond0 (unregistering): Released all slaves [ 310.048294][ T54] Bluetooth: hci0: command tx timeout [ 310.054467][ T5227] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.877591][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.007838][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.135778][ T937] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 311.150958][ T937] hid-generic 0003:0158:0100.0002: unexpected long global item [ 311.206896][ T937] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 311.647014][ T937] usb 1-1: USB disconnect, device number 9 [ 311.871106][ T6973] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.896794][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.066299][ T6973] bridge_slave_0: entered allmulticast mode [ 312.073905][ T6973] bridge_slave_0: entered promiscuous mode [ 312.109226][ T5227] Bluetooth: hci1: command 0x0c1a tx timeout [ 312.115557][ T5227] Bluetooth: hci0: command tx timeout [ 312.550352][ T6139] hsr_slave_0: left promiscuous mode [ 312.564280][ T6139] hsr_slave_1: left promiscuous mode [ 312.621279][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.745906][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.777692][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.785152][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.020067][ T6139] veth1_macvtap: left promiscuous mode [ 313.026379][ T6139] veth0_macvtap: left promiscuous mode [ 313.053424][ T6139] veth1_vlan: left promiscuous mode [ 313.059069][ T6139] veth0_vlan: left promiscuous mode [ 313.699103][ T7058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.178512][ T54] Bluetooth: hci0: command tx timeout [ 314.200049][ T6139] team0 (unregistering): Port device team_slave_1 removed [ 314.245161][ T6139] team0 (unregistering): Port device team_slave_0 removed [ 314.635703][ T6973] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.644104][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.653166][ T6973] bridge_slave_1: entered allmulticast mode [ 314.660489][ T6973] bridge_slave_1: entered promiscuous mode [ 314.715006][ T7057] netlink: 'syz.2.295': attribute type 10 has an invalid length. [ 314.840991][ T7057] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.865058][ T7057] bond0: (slave team0): Enslaving as an active interface with an up link [ 315.838715][ T6973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.851714][ T6973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.166190][ T6973] team0: Port device team_slave_0 added [ 316.967311][ T6870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 317.104376][ T6973] team0: Port device team_slave_1 added [ 317.172159][ T7085] Option '.‡Ÿ/…X£š•uuüè·žª }—ê?ÿ›÷ô[žîÿU‹¬_' to dns_resolver key: bad/missing value [ 317.231199][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.244210][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.527489][ T6870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 317.595150][ T7085] warning: `syz.0.299' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 317.892745][ T7097] vxfs: WRONG superblock magic 00000000 at 1 [ 317.893773][ T7097] vxfs: WRONG superblock magic 00000000 at 8 [ 317.893800][ T7097] vxfs: can't find superblock. [ 318.756679][ T6870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.811837][ T6870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.834918][ T6973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.834937][ T6973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.834964][ T6973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.838522][ T6973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.838540][ T6973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.838568][ T6973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.946002][ T6973] hsr_slave_0: entered promiscuous mode [ 318.950060][ T6973] hsr_slave_1: entered promiscuous mode [ 318.954274][ T6973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.954340][ T6973] Cannot create hsr debugfs directory [ 319.246672][ T5232] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 319.428906][ T5232] usb 2-1: Using ep0 maxpacket: 32 [ 319.431659][ T5232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 319.431697][ T5232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 319.431787][ T5232] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 319.431863][ T5232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.526080][ T5232] usb 2-1: config 0 descriptor?? [ 319.529813][ T7102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 319.539893][ T5232] hub 2-1:0.0: USB hub found [ 320.224727][ T5232] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 320.682178][ T5232] hid-generic 0003:046D:C314.0003: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.1-1/input0 [ 321.856994][ T5232] usb 2-1: USB disconnect, device number 14 [ 322.636876][ T5273] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 322.654854][ T6870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.689686][ T6870] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.926645][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 322.933764][ T2882] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.933861][ T2882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.934721][ T5273] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 322.934766][ T5273] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 322.934793][ T5273] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 322.934821][ T5273] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 322.934847][ T5273] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 322.934874][ T5273] usb 1-1: config 1 interface 0 has no altsetting 0 [ 322.934906][ T5273] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 322.934933][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.940894][ T5273] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 323.295513][ T7139] binder: BINDER_SET_CONTEXT_MGR already set [ 323.295861][ T7139] binder: 7133:7139 ioctl 4018620d 20000040 returned -16 [ 324.054139][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.054204][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.025904][ T6870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.025952][ T6870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.037250][ T6139] bridge_slave_1: left allmulticast mode [ 325.037278][ T6139] bridge_slave_1: left promiscuous mode [ 325.037913][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.041980][ T6139] bridge_slave_0: left allmulticast mode [ 325.042004][ T6139] bridge_slave_0: left promiscuous mode [ 325.042154][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.305209][ T5273] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 325.326150][ T5273] usb 1-1: USB disconnect, device number 10 [ 325.770520][ T7157] syz.1.308: attempt to access beyond end of device [ 325.770520][ T7157] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 325.770824][ T7157] FAT-fs (loop3): unable to read boot sector [ 326.771699][ T54] Bluetooth: hci4: unexpected event 0x08 length: 78 > 4 [ 326.918462][ T5273] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 327.046036][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.067054][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.083105][ T6139] bond0 (unregistering): Released all slaves [ 327.135135][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.176723][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.202269][ T5273] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 327.239792][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.262874][ T5273] usb 1-1: config 0 descriptor?? [ 327.341505][ T6139] hsr_slave_0: left promiscuous mode [ 327.354113][ T6139] hsr_slave_1: left promiscuous mode [ 327.371976][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.385421][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.666225][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.706758][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.729367][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.737967][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.745685][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 328.753801][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.802157][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 329.911052][ T6139] team0 (unregistering): Port device team_slave_1 removed [ 330.042912][ T7191] autofs: Bad value for 'fd' [ 330.094744][ T6139] team0 (unregistering): Port device team_slave_0 removed [ 330.817598][ T54] Bluetooth: hci2: command tx timeout [ 331.100152][ T7081] bridge0: port 3(syz_tun) entered disabled state [ 331.151626][ T7081] syz_tun (unregistering): left allmulticast mode [ 331.182127][ T7081] syz_tun (unregistering): left promiscuous mode [ 331.234628][ T7081] bridge0: port 3(syz_tun) entered disabled state [ 331.322080][ T7190] lo speed is unknown, defaulting to 1000 [ 331.322115][ T7193] netlink: 'syz.1.313': attribute type 10 has an invalid length. [ 331.345590][ T7193] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 331.730888][ T6870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.786339][ T7190] lo speed is unknown, defaulting to 1000 [ 331.840681][ T7190] lo speed is unknown, defaulting to 1000 [ 332.006661][ T937] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 332.114261][ T7190] infiniband syz1: set active [ 332.119282][ T7190] infiniband syz1: added lo [ 332.124156][ T7190] syz1: rxe_create_cq: returned err = -12 [ 332.130602][ T7190] infiniband syz1: Couldn't create ib_mad CQ [ 332.137980][ T7190] infiniband syz1: Couldn't open port 1 [ 332.158695][ T937] usb 2-1: Using ep0 maxpacket: 16 [ 332.194818][ T937] usb 2-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 332.225863][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.242725][ T5274] lo speed is unknown, defaulting to 1000 [ 332.263041][ T7172] coredump: 269(syz.0.309): written to core: VMAs: 36, size 99647488; core: 62207030 bytes, pos 99655680 [ 332.277872][ T937] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 332.280620][ T7190] RDS/IB: syz1: added [ 332.294091][ T937] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.308715][ T6870] veth0_vlan: entered promiscuous mode [ 332.339087][ T7190] smc: adding ib device syz1 with port count 1 [ 332.350282][ T937] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 332.366601][ T937] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 332.386616][ T937] usb 2-1: Manufacturer: syz [ 332.399742][ T937] usb 2-1: config 0 descriptor?? [ 332.402090][ T7190] smc: ib device syz1 port 1 has pnetid [ 332.436644][ T5273] usbhid 1-1:0.0: can't add hid device: -32 [ 332.439413][ T7176] chnl_net:caif_netlink_parms(): no params data found [ 332.442707][ T5273] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 332.480151][ T6870] veth1_vlan: entered promiscuous mode [ 332.534549][ T6870] veth0_macvtap: entered promiscuous mode [ 332.561923][ T6973] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 332.613240][ T5232] lo speed is unknown, defaulting to 1000 [ 332.694134][ T6973] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 332.707258][ T937] rc_core: IR keymap rc-hauppauge not found [ 332.713182][ T937] Registered IR keymap rc-empty [ 332.721267][ T937] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 332.730894][ T6973] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 332.745369][ T5274] usb 1-1: USB disconnect, device number 11 [ 332.757086][ T6973] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 332.768435][ T937] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 332.778787][ T7190] lo speed is unknown, defaulting to 1000 [ 332.795031][ T6870] veth1_macvtap: entered promiscuous mode [ 332.828508][ T937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 332.871333][ T937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 332.906679][ T54] Bluetooth: hci2: command tx timeout [ 332.936932][ T937] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 332.959985][ T937] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 332.966160][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.972090][ C0] rc rc0: IR event FIFO is full! [ 332.977691][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.982669][ C0] rc rc0: IR event FIFO is full! [ 332.992486][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.996993][ C0] rc rc0: IR event FIFO is full! [ 332.997013][ C0] rc rc0: IR event FIFO is full! [ 332.997027][ C0] rc rc0: IR event FIFO is full! [ 332.997040][ C0] rc rc0: IR event FIFO is full! [ 332.997054][ C0] rc rc0: IR event FIFO is full! [ 332.997246][ C0] rc rc0: IR event FIFO is full! [ 333.008010][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.012548][ C0] rc rc0: IR event FIFO is full! [ 333.019050][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.022393][ C0] rc rc0: IR event FIFO is full! [ 333.030190][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.032238][ C0] rc rc0: IR event FIFO is full! [ 333.037221][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.046956][ C0] rc rc0: IR event FIFO is full! [ 333.047163][ C0] rc rc0: IR event FIFO is full! [ 333.047178][ C0] rc rc0: IR event FIFO is full! [ 333.047193][ C0] rc rc0: IR event FIFO is full! [ 333.052122][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.059288][ C0] rc rc0: IR event FIFO is full! [ 333.059303][ C0] rc rc0: IR event FIFO is full! [ 333.059317][ C0] rc rc0: IR event FIFO is full! [ 333.059507][ C0] rc rc0: IR event FIFO is full! [ 333.059521][ C0] rc rc0: IR event FIFO is full! [ 333.059874][ C0] rc rc0: IR event FIFO is full! [ 333.059891][ C0] rc rc0: IR event FIFO is full! [ 333.059904][ C0] rc rc0: IR event FIFO is full! [ 333.059919][ C0] rc rc0: IR event FIFO is full! [ 333.064844][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.075235][ C0] rc rc0: IR event FIFO is full! [ 333.075249][ C0] rc rc0: IR event FIFO is full! [ 333.075261][ C0] rc rc0: IR event FIFO is full! [ 333.075274][ C0] rc rc0: IR event FIFO is full! [ 333.081617][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.090250][ C0] rc rc0: IR event FIFO is full! [ 333.098230][ T6870] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.099960][ C0] rc rc0: IR event FIFO is full! [ 333.104888][ T6870] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.109808][ C0] rc rc0: IR event FIFO is full! [ 333.109823][ C0] rc rc0: IR event FIFO is full! [ 333.109836][ C0] rc rc0: IR event FIFO is full! [ 333.109850][ C0] rc rc0: IR event FIFO is full! [ 333.120375][ T6870] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.125171][ C0] rc rc0: IR event FIFO is full! [ 333.130127][ T6870] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.135006][ C0] rc rc0: IR event FIFO is full! [ 333.135019][ C0] rc rc0: IR event FIFO is full! [ 333.135234][ C0] rc rc0: IR event FIFO is full! [ 333.285265][ C0] rc rc0: IR event FIFO is full! [ 333.290413][ C0] rc rc0: IR event FIFO is full! [ 333.295349][ C0] rc rc0: IR event FIFO is full! [ 333.300284][ C0] rc rc0: IR event FIFO is full! [ 333.305218][ C0] rc rc0: IR event FIFO is full! [ 333.310154][ C0] rc rc0: IR event FIFO is full! [ 333.315092][ C0] rc rc0: IR event FIFO is full! [ 333.320222][ C0] rc rc0: IR event FIFO is full! [ 333.325161][ C0] rc rc0: IR event FIFO is full! [ 333.330095][ C0] rc rc0: IR event FIFO is full! [ 333.335030][ C0] rc rc0: IR event FIFO is full! [ 333.340142][ C0] rc rc0: IR event FIFO is full! [ 333.345078][ C0] rc rc0: IR event FIFO is full! [ 333.350177][ C0] rc rc0: IR event FIFO is full! [ 333.376889][ T937] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 333.413267][ T937] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 333.462243][ T937] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 333.473773][ T7176] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.482630][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.490025][ T937] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 333.497948][ T7176] bridge_slave_0: entered allmulticast mode [ 333.505647][ T7176] bridge_slave_0: entered promiscuous mode [ 333.517020][ T937] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 333.534397][ T7190] lo speed is unknown, defaulting to 1000 [ 333.537172][ T937] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 333.563577][ T7176] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.570951][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.579620][ T7176] bridge_slave_1: entered allmulticast mode [ 333.588014][ T7176] bridge_slave_1: entered promiscuous mode [ 333.606626][ T937] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 333.626829][ T937] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 333.647925][ T937] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 333.655953][ T937] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 333.675407][ T937] usb 2-1: USB disconnect, device number 15 [ 333.722321][ T6139] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.844417][ T7176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.930108][ T6139] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.958108][ T7176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.019986][ T6139] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.038115][ T7190] lo speed is unknown, defaulting to 1000 [ 334.199821][ T6139] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.297314][ T7176] team0: Port device team_slave_0 added [ 334.311366][ T7190] lo speed is unknown, defaulting to 1000 [ 334.387756][ T7176] team0: Port device team_slave_1 added [ 334.394282][ T2882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.445008][ T2882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.598980][ T7176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.606094][ T7176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.640183][ T7176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.673141][ T6973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.730273][ T7190] lo speed is unknown, defaulting to 1000 [ 334.828463][ T7176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.835471][ T7176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.893183][ T7176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.933595][ T7190] lo speed is unknown, defaulting to 1000 [ 334.940004][ T6139] bridge_slave_1: left allmulticast mode [ 334.945701][ T6139] bridge_slave_1: left promiscuous mode [ 334.977311][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.977827][ T54] Bluetooth: hci2: command tx timeout [ 334.997934][ T6139] bridge_slave_0: left allmulticast mode [ 335.005800][ T6139] bridge_slave_0: left promiscuous mode [ 335.032870][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.750939][ T7258] netlink: 'syz.1.317': attribute type 3 has an invalid length. [ 336.786663][ T7258] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.317'. [ 336.905342][ T7258] vivid-003: ================= START STATUS ================= [ 336.933978][ T7258] vivid-003: Radio HW Seek Mode: Bounded [ 336.961757][ T7258] vivid-003: Radio Programmable HW Seek: false [ 336.979506][ T7258] vivid-003: RDS Rx I/O Mode: Block I/O [ 337.003392][ T7258] vivid-003: Generate RBDS Instead of RDS: false [ 337.031185][ T7258] vivid-003: RDS Reception: true [ 337.045320][ T7258] vivid-003: RDS Program Type: 0 inactive [ 337.053904][ T7258] vivid-003: RDS PS Name: inactive [ 337.067570][ T54] Bluetooth: hci2: command tx timeout [ 337.086821][ T7258] vivid-003: RDS Radio Text: inactive [ 337.092470][ T7258] vivid-003: RDS Traffic Announcement: false inactive [ 337.099601][ T7258] vivid-003: RDS Traffic Program: false inactive [ 337.106143][ T7258] vivid-003: RDS Music: false inactive [ 337.112843][ T7258] vivid-003: ================== END STATUS ================== [ 337.177056][ T29] audit: type=1326 audit(1727193656.739:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7262 comm="syz.0.318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f560817def9 code=0x0 [ 337.317387][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.329954][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.349941][ T6139] bond0 (unregistering): (slave team0): Releasing backup interface [ 337.362146][ T6139] bond0 (unregistering): Released all slaves [ 337.424298][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.453499][ T6973] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.466313][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.563793][ T7269] xt_hashlimit: size too large, truncated to 1048576 [ 338.259037][ T7176] hsr_slave_0: entered promiscuous mode [ 338.366428][ T7176] hsr_slave_1: entered promiscuous mode [ 338.459617][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.466799][ T6124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.476315][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.483493][ T6124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.867573][ T7286] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 341.884649][ T7286] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 341.915786][ T7286] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 341.933287][ T7286] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 341.963471][ T7286] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 342.009142][ T7286] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.016062][ T7286] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 342.057406][ T6973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.091815][ T7286] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 343.079384][ T5232] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 343.315484][ T5232] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 343.336999][ T5232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.918187][ T5232] usb 1-1: config 0 descriptor?? [ 343.936716][ T54] Bluetooth: hci0: command 0x0405 tx timeout [ 343.937783][ T5227] Bluetooth: hci1: command 0x0c1a tx timeout [ 343.942761][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 343.962019][ T5232] usb 1-1: can't set config #0, error -71 [ 343.969951][ T5232] usb 1-1: USB disconnect, device number 12 [ 344.008810][ T7317] could not allocate digest TFM handle sha256-arm64-neon [ 344.107356][ T6139] hsr_slave_0: left promiscuous mode [ 344.137615][ T5240] Bluetooth: hci2: command 0x0c1a tx timeout [ 345.666871][ T6139] hsr_slave_1: left promiscuous mode [ 345.756601][ T29] audit: type=1326 audit(1727193665.319:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7340 comm="syz.1.328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f464f37def9 code=0x0 [ 345.810761][ T6139] veth1_macvtap: left promiscuous mode [ 345.823362][ T6139] veth0_macvtap: left promiscuous mode [ 345.847036][ T6139] veth1_vlan: left promiscuous mode [ 345.866615][ T6139] veth0_vlan: left promiscuous mode [ 346.028570][ T5240] Bluetooth: hci0: command 0x0405 tx timeout [ 346.178553][ T5240] Bluetooth: hci2: command 0x0c1a tx timeout [ 348.107006][ T5240] Bluetooth: hci0: command 0x0405 tx timeout [ 348.258027][ T5240] Bluetooth: hci2: command 0x0c1a tx timeout [ 348.756986][ T6139] team0 (unregistering): Port device team_slave_1 removed [ 348.858369][ T6139] team0 (unregistering): Port device team_slave_0 removed [ 349.132059][ T7338] coredump: 21(syz.3.326): written to core: VMAs: 36, size 97550336; core: 60101686 bytes, pos 97558528 [ 349.807191][ T7176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.918260][ T7176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.991640][ T7176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 350.194531][ T7176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 351.170620][ T7176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.738346][ T7388] ./bus: Can't lookup blockdev [ 352.407404][ T7176] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.434751][ T7176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.449959][ T7176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.218457][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.225750][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.234998][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.242249][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.572031][ T6973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.758827][ T7176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.926380][ T7422] bridge0: port 3(team0) entered blocking state [ 357.947862][ T7422] bridge0: port 3(team0) entered disabled state [ 358.020156][ T7422] team0: entered allmulticast mode [ 358.025952][ T7422] team_slave_0: entered allmulticast mode [ 358.033379][ T7422] team_slave_1: entered allmulticast mode [ 358.054543][ T7422] team0: entered promiscuous mode [ 358.060959][ T7422] team_slave_0: entered promiscuous mode [ 358.067472][ T7422] team_slave_1: entered promiscuous mode [ 358.316741][ T7422] bridge0: port 3(team0) entered blocking state [ 358.323224][ T7422] bridge0: port 3(team0) entered forwarding state [ 358.722627][ T6139] IPVS: stop unused estimator thread 0... [ 358.746258][ T6973] veth0_vlan: entered promiscuous mode [ 358.768888][ T6973] veth1_vlan: entered promiscuous mode [ 358.843543][ T7176] veth0_vlan: entered promiscuous mode [ 358.972391][ T7176] veth1_vlan: entered promiscuous mode [ 359.073748][ T7176] veth0_macvtap: entered promiscuous mode [ 359.320849][ T6973] veth0_macvtap: entered promiscuous mode [ 359.333452][ T7176] veth1_macvtap: entered promiscuous mode [ 360.222213][ T6973] veth1_macvtap: entered promiscuous mode [ 360.251284][ T7447] netlink: 'syz.0.340': attribute type 10 has an invalid length. [ 360.308607][ T7447] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.334287][ T7447] bond0: (slave team0): Enslaving as an active interface with an up link [ 360.362995][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.767029][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.779611][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.820796][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.864267][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.890928][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.012334][ T7176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.034150][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.051251][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.098476][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.209050][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.245981][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.449327][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.464373][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.216781][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.534762][ T6973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.706880][ T7485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.723348][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.785627][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.808329][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.890372][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.967904][ T54] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 365.021886][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.073504][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.159653][ T7176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.187287][ T7485] tipc: Started in network mode [ 365.192880][ T7485] tipc: Node identity 080211, cluster identity 4711 [ 365.200188][ T7485] tipc: Enabled bearer , priority 10 [ 365.222571][ T7176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.240068][ T7176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.262963][ T7176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.303630][ T7176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.361942][ T7489] lo speed is unknown, defaulting to 1000 [ 365.398499][ T5227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.408661][ T5227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.481389][ T5227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.501352][ T5227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.524316][ T5227] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 365.533464][ T5227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.706103][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.724834][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.766221][ T7495] lo speed is unknown, defaulting to 1000 [ 365.948030][ T6138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.997270][ T6138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.335274][ T25] tipc: Node number set to 134353152 [ 366.436543][ T7501] capability: warning: `syz.2.311' uses 32-bit capabilities (legacy support in use) [ 366.494399][ T7495] chnl_net:caif_netlink_parms(): no params data found [ 367.572716][ T7514] ALSA: mixer_oss: invalid OSS volume './file0' [ 367.617904][ T5240] Bluetooth: hci5: command tx timeout [ 367.925595][ T2882] bridge_slave_1: left allmulticast mode [ 367.936274][ T2882] bridge_slave_1: left promiscuous mode [ 367.968815][ T2882] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.016255][ T2882] bridge_slave_0: left allmulticast mode [ 368.041963][ T2882] bridge_slave_0: left promiscuous mode [ 368.075855][ T2882] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.369401][ T7506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.462795][ T7515] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 368.531988][ T7515] CIFS: Unable to determine destination address [ 369.332399][ T29] audit: type=1326 audit(1727193688.909:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.2.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03ae37def9 code=0x0 [ 369.446822][ T2882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.474120][ T2882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.494290][ T2882] bond0 (unregistering): Released all slaves [ 369.641527][ T7495] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.663810][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.699588][ T5240] Bluetooth: hci5: command tx timeout [ 369.705247][ T7495] bridge_slave_0: entered allmulticast mode [ 369.726290][ T7495] bridge_slave_0: entered promiscuous mode [ 369.775813][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.783053][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.790461][ T7495] bridge_slave_1: entered allmulticast mode [ 369.797548][ T7495] bridge_slave_1: entered promiscuous mode [ 370.793749][ T7495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.866339][ T7495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.716223][ T5227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.741402][ T5342] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 371.749369][ T5225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 371.767165][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 371.775055][ T5227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.775292][ T5225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.782176][ T5236] Bluetooth: hci5: command tx timeout [ 371.797881][ T5227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.799143][ T5225] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.818327][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 371.826903][ T5227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.827147][ T5225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.847580][ T5227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 371.855032][ T5227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.996475][ T5342] usb 4-1: Using ep0 maxpacket: 8 [ 372.031882][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 372.047743][ T5342] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 372.197117][ T5342] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=8a.1e [ 372.206251][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.231922][ T5342] usb 4-1: Product: syz [ 372.243618][ T5342] usb 4-1: Manufacturer: syz [ 372.250760][ T5342] usb 4-1: SerialNumber: syz [ 372.286343][ T5342] usb 4-1: config 0 descriptor?? [ 372.295844][ T5342] cyberjack 4-1:0.0: Reiner SCT Cyberjack USB card reader converter detected [ 372.325319][ T5342] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 372.370061][ T5342] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 372.611626][ T7555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.627612][ T7555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.177635][ T7557] Cannot find add_set index 0 as target [ 373.866674][ T5225] Bluetooth: hci5: command tx timeout [ 373.941754][ T5225] Bluetooth: hci0: command tx timeout [ 373.948361][ T5225] Bluetooth: hci4: command tx timeout [ 375.276928][ T7495] team0: Port device team_slave_0 added [ 375.304603][ T7495] team0: Port device team_slave_1 added [ 375.344372][ T2882] hsr_slave_0: left promiscuous mode [ 375.533033][ T2882] hsr_slave_1: left promiscuous mode [ 375.562389][ T5232] usb 4-1: USB disconnect, device number 5 [ 375.579758][ T5232] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 375.591750][ T2882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.601657][ T2882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.620858][ T5232] cyberjack 4-1:0.0: device disconnected [ 375.901566][ T2882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.918311][ T7570] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 375.940846][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 376.019950][ T5227] Bluetooth: hci4: command tx timeout [ 376.025522][ T5227] Bluetooth: hci0: command tx timeout [ 376.689162][ T2882] veth1_macvtap: left promiscuous mode [ 376.712144][ T2882] veth0_macvtap: left promiscuous mode [ 376.725505][ T2882] veth1_vlan: left promiscuous mode [ 376.742018][ T2882] veth0_vlan: left promiscuous mode [ 378.102169][ T5227] Bluetooth: hci4: command tx timeout [ 378.111711][ T5225] Bluetooth: hci0: command tx timeout [ 378.659702][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.666111][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.731107][ T7592] ubi0: attaching mtd0 [ 379.731266][ T7592] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 380.574475][ T5225] Bluetooth: hci0: command tx timeout [ 380.580537][ T5225] Bluetooth: hci4: command tx timeout [ 381.123989][ T7602] netlink: 'syz.3.360': attribute type 11 has an invalid length. [ 381.616862][ T7599] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 381.670178][ T2882] team0 (unregistering): Port device team_slave_1 removed [ 381.726698][ T2882] team0 (unregistering): Port device team_slave_0 removed [ 382.159240][ T7548] lo speed is unknown, defaulting to 1000 [ 382.265072][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.304358][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.499962][ T7495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.513756][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.521002][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.548216][ T7495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.451622][ T7546] lo speed is unknown, defaulting to 1000 [ 383.726032][ T7623] xt_hashlimit: size too large, truncated to 1048576 [ 384.629969][ T7495] hsr_slave_0: entered promiscuous mode [ 384.656335][ T7495] hsr_slave_1: entered promiscuous mode [ 384.703930][ T7495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.716237][ T7495] Cannot create hsr debugfs directory [ 386.311856][ T7546] chnl_net:caif_netlink_parms(): no params data found [ 389.217723][ T2882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.847303][ T7670] ubi0: attaching mtd0 [ 389.851454][ T7670] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 390.480232][ T7677] netlink: zone id is out of range [ 390.487296][ T7677] netlink: zone id is out of range [ 390.492912][ T7677] netlink: zone id is out of range [ 390.498632][ T7677] netlink: zone id is out of range [ 390.517922][ T7677] netlink: set zone limit has 4 unknown bytes [ 393.347036][ T7677] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 393.351082][ T7678] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 393.496013][ T2882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.609348][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.624124][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.633507][ T7546] bridge_slave_0: entered allmulticast mode [ 393.655682][ T7546] bridge_slave_0: entered promiscuous mode [ 393.683693][ T7548] chnl_net:caif_netlink_parms(): no params data found [ 393.742867][ T2882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.773560][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.801330][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.882475][ T7546] bridge_slave_1: entered allmulticast mode [ 393.900585][ T7546] bridge_slave_1: entered promiscuous mode [ 394.033073][ T2882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.111004][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.183888][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.606112][ T7546] team0: Port device team_slave_0 added [ 394.713198][ T7546] team0: Port device team_slave_1 added [ 394.872743][ T7495] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 395.255319][ T7548] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.262797][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.275309][ T7548] bridge_slave_0: entered allmulticast mode [ 395.283399][ T7548] bridge_slave_0: entered promiscuous mode [ 395.333379][ T7495] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 395.372691][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.385624][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.450488][ T7546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.508676][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.525526][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.643317][ T7546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.679021][ T7548] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.688385][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.697098][ T7548] bridge_slave_1: entered allmulticast mode [ 395.704198][ T7548] bridge_slave_1: entered promiscuous mode [ 395.724542][ T7495] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 396.686917][ T5296] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 396.771707][ T7548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.825769][ T7548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.867580][ T7495] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 396.878173][ T5296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 396.916499][ T5296] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 396.928060][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.951415][ T5296] usb 4-1: config 0 descriptor?? [ 397.027702][ T5296] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 397.104859][ T7546] hsr_slave_0: entered promiscuous mode [ 397.113482][ T7546] hsr_slave_1: entered promiscuous mode [ 397.125234][ T7546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.135221][ T7546] Cannot create hsr debugfs directory [ 397.178585][ T7548] team0: Port device team_slave_0 added [ 397.199875][ T7548] team0: Port device team_slave_1 added [ 397.288255][ T5225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 397.301131][ T5225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 397.319119][ T5225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 397.332540][ T5225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 397.346872][ T5225] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 397.360268][ T5225] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 397.371698][ T2882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.446285][ T7548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.464047][ T7548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.490812][ T7548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.507489][ T7548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.515104][ T7548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.541777][ T7548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.647175][ T2882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.943761][ T2882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.079102][ T7548] hsr_slave_0: entered promiscuous mode [ 398.092926][ T7548] hsr_slave_1: entered promiscuous mode [ 398.099710][ T7548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.107832][ T7548] Cannot create hsr debugfs directory [ 398.137467][ T2882] bond0: (slave netdevsim0): Releasing backup interface [ 398.149516][ T2882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.194165][ T7719] lo speed is unknown, defaulting to 1000 [ 398.510207][ T2882] bridge_slave_1: left allmulticast mode [ 398.522938][ T2882] bridge_slave_1: left promiscuous mode [ 398.535371][ T2882] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.554232][ T2882] bridge_slave_0: left allmulticast mode [ 398.562619][ T2882] bridge_slave_0: left promiscuous mode [ 398.570504][ T2882] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.589955][ T2882] team0: left allmulticast mode [ 398.603673][ T2882] team_slave_0: left allmulticast mode [ 398.611224][ T2882] team_slave_1: left allmulticast mode [ 398.620284][ T2882] team0: left promiscuous mode [ 398.625095][ T2882] team_slave_0: left promiscuous mode [ 398.638119][ T2882] team_slave_1: left promiscuous mode [ 398.643848][ T2882] bridge0: port 3(team0) entered disabled state [ 398.688046][ T5273] usb 4-1: USB disconnect, device number 6 [ 398.728464][ T2882] bridge_slave_1: left allmulticast mode [ 398.734256][ T2882] bridge_slave_1: left promiscuous mode [ 398.761850][ T2882] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.787175][ T2882] bridge_slave_0: left allmulticast mode [ 398.793132][ T2882] bridge_slave_0: left promiscuous mode [ 398.809355][ T2882] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.196528][ T5296] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 399.377169][ T5296] usb 4-1: Using ep0 maxpacket: 32 [ 399.389029][ T5296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.411751][ T5296] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 399.423371][ T5296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.431530][ T5296] usb 4-1: Product: syz [ 399.435732][ T5296] usb 4-1: Manufacturer: syz [ 399.441674][ T5296] usb 4-1: SerialNumber: syz [ 399.448704][ T5296] usb 4-1: config 0 descriptor?? [ 399.456714][ T5227] Bluetooth: hci3: command tx timeout [ 399.477239][ T5296] as10x_usb: device has been detected [ 399.483062][ T5296] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 399.537433][ T5296] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 399.625022][ T5296] as10x_usb: error during firmware upload part1 [ 399.640498][ T5296] Registered device Abilis Systems DVB-Titan [ 399.667999][ T2882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.690335][ T2882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.717647][ T2882] bond0 (unregistering): (slave team0): Releasing backup interface [ 399.733405][ T2882] bond0 (unregistering): Released all slaves [ 399.874257][ T2882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.885342][ T2882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.896521][ T2882] bond0 (unregistering): Released all slaves [ 400.024865][ T2882] : left promiscuous mode [ 400.104980][ T7495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.140909][ T2882] tipc: Disabling bearer [ 400.147323][ T2882] tipc: Left network mode [ 400.285681][ T7495] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.448748][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.455940][ T5583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.560660][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.567866][ T5583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.627746][ T7719] chnl_net:caif_netlink_parms(): no params data found [ 400.735312][ T7546] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 400.814208][ T7546] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 400.833715][ T7546] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 400.905631][ T7546] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 400.976550][ T5227] Bluetooth: hci1: command 0x0c1a tx timeout [ 401.062035][ T7495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.088418][ T7495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.312816][ T2882] hsr_slave_0: left promiscuous mode [ 401.322374][ T2882] hsr_slave_1: left promiscuous mode [ 401.329771][ T2882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.339401][ T2882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.348237][ T2882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.355745][ T2882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.375722][ T2882] hsr_slave_0: left promiscuous mode [ 401.381864][ T2882] hsr_slave_1: left promiscuous mode [ 401.392320][ T2882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.401712][ T2882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.410044][ T2882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.417891][ T2882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.447825][ T2882] veth1_macvtap: left promiscuous mode [ 401.453714][ T2882] veth0_macvtap: left promiscuous mode [ 401.460839][ T2882] veth1_vlan: left promiscuous mode [ 401.466130][ T2882] veth0_vlan: left promiscuous mode [ 401.472673][ T2882] veth1_macvtap: left promiscuous mode [ 401.478488][ T2882] veth0_macvtap: left promiscuous mode [ 401.484109][ T2882] veth1_vlan: left promiscuous mode [ 401.489623][ T2882] veth0_vlan: left promiscuous mode [ 401.536886][ T5227] Bluetooth: hci3: command tx timeout [ 401.583107][ T2882] infiniband syz1: set down [ 401.818642][ T25] usb 4-1: USB disconnect, device number 7 [ 401.858614][ T25] Unregistered device Abilis Systems DVB-Titan [ 401.872268][ T25] as10x_usb: device has been disconnected [ 402.023700][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 402.314164][ T2882] team0 (unregistering): Port device team_slave_1 removed [ 402.366343][ T2882] team0 (unregistering): Port device team_slave_0 removed [ 402.439234][ T7786] ubi0: attaching mtd0 [ 402.443449][ T7786] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 403.619090][ T5227] Bluetooth: hci3: command tx timeout [ 404.829409][ T6138] smc: removing ib device syz1 [ 405.696701][ T5227] Bluetooth: hci3: command tx timeout [ 405.727192][ T3366] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 405.916799][ T3366] usb 4-1: Using ep0 maxpacket: 8 [ 405.945219][ T3366] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 405.966478][ T3366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.011391][ T3366] usb 4-1: config 0 descriptor?? [ 406.043952][ T3366] usb 4-1: bad CDC descriptors [ 406.171554][ T2882] team0 (unregistering): Port device team_slave_1 removed [ 406.359538][ T2882] team0 (unregistering): Port device team_slave_0 removed [ 406.974286][ T5221] lo speed is unknown, defaulting to 1000 [ 407.073782][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.094244][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.114300][ T7719] bridge_slave_0: entered allmulticast mode [ 407.125948][ T7719] bridge_slave_0: entered promiscuous mode [ 407.169492][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.182165][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.201408][ T7719] bridge_slave_1: entered allmulticast mode [ 407.224062][ T7719] bridge_slave_1: entered promiscuous mode [ 407.282371][ T7495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.330077][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.429182][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.625196][ T7719] team0: Port device team_slave_0 added [ 407.653379][ T7719] team0: Port device team_slave_1 added [ 407.751623][ T7548] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 407.772260][ T7548] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 407.807156][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.816804][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.853566][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.879439][ T7548] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 407.907915][ T7548] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 407.930323][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.943557][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.974080][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.002358][ T7546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.035860][ T7546] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.088572][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.095742][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.109647][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.116805][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.217459][ T7546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.253065][ T5274] usb 4-1: USB disconnect, device number 8 [ 408.298129][ T7719] hsr_slave_0: entered promiscuous mode [ 408.317840][ T7719] hsr_slave_1: entered promiscuous mode [ 408.324502][ T7719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.335630][ T7719] Cannot create hsr debugfs directory [ 408.462262][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 408.842741][ T29] audit: type=1326 audit(1727193728.399:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7816 comm="syz.3.380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5897d7def9 code=0x0 [ 408.872273][ T7495] veth0_vlan: entered promiscuous mode [ 408.950131][ T7548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.072823][ T7495] veth1_vlan: entered promiscuous mode [ 409.132891][ T7548] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.470367][ T7719] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.575745][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.582936][ T5583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.634625][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.641835][ T5583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.774971][ T7719] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.884799][ T7546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.944344][ T7719] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.977903][ T7495] veth0_macvtap: entered promiscuous mode [ 410.018499][ T2882] IPVS: stop unused estimator thread 0... [ 410.046873][ T3366] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 410.073922][ T7719] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.101358][ T7495] veth1_macvtap: entered promiscuous mode [ 410.163987][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.176271][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.188336][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.201087][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.212854][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.226132][ T3366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 410.246879][ T3366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 410.268302][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.289681][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.307504][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.324918][ T3366] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 410.334716][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.351155][ T3366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.360706][ T3366] usb 4-1: Product: syz [ 410.364914][ T3366] usb 4-1: Manufacturer: syz [ 410.368522][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.377536][ T3366] usb 4-1: SerialNumber: syz [ 410.384737][ T3366] usb 4-1: config 0 descriptor?? [ 410.414057][ T3366] ir_toy 4-1:0.0: required endpoints not found [ 410.424826][ T7546] veth0_vlan: entered promiscuous mode [ 410.450582][ T7495] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.479894][ T7495] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.489298][ T7495] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.498596][ T7495] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.580138][ T7546] veth1_vlan: entered promiscuous mode [ 410.639753][ T2882] bridge_slave_1: left allmulticast mode [ 410.645464][ T2882] bridge_slave_1: left promiscuous mode [ 410.665493][ T5221] usb 4-1: USB disconnect, device number 9 [ 410.683914][ T2882] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.697084][ T2882] bridge_slave_0: left allmulticast mode [ 410.702767][ T2882] bridge_slave_0: left promiscuous mode [ 410.711068][ T2882] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.055577][ T2882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.072125][ T2882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.083307][ T2882] bond0 (unregistering): Released all slaves [ 411.137389][ T7719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 411.161676][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.185874][ T7719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 411.192692][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.295093][ T7719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 411.307144][ T7719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 411.319186][ T7546] veth0_macvtap: entered promiscuous mode [ 411.340335][ T7546] veth1_macvtap: entered promiscuous mode [ 411.341485][ T5583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.362107][ T5583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.382241][ T7548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.433343][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.443998][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.456996][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.474004][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.483953][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.495101][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.511199][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.526679][ T3366] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 411.615964][ T2882] hsr_slave_0: left promiscuous mode [ 411.627546][ T2882] hsr_slave_1: left promiscuous mode [ 411.633413][ T2882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.642018][ T2882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.651232][ T2882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.659092][ T2882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.707030][ T3366] usb 4-1: Using ep0 maxpacket: 16 [ 411.728187][ T7856] netlink: 104 bytes leftover after parsing attributes in process `syz.4.208'. [ 411.765254][ T3366] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=e0.0d [ 411.775019][ T3366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.792965][ T3366] usb 4-1: Product: syz [ 411.841508][ T2882] veth1_macvtap: left promiscuous mode [ 411.850322][ T3366] usb 4-1: Manufacturer: syz [ 411.855183][ T3366] usb 4-1: SerialNumber: syz [ 411.870875][ T2882] veth0_macvtap: left promiscuous mode [ 411.885966][ T3366] usb 4-1: config 0 descriptor?? [ 411.898160][ T2882] veth1_vlan: left promiscuous mode [ 411.925178][ T2882] veth0_vlan: left promiscuous mode [ 411.938286][ T3366] pwc: Logitech ViewPort AV 100 webcam detected. [ 412.144385][ T3366] pwc: Failed to set LED on/off time (-71) [ 412.186352][ T3366] pwc: send_video_command error -71 [ 412.214083][ T3366] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 412.265193][ T3366] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 412.353630][ T3366] usb 4-1: USB disconnect, device number 10 [ 413.266153][ T2882] team0 (unregistering): Port device team_slave_1 removed [ 413.323051][ T2882] team0 (unregistering): Port device team_slave_0 removed [ 413.988878][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.000278][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.010497][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.022023][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.059076][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.105962][ T7546] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.123110][ T7546] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.139181][ T7546] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.152039][ T7546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.390523][ T7548] veth0_vlan: entered promiscuous mode [ 414.412142][ T7864] tipc: Failed to remove unknown binding: 66,1,1/0:483992720/483992722 [ 414.436825][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.447702][ T7864] tipc: Failed to remove unknown binding: 66,1,1/0:483992720/483992722 [ 414.457685][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.538713][ T7548] veth1_vlan: entered promiscuous mode [ 414.579960][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.618979][ T7864] kvm: emulating exchange as write [ 414.619892][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.648393][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.740819][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.845066][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.852311][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.873041][ T7548] veth0_macvtap: entered promiscuous mode [ 414.887172][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.894304][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.925893][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 414.973936][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.351'. [ 415.002473][ T7548] veth1_macvtap: entered promiscuous mode [ 415.104091][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.126177][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.144606][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.164675][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.184129][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.195661][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.215850][ T5309] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 415.224833][ T5273] IPVS: starting estimator thread 0... [ 415.253627][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.303598][ T7719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.316761][ T7872] IPVS: using max 14 ests per chain, 33600 per kthread [ 415.374680][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.392124][ T5309] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 415.411298][ T5309] usb 5-1: config 0 has no interface number 0 [ 415.426951][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.446017][ T5309] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 3.fd [ 415.471204][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.485612][ T5309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.503122][ T5309] usb 5-1: Product: syz [ 415.509458][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.528211][ T5309] usb 5-1: Manufacturer: syz [ 415.545965][ T5309] usb 5-1: SerialNumber: syz [ 415.559078][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.597430][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.618738][ T5309] usb 5-1: config 0 descriptor?? [ 415.658539][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.720136][ T7548] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.735891][ T7548] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.756867][ T7548] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.774757][ T7548] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.852023][ T5309] usb 5-1: USB disconnect, device number 3 [ 416.280859][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.672423][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'. [ 417.218083][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.350472][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.426815][ T6136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.434688][ T6136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.633058][ T7719] veth0_vlan: entered promiscuous mode [ 417.668908][ T7719] veth1_vlan: entered promiscuous mode [ 417.799967][ T5227] Bluetooth: hci4: unexpected subevent 0x01 length: 78 > 18 [ 417.818012][ T7719] veth0_macvtap: entered promiscuous mode [ 417.827412][ T7719] veth1_macvtap: entered promiscuous mode [ 417.843413][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.853959][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.864069][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.874707][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.884792][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.895298][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.905327][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.919482][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.930942][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.941685][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.952331][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.962273][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.972963][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.982858][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.993403][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.003378][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.013963][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.030588][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.061516][ T7719] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.076507][ T7719] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.286598][ T7719] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.363321][ T7719] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.900923][ T7902] netlink: 'syz.3.393': attribute type 2 has an invalid length. [ 418.967364][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 421.986331][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.007149][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.112962][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.397'. [ 423.135477][ T7949] netlink: 'syz.4.406': attribute type 7 has an invalid length. [ 423.154327][ T7931] netlink: 'syz.0.398': attribute type 25 has an invalid length. [ 423.169732][ T7931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.398'. [ 423.705163][ T7941] netlink: 44 bytes leftover after parsing attributes in process `syz.0.398'. [ 423.715930][ T2882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.755974][ T7941] netlink: 40 bytes leftover after parsing attributes in process `syz.0.398'. [ 423.757667][ T2882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.217453][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 424.386858][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 424.429268][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.519359][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.631220][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 424.680918][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.686581][ T5273] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 424.760251][ T7980] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.418'. [ 424.822794][ T25] usb 4-1: config 0 descriptor?? [ 424.827611][ T7976] usb usb8: usbfs: process 7976 (syz.4.417) did not claim interface 0 before use [ 424.924067][ T7979] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.418'. [ 425.026858][ T5273] usb 2-1: Using ep0 maxpacket: 32 [ 425.062734][ T5273] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 425.132209][ T5273] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 425.162643][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 425.200136][ T5273] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 425.233248][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 425.245661][ T5273] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 425.265019][ T5273] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 425.307528][ T5273] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 425.328838][ T25] apple 0003:05AC:0240.0004: unknown main item tag 0x0 [ 425.341999][ T25] apple 0003:05AC:0240.0004: unbalanced collection at end of report description [ 425.352749][ T25] apple 0003:05AC:0240.0004: parse failed [ 425.355804][ T7987] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 425.359631][ T25] apple 0003:05AC:0240.0004: probe with driver apple failed with error -22 [ 425.370753][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.389153][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 425.404605][ T7987] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 425.412769][ T5273] usb 2-1: Product: syz [ 425.417612][ T5273] usb 2-1: Manufacturer: syz [ 425.422243][ T5273] usb 2-1: SerialNumber: syz [ 425.442045][ T5273] usb 2-1: config 0 descriptor?? [ 425.480260][ T7975] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 425.586912][ T7996] veth1: entered promiscuous mode [ 425.597763][ T5309] usb 4-1: USB disconnect, device number 11 [ 425.599431][ T7994] veth1: left promiscuous mode [ 425.715665][ T5273] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 425.725938][ T5273] hdpvr 2-1:0.0: device init failed [ 425.740342][ T5273] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 425.764262][ T5273] usb 2-1: USB disconnect, device number 16 [ 425.841523][ T7683] udevd[7683]: setting mode of /dev/bus/usb/002/016 to 020664 failed: No such file or directory [ 425.883122][ T7683] udevd[7683]: setting owner of /dev/bus/usb/002/016 to uid=0, gid=0 failed: No such file or directory [ 426.293263][ T8015] netlink: 'syz.2.431': attribute type 16 has an invalid length. [ 426.301391][ T8015] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.431'. [ 426.558676][ T5225] Bluetooth: hci3: command tx timeout [ 427.473370][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 427.627756][ T8049] netlink: 'syz.3.447': attribute type 7 has an invalid length. [ 427.717397][ T5342] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 428.123326][ T5342] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 428.151318][ T5342] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 428.197522][ T5342] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 428.258491][ T5342] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 428.286554][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.421107][ T5342] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 428.674464][ T5342] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 428.685147][ T8065] netlink: 84 bytes leftover after parsing attributes in process `syz.3.454'. [ 428.755887][ T8065] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 429.240378][ T8082] netlink: 'syz.2.461': attribute type 7 has an invalid length. [ 429.276676][ T5342] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 429.448288][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.499487][ T5342] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 429.522734][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.574200][ T5342] usb 4-1: config 0 descriptor?? [ 429.938878][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'. [ 430.035395][ T5342] aquacomputer_d5next 0003:0C70:F001.0005: hidraw0: USB HID v0.00 Device [HID 0c70:f001] on usb-dummy_hcd.3-1/input0 [ 430.297335][ T5342] usb 4-1: USB disconnect, device number 12 [ 430.650582][ T5273] usb 2-1: USB disconnect, device number 17 [ 431.133935][ T5342] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 431.149471][ T5225] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 432.078355][ T8109] input: syz0 as /devices/virtual/input/input12 [ 432.192117][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.204417][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.219438][ T5342] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 432.228946][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.290535][ T5342] usb 3-1: config 0 descriptor?? [ 432.728206][ T5342] zydacron 0003:13EC:0006.0006: item fetching failed at offset 4/5 [ 432.745047][ T5342] zydacron 0003:13EC:0006.0006: parse failed [ 432.786941][ T5342] zydacron 0003:13EC:0006.0006: probe with driver zydacron failed with error -22 [ 432.786968][ T5273] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 432.919846][ T8127] tipc: Enabling of bearer rejected, media not registered [ 432.931715][ T5342] usb 3-1: USB disconnect, device number 6 [ 433.003264][ T5273] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 433.022009][ T5273] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.054022][ T5273] usb 1-1: config 0 has no interface number 0 [ 433.077069][ T5273] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 433.107824][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.115871][ T5273] usb 1-1: Product: syz [ 433.123690][ T5273] usb 1-1: Manufacturer: syz [ 433.128707][ T5273] usb 1-1: SerialNumber: syz [ 433.135534][ T5273] usb 1-1: config 0 descriptor?? [ 433.155555][ T5273] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 433.173259][ T5273] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 433.181545][ T5309] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 433.207283][ T8139] netlink: 'syz.3.480': attribute type 7 has an invalid length. [ 433.346505][ T5309] usb 2-1: Using ep0 maxpacket: 8 [ 433.354141][ T5309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.365426][ T5309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.368949][ T5342] usb 1-1: USB disconnect, device number 13 [ 433.386537][ T5309] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 433.407007][ T5309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.431635][ T5309] usb 2-1: config 0 descriptor?? [ 433.437376][ T5274] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 433.596877][ T5273] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 433.612604][ T5274] usb 5-1: Using ep0 maxpacket: 32 [ 433.637728][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.653365][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.670693][ T5274] usb 5-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 433.680006][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.692255][ T5274] usb 5-1: config 0 descriptor?? [ 433.766660][ T5273] usb 4-1: Using ep0 maxpacket: 16 [ 433.780220][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.794127][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.815527][ T5273] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 433.832533][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.843812][ T5273] usb 4-1: config 0 descriptor?? [ 433.873126][ T5309] logitech 0003:046D:C20E.0007: rdesc size test failed for formula gp [ 433.883164][ T5309] logitech 0003:046D:C20E.0007: unbalanced delimiter at end of report description [ 433.902292][ T5309] logitech 0003:046D:C20E.0007: parse failed [ 433.913620][ T5309] logitech 0003:046D:C20E.0007: probe with driver logitech failed with error -22 [ 434.024316][ T8153] random: crng reseeded on system resumption [ 434.046675][ T5342] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 434.075099][ T3366] usb 2-1: USB disconnect, device number 18 [ 434.150333][ T5274] nzxt-smart2 0003:1E71:200F.0008: unknown main item tag 0x0 [ 434.167713][ T5274] nzxt-smart2 0003:1E71:200F.0008: item fetching failed at offset 2/5 [ 434.198642][ T5274] nzxt-smart2 0003:1E71:200F.0008: probe with driver nzxt-smart2 failed with error -22 [ 434.216659][ T5342] usb 3-1: Using ep0 maxpacket: 16 [ 434.232722][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.246047][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.266460][ T5342] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 434.287677][ T5273] hid-alps 0003:044E:120C.0009: unknown main item tag 0x2 [ 434.291746][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.294839][ T5273] hid-alps 0003:044E:120C.0009: item fetching failed at offset 4/5 [ 434.323531][ T5342] usb 3-1: config 0 descriptor?? [ 434.342121][ T5273] hid-alps 0003:044E:120C.0009: parse failed [ 434.356802][ T5273] hid-alps 0003:044E:120C.0009: probe with driver hid-alps failed with error -22 [ 434.364471][ T3366] usb 5-1: USB disconnect, device number 4 [ 434.511042][ T25] usb 4-1: USB disconnect, device number 13 [ 434.550120][ T5342] usbhid 3-1:0.0: can't add hid device: -71 [ 434.561198][ T5342] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 434.574567][ T5342] usb 3-1: USB disconnect, device number 7 [ 435.256817][ T5342] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 435.923616][ T8178] netlink: 'syz.4.493': attribute type 16 has an invalid length. [ 435.931509][ T8178] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.493'. [ 436.189310][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.200458][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.211957][ T5342] usb 3-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice= 0.00 [ 436.226197][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.269268][ T5342] usb 3-1: config 0 descriptor?? [ 436.363644][ T5342] HFC-S_USB 3-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 436.498084][ T5342] usbhid 3-1:0.0: can't add hid device: -71 [ 436.534869][ T5342] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 436.577299][ T3366] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 436.604119][ T5342] usb 3-1: USB disconnect, device number 8 [ 436.759927][ T3366] usb 4-1: Using ep0 maxpacket: 32 [ 436.775508][ T3366] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 436.805939][ T3366] usb 4-1: config 0 has no interface number 0 [ 436.838740][ T3366] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 436.869918][ T3366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.894773][ T3366] usb 4-1: Product: syz [ 436.910404][ T3366] usb 4-1: Manufacturer: syz [ 436.925473][ T3366] usb 4-1: SerialNumber: syz [ 436.947994][ T3366] usb 4-1: config 0 descriptor?? [ 437.188484][ T3366] radio-si470x 4-1:0.35: this is not a si470x device. [ 437.241120][ T3366] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 437.452064][ T3366] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 437.497622][ T3366] radio-raremono 4-1:0.35: V4L2 device registered as radio32 [ 437.532755][ T3366] usb 4-1: USB disconnect, device number 14 [ 437.571018][ T3366] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 439.050644][ T8216] No such timeout policy "syz0" [ 439.685225][ T8225] xt_hashlimit: size too large, truncated to 1048576 [ 440.155527][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.162791][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.503959][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 443.686610][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 443.741753][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 443.791682][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 443.857889][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 443.906504][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.982384][ T25] usb 4-1: Product: syz [ 443.993856][ T25] usb 4-1: Manufacturer: syz [ 444.021270][ T25] usb 4-1: SerialNumber: syz [ 444.073409][ T25] usb 4-1: config 0 descriptor?? [ 444.136178][ T25] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 444.198713][ T25] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 444.754862][ T25] em28xx 4-1:0.0: chip ID is em2750 [ 444.960207][ T25] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 445.010983][ T25] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 445.056852][ T25] em28xx 4-1:0.0: No AC97 audio processor [ 445.126729][ T25] usb 4-1: USB disconnect, device number 15 [ 445.133554][ T25] em28xx 4-1:0.0: Disconnecting em28xx [ 445.174426][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 445.224915][ T25] em28xx 4-1:0.0: Freeing device [ 446.878320][ T8280] ubi0: attaching mtd0 [ 446.882464][ T8280] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 449.209560][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 449.219932][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 449.229154][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 449.238818][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 449.246835][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 449.258569][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 450.202483][ T8290] chnl_net:caif_netlink_parms(): no params data found [ 451.098566][ T8290] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.136049][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.163881][ T8290] bridge_slave_0: entered allmulticast mode [ 451.195404][ T8290] bridge_slave_0: entered promiscuous mode [ 451.247889][ T8290] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.294573][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.302226][ T3366] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 451.309998][ T5227] Bluetooth: hci2: command tx timeout [ 451.335532][ T8290] bridge_slave_1: entered allmulticast mode [ 451.346550][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 451.373053][ T8290] bridge_slave_1: entered promiscuous mode [ 451.490171][ T3366] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 451.539698][ T25] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 451.575458][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.601704][ T3366] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.646869][ T8290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.663854][ T3366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.682653][ T25] usb 4-1: config 0 has no interface number 0 [ 451.729428][ T25] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 451.745886][ T3366] usb 3-1: Product: syz [ 451.778529][ T8290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.790821][ T3366] usb 3-1: Manufacturer: syz [ 451.795505][ T3366] usb 3-1: SerialNumber: syz [ 451.819917][ T25] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.889163][ T8322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 451.937297][ T25] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 451.981673][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.026937][ T25] usb 4-1: Product: syz [ 452.057607][ T25] usb 4-1: Manufacturer: syz [ 452.092972][ T25] usb 4-1: SerialNumber: syz [ 452.136344][ T25] usb 4-1: config 0 descriptor?? [ 452.231226][ T8290] team0: Port device team_slave_0 added [ 452.251672][ T3366] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 452.319027][ T8290] team0: Port device team_slave_1 added [ 452.386058][ T3366] usb 3-1: USB disconnect, device number 9 [ 452.733021][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.763339][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.811141][ T5342] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 452.876589][ T25] usb 4-1: USB disconnect, device number 16 [ 452.937170][ T8290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.960057][ T3366] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 453.005622][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.016543][ T5342] usb 5-1: Using ep0 maxpacket: 8 [ 453.038043][ T5342] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 453.056505][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.094488][ T5342] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 453.144983][ T5342] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 453.176630][ T3366] usb 3-1: Using ep0 maxpacket: 8 [ 453.196172][ T5342] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.217432][ T8290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.228389][ T3366] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 453.248804][ T3366] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 453.286646][ T5342] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 453.325626][ T3366] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 453.339265][ T5342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.376778][ T5227] Bluetooth: hci2: command tx timeout [ 453.416640][ T3366] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 453.496434][ T3366] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.578713][ T3366] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2007, setting to 1024 [ 453.650931][ T8290] hsr_slave_0: entered promiscuous mode [ 453.676816][ T5342] usb 5-1: GET_CAPABILITIES returned 0 [ 453.686493][ T5342] usbtmc 5-1:16.0: can't read capabilities [ 453.692499][ T3366] usb 3-1: config 16 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.757056][ T8290] hsr_slave_1: entered promiscuous mode [ 453.793239][ T3366] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 453.856595][ T3366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.929004][ T8322] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 454.041153][ T25] usb 5-1: USB disconnect, device number 5 [ 454.203890][ T3366] usb 3-1: usb_control_msg returned -71 [ 454.270983][ T3366] usbtmc 3-1:16.0: can't read capabilities [ 454.356605][ T5342] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 454.373489][ T3366] usb 3-1: USB disconnect, device number 10 [ 454.570870][ T5342] usb 2-1: Using ep0 maxpacket: 8 [ 454.747526][ T5342] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 454.755890][ T5342] usb 2-1: config 179 has no interface number 0 [ 454.866052][ T5342] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 454.940877][ T5342] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 455.045297][ T5342] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 455.103592][ T5342] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 455.176587][ T5342] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 455.250910][ T8290] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.272693][ T5342] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 455.309308][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.370248][ T8335] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 455.468319][ T5227] Bluetooth: hci2: command tx timeout [ 455.935875][ T5342] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input14 [ 455.995399][ T8290] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.230042][ T5232] usb 2-1: USB disconnect, device number 19 [ 456.236008][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 456.236049][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 456.395741][ T5232] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 456.783981][ T8290] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.949221][ T3366] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 457.076566][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 457.132067][ T3366] usb 4-1: Using ep0 maxpacket: 32 [ 457.179577][ T3366] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.229730][ T3366] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.276357][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.306720][ T3366] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 457.328375][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.349184][ T3366] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 457.381804][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.398110][ T3366] usb 4-1: Product: syz [ 457.402324][ T3366] usb 4-1: Manufacturer: syz [ 457.452301][ T3366] hub 4-1:4.0: USB hub found [ 457.458021][ T25] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 457.497626][ T8270] coredump: 79(syz.1.529): written to core: VMAs: 34, size 82739200; core: 62034886 bytes, pos 82747392 [ 457.516422][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.545024][ T5227] Bluetooth: hci2: command tx timeout [ 457.559937][ T25] usb 3-1: config 0 descriptor?? [ 457.680654][ T3366] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 458.026081][ T25] corsair-cpro 0003:1B1C:1D00.000A: item fetching failed at offset 3/5 [ 458.035843][ T5342] usb 4-1: USB disconnect, device number 17 [ 458.096356][ T25] corsair-cpro 0003:1B1C:1D00.000A: probe with driver corsair-cpro failed with error -22 [ 458.256511][ T3366] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 458.287522][ T25] usb 3-1: USB disconnect, device number 11 [ 458.455466][ T3366] usb 5-1: Using ep0 maxpacket: 32 [ 458.472492][ T3366] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 458.494296][ T3366] usb 5-1: config 0 has no interface number 0 [ 458.517668][ T3366] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 458.582850][ T3366] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 458.632696][ T3366] usb 5-1: config 0 interface 126 has no altsetting 0 [ 458.662311][ T3366] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 458.702418][ T3366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.728475][ T3366] usb 5-1: Product: syz [ 458.753050][ T3366] usb 5-1: Manufacturer: syz [ 458.776469][ T3366] usb 5-1: SerialNumber: syz [ 458.808937][ T3366] usb 5-1: config 0 descriptor?? [ 458.894339][ T8365] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 458.928557][ T8365] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 459.248310][ T8376] block nbd2: NBD_DISCONNECT [ 459.492620][ T3366] ir_usb 5-1:0.126: IR Dongle converter detected [ 459.695223][ T3366] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 459.958490][ T3366] usb 5-1: USB disconnect, device number 6 [ 459.995797][ T3366] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 460.037414][ T3366] ir_usb 5-1:0.126: device disconnected [ 466.426395][ C0] sched: DL replenish lagged too much [ 470.863800][ T5225] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 470.876663][ T5225] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 470.887456][ T5225] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 470.895518][ T5225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 470.904006][ T5225] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 470.911648][ T5225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 471.289352][ T5227] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 471.306598][ T5227] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 471.314763][ T5227] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 471.322924][ T5227] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 471.332148][ T5227] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 471.340373][ T5227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 472.683557][ T5225] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 472.692974][ T5225] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 472.702170][ T5225] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 472.710510][ T5225] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 472.719806][ T5225] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 472.728038][ T5225] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 472.976565][ T5225] Bluetooth: hci6: command tx timeout [ 473.379307][ T5225] Bluetooth: hci7: command tx timeout [ 474.816624][ T5225] Bluetooth: hci8: command tx timeout [ 475.056592][ T5225] Bluetooth: hci6: command tx timeout [ 475.457932][ T5225] Bluetooth: hci7: command tx timeout [ 476.258809][ T5227] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 476.269028][ T5227] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 476.278715][ T5227] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 476.298171][ T5227] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 476.306536][ T5227] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 476.315033][ T5227] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 476.896596][ T5227] Bluetooth: hci8: command tx timeout [ 477.136539][ T5227] Bluetooth: hci6: command tx timeout [ 477.536579][ T5227] Bluetooth: hci7: command tx timeout [ 478.416643][ T5227] Bluetooth: hci9: command tx timeout [ 478.976743][ T5227] Bluetooth: hci8: command tx timeout [ 479.217044][ T5227] Bluetooth: hci6: command tx timeout [ 479.616623][ T5227] Bluetooth: hci7: command tx timeout [ 480.496727][ T5227] Bluetooth: hci9: command tx timeout [ 481.057635][ T5225] Bluetooth: hci8: command tx timeout [ 482.576542][ T5227] Bluetooth: hci9: command tx timeout [ 484.656569][ T5227] Bluetooth: hci9: command tx timeout [ 488.262354][ T5227] Bluetooth: hci5: command 0x0406 tx timeout [ 498.503152][ T5225] Bluetooth: hci4: command 0x0406 tx timeout [ 501.541177][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.560609][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.208037][ T5225] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 506.220569][ T5225] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 506.228726][ T5225] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 506.237155][ T5225] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 506.247871][ T5225] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 506.255378][ T5225] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 508.336740][ T5227] Bluetooth: hci10: command tx timeout [ 510.416515][ T5227] Bluetooth: hci10: command tx timeout [ 512.496710][ T5227] Bluetooth: hci10: command tx timeout [ 514.576547][ T5227] Bluetooth: hci10: command tx timeout [ 533.023822][ T5225] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 533.035007][ T5225] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 533.043485][ T5225] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 533.054150][ T5225] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 533.062247][ T5225] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 533.069937][ T5225] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 533.168521][ T5225] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 533.178266][ T5225] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 533.186204][ T5225] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 533.195257][ T5225] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 533.204429][ T5225] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 533.212138][ T5225] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 533.660297][ T5225] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 533.671021][ T5225] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 533.681122][ T5225] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 533.689589][ T5225] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 533.697725][ T5225] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 533.705373][ T5225] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 535.143477][ T5225] Bluetooth: hci11: command tx timeout [ 535.306705][ T5225] Bluetooth: hci12: command tx timeout [ 535.776632][ T5225] Bluetooth: hci13: command tx timeout [ 536.762032][ T5227] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 536.774017][ T5227] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 536.783005][ T5227] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 536.791697][ T5227] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 536.799863][ T5227] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 536.807317][ T5227] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 537.216449][ T5227] Bluetooth: hci11: command tx timeout [ 537.381929][ T5227] Bluetooth: hci12: command tx timeout [ 537.856566][ T5227] Bluetooth: hci13: command tx timeout [ 538.896735][ T5227] Bluetooth: hci14: command tx timeout [ 539.296501][ T5227] Bluetooth: hci11: command tx timeout [ 539.456525][ T5227] Bluetooth: hci12: command tx timeout [ 539.936705][ T5225] Bluetooth: hci13: command tx timeout [ 540.976494][ T5225] Bluetooth: hci14: command tx timeout [ 541.376604][ T5225] Bluetooth: hci11: command tx timeout [ 541.536556][ T5225] Bluetooth: hci12: command tx timeout [ 542.016650][ T5225] Bluetooth: hci13: command tx timeout [ 543.056508][ T5225] Bluetooth: hci14: command tx timeout [ 545.139678][ T5225] Bluetooth: hci14: command tx timeout [ 549.696463][ T5227] Bluetooth: hci3: command 0x0406 tx timeout [ 562.986817][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.993185][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.690609][ T5227] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 567.700258][ T5227] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 567.711514][ T5227] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 567.719682][ T5227] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 567.727410][ T5227] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 567.737172][ T5227] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 569.856703][ T5227] Bluetooth: hci15: command tx timeout [ 571.936763][ T5227] Bluetooth: hci15: command tx timeout [ 574.016681][ T5227] Bluetooth: hci15: command tx timeout [ 575.296613][ T5227] Bluetooth: hci2: command 0x0406 tx timeout [ 576.096587][ T5225] Bluetooth: hci15: command tx timeout [ 579.619532][ T30] INFO: task syz.0.496:8176 blocked for more than 143 seconds. [ 579.635429][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 579.653845][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 579.695523][ T30] task:syz.0.496 state:D stack:23808 pid:8176 tgid:8176 ppid:7548 flags:0x00000006 [ 579.743065][ T30] Call Trace: [ 579.766376][ T30] [ 579.769397][ T30] __schedule+0x1843/0x4ae0 [ 579.773976][ T30] ? __pfx___schedule+0x10/0x10 [ 579.876395][ T30] ? __pfx_lock_release+0x10/0x10 [ 579.881698][ T30] ? schedule+0x90/0x320 [ 579.885978][ T30] schedule+0x14b/0x320 [ 579.966430][ T30] schedule_timeout+0xb0/0x310 [ 579.971278][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 580.016401][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 580.022479][ T30] ? wait_for_completion+0x2fe/0x620 [ 580.038802][ T30] ? wait_for_completion+0x2fe/0x620 [ 580.044166][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 580.056868][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 580.062916][ T30] ? wait_for_completion+0x2fe/0x620 [ 580.075779][ T30] wait_for_completion+0x355/0x620 [ 580.082464][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 580.094786][ T30] ? __flush_work+0xe7/0xc50 [ 580.099664][ T30] __flush_work+0xa37/0xc50 [ 580.104226][ T30] ? __flush_work+0xe7/0xc50 [ 580.120414][ T30] ? __pfx___flush_work+0x10/0x10 [ 580.125505][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 580.133655][ T30] ? __pfx___cancel_work+0x10/0x10 [ 580.145886][ T30] ? tcp_abort+0x2f4/0x510 [ 580.153605][ T30] ? tcp_abort+0x405/0x510 [ 580.163044][ T30] ? __pfx_tcp_abort+0x10/0x10 [ 580.170621][ T30] __cancel_work_sync+0xbc/0x110 [ 580.175630][ T30] smc_release+0x193/0x540 [ 580.189218][ T30] sock_close+0xbc/0x240 [ 580.193543][ T30] ? __pfx_sock_close+0x10/0x10 [ 580.202798][ T30] __fput+0x23f/0x880 [ 580.210674][ T30] task_work_run+0x24f/0x310 [ 580.215331][ T30] ? __pfx_task_work_run+0x10/0x10 [ 580.225766][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 580.235455][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 580.245822][ T30] do_syscall_64+0x100/0x230 [ 580.255810][ T30] ? clear_bhb_loop+0x35/0x90 [ 580.266575][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.272526][ T30] RIP: 0033:0x7f393af7def9 [ 580.284223][ T30] RSP: 002b:00007ffdad2fb428 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 580.294288][ T30] RAX: 0000000000000000 RBX: 00007f393b137a80 RCX: 00007f393af7def9 [ 580.306364][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 580.314385][ T30] RBP: 00007f393b137a80 R08: 00007f393b122000 R09: 00007ffdad2fb71f [ 580.331567][ T30] R10: 00000000005fbd74 R11: 0000000000000246 R12: 000000000006a84b [ 580.346464][ T30] R13: 00007ffdad2fb530 R14: 0000000000000032 R15: ffffffffffffffff [ 580.354516][ T30] [ 580.364955][ T30] [ 580.364955][ T30] Showing all locks held in the system: [ 580.376700][ T30] 1 lock held by khungtaskd/30: [ 580.381596][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 580.399267][ T30] 3 locks held by kworker/u8:9/2928: [ 580.404613][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 580.426443][ T30] #1: ffffc9000a30fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 580.451770][ T30] #2: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 580.464042][ T30] 3 locks held by kworker/1:2/3366: [ 580.475530][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 580.496362][ T30] #1: ffffc9000b27fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 580.513944][ T30] #2: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 580.525148][ T30] 2 locks held by getty/4976: [ 580.536610][ T30] #0: ffff88802e34e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 580.554128][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 580.566310][ T30] 7 locks held by kworker/0:5/5273: [ 580.581892][ T30] 2 locks held by kworker/0:6/5274: [ 580.594388][ T30] 3 locks held by kworker/u8:15/6136: [ 580.601250][ T30] #0: ffff88814b587948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 580.616382][ T30] #1: ffffc9000348fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 580.637227][ T30] #2: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 580.655096][ T30] 1 lock held by syz.0.496/8176: [ 580.663223][ T30] #0: ffff888057ded008 (&sb->s_type->i_mutex_key#9){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 580.684041][ T30] 8 locks held by syz-executor/8290: [ 580.690942][ T30] #0: ffff88807c404420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 580.706139][ T30] #1: ffff888028cb3888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 580.721216][ T30] #2: ffff8880275ce0f8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 580.735379][ T30] #3: ffffffff8f55af08 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 580.750647][ T30] #4: ffff888078f210e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 580.766659][ T30] #5: ffff888078f22250 (&devlink->lock_key#16){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 580.784687][ T30] #6: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 580.795269][ T30] #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 580.814043][ T30] 1 lock held by syz.3.568/8386: [ 580.819134][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400 [ 580.836103][ T30] 2 locks held by syz.2.570/8392: [ 580.842985][ T30] #0: ffffffff8fd214b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 580.855735][ T30] #1: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 580.873223][ T30] 2 locks held by syz.4.576/8406: [ 580.879758][ T30] #0: ffffffff8fd214b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 580.895018][ T30] #1: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 580.912754][ T30] 1 lock held by syz.1.579/8416: [ 580.919280][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400 [ 580.936181][ T30] 1 lock held by syz.1.579/8417: [ 580.941491][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400 [ 580.956438][ T30] 1 lock held by syz.1.579/8418: [ 580.965672][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400 [ 580.985021][ T30] 1 lock held by syz.1.579/8419: [ 580.990539][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400 [ 581.008424][ T30] 1 lock held by syz-executor/8422: [ 581.013674][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 581.032239][ T30] 1 lock held by syz-executor/8426: [ 581.040312][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 581.055001][ T30] 1 lock held by syz-executor/8429: [ 581.064842][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 581.082326][ T30] 1 lock held by syz-executor/8432: [ 581.089172][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 581.106228][ T30] 1 lock held by syz-executor/8445: [ 581.113616][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 581.130690][ T30] 1 lock held by syz-executor/8451: [ 581.135935][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 581.154735][ T30] 1 lock held by syz-executor/8454: [ 581.160314][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 581.176667][ T30] 1 lock held by syz-executor/8459: [ 581.181926][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 581.199946][ T30] 1 lock held by syz-executor/8462: [ 581.205188][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 581.221675][ T30] 1 lock held by syz-executor/8466: [ 581.231682][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 581.245138][ T30] [ 581.251469][ T30] ============================================= [ 581.251469][ T30] [ 581.265804][ T30] NMI backtrace for cpu 1 [ 581.270188][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 581.280387][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 581.290499][ T30] Call Trace: [ 581.293802][ T30] [ 581.296764][ T30] dump_stack_lvl+0x241/0x360 [ 581.301498][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.306749][ T30] ? __pfx__printk+0x10/0x10 [ 581.311400][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 581.316470][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 581.321968][ T30] ? _printk+0xd5/0x120 [ 581.326171][ T30] ? __pfx__printk+0x10/0x10 [ 581.330812][ T30] ? __wake_up_klogd+0xcc/0x110 [ 581.335908][ T30] ? __pfx__printk+0x10/0x10 [ 581.340545][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 581.345704][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 581.351729][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 581.357754][ T30] watchdog+0xff4/0x1040 [ 581.362056][ T30] ? watchdog+0x1ea/0x1040 [ 581.366517][ T30] ? __pfx_watchdog+0x10/0x10 [ 581.371237][ T30] kthread+0x2f0/0x390 [ 581.375337][ T30] ? __pfx_watchdog+0x10/0x10 [ 581.380065][ T30] ? __pfx_kthread+0x10/0x10 [ 581.384692][ T30] ret_from_fork+0x4b/0x80 [ 581.389150][ T30] ? __pfx_kthread+0x10/0x10 [ 581.393775][ T30] ret_from_fork_asm+0x1a/0x30 [ 581.398606][ T30] [ 581.402571][ T30] Sending NMI from CPU 1 to CPUs 0: [ 581.408163][ C0] NMI backtrace for cpu 0 [ 581.408178][ C0] CPU: 0 UID: 0 PID: 5273 Comm: kworker/0:5 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 581.408199][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 581.408212][ C0] Workqueue: events nsim_dev_trap_report_work [ 581.408242][ C0] RIP: 0010:mark_lock+0xa4/0x360 [ 581.408261][ C0] Code: 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 c0 a7 22 94 be 08 00 00 00 e8 d6 bd 8a 00 48 0f a3 1d de 1e b2 12 73 10 <48> 69 c3 c8 00 00 00 48 8d 98 c0 26 bf 93 eb 68 48 c7 c0 40 19 38 [ 581.408283][ C0] RSP: 0018:ffffc900000069f8 EFLAGS: 00000057 [ 581.408298][ C0] RAX: 0000000000000001 RBX: 000000000000075b RCX: ffffffff817088da [ 581.408311][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9422a8a8 [ 581.408323][ C0] RBP: 0000000000000002 R08: ffffffff9422a8af R09: 1ffffffff2845515 [ 581.408336][ C0] R10: dffffc0000000000 R11: fffffbfff2845516 R12: ffff88802d7b8b78 [ 581.408349][ C0] R13: dffffc0000000000 R14: 0000000000000004 R15: ffff88802d7b8b58 [ 581.408363][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 581.408378][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.408391][ C0] CR2: 000000110c2f119c CR3: 000000000e734000 CR4: 00000000003506f0 [ 581.408407][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 581.408417][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 581.408429][ C0] Call Trace: [ 581.408435][ C0] [ 581.408442][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 581.408463][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 581.408490][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 581.408517][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 581.408541][ C0] ? nmi_handle+0x14f/0x5a0 [ 581.408558][ C0] ? nmi_handle+0x2a/0x5a0 [ 581.408576][ C0] ? mark_lock+0xa4/0x360 [ 581.408591][ C0] ? default_do_nmi+0x63/0x160 [ 581.408613][ C0] ? exc_nmi+0x123/0x1f0 [ 581.408633][ C0] ? end_repeat_nmi+0xf/0x53 [ 581.408660][ C0] ? mark_lock+0x9a/0x360 [ 581.408677][ C0] ? mark_lock+0xa4/0x360 [ 581.408693][ C0] ? mark_lock+0xa4/0x360 [ 581.408709][ C0] ? mark_lock+0xa4/0x360 [ 581.408725][ C0] [ 581.408731][ C0] [ 581.408738][ C0] lockdep_hardirqs_on_prepare+0x282/0x780 [ 581.408766][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 581.408804][ C0] ? rcu_is_watching+0x15/0xb0 [ 581.408823][ C0] trace_hardirqs_on+0x28/0x40 [ 581.408843][ C0] __local_bh_enable_ip+0x168/0x200 [ 581.408865][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 581.408886][ C0] ? ip6t_do_table+0x205/0x18a0 [ 581.408908][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 581.408932][ C0] ? ip6t_do_table+0x205/0x18a0 [ 581.408961][ C0] ip6t_do_table+0x1687/0x18a0 [ 581.408985][ C0] ? ip6t_do_table+0x205/0x18a0 [ 581.409013][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 581.409040][ C0] ip6table_mangle_hook+0x215/0x7a0 [ 581.409069][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 581.409092][ C0] nf_hook_slow+0xc3/0x220 [ 581.409115][ C0] ? __ip6_local_out+0x4dc/0x800 [ 581.409131][ C0] __ip6_local_out+0x6fa/0x800 [ 581.409149][ C0] ? __pfx___ip6_local_out+0x10/0x10 [ 581.409167][ C0] ? __pfx_dst_output+0x10/0x10 [ 581.409182][ C0] ? ip6_route_output_flags+0x30/0x610 [ 581.409206][ C0] ? ip6_route_output_flags+0x499/0x610 [ 581.409230][ C0] ip6_local_out+0x26/0x70 [ 581.409247][ C0] synproxy_send_tcp_ipv6+0x568/0x7c0 [ 581.409274][ C0] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 581.409302][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 581.409330][ C0] ? skb_put+0x114/0x1f0 [ 581.409364][ C0] synproxy_send_client_synack_ipv6+0x7d0/0xc30 [ 581.409395][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 581.409421][ C0] ? synproxy_pernet+0x45/0x270 [ 581.409448][ C0] nft_synproxy_do_eval+0x739/0xa60 [ 581.409475][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 581.409500][ C0] ? ktime_get+0x9b/0xb0 [ 581.409521][ C0] ? __pfx_validate_chain+0x10/0x10 [ 581.409543][ C0] nft_do_chain+0x4ad/0x1da0 [ 581.409571][ C0] ? nf_nat_inet_fn+0xa30/0xd10 [ 581.409589][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 581.409624][ C0] ? nf_nat_ipv6_fn+0x2cb/0x3e0 [ 581.409645][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 581.409666][ C0] nft_do_chain_inet+0x418/0x6b0 [ 581.409692][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 581.409716][ C0] ? nf_nat_ipv6_local_in+0x1cd/0x620 [ 581.409738][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 581.409756][ C0] ? nf_nat_ipv6_fn+0x2cb/0x3e0 [ 581.409777][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 581.409802][ C0] nf_hook_slow+0xc3/0x220 [ 581.409824][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 581.409841][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 581.409858][ C0] NF_HOOK+0x29e/0x450 [ 581.409875][ C0] ? NF_HOOK+0x9a/0x450 [ 581.409890][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 581.409907][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 581.409925][ C0] ? ip6_rcv_finish_core+0x1fb/0x410 [ 581.409943][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 581.409974][ C0] NF_HOOK+0x3a4/0x450 [ 581.409990][ C0] ? skb_orphan+0xae/0xd0 [ 581.410006][ C0] ? NF_HOOK+0x9a/0x450 [ 581.410022][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 581.410038][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 581.410068][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 581.410084][ C0] __netif_receive_skb+0x1ea/0x650 [ 581.410107][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 581.410132][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 581.410152][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 581.410178][ C0] ? __pfx_lock_release+0x10/0x10 [ 581.410204][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 581.410231][ C0] process_backlog+0x662/0x15b0 [ 581.410256][ C0] ? process_backlog+0x33b/0x15b0 [ 581.410281][ C0] ? __pfx_process_backlog+0x10/0x10 [ 581.410304][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 581.410330][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 581.410357][ C0] __napi_poll+0xcb/0x490 [ 581.410379][ C0] net_rx_action+0x89b/0x1240 [ 581.410410][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 581.410435][ C0] ? sched_clock+0x4a/0x70 [ 581.410462][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 581.410492][ C0] handle_softirqs+0x2c5/0x980 [ 581.410517][ C0] ? do_softirq+0x11b/0x1e0 [ 581.410539][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 581.410566][ C0] do_softirq+0x11b/0x1e0 [ 581.410586][ C0] [ 581.410592][ C0] [ 581.410598][ C0] ? __pfx_do_softirq+0x10/0x10 [ 581.410620][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 581.410648][ C0] ? rcu_is_watching+0x15/0xb0 [ 581.410666][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 581.410689][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 581.410714][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 581.410737][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 581.410759][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 581.410786][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 581.410817][ C0] ? process_scheduled_works+0x976/0x1850 [ 581.410841][ C0] process_scheduled_works+0xa63/0x1850 [ 581.410875][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 581.410902][ C0] ? assign_work+0x364/0x3d0 [ 581.410926][ C0] worker_thread+0x870/0xd30 [ 581.410958][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 581.410982][ C0] ? __kthread_parkme+0x169/0x1d0 [ 581.411008][ C0] ? __pfx_worker_thread+0x10/0x10 [ 581.411032][ C0] kthread+0x2f0/0x390 [ 581.411047][ C0] ? __pfx_worker_thread+0x10/0x10 [ 581.411070][ C0] ? __pfx_kthread+0x10/0x10 [ 581.411086][ C0] ret_from_fork+0x4b/0x80 [ 581.411111][ C0] ? __pfx_kthread+0x10/0x10 [ 581.411126][ C0] ret_from_fork_asm+0x1a/0x30 [ 581.411157][ C0] [ 582.198441][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 582.205338][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 582.215519][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 582.225620][ T30] Call Trace: [ 582.228926][ T30] [ 582.231885][ T30] dump_stack_lvl+0x241/0x360 [ 582.236621][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.241953][ T30] ? __pfx__printk+0x10/0x10 [ 582.246599][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 582.252718][ T30] ? vscnprintf+0x5d/0x90 [ 582.257088][ T30] panic+0x349/0x880 [ 582.261031][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 582.267225][ T30] ? __pfx_panic+0x10/0x10 [ 582.271684][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 582.277101][ T30] ? __irq_work_queue_local+0x137/0x410 [ 582.282711][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 582.288205][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 582.294392][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 582.300589][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 582.306783][ T30] watchdog+0x1033/0x1040 [ 582.311155][ T30] ? watchdog+0x1ea/0x1040 [ 582.315614][ T30] ? __pfx_watchdog+0x10/0x10 [ 582.320333][ T30] kthread+0x2f0/0x390 [ 582.324432][ T30] ? __pfx_watchdog+0x10/0x10 [ 582.329151][ T30] ? __pfx_kthread+0x10/0x10 [ 582.333773][ T30] ret_from_fork+0x4b/0x80 [ 582.338233][ T30] ? __pfx_kthread+0x10/0x10 [ 582.342945][ T30] ret_from_fork_asm+0x1a/0x30 [ 582.347768][ T30] [ 582.351108][ T30] Kernel Offset: disabled [ 582.355477][ T30] Rebooting in 86400 seconds..