last executing test programs: 8.025429479s ago: executing program 2 (id=783): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) creat(0x0, 0x0) 5.713811367s ago: executing program 4 (id=800): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x126}, &(0x7f0000000000), &(0x7f0000000100)) 5.304802266s ago: executing program 2 (id=811): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x1}) io_setup(0x2, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, &(0x7f0000000480)="655d4a1a263224923ca650fd5fe91e058cf4ba0568ea0b2f1466079691a77c7a", 0x20, 0x8000, 0x0, 0x2}]) 4.706166745s ago: executing program 0 (id=804): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000000)=@can={{}, 0xd, 0x0, 0x0, 0x0, "dfbb7b71b1ae7f40"}, 0x10}, 0x2}, 0x0) 4.705922779s ago: executing program 1 (id=805): r0 = syz_io_uring_setup(0x207, &(0x7f0000000340)={0x0, 0x8e00, 0x10100}, &(0x7f0000000300), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x288d, &(0x7f00000008c0)={0x0, 0x0, 0x1000, 0x0, 0x90, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x1849, 0x0, 0x0, 0x0, 0x0) 4.505549942s ago: executing program 2 (id=806): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 4.34679909s ago: executing program 1 (id=807): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000300)={0x1, 0x0, 0x1}) 4.068633904s ago: executing program 0 (id=808): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058008002200", @ANYRES32=0x0, @ANYBLOB="0a000200bbbbbbbbbbbb000008000a00", @ANYRES32=r0], 0x58}}, 0x0) 4.040532922s ago: executing program 1 (id=809): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 4.038450332s ago: executing program 2 (id=810): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) syz_usb_disconnect(r0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 3.828713432s ago: executing program 4 (id=813): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f904, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 3.698241475s ago: executing program 1 (id=814): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rt_sigaction(0xfffffffe, 0x0, 0x0, 0x0, 0x0) 3.548670339s ago: executing program 4 (id=815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) 3.153279718s ago: executing program 4 (id=816): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) 2.886119434s ago: executing program 0 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r1, @ANYBLOB="48007a8014000100c396d979a8f802a09c5d7bfaeb3575f21c0002002c8b2ddcc0a3a020196b852ff1e5776edd2fed6a243a33220c000300b38b3e2d8514cc07080004000500000030007a800800040007000000240001006b367eca9776d5c92ac3b99cce28c8dbdebd62217f9c5f46d4b1a11c682b40d61c007a800c000300e028aa46e44ee6830c0003009cf7debf7cdf5a207c007a80080004003465e91c0c0003"], 0x12c}}, 0x0) 2.86425538s ago: executing program 3 (id=818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x44}}, 0x0) 2.630027039s ago: executing program 4 (id=819): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet6_udplite(0xa, 0x2, 0x88) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) 2.449283036s ago: executing program 3 (id=820): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\v', 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="8f129a622e6230ee26e092c9f46b6e7b08730a31d78b77a831d1ddd5b07c9b5ec02095f97c57f3132bf37fb75e621b1f8ac180cc4d60fc03ab1239466f32711bd6b700eacd5430ed84c8115fe12dfa1961249f630c9a7e9443be1b19a608e8c9546409690d363ea4901d234603ba535b2f41ced38903bdbad73b1259c015a970ae51e0338531499ce3eb8b7431e504271a278611e2250feaf6d702f5dbdf386bfae6df6b2cc4f5cb989a3d4d100e4a550902530af246e397ea9be2f1a2ab6998d3", 0xc1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000001100)="ae30d8455a5e", 0x6, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000011c0)={r0, r1, r2}, &(0x7f0000001200)=""/202, 0xca, &(0x7f0000001380)={&(0x7f0000001300)={'sha1-avx\x00'}}) 2.100361814s ago: executing program 3 (id=821): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000008000080", @ANYRESDEC=r1]) 2.026776407s ago: executing program 0 (id=822): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = epoll_create1(0x0) ppoll(&(0x7f0000003e40)=[{r1, 0x1001}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x179e1f}) 1.49583586s ago: executing program 4 (id=823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b1"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x38}}, 0x0) 1.431187411s ago: executing program 0 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="050029"], 0x2c}}, 0x0) 1.129326705s ago: executing program 1 (id=825): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x32, 0x0, "a5b5d6cc282b96a389bf76f05ff178beaf0f3a3dc69ccd6d11d84c48706ab2a1ea2f9e0f75a417c957177701333c2bd556cffb8e216e2652053b84734547078f34ea279b498795149bf5d5f3e170e8b9"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "ddeec09856280c9fe310019f623b7b2cb9f9570f3b69527bea873eb4cd18bf2a7d88fe354f1b38ffdceee3860224eab04b2300d6572ba53cc29e55a6f7624a1fc49ee397ecec78f29eb5eb963aaae6de"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, "ddeec09856280c9fe310019f623b7b2cb9f9570f3b69527bea872eb4cd18432a7d88fe354f1b38ffdceee3860224eab04b2300d6572ba53cc29e55a6f7624a1fc49ee397ecec78f29eb5eb963aaae6e9"}, 0xd8) 1.091795038s ago: executing program 0 (id=826): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 921.072395ms ago: executing program 1 (id=827): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) 480.308801ms ago: executing program 2 (id=828): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_setup(0x3715, &(0x7f0000000340)={0x0, 0x46c1, 0x800, 0x1, 0x20b, 0x0, r0}) unshare(0x2000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 410.711559ms ago: executing program 3 (id=829): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, 0x0, &(0x7f0000000040)) 282.157374ms ago: executing program 2 (id=830): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000010000000000140012800b0001006d61637365630000040002801c001a80180002"], 0x50}}, 0x0) 177.921107ms ago: executing program 3 (id=831): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet(0x2, 0x6, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0xf0, 0x0) 0s ago: executing program 3 (id=832): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r2, @ANYBLOB="08002600760900000800a100ff0f0000080027"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 50.741244][ T5218] cgroup: Unknown subsys name 'net' [ 50.848454][ T5218] cgroup: Unknown subsys name 'cpuset' [ 50.856581][ T5218] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.233634][ T5218] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.355470][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.371019][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.378511][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.386896][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.394497][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.403215][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.411925][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.419674][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.427071][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.428179][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.435661][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.441899][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.456353][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.465652][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.473789][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.479049][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.481232][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.489284][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.495781][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.503452][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.509673][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.517701][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.530804][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.531433][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.538150][ T5242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.545912][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.555650][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.565822][ T4624] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.574169][ T4624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.584167][ T4624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.962228][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 56.029409][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 56.114634][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 56.204085][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.212267][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.219996][ T5244] bridge_slave_0: entered allmulticast mode [ 56.227445][ T5244] bridge_slave_0: entered promiscuous mode [ 56.238617][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.245799][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.252936][ T5244] bridge_slave_1: entered allmulticast mode [ 56.259699][ T5244] bridge_slave_1: entered promiscuous mode [ 56.282310][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 56.336663][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.343837][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.352061][ T5246] bridge_slave_0: entered allmulticast mode [ 56.359280][ T5246] bridge_slave_0: entered promiscuous mode [ 56.392326][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.403929][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.422035][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.429590][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.437225][ T5246] bridge_slave_1: entered allmulticast mode [ 56.443748][ T5246] bridge_slave_1: entered promiscuous mode [ 56.469568][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.477016][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.484383][ T5248] bridge_slave_0: entered allmulticast mode [ 56.491610][ T5248] bridge_slave_0: entered promiscuous mode [ 56.516988][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 56.527278][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.534434][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.541740][ T5248] bridge_slave_1: entered allmulticast mode [ 56.548812][ T5248] bridge_slave_1: entered promiscuous mode [ 56.560422][ T5244] team0: Port device team_slave_0 added [ 56.569304][ T5244] team0: Port device team_slave_1 added [ 56.611989][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.641813][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.651218][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.678180][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.691719][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.716394][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.730190][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.746890][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.754024][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.761532][ T5249] bridge_slave_0: entered allmulticast mode [ 56.768204][ T5249] bridge_slave_0: entered promiscuous mode [ 56.776260][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.783211][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.809402][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.846114][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.853223][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.861163][ T5249] bridge_slave_1: entered allmulticast mode [ 56.868131][ T5249] bridge_slave_1: entered promiscuous mode [ 56.888664][ T5246] team0: Port device team_slave_0 added [ 56.943958][ T5246] team0: Port device team_slave_1 added [ 56.952426][ T5244] hsr_slave_0: entered promiscuous mode [ 56.959160][ T5244] hsr_slave_1: entered promiscuous mode [ 56.971318][ T5248] team0: Port device team_slave_0 added [ 56.979413][ T5248] team0: Port device team_slave_1 added [ 56.987517][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.999035][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.062309][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.069535][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.096163][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.116977][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.124189][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.131629][ T5250] bridge_slave_0: entered allmulticast mode [ 57.139227][ T5250] bridge_slave_0: entered promiscuous mode [ 57.146448][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.153410][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.180473][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.193343][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.201147][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.227305][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.246387][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.253363][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.280023][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.307947][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.315350][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.322530][ T5250] bridge_slave_1: entered allmulticast mode [ 57.329714][ T5250] bridge_slave_1: entered promiscuous mode [ 57.341935][ T5249] team0: Port device team_slave_0 added [ 57.351751][ T5249] team0: Port device team_slave_1 added [ 57.394635][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.401947][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.428186][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.451428][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.483376][ T5248] hsr_slave_0: entered promiscuous mode [ 57.489582][ T5248] hsr_slave_1: entered promiscuous mode [ 57.496266][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.503944][ T5248] Cannot create hsr debugfs directory [ 57.510736][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.517853][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.544189][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.573591][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.625418][ T5246] hsr_slave_0: entered promiscuous mode [ 57.631562][ T5246] hsr_slave_1: entered promiscuous mode [ 57.635961][ T5230] Bluetooth: hci0: command tx timeout [ 57.642749][ T5238] Bluetooth: hci3: command tx timeout [ 57.642839][ T4624] Bluetooth: hci2: command tx timeout [ 57.648734][ T5234] Bluetooth: hci1: command tx timeout [ 57.659363][ T5236] Bluetooth: hci4: command tx timeout [ 57.666611][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.674196][ T5246] Cannot create hsr debugfs directory [ 57.689735][ T5250] team0: Port device team_slave_0 added [ 57.697862][ T5250] team0: Port device team_slave_1 added [ 57.763209][ T5249] hsr_slave_0: entered promiscuous mode [ 57.769517][ T5249] hsr_slave_1: entered promiscuous mode [ 57.776348][ T5249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.783914][ T5249] Cannot create hsr debugfs directory [ 57.796773][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.803733][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.830017][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.861695][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.868982][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.896114][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.013994][ T5244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.034872][ T5250] hsr_slave_0: entered promiscuous mode [ 58.040984][ T5250] hsr_slave_1: entered promiscuous mode [ 58.049049][ T5250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.056723][ T5250] Cannot create hsr debugfs directory [ 58.074192][ T5244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.104484][ T5244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.114493][ T5244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.250169][ T5248] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.259145][ T5248] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.274927][ T5248] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.309175][ T5248] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.374290][ T5246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.393801][ T5246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.402937][ T5246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.426554][ T5246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.469262][ T5249] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.487741][ T5249] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.527776][ T5249] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.541751][ T5249] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.563301][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.612157][ T5250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.622538][ T5250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.644205][ T5250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.665978][ T5250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.679975][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.688773][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.719222][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.728701][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.736143][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.746708][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.753776][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.783843][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.790995][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.829198][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.836369][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.854394][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.947274][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.978844][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.985999][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.008763][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.023125][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.030374][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.064649][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.100878][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.137289][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.154222][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.161346][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.182750][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.202754][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.209862][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.239511][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.263369][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.270546][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.295617][ T5244] veth0_vlan: entered promiscuous mode [ 59.321475][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.328594][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.372562][ T5244] veth1_vlan: entered promiscuous mode [ 59.389949][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.434597][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.458630][ T5248] veth0_vlan: entered promiscuous mode [ 59.474501][ T5248] veth1_vlan: entered promiscuous mode [ 59.527841][ T5246] veth0_vlan: entered promiscuous mode [ 59.542596][ T5246] veth1_vlan: entered promiscuous mode [ 59.566752][ T5244] veth0_macvtap: entered promiscuous mode [ 59.602083][ T5249] veth0_vlan: entered promiscuous mode [ 59.611352][ T5248] veth0_macvtap: entered promiscuous mode [ 59.633655][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.647340][ T5249] veth1_vlan: entered promiscuous mode [ 59.659865][ T5244] veth1_macvtap: entered promiscuous mode [ 59.668506][ T5248] veth1_macvtap: entered promiscuous mode [ 59.685833][ T5246] veth0_macvtap: entered promiscuous mode [ 59.713921][ T5246] veth1_macvtap: entered promiscuous mode [ 59.721387][ T5236] Bluetooth: hci1: command tx timeout [ 59.721417][ T5234] Bluetooth: hci0: command tx timeout [ 59.727524][ T5230] Bluetooth: hci3: command tx timeout [ 59.732405][ T5238] Bluetooth: hci4: command tx timeout [ 59.737806][ T4624] Bluetooth: hci2: command tx timeout [ 59.753578][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.773330][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.786759][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.798315][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.814621][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.824439][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.835968][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.846699][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.862377][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.873037][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.884821][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.895909][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.908543][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.924207][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.935595][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.946072][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.958806][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.969987][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.987415][ T5249] veth0_macvtap: entered promiscuous mode [ 59.996290][ T5244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.005517][ T5244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.014209][ T5244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.023373][ T5244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.038876][ T5246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.048863][ T5246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.057841][ T5246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.067116][ T5246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.079581][ T5248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.092547][ T5248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.101853][ T5248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.110956][ T5248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.122628][ T5249] veth1_macvtap: entered promiscuous mode [ 60.148744][ T5250] veth0_vlan: entered promiscuous mode [ 60.197835][ T5250] veth1_vlan: entered promiscuous mode [ 60.223562][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.234246][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.244657][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.255448][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.265293][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.277525][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.289002][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.309172][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.329803][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.339824][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.350518][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.365118][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.375871][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.386038][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.397713][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.409062][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.431110][ T5249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.440414][ T5249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.449743][ T5249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.458679][ T5249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.504504][ T5250] veth0_macvtap: entered promiscuous mode [ 60.514556][ T5250] veth1_macvtap: entered promiscuous mode [ 60.523979][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.532956][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.607749][ T3050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.638173][ T3050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.640694][ T5244] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.650690][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.672445][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.682636][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.693454][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.703472][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.713954][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.724112][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.735302][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.746714][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.774264][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.776757][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.794323][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.798461][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.811613][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.822201][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.832296][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.842956][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.852888][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.863626][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.876228][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.902350][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.916546][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.924638][ T3050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.928685][ T5250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.943327][ T3050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.947658][ T5250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.989500][ T5250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.999804][ T5250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.052896][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.062473][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.098138][ T3050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.119780][ T3050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.271592][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.295546][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.345581][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 61.372767][ T3050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.405319][ T3050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.504924][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 61.515805][ T25] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 61.524203][ T25] usb 4-1: config 179 has no interface number 0 [ 61.559815][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 61.603880][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 61.644130][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 61.672168][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 61.696778][ T25] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 61.726647][ T25] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 61.752483][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.792700][ T5293] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.800250][ T4624] Bluetooth: hci4: command tx timeout [ 61.812190][ T4624] Bluetooth: hci0: command tx timeout [ 61.816452][ T5230] Bluetooth: hci2: command tx timeout [ 61.818386][ T5236] Bluetooth: hci3: command tx timeout [ 61.823740][ T5238] Bluetooth: hci1: command tx timeout [ 61.838350][ T5311] ======================================================= [ 61.838350][ T5311] WARNING: The mand mount option has been deprecated and [ 61.838350][ T5311] and is ignored by this kernel. Remove the mand [ 61.838350][ T5311] option from the mount to silence this warning. [ 61.838350][ T5311] ======================================================= [ 62.071888][ T5289] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 62.411878][ T5324] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.449012][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 62.457378][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 62.466131][ T5288] usb 4-1: USB disconnect, device number 2 [ 62.474045][ T5288] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 63.304947][ T5284] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.408449][ T5366] capability: warning: `syz.2.34' uses 32-bit capabilities (legacy support in use) [ 63.485638][ T5284] usb 1-1: Using ep0 maxpacket: 8 [ 63.507121][ T5284] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 63.530740][ T5284] usb 1-1: config 0 has no interface number 0 [ 63.552491][ T5284] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 63.582294][ T5284] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 63.590626][ T5371] netlink: 'syz.4.36': attribute type 1 has an invalid length. [ 63.596848][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.621963][ T5284] usb 1-1: config 0 descriptor?? [ 63.657981][ T5284] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 63.874981][ T5238] Bluetooth: hci1: command tx timeout [ 63.877354][ T5284] usb 1-1: USB disconnect, device number 2 [ 63.880417][ T5238] Bluetooth: hci2: command tx timeout [ 63.881684][ T29] audit: type=1326 audit(1728469576.672:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.4.40" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f88d7dff9 code=0x0 [ 63.915274][ T5230] Bluetooth: hci3: command tx timeout [ 63.919028][ T5284] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 63.921152][ T5230] Bluetooth: hci0: command tx timeout [ 63.933115][ T5230] Bluetooth: hci4: command tx timeout [ 64.625335][ T5284] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.706093][ T5400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.48'. [ 64.809571][ T5284] usb 3-1: Using ep0 maxpacket: 16 [ 64.870287][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.912034][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.934242][ T5284] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 64.961890][ T5284] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.984782][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.042772][ T5284] usb 3-1: config 0 descriptor?? [ 65.124011][ T5418] trusted_key: syz.3.57 sent an empty control message without MSG_MORE. [ 65.464354][ T5284] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 65.497534][ T5284] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 65.524868][ T5284] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 65.546696][ T5284] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 65.554359][ T5284] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 65.604878][ T5284] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 65.612144][ T5284] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 65.635094][ T5284] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 65.658550][ T5284] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 65.674819][ T5284] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 65.691086][ T5284] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input6 [ 66.083951][ T5284] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 66.113768][ T5284] usb 3-1: USB disconnect, device number 2 [ 66.123289][ T5437] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.178414][ T5437] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.238686][ T5437] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.272610][ T5437] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.315510][ T5437] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.331526][ T5437] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.393127][ T5437] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.414258][ T5437] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.462804][ T5437] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.492457][ T5437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.505763][ T5437] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.526251][ T5437] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.543461][ T5437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 66.570265][ T5437] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 66.658988][ T5437] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 67.352896][ T5479] netlink: 'syz.4.83': attribute type 10 has an invalid length. [ 67.396460][ T5479] batman_adv: batadv0: Adding interface: team0 [ 67.412283][ T5479] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.440494][ T5483] CUSE: unknown device info "ju|:i|l [ 67.440494][ T5483] D ^M`ESP2EQxy;vأ+:yGY2z& [ 67.440494][ T5483] Z9,vu3~cY r(%o)jWe-7#"j-h0u}߻oLx-XzAT " [ 67.470413][ T5479] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 67.483130][ T5483] CUSE: DEVNAME unspecified [ 67.489484][ T5481] macvlan0: entered allmulticast mode [ 67.496397][ T5481] veth1_vlan: entered allmulticast mode [ 67.521284][ T5484] netlink: 'syz.4.83': attribute type 10 has an invalid length. [ 67.550981][ T5484] netlink: 2 bytes leftover after parsing attributes in process `syz.4.83'. [ 67.576976][ T5484] team0: entered promiscuous mode [ 67.582997][ T5484] team_slave_0: entered promiscuous mode [ 67.589969][ T5484] team_slave_1: entered promiscuous mode [ 67.597539][ T5484] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.604541][ T5484] batman_adv: batadv0: Interface activated: team0 [ 67.612034][ T5484] batman_adv: batadv0: Interface deactivated: team0 [ 67.618923][ T5484] batman_adv: batadv0: Removing interface: team0 [ 67.638286][ T5484] bridge0: port 3(team0) entered blocking state [ 67.663837][ T5484] bridge0: port 3(team0) entered disabled state [ 67.693265][ T5484] team0: entered allmulticast mode [ 67.711272][ T5484] team_slave_0: entered allmulticast mode [ 67.731322][ T5484] team_slave_1: entered allmulticast mode [ 67.762759][ T5490] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.812246][ T5484] bridge0: port 3(team0) entered blocking state [ 67.818837][ T5484] bridge0: port 3(team0) entered forwarding state [ 67.871071][ T5485] pim6reg: entered allmulticast mode [ 68.198652][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.274899][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.282182][ T5230] Bluetooth: hci1: Opcode 0x206c failed: -110 [ 68.343378][ T29] audit: type=1326 audit(1728469581.132:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9af37dff9 code=0x7ffc0000 [ 68.388788][ T29] audit: type=1326 audit(1728469581.132:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9af37dff9 code=0x7ffc0000 [ 68.440437][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.494947][ T29] audit: type=1326 audit(1728469581.132:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fd9af37dff9 code=0x7ffc0000 [ 68.524955][ T5238] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.594819][ T5238] Bluetooth: hci4: command 0x0c1a tx timeout [ 68.613506][ T29] audit: type=1326 audit(1728469581.132:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9af37dff9 code=0x7ffc0000 [ 68.672411][ T29] audit: type=1326 audit(1728469581.132:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9af37dff9 code=0x7ffc0000 [ 68.787809][ T5282] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.975446][ T5531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.105'. [ 69.014999][ T5282] usb 1-1: Using ep0 maxpacket: 8 [ 69.036151][ T5282] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.065231][ T5282] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.077687][ T5282] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 69.091856][ T5282] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 69.102902][ T5282] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 69.117199][ T5282] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 69.133691][ T5282] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.148298][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.169850][ T5282] usb 1-1: Product: syz [ 69.174587][ T5282] usb 1-1: Manufacturer: syz [ 69.179320][ T5282] usb 1-1: SerialNumber: syz [ 69.401626][ T5282] cdc_ncm 1-1:1.0: bind() failure [ 69.421819][ T5282] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 69.429899][ T5282] cdc_ncm 1-1:1.1: bind() failure [ 69.452677][ T5282] usb 1-1: USB disconnect, device number 3 [ 69.476801][ T5543] tun0: tun_chr_ioctl cmd 1074025677 [ 69.482382][ T5543] tun0: linktype set to 774 [ 69.568731][ T5545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 70.104944][ T5288] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.285130][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.292580][ T5288] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 70.312934][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.324692][ T5288] usb 5-1: config 0 descriptor?? [ 70.354983][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.380284][ T5230] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 70.397510][ T5288] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 70.514789][ T5230] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.595297][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.685528][ T5230] Bluetooth: hci4: command 0x0c1a tx timeout [ 70.881744][ T5602] loop6: detected capacity change from 0 to 524287999 [ 70.901636][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.911006][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.932557][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.941768][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.973017][ T5288] gspca_stv06xx: vv6410 sensor detected [ 70.981541][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.990733][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.008700][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.017888][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.028762][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.037952][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.047340][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.056599][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.066180][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.075372][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.083396][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.092645][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.104753][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.113985][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.122730][ T5602] ldm_validate_partition_table(): Disk read failed. [ 71.133505][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.142906][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.152984][ T5602] Dev loop6: unable to read RDB block 0 [ 71.163215][ T5602] loop6: unable to read partition table [ 71.175910][ T5602] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 71.242402][ T5288] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 71.270804][ T5288] usb 5-1: USB disconnect, device number 2 [ 71.559067][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.578301][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.176083][ T5633] netlink: 'syz.1.149': attribute type 4 has an invalid length. [ 72.378601][ T5230] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.434866][ T5230] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.516061][ T5641] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.534938][ T5288] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 72.598008][ T5230] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.674927][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.734785][ T5288] usb 3-1: Using ep0 maxpacket: 32 [ 72.754845][ T5230] Bluetooth: hci4: command 0x0c1a tx timeout [ 72.765753][ T5288] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 72.786593][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.794629][ T5288] usb 3-1: Product: syz [ 72.809756][ T5288] usb 3-1: Manufacturer: syz [ 72.814485][ T5288] usb 3-1: SerialNumber: syz [ 72.822044][ T5288] usb 3-1: config 0 descriptor?? [ 72.913129][ T5288] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 73.354182][ T5672] Option ' ' to dns_resolver key: bad/missing value [ 73.404837][ T5288] gspca_ov534_9: reg_w failed -71 [ 73.748208][ T5685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 73.835014][ T5288] gspca_ov534_9: Unknown sensor 0000 [ 73.835087][ T5288] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 73.877319][ T5288] usb 3-1: USB disconnect, device number 3 [ 73.894189][ T29] audit: type=1326 audit(1728469586.682:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a49b7dff9 code=0x7ffc0000 [ 73.987366][ T29] audit: type=1326 audit(1728469586.682:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a49b7dff9 code=0x7ffc0000 [ 74.026692][ T5689] netlink: 188 bytes leftover after parsing attributes in process `syz.4.174'. [ 74.090871][ T29] audit: type=1326 audit(1728469586.712:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a49b7dff9 code=0x7ffc0000 [ 74.113232][ T29] audit: type=1326 audit(1728469586.712:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a49b7dff9 code=0x7ffc0000 [ 74.139026][ T29] audit: type=1326 audit(1728469586.712:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a49b7dff9 code=0x7ffc0000 [ 74.164179][ T29] audit: type=1326 audit(1728469586.732:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8a49b7dff9 code=0x7ffc0000 [ 74.187061][ T29] audit: type=1326 audit(1728469586.732:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a49b7dff9 code=0x7ffc0000 [ 74.209706][ T29] audit: type=1326 audit(1728469586.732:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a49b7dff9 code=0x7ffc0000 [ 74.232296][ T29] audit: type=1326 audit(1728469586.742:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8a49b7dff9 code=0x7ffc0000 [ 74.255015][ T29] audit: type=1326 audit(1728469586.742:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a49b7dff9 code=0x7ffc0000 [ 74.518636][ T5230] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.024394][ T5720] mmap: syz.2.188 (5720) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.773073][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 76.068304][ T5751] dummy0: entered promiscuous mode [ 76.080118][ T5751] dummy0: left promiscuous mode [ 76.254882][ T5287] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.335133][ T5763] unknown channel width for channel at 907000KHz? [ 76.443876][ T5287] usb 2-1: Using ep0 maxpacket: 32 [ 76.477567][ T5287] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.497956][ T5287] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.580528][ T5287] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 76.590100][ T5287] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 76.599046][ T5287] usb 2-1: Product: syz [ 76.603825][ T5287] usb 2-1: Manufacturer: syz [ 76.618014][ T5230] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.636822][ T5287] hub 2-1:4.0: USB hub found [ 76.689095][ T937] cfg80211: failed to load regulatory.db [ 76.841945][ T5287] hub 2-1:4.0: 2 ports detected [ 76.960695][ T5794] tun0: tun_chr_ioctl cmd 2147767519 [ 77.050893][ T5287] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 77.063998][ T5287] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 77.124832][ T5287] usb 2-1: USB disconnect, device number 2 [ 77.233404][ T5810] bond0: option all_slaves_active: invalid value (170) [ 78.213123][ T5856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.220699][ T5856] IPv6: NLM_F_CREATE should be set when creating new route [ 78.228032][ T5856] IPv6: NLM_F_CREATE should be set when creating new route [ 78.650207][ T5288] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.681685][ T5875] ALSA: mixer_oss: invalid OSS volume '' [ 78.703293][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 78.741164][ T5880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 78.767343][ T5880] vlan2: entered allmulticast mode [ 78.794917][ T5880] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 78.847088][ T5288] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 78.871283][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.896146][ T5288] usb 5-1: config 0 descriptor?? [ 78.903127][ T5288] cp210x 5-1:0.0: cp210x converter detected [ 79.328982][ T5288] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 79.386579][ T5288] usb 5-1: cp210x converter now attached to ttyUSB0 [ 79.606071][ T5288] usb 5-1: USB disconnect, device number 3 [ 79.628040][ T5288] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 79.683197][ T5288] cp210x 5-1:0.0: device disconnected [ 80.155533][ T937] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.315521][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 80.338471][ T937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.410518][ T937] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 80.421736][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 80.451701][ T937] usb 4-1: SerialNumber: syz [ 80.471275][ T937] usb 4-1: config 0 descriptor?? [ 80.502322][ T937] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 80.534333][ T937] usb 4-1: No valid video chain found. [ 80.741420][ T25] usb 4-1: USB disconnect, device number 3 [ 81.367560][ T5974] bridge_slave_1: left allmulticast mode [ 81.407808][ T5974] bridge_slave_1: left promiscuous mode [ 81.434242][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.485724][ T5974] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 81.798707][ T6001] @: renamed from vlan0 (while UP) [ 82.158317][ T6018] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 85.649023][ T6119] veth0_vlan: entered allmulticast mode [ 85.750919][ T6122] veth0_vlan: left promiscuous mode [ 85.795568][ T6122] veth0_vlan: entered promiscuous mode [ 86.049819][ T6135] netlink: 'syz.2.372': attribute type 33 has an invalid length. [ 86.057770][ T6135] netlink: 'syz.2.372': attribute type 13 has an invalid length. [ 86.065927][ T6135] netlink: 152 bytes leftover after parsing attributes in process `syz.2.372'. [ 86.119163][ T6138] netlink: 'syz.2.372': attribute type 33 has an invalid length. [ 86.505761][ T6152] netlink: 104 bytes leftover after parsing attributes in process `syz.2.382'. [ 86.516523][ T6154] netlink: 100 bytes leftover after parsing attributes in process `syz.1.381'. [ 86.666795][ T5288] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.000847][ T6168] netlink: 88 bytes leftover after parsing attributes in process `syz.3.388'. [ 87.014909][ T5288] usb 5-1: Using ep0 maxpacket: 32 [ 87.027485][ T5288] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 87.048968][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.077132][ T5288] usb 5-1: config 0 descriptor?? [ 87.100237][ T5288] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 87.123493][ T6170] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.390'. [ 87.370354][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.458418][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.545498][ T937] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.545687][ T5285] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.576964][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.714868][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 87.728399][ T937] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.762068][ T937] usb 4-1: config 0 has no interface number 0 [ 87.771177][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.779696][ T5288] usb 5-1: USB disconnect, device number 4 [ 87.780517][ T937] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.830770][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.838505][ T937] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 87.847642][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.857592][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.866802][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.873581][ T5285] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 87.874551][ T937] usb 4-1: config 0 descriptor?? [ 87.883343][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.896678][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.904207][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.904435][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.911796][ T937] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 87.957414][ T5285] usb 3-1: Product: syz [ 87.974264][ T5285] usb 3-1: Manufacturer: syz [ 87.992735][ T5285] usb 3-1: SerialNumber: syz [ 88.032060][ T5285] usb 3-1: config 0 descriptor?? [ 88.222972][ T937] usb 4-1: USB disconnect, device number 4 [ 88.240450][ T937] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 88.266063][ T35] bridge_slave_1: left allmulticast mode [ 88.303249][ T35] bridge_slave_1: left promiscuous mode [ 88.331980][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.371334][ T25] usb 3-1: USB disconnect, device number 4 [ 88.404130][ T35] bridge_slave_0: left allmulticast mode [ 88.426028][ T35] bridge_slave_0: left promiscuous mode [ 88.452977][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.846567][ T5282] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 89.021433][ T5282] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.039119][ T5282] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 89.059264][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.091745][ T5282] usb 5-1: config 0 descriptor?? [ 89.112810][ T5282] pwc: Askey VC010 type 2 USB webcam detected. [ 89.143102][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.208588][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.224247][ T35] bond0 (unregistering): Released all slaves [ 89.544646][ T5282] pwc: recv_control_msg error -32 req 02 val 2b00 [ 89.624082][ T6188] chnl_net:caif_netlink_parms(): no params data found [ 89.766114][ T5282] pwc: recv_control_msg error -71 req 02 val 2c00 [ 89.773542][ T5282] pwc: recv_control_msg error -71 req 04 val 1000 [ 89.803069][ T6244] input: syz0 as /devices/virtual/input/input7 [ 89.828655][ T5282] pwc: recv_control_msg error -71 req 04 val 1300 [ 89.837955][ T5282] pwc: recv_control_msg error -71 req 04 val 1400 [ 89.850451][ T5282] pwc: recv_control_msg error -71 req 02 val 2000 [ 89.859096][ T5282] pwc: recv_control_msg error -71 req 02 val 2100 [ 89.871238][ T5282] pwc: recv_control_msg error -71 req 04 val 1500 [ 89.879403][ T5282] pwc: recv_control_msg error -71 req 02 val 2500 [ 89.894601][ T5282] pwc: recv_control_msg error -71 req 02 val 2400 [ 89.901624][ T5282] pwc: recv_control_msg error -71 req 02 val 2600 [ 89.917066][ T5282] pwc: recv_control_msg error -71 req 02 val 2900 [ 89.924092][ T5282] pwc: recv_control_msg error -71 req 02 val 2800 [ 89.937378][ T5282] pwc: recv_control_msg error -71 req 04 val 1100 [ 89.974462][ T5238] Bluetooth: hci0: command tx timeout [ 90.003372][ T5282] pwc: recv_control_msg error -71 req 04 val 1200 [ 90.013101][ T5282] pwc: Registered as video71. [ 90.022118][ T5282] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 90.049553][ T5282] usb 5-1: USB disconnect, device number 5 [ 90.286003][ T6188] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.293134][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.344478][ T6188] bridge_slave_0: entered allmulticast mode [ 90.361518][ T6188] bridge_slave_0: entered promiscuous mode [ 90.404919][ T6188] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.412045][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.454967][ T6188] bridge_slave_1: entered allmulticast mode [ 90.486726][ T6188] bridge_slave_1: entered promiscuous mode [ 90.515045][ T5285] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.538446][ T35] hsr_slave_0: left promiscuous mode [ 90.587611][ T35] hsr_slave_1: left promiscuous mode [ 90.596921][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.604413][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.673895][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.675644][ T5285] usb 2-1: Using ep0 maxpacket: 8 [ 90.702719][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.708129][ T5285] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.731817][ T5285] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.762113][ T5285] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.775115][ T35] veth1_macvtap: left promiscuous mode [ 90.785421][ T5285] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.791949][ T35] veth0_macvtap: left promiscuous mode [ 90.805580][ T35] veth1_vlan: left allmulticast mode [ 90.811039][ T35] veth1_vlan: left promiscuous mode [ 90.816790][ T35] veth0_vlan: left promiscuous mode [ 90.844778][ T5285] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 90.853873][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.065771][ T35] pim6reg (unregistering): left allmulticast mode [ 91.081330][ T5285] usb 2-1: GET_CAPABILITIES returned 0 [ 91.102998][ T5285] usbtmc 2-1:16.0: can't read capabilities [ 91.278773][ T35] macvlan0 (unregistering): left allmulticast mode [ 91.354537][ T5285] usb 2-1: USB disconnect, device number 3 [ 91.633228][ T35] team0 (unregistering): Port device team_slave_1 removed [ 91.671364][ T35] team0 (unregistering): Port device team_slave_0 removed [ 92.043714][ T5238] Bluetooth: hci0: command tx timeout [ 92.161424][ T6188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.235434][ T6188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.377120][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 92.398694][ T6188] team0: Port device team_slave_0 added [ 92.425601][ T6188] team0: Port device team_slave_1 added [ 92.606414][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.613398][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.704789][ T6188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.738500][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.772692][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.861648][ T6188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.114524][ T6188] hsr_slave_0: entered promiscuous mode [ 93.161632][ T6188] hsr_slave_1: entered promiscuous mode [ 93.174055][ T6188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.206016][ T6188] Cannot create hsr debugfs directory [ 93.611733][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.026591][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.114945][ T5238] Bluetooth: hci0: command tx timeout [ 94.247129][ T25] usb 3-1: config 0 has no interfaces? [ 94.260607][ T25] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 94.280617][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.310122][ T25] usb 3-1: Product: syz [ 94.329567][ T25] usb 3-1: Manufacturer: syz [ 94.347175][ T25] usb 3-1: SerialNumber: syz [ 94.378630][ T25] usb 3-1: config 0 descriptor?? [ 94.802125][ T5289] usb 3-1: USB disconnect, device number 5 [ 95.002931][ T6188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.044064][ T6188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.073361][ T6188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.091928][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 95.104443][ T6188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.215641][ T937] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.313195][ T6188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.372964][ T6188] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.402444][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.441240][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.455001][ T937] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 95.474346][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.516868][ T937] usb 5-1: config 0 descriptor?? [ 95.632494][ T6188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.643206][ T6188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.680850][ T6188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.691140][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.698343][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.731252][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.738434][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.852045][ T6412] netlink: 216 bytes leftover after parsing attributes in process `syz.1.467'. [ 95.933985][ T937] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 95.945539][ T937] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 95.971919][ T6188] veth0_vlan: entered promiscuous mode [ 96.013354][ T937] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 96.046776][ T6420] ip6gretap1: entered promiscuous mode [ 96.061290][ T6420] ip6gretap1: entered allmulticast mode [ 96.085900][ T6188] veth1_vlan: entered promiscuous mode [ 96.153548][ C0] hid-thrustmaster 0003:044F:B65D.0002: Unknown packet type 0x0, unable to proceed further with wheel init [ 96.180934][ T6188] veth0_macvtap: entered promiscuous mode [ 96.195022][ T5238] Bluetooth: hci0: command tx timeout [ 96.240116][ T6188] veth1_macvtap: entered promiscuous mode [ 96.318164][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.328803][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.339051][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.349718][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.359960][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.371322][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.381877][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.392575][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.405779][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.415616][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.426193][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.436202][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.449479][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.459423][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.470457][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.480772][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.487002][ T937] usb 5-1: USB disconnect, device number 6 [ 96.491327][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.508215][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.518424][ T6188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.527251][ T6188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.536091][ T6188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.544874][ T6188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.646172][ T6444] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 96.654050][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 96.762470][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.781524][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.892563][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.912813][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.009339][ T6459] netlink: 'syz.1.482': attribute type 11 has an invalid length. [ 97.479158][ T6485] input: syz1 as /devices/virtual/input/input9 [ 97.894534][ T6503] netlink: 'syz.1.496': attribute type 10 has an invalid length. [ 97.910492][ T5282] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.961806][ T6503] syz_tun: entered promiscuous mode [ 98.095318][ T5282] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.111984][ T5282] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.137410][ T6503] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 98.145765][ T5282] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 98.199030][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 98.216641][ T5282] usb 5-1: SerialNumber: syz [ 98.478754][ T5282] usb 5-1: 0:2 : does not exist [ 98.540648][ T5282] usb 5-1: USB disconnect, device number 7 [ 98.616577][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'. [ 99.596537][ T6570] geneve0: entered promiscuous mode [ 99.635058][ T6570] macvlan2: entered promiscuous mode [ 99.641331][ T6570] macvlan2: entered allmulticast mode [ 99.714841][ T6570] geneve0: entered allmulticast mode [ 99.766969][ T6570] geneve0: left allmulticast mode [ 99.792704][ T6570] geneve0: left promiscuous mode [ 100.805556][ T5282] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 101.018272][ T5282] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 101.057143][ T5282] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.076901][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.100874][ T5282] usb 3-1: Product: syz [ 101.108425][ T5282] usb 3-1: Manufacturer: syz [ 101.115174][ T5282] usb 3-1: SerialNumber: syz [ 101.132614][ T6606] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.154111][ T5282] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 101.224967][ T5289] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.388359][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.411389][ T5289] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.421877][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.431825][ T5289] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.458223][ T25] usb 3-1: USB disconnect, device number 6 [ 101.476183][ T5289] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.497631][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.540440][ T5289] usb 1-1: SerialNumber: syz [ 101.785510][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.790511][ T5289] usb 1-1: 0:2 : does not exist [ 101.828274][ T5289] usb 1-1: USB disconnect, device number 4 [ 101.900442][ T5232] udevd[5232]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.944818][ T937] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 102.057542][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.126654][ T937] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 102.154349][ T937] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.174763][ T937] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.225411][ T937] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.247230][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.261232][ T937] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 102.284256][ T937] usb 3-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.325641][ T937] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.355007][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.401598][ T6606] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.456858][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.602284][ T6670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.552'. [ 102.643371][ T937] usb 3-1: usb_control_msg returned -71 [ 102.650177][ T937] usbtmc 3-1:16.0: can't read capabilities [ 102.656924][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.667075][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.676488][ T937] usbtmc 3-1:16.0: Failed to submit iin_urb [ 102.682469][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.691273][ T937] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -90 [ 102.701083][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.716546][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 102.724331][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.737737][ T937] usb 3-1: USB disconnect, device number 7 [ 102.836319][ T12] team0: left allmulticast mode [ 102.841229][ T12] team_slave_0: left allmulticast mode [ 102.883178][ T12] team_slave_1: left allmulticast mode [ 102.925076][ T12] bridge0: port 3(team0) entered disabled state [ 102.942554][ T12] bridge_slave_1: left allmulticast mode [ 102.963642][ T12] bridge_slave_1: left promiscuous mode [ 102.976063][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.014456][ T12] bridge_slave_0: left allmulticast mode [ 103.026376][ T12] bridge_slave_0: left promiscuous mode [ 103.040661][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.610350][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.622608][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.634686][ T12] bond0 (unregistering): Released all slaves [ 104.412770][ T6731] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (5) [ 104.425817][ T6676] chnl_net:caif_netlink_parms(): no params data found [ 104.679985][ T12] hsr_slave_0: left promiscuous mode [ 104.698463][ T12] hsr_slave_1: left promiscuous mode [ 104.722174][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.729892][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.738020][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.747019][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.780776][ T12] veth1_macvtap: left promiscuous mode [ 104.792162][ T12] veth0_macvtap: left promiscuous mode [ 104.800767][ T12] veth1_vlan: left promiscuous mode [ 104.811457][ T12] veth0_vlan: left promiscuous mode [ 104.837118][ T5230] Bluetooth: hci4: command tx timeout [ 105.203869][ T12] team_slave_1 (unregistering): left promiscuous mode [ 105.215763][ T12] team0 (unregistering): Port device team_slave_1 removed [ 105.253920][ T12] team_slave_0 (unregistering): left promiscuous mode [ 105.262112][ T12] team0 (unregistering): Port device team_slave_0 removed [ 105.604038][ T6739] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 105.611901][ T6750] netlink: 'syz.0.577': attribute type 8 has an invalid length. [ 105.880188][ T5282] IPVS: starting estimator thread 0... [ 105.901502][ T6676] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.916959][ T6676] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.932937][ T6676] bridge_slave_0: entered allmulticast mode [ 105.940937][ T6676] bridge_slave_0: entered promiscuous mode [ 105.951658][ T6676] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.959347][ T6676] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.988172][ T6676] bridge_slave_1: entered allmulticast mode [ 105.995014][ T6775] IPVS: using max 25 ests per chain, 60000 per kthread [ 106.016573][ T6676] bridge_slave_1: entered promiscuous mode [ 106.126837][ T6676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.169059][ T6676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.322800][ T6676] team0: Port device team_slave_0 added [ 106.346581][ T6676] team0: Port device team_slave_1 added [ 106.483042][ T6676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.506318][ T6676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.584650][ T6676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.602904][ T6676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.613586][ T6676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.744822][ T6676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.837507][ T6817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.596'. [ 106.915790][ T5230] Bluetooth: hci4: command tx timeout [ 106.959450][ T6676] hsr_slave_0: entered promiscuous mode [ 106.973063][ T6676] hsr_slave_1: entered promiscuous mode [ 106.984593][ T6676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.998154][ T6676] Cannot create hsr debugfs directory [ 108.110600][ T6859] netlink: 'syz.3.609': attribute type 10 has an invalid length. [ 108.176253][ T6859] syz_tun: entered promiscuous mode [ 108.212142][ T6859] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 108.464329][ T6676] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.517921][ T6676] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.598956][ T6676] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.682051][ T6676] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.871825][ T6676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.913561][ T6676] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.950301][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.957474][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.995204][ T5230] Bluetooth: hci4: command tx timeout [ 109.017511][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.024682][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.250999][ T6676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.327013][ T6896] geneve0: entered promiscuous mode [ 109.369943][ T6896] macvlan2: entered promiscuous mode [ 109.383878][ T6896] macvlan2: entered allmulticast mode [ 109.399751][ T6896] geneve0: entered allmulticast mode [ 109.429331][ T6896] geneve0: left allmulticast mode [ 109.445763][ T6896] geneve0: left promiscuous mode [ 109.676428][ T6676] veth0_vlan: entered promiscuous mode [ 109.724360][ T6676] veth1_vlan: entered promiscuous mode [ 109.747159][ T6914] macvlan0: entered allmulticast mode [ 109.776668][ T6914] veth1_vlan: entered allmulticast mode [ 109.821031][ T6914] pim6reg: entered allmulticast mode [ 109.871979][ T6676] veth0_macvtap: entered promiscuous mode [ 109.923957][ T6676] veth1_macvtap: entered promiscuous mode [ 110.006947][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.062550][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.074615][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.093675][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.111433][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.146513][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.170534][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.181700][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.200825][ T6676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.214638][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.228466][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.242914][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.259395][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.269844][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.282129][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.292923][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.303692][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.316946][ T6676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.326913][ T6926] netlink: 'syz.3.633': attribute type 10 has an invalid length. [ 110.340721][ T6926] batman_adv: batadv0: Adding interface: team0 [ 110.348771][ T6926] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.384955][ T6926] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 110.400759][ T6927] netlink: 'syz.3.633': attribute type 10 has an invalid length. [ 110.409966][ T5289] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.418713][ T6927] netlink: 2 bytes leftover after parsing attributes in process `syz.3.633'. [ 110.429384][ T6927] team0: entered promiscuous mode [ 110.434419][ T6927] team_slave_0: entered promiscuous mode [ 110.440716][ T6927] team_slave_1: entered promiscuous mode [ 110.447928][ T6927] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.454678][ T6927] batman_adv: batadv0: Interface activated: team0 [ 110.461728][ T6927] batman_adv: batadv0: Interface deactivated: team0 [ 110.468740][ T6927] batman_adv: batadv0: Removing interface: team0 [ 110.476291][ T6927] bridge0: port 3(team0) entered blocking state [ 110.482648][ T6927] bridge0: port 3(team0) entered disabled state [ 110.489696][ T6927] team0: entered allmulticast mode [ 110.495965][ T6927] team_slave_0: entered allmulticast mode [ 110.501724][ T6927] team_slave_1: entered allmulticast mode [ 110.509404][ T6927] bridge0: port 3(team0) entered blocking state [ 110.515790][ T6927] bridge0: port 3(team0) entered forwarding state [ 110.525698][ T6676] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.534436][ T6676] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.553220][ T6676] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.562205][ T6676] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.571752][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 110.588080][ T5289] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 110.618548][ T5289] usb 3-1: config 179 has no interface number 0 [ 110.633483][ T5289] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 110.708922][ T5289] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 110.743000][ T5289] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 110.815003][ T5289] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 110.853021][ T5289] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 110.864767][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.895278][ T5289] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 110.908275][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.918935][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.928229][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.945079][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.959954][ T6932] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.021078][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.642'. [ 111.075729][ T5230] Bluetooth: hci4: command tx timeout [ 111.253525][ T81] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input10 [ 111.538355][ T5285] usb 3-1: USB disconnect, device number 8 [ 111.544246][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 111.544296][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 111.606877][ T5285] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 111.855345][ T6988] geneve0: entered promiscuous mode [ 111.884588][ T6988] macvlan2: entered promiscuous mode [ 111.900760][ T6988] macvlan2: entered allmulticast mode [ 111.920730][ T6988] geneve0: entered allmulticast mode [ 111.942489][ T6988] geneve0: left allmulticast mode [ 111.965127][ T6988] geneve0: left promiscuous mode [ 112.189301][ T7007] netem: change failed [ 112.660903][ T7025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.687684][ T7025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.696464][ T7025] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.729473][ T7025] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.745271][ T7025] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.793749][ T7025] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.828399][ T7025] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.840763][ T7025] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 112.879272][ T7025] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 112.981165][ T7053] geneve0: entered promiscuous mode [ 112.987150][ T7053] macvlan3: entered promiscuous mode [ 112.992718][ T7053] macvlan3: entered allmulticast mode [ 113.008561][ T7053] geneve0: entered allmulticast mode [ 113.017774][ T7053] geneve0: left allmulticast mode [ 113.026457][ T7053] geneve0: left promiscuous mode [ 113.134835][ T5285] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.142517][ T5289] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.305299][ T5289] usb 2-1: Using ep0 maxpacket: 8 [ 113.320253][ T5285] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 113.340483][ T5289] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.354921][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.374804][ T5289] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.395793][ T5285] usb 1-1: config 0 descriptor?? [ 113.402777][ T5289] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.414970][ T5285] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 113.434857][ T5289] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 113.444840][ T5289] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.454542][ T5289] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 113.507120][ T5289] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.517307][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.526033][ T5289] usb 2-1: Product: syz [ 113.530259][ T5289] usb 2-1: Manufacturer: syz [ 113.535006][ T5289] usb 2-1: SerialNumber: syz [ 113.754638][ T5289] cdc_ncm 2-1:1.0: bind() failure [ 113.766128][ T5289] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 113.774263][ T5289] cdc_ncm 2-1:1.1: bind() failure [ 113.786367][ T5289] usb 2-1: USB disconnect, device number 4 [ 114.035870][ T5285] gspca_stv06xx: vv6410 sensor detected [ 114.291590][ T7102] netlink: 'syz.4.679': attribute type 4 has an invalid length. [ 114.363499][ T5285] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 114.380713][ T5285] usb 1-1: USB disconnect, device number 5 [ 114.595046][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.755811][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.761922][ T5236] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.771854][ T5234] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.791107][ T5230] Bluetooth: hci3: Opcode 0x206c failed: -110 [ 114.841782][ T5238] Bluetooth: hci4: command 0x0c1a tx timeout [ 115.184970][ T5289] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.350711][ T5289] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 115.396231][ T5289] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.425583][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.445847][ T5289] usb 1-1: Product: syz [ 115.464464][ T5289] usb 1-1: Manufacturer: syz [ 115.479401][ T5289] usb 1-1: SerialNumber: syz [ 115.500021][ T7135] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.522720][ T5289] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 115.615696][ T5285] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.742692][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.777974][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.786943][ T5285] usb 4-1: Using ep0 maxpacket: 32 [ 115.815939][ T81] usb 1-1: USB disconnect, device number 6 [ 115.828063][ T5285] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 115.844820][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.852944][ T5285] usb 4-1: Product: syz [ 115.875654][ T5285] usb 4-1: Manufacturer: syz [ 115.880647][ T5285] usb 4-1: SerialNumber: syz [ 115.897785][ T5285] usb 4-1: config 0 descriptor?? [ 115.906438][ T5285] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 116.235735][ T7162] loop6: detected capacity change from 0 to 524287999 [ 116.238516][ T5285] gspca_ov534_9: reg_w failed -71 [ 116.310944][ C0] blk_print_req_error: 8 callbacks suppressed [ 116.310966][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.326361][ C0] buffer_io_error: 8 callbacks suppressed [ 116.326377][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.349031][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.357944][ T81] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 116.358231][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.389564][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.398817][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.409453][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.418793][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.440918][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.450214][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.465842][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.475045][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.484747][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.493909][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.503216][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.512441][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.520632][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.529852][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.537806][ T7162] ldm_validate_partition_table(): Disk read failed. [ 116.545722][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.554984][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.566211][ T81] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 116.574683][ T81] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.585118][ T81] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.604999][ T81] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.620678][ T81] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 116.632781][ T7162] Dev loop6: unable to read RDB block 0 [ 116.639874][ T81] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.656776][ T81] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.667403][ T81] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.685228][ T7162] loop6: unable to read partition table [ 116.691218][ T7162] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 116.713415][ T7135] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.744844][ T5285] gspca_ov534_9: Unknown sensor 0000 [ 116.744916][ T5285] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 116.782930][ T5285] usb 4-1: USB disconnect, device number 5 [ 116.834950][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.841713][ T5238] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.842211][ T5230] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 116.915248][ T5230] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.927028][ T81] usb 1-1: usb_control_msg returned -71 [ 116.954885][ T81] usbtmc 1-1:16.0: can't read capabilities [ 116.960779][ T81] usbtmc 1-1:16.0: Failed to submit iin_urb [ 117.013755][ T81] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -90 [ 117.101199][ T81] usb 1-1: USB disconnect, device number 7 [ 118.114959][ T5286] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.311844][ T5286] usb 4-1: Using ep0 maxpacket: 16 [ 118.326012][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.342785][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.377560][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.405365][ T5286] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.414571][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.436740][ T5286] usb 4-1: config 0 descriptor?? [ 118.508743][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 118.667961][ T7204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.722'. [ 118.906689][ T5286] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 118.913949][ T5286] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 118.935000][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.935071][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.950738][ T5286] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 118.959215][ T5286] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 118.966808][ T5286] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 118.974473][ T5286] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 118.982127][ T5286] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 118.992379][ T5286] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 118.999744][ T5238] Bluetooth: hci4: command 0x0c1a tx timeout [ 118.999766][ T5286] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 119.013108][ T5286] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 119.020592][ T7218] dummy0: entered promiscuous mode [ 119.028873][ T5286] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input11 [ 119.059579][ T7218] dummy0: left promiscuous mode [ 119.082944][ T7220] unknown channel width for channel at 907000KHz? [ 119.135771][ T5286] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 119.194819][ T5286] usb 4-1: USB disconnect, device number 6 [ 119.383763][ T7226] geneve0: entered promiscuous mode [ 119.396561][ T7226] macvlan3: entered promiscuous mode [ 119.425912][ T7226] macvlan3: entered allmulticast mode [ 119.446422][ T7226] geneve0: entered allmulticast mode [ 119.460597][ T7226] geneve0: left allmulticast mode [ 119.477422][ T7226] geneve0: left promiscuous mode [ 119.811848][ T7244] tun0: tun_chr_ioctl cmd 2147767519 [ 120.178449][ T7258] bond0: option all_slaves_active: invalid value (170) [ 120.253142][ T7260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.260463][ T7260] IPv6: NLM_F_CREATE should be set when creating new route [ 120.267792][ T7260] IPv6: NLM_F_CREATE should be set when creating new route [ 120.414867][ T5285] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 120.589673][ T5285] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.602196][ T5285] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.626239][ T5285] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.660910][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.694832][ T5285] usb 5-1: SerialNumber: syz [ 120.977889][ T5285] usb 5-1: 0:2 : does not exist [ 121.086903][ T5285] usb 5-1: USB disconnect, device number 8 [ 121.164602][ T5232] udevd[5232]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.585008][ T7317] netlink: 'syz.2.770': attribute type 11 has an invalid length. [ 122.040320][ T7334] netlink: 'syz.2.777': attribute type 4 has an invalid length. [ 123.614433][ T7361] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.791'. [ 123.886182][ T81] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.076684][ T81] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 124.130670][ T81] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.285957][ T81] usb 2-1: config 0 descriptor?? [ 124.336101][ T81] cp210x 2-1:0.0: cp210x converter detected [ 124.712235][ T81] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 124.784110][ T81] usb 2-1: cp210x converter now attached to ttyUSB0 [ 124.987426][ T81] usb 2-1: USB disconnect, device number 5 [ 125.035830][ T81] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 126.480419][ T81] cp210x 2-1:0.0: device disconnected [ 126.712566][ T7403] bridge_slave_1: left allmulticast mode [ 126.765133][ T5289] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 126.777772][ T7403] bridge_slave_1: left promiscuous mode [ 126.839641][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.936834][ T5289] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.979043][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 126.989654][ T7403] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 127.017380][ T5289] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 127.039796][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 127.062779][ T5289] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.091072][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.154615][ T7399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 127.193314][ T5289] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.573739][ T5289] usb 3-1: USB disconnect, device number 9 [ 127.961839][ T7416] netlink: 100 bytes leftover after parsing attributes in process `syz.0.817'. [ 128.006615][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 128.006635][ T29] audit: type=1326 audit(1728469640.802:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.4.819" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb40177dff9 code=0x0 [ 129.124209][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 130.263322][ T29] audit: type=1326 audit(1728469643.052:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9af37dff9 code=0x7ffc0000 [ 130.322821][ T29] audit: type=1326 audit(1728469643.092:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9af37dff9 code=0x7ffc0000 [ 130.409136][ T29] audit: type=1326 audit(1728469643.092:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9af37dff9 code=0x7ffc0000 [ 130.454678][ T29] audit: type=1326 audit(1728469643.092:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9af37dff9 code=0x7ffc0000 [ 130.490563][ T29] audit: type=1326 audit(1728469643.092:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9af37dff9 code=0x7ffc0000 [ 130.521222][ T29] audit: type=1326 audit(1728469643.092:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fd9af37dff9 code=0x7ffc0000 [ 130.550255][ T29] audit: type=1326 audit(1728469643.092:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9af37dff9 code=0x7ffc0000 [ 130.584975][ T29] audit: type=1326 audit(1728469643.092:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9af37dff9 code=0x7ffc0000 [ 130.617849][ T29] audit: type=1326 audit(1728469643.092:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd9af37dff9 code=0x7ffc0000 [ 133.025240][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.031579][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.754720][ C0] sched: DL replenish lagged too much [ 139.853254][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.870040][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.880014][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.888748][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.898742][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 139.906293][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.542372][ T5230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 140.552390][ T5230] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 140.574592][ T5230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 140.595998][ T5230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 140.606469][ T5230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 140.615782][ T5230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 141.104003][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 141.115252][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 141.127409][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 141.145696][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 141.155091][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 141.170189][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 141.325530][ T5238] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 141.344975][ T5238] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 141.352956][ T5238] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 141.362076][ T5238] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 141.375235][ T5238] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 141.382551][ T5238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 141.580688][ T5230] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 141.595416][ T5230] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 141.603418][ T5230] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 141.614170][ T5230] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 141.624641][ T5230] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 141.632446][ T5230] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 141.954975][ T5230] Bluetooth: hci5: command tx timeout [ 142.679317][ T5230] Bluetooth: hci6: command tx timeout [ 143.235483][ T5230] Bluetooth: hci7: command tx timeout [ 143.475034][ T5230] Bluetooth: hci8: command tx timeout [ 143.714939][ T5230] Bluetooth: hci9: command tx timeout [ 144.035063][ T5230] Bluetooth: hci5: command tx timeout [ 144.754971][ T5230] Bluetooth: hci6: command tx timeout [ 145.314925][ T5230] Bluetooth: hci7: command tx timeout [ 145.555107][ T5230] Bluetooth: hci8: command tx timeout [ 145.795413][ T5238] Bluetooth: hci9: command tx timeout [ 146.115518][ T5230] Bluetooth: hci5: command tx timeout [ 146.834971][ T5230] Bluetooth: hci6: command tx timeout [ 147.395094][ T5230] Bluetooth: hci7: command tx timeout [ 147.635063][ T5230] Bluetooth: hci8: command tx timeout [ 147.875555][ T5230] Bluetooth: hci9: command tx timeout [ 148.194882][ T5230] Bluetooth: hci5: command tx timeout [ 148.914847][ T5230] Bluetooth: hci6: command tx timeout [ 149.474968][ T5230] Bluetooth: hci7: command tx timeout [ 149.715021][ T5230] Bluetooth: hci8: command tx timeout [ 149.954946][ T5230] Bluetooth: hci9: command tx timeout [ 155.503737][ T7453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.830'. [ 155.538984][ T7453] veth1_macvtap: left promiscuous mode [ 155.558272][ T7453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.830'. [ 156.444132][ T7445] bond0: (slave syz_tun): Releasing backup interface [ 194.441467][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.448048][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.567874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.706257][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.746484][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.764941][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.775236][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.782870][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 202.790291][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.285490][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.294511][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.303767][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.324954][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.332712][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 203.340681][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.452556][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.464553][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.473462][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.482035][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.490030][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 203.497604][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.512066][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.521129][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.529676][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.561842][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.576265][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 203.583580][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.780814][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.791991][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.800896][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.811723][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.819661][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 203.827468][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.834899][ T5234] Bluetooth: hci0: command tx timeout [ 205.395005][ T5234] Bluetooth: hci1: command tx timeout [ 205.635116][ T5238] Bluetooth: hci2: command tx timeout [ 205.641261][ T5234] Bluetooth: hci3: command tx timeout [ 205.875031][ T5234] Bluetooth: hci4: command tx timeout [ 206.920292][ T5234] Bluetooth: hci0: command tx timeout [ 207.474971][ T5234] Bluetooth: hci1: command tx timeout [ 207.714965][ T5234] Bluetooth: hci3: command tx timeout [ 207.720417][ T5234] Bluetooth: hci2: command tx timeout [ 207.954920][ T5234] Bluetooth: hci4: command tx timeout [ 208.995054][ T5234] Bluetooth: hci0: command tx timeout [ 209.554905][ T5234] Bluetooth: hci1: command tx timeout [ 209.795717][ T5238] Bluetooth: hci2: command tx timeout [ 209.801194][ T5238] Bluetooth: hci3: command tx timeout [ 210.037515][ T5234] Bluetooth: hci4: command tx timeout [ 211.074976][ T5234] Bluetooth: hci0: command tx timeout [ 211.634933][ T5234] Bluetooth: hci1: command tx timeout [ 211.875046][ T5238] Bluetooth: hci2: command tx timeout [ 211.880522][ T5234] Bluetooth: hci3: command tx timeout [ 212.114903][ T5234] Bluetooth: hci4: command tx timeout [ 255.877070][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.883403][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.097212][ T5236] Bluetooth: hci5: command 0x0406 tx timeout [ 263.103320][ T5236] Bluetooth: hci6: command 0x0406 tx timeout [ 263.717940][ T5230] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 263.727452][ T5230] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 263.736284][ T5230] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 263.756753][ T5230] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 263.765721][ T5230] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 263.773185][ T5230] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 264.090328][ T5234] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 264.103258][ T5234] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 264.112611][ T5234] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 264.121565][ T5234] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 264.130886][ T5234] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 264.138773][ T5234] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 264.283175][ T5236] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 264.292006][ T5236] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 264.301100][ T5236] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 264.309419][ T5236] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 264.320907][ T5236] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 264.330833][ T5236] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 264.341007][ T5236] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 264.350030][ T5236] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 264.361290][ T5236] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 264.371914][ T5234] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 264.395613][ T5236] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 264.453970][ T5236] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 264.559999][ T5236] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 264.576530][ T5236] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 264.585563][ T5236] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 264.595236][ T5236] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 264.603033][ T5236] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 264.612949][ T5236] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 265.875064][ T5230] Bluetooth: hci10: command tx timeout [ 266.199225][ T5230] Bluetooth: hci11: command tx timeout [ 266.434946][ T5230] Bluetooth: hci12: command tx timeout [ 266.595019][ T5230] Bluetooth: hci13: command tx timeout [ 266.674963][ T5230] Bluetooth: hci14: command tx timeout [ 267.956441][ T5230] Bluetooth: hci10: command tx timeout [ 268.216095][ T5236] Bluetooth: hci7: command 0x0406 tx timeout [ 268.223817][ T5236] Bluetooth: hci8: command 0x0406 tx timeout [ 268.230631][ T5230] Bluetooth: hci9: command 0x0406 tx timeout [ 268.276152][ T5234] Bluetooth: hci11: command tx timeout [ 268.514951][ T4624] Bluetooth: hci12: command tx timeout [ 268.675113][ T4624] Bluetooth: hci13: command tx timeout [ 268.754962][ T4624] Bluetooth: hci14: command tx timeout [ 270.035076][ T4624] Bluetooth: hci10: command tx timeout [ 270.354968][ T4624] Bluetooth: hci11: command tx timeout [ 270.594974][ T4624] Bluetooth: hci12: command tx timeout [ 270.755740][ T4624] Bluetooth: hci13: command tx timeout [ 270.835017][ T4624] Bluetooth: hci14: command tx timeout [ 272.114915][ T4624] Bluetooth: hci10: command tx timeout [ 272.434882][ T4624] Bluetooth: hci11: command tx timeout [ 272.674992][ T4624] Bluetooth: hci12: command tx timeout [ 272.834985][ T4624] Bluetooth: hci13: command tx timeout [ 272.915012][ T4624] Bluetooth: hci14: command tx timeout [ 274.260992][ T7457] bond0: (slave syz_tun): Releasing backup interface [ 317.318202][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.324556][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.837453][ T5234] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 323.846801][ T5234] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 323.854907][ T5234] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 323.862932][ T5234] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 323.870771][ T5234] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 323.905498][ T5234] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 324.330716][ T4624] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 324.340189][ T4624] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 324.355076][ T4624] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 324.389706][ T4624] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 324.397524][ T4624] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 324.406058][ T4624] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 324.528896][ T5234] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 324.539093][ T5234] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 324.549268][ T5234] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 324.557340][ T5234] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 324.565031][ T5234] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 324.578726][ T5234] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 324.786598][ T4624] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 324.800308][ T4624] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 324.812030][ T4624] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 324.827588][ T4624] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 324.837784][ T4624] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 324.846114][ T4624] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 324.952766][ T5234] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 324.961576][ T5234] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 324.969820][ T5234] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 324.984603][ T5234] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 324.993589][ T5234] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 325.001889][ T5230] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 325.331727][ T7538] chnl_net:caif_netlink_parms(): no params data found [ 325.459200][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.470335][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.482169][ T7538] bridge_slave_0: entered allmulticast mode [ 325.493990][ T7538] bridge_slave_0: entered promiscuous mode [ 325.512124][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.521635][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.537202][ T7538] bridge_slave_1: entered allmulticast mode [ 325.544254][ T7538] bridge_slave_1: entered promiscuous mode [ 325.612332][ T7538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.628050][ T7538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.703482][ T7538] team0: Port device team_slave_0 added [ 325.714147][ T7538] team0: Port device team_slave_1 added [ 325.774641][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.782067][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.816288][ T7538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.840429][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.854917][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.889583][ T7538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.955134][ T5230] Bluetooth: hci15: command tx timeout [ 325.978680][ T7538] hsr_slave_0: entered promiscuous mode [ 325.991076][ T7538] hsr_slave_1: entered promiscuous mode [ 326.002220][ T7538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.018526][ T7538] Cannot create hsr debugfs directory [ 326.243041][ T7538] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.435015][ T5230] Bluetooth: hci16: command tx timeout [ 326.677028][ T5230] Bluetooth: hci17: command tx timeout [ 326.914990][ T5230] Bluetooth: hci18: command tx timeout [ 327.074916][ T5230] Bluetooth: hci19: command tx timeout [ 328.035280][ T5242] Bluetooth: hci15: command tx timeout [ 328.514856][ T5242] Bluetooth: hci16: command tx timeout [ 328.754856][ T5242] Bluetooth: hci17: command tx timeout [ 328.995142][ T5242] Bluetooth: hci18: command tx timeout [ 329.155024][ T5242] Bluetooth: hci19: command tx timeout [ 329.651265][ T5230] Bluetooth: hci2: command 0x0406 tx timeout [ 329.657466][ T5243] Bluetooth: hci0: command 0x0406 tx timeout [ 329.663519][ T5243] Bluetooth: hci1: command 0x0406 tx timeout [ 329.669721][ T5239] Bluetooth: hci3: command 0x0406 tx timeout [ 329.686798][ T5242] Bluetooth: hci4: command 0x0406 tx timeout [ 330.115118][ T4624] Bluetooth: hci15: command tx timeout [ 330.601614][ T4624] Bluetooth: hci16: command tx timeout [ 330.834851][ T4624] Bluetooth: hci17: command tx timeout [ 331.074904][ T4624] Bluetooth: hci18: command tx timeout [ 331.234933][ T4624] Bluetooth: hci19: command tx timeout [ 332.195025][ T4624] Bluetooth: hci15: command tx timeout [ 332.676795][ T4624] Bluetooth: hci16: command tx timeout [ 332.914914][ T4624] Bluetooth: hci17: command tx timeout [ 333.155026][ T4624] Bluetooth: hci18: command tx timeout [ 333.325176][ T4624] Bluetooth: hci19: command tx timeout [ 337.155083][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 337.162785][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 337.203697][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 337.252199][ T30] task:kworker/u8:0 state:D stack:20496 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 337.364861][ T30] Workqueue: netns cleanup_net [ 337.369744][ T30] Call Trace: [ 337.373044][ T30] [ 337.446334][ T30] __schedule+0x1895/0x4b30 [ 337.450935][ T30] ? __pfx___schedule+0x10/0x10 [ 337.484967][ T30] ? __pfx_lock_release+0x10/0x10 [ 337.490113][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 337.555187][ T30] ? kthread_data+0x52/0xd0 [ 337.559769][ T30] ? schedule+0x90/0x320 [ 337.564047][ T30] ? wq_worker_sleeping+0x66/0x240 [ 337.615402][ T30] ? schedule+0x90/0x320 [ 337.619712][ T30] schedule+0x14b/0x320 [ 337.623905][ T30] schedule_preempt_disabled+0x13/0x30 [ 337.674851][ T30] __mutex_lock+0x6a7/0xd70 [ 337.679423][ T30] ? __mutex_lock+0x52a/0xd70 [ 337.684128][ T30] ? mpls_net_exit+0x7d/0x2a0 [ 337.700206][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 337.707525][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 337.712771][ T30] ? mpls_net_exit+0x78/0x2a0 [ 337.726172][ T30] ? kfree+0x1a0/0x440 [ 337.730285][ T30] ? mpls_net_exit+0x78/0x2a0 [ 337.741410][ T30] mpls_net_exit+0x7d/0x2a0 [ 337.748549][ T30] cleanup_net+0x802/0xcc0 [ 337.753010][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 337.763868][ T30] ? process_scheduled_works+0x976/0x1850 [ 337.771071][ T30] process_scheduled_works+0xa63/0x1850 [ 337.782771][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 337.790230][ T30] ? assign_work+0x364/0x3d0 [ 337.807747][ T30] worker_thread+0x870/0xd30 [ 337.812403][ T30] ? __kthread_parkme+0x169/0x1d0 [ 337.824589][ T30] ? __pfx_worker_thread+0x10/0x10 [ 337.830503][ T30] kthread+0x2f0/0x390 [ 337.843232][ T30] ? __pfx_worker_thread+0x10/0x10 [ 337.848876][ T30] ? __pfx_kthread+0x10/0x10 [ 337.853512][ T30] ret_from_fork+0x4b/0x80 [ 337.865170][ T30] ? __pfx_kthread+0x10/0x10 [ 337.869806][ T30] ret_from_fork_asm+0x1a/0x30 [ 337.874619][ T30] [ 337.885283][ T30] INFO: task kworker/u8:9:2992 blocked for more than 144 seconds. [ 337.893125][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 337.920224][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.933767][ T30] task:kworker/u8:9 state:D stack:23384 pid:2992 tgid:2992 ppid:2 flags:0x00004000 [ 337.949634][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 337.959931][ T30] Call Trace: [ 337.963246][ T30] [ 337.971027][ T30] __schedule+0x1895/0x4b30 [ 337.978086][ T30] ? __pfx___schedule+0x10/0x10 [ 337.982980][ T30] ? __pfx_lock_release+0x10/0x10 [ 337.994129][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 338.002274][ T30] ? kthread_data+0x52/0xd0 [ 338.011485][ T30] ? schedule+0x90/0x320 [ 338.018288][ T30] ? wq_worker_sleeping+0x66/0x240 [ 338.023475][ T30] ? schedule+0x90/0x320 [ 338.035194][ T30] schedule+0x14b/0x320 [ 338.039422][ T30] schedule_preempt_disabled+0x13/0x30 [ 338.052831][ T30] __mutex_lock+0x6a7/0xd70 [ 338.058142][ T30] ? __mutex_lock+0x52a/0xd70 [ 338.062856][ T30] ? addrconf_verify_work+0x19/0x30 [ 338.076235][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 338.081299][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 338.094723][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.101101][ T30] ? process_scheduled_works+0x976/0x1850 [ 338.114728][ T30] addrconf_verify_work+0x19/0x30 [ 338.119795][ T30] process_scheduled_works+0xa63/0x1850 [ 338.132911][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.141086][ T30] ? assign_work+0x364/0x3d0 [ 338.154097][ T30] worker_thread+0x870/0xd30 [ 338.159338][ T30] ? __kthread_parkme+0x169/0x1d0 [ 338.164402][ T30] ? __pfx_worker_thread+0x10/0x10 [ 338.177100][ T30] kthread+0x2f0/0x390 [ 338.181205][ T30] ? __pfx_worker_thread+0x10/0x10 [ 338.192504][ T30] ? __pfx_kthread+0x10/0x10 [ 338.200901][ T30] ret_from_fork+0x4b/0x80 [ 338.210535][ T30] ? __pfx_kthread+0x10/0x10 [ 338.217661][ T30] ret_from_fork_asm+0x1a/0x30 [ 338.222486][ T30] [ 338.232823][ T30] INFO: task syz-executor:7468 blocked for more than 144 seconds. [ 338.243108][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 338.261537][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.271698][ T30] task:syz-executor state:D stack:24880 pid:7468 tgid:7468 ppid:1 flags:0x00004006 [ 338.289255][ T30] Call Trace: [ 338.292568][ T30] [ 338.298310][ T30] __schedule+0x1895/0x4b30 [ 338.302875][ T30] ? __pfx___schedule+0x10/0x10 [ 338.313436][ T30] ? __pfx_lock_release+0x10/0x10 [ 338.321210][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 338.331321][ T30] ? schedule+0x90/0x320 [ 338.339211][ T30] schedule+0x14b/0x320 [ 338.343412][ T30] schedule_preempt_disabled+0x13/0x30 [ 338.362896][ T30] __mutex_lock+0x6a7/0xd70 [ 338.371104][ T30] ? __mutex_lock+0x52a/0xd70 [ 338.379660][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 338.390764][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 338.399534][ T30] ? read_word_at_a_time+0xe/0x20 [ 338.404594][ T30] ? sized_strscpy+0x8d/0x220 [ 338.413175][ T30] ip_tunnel_init_net+0x20e/0x720 [ 338.421907][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 338.432670][ T30] vti_init_net+0x2e/0xf0 [ 338.444859][ T30] ops_init+0x31e/0x590 [ 338.449070][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 338.461569][ T30] setup_net+0x287/0x9e0 [ 338.470485][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 338.482926][ T30] ? __pfx_setup_net+0x10/0x10 [ 338.488090][ T30] copy_net_ns+0x33f/0x570 [ 338.492646][ T30] create_new_namespaces+0x425/0x7b0 [ 338.504788][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 338.511487][ T30] ksys_unshare+0x57d/0xa70 [ 338.524266][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 338.531041][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.544186][ T30] ? do_syscall_64+0x100/0x230 [ 338.551638][ T30] __x64_sys_unshare+0x38/0x40 [ 338.562901][ T30] do_syscall_64+0xf3/0x230 [ 338.568894][ T30] ? clear_bhb_loop+0x35/0x90 [ 338.573609][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.588559][ T30] RIP: 0033:0x7fa9aa57f7f7 [ 338.593009][ T30] RSP: 002b:00007fa9aa85ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 338.611124][ T30] RAX: ffffffffffffffda RBX: 00007fa9aa5f1a85 RCX: 00007fa9aa57f7f7 [ 338.624546][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 338.636511][ T30] RBP: 0000000000000000 R08: 00007fa9ab267d60 R09: 0000000000000000 [ 338.651519][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 338.661547][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 338.675215][ T30] [ 338.690688][ T30] [ 338.690688][ T30] Showing all locks held in the system: [ 338.710263][ T30] 4 locks held by kworker/u8:0/11: [ 338.718227][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 338.735762][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 338.749811][ T7538] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.768114][ T30] #2: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 338.789983][ T30] #3: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x7d/0x2a0 [ 338.804420][ T30] 1 lock held by khungtaskd/30: [ 338.814278][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 338.827837][ T30] 3 locks held by kworker/u8:2/35: [ 338.832974][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 338.854502][ T30] #1: ffffc90000ab7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 338.874129][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 338.883536][ T30] 3 locks held by kworker/1:1/81: [ 338.895667][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 338.918729][ T30] #1: ffffc900015d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 338.935670][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 338.954039][ T30] 3 locks held by kworker/u8:9/2992: [ 338.961751][ T30] #0: ffff88814b527948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 338.979434][ T30] #1: ffffc900098a7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 338.996009][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 339.011684][ T30] 2 locks held by getty/4991: [ 339.019660][ T30] #0: ffff88814b72a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 339.034724][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 339.052328][ T30] 3 locks held by kworker/0:4/5282: [ 339.057849][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 339.079677][ T30] #1: ffffc90003cb7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 339.094576][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 339.112392][ T30] 2 locks held by syz-executor/7464: [ 339.118356][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.134728][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 339.144114][ T30] 2 locks held by syz-executor/7468: [ 339.163417][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.183075][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 339.193306][ T30] 2 locks held by syz-executor/7471: [ 339.205901][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.222546][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 339.233599][ T30] 2 locks held by syz-executor/7473: [ 339.244815][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.263301][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 339.273655][ T30] 2 locks held by syz-executor/7475: [ 339.285401][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.303111][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 339.312988][ T30] 2 locks held by syz-executor/7485: [ 339.324782][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.334254][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 339.353617][ T30] 2 locks held by syz-executor/7488: [ 339.363591][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.381814][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 339.392254][ T30] 2 locks held by syz-executor/7491: [ 339.405795][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.422079][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 339.433745][ T30] 2 locks held by syz-executor/7493: [ 339.445004][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.454479][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 339.480117][ T30] 2 locks held by syz-executor/7495: [ 339.493710][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.503602][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 339.521038][ T30] 2 locks held by syz-executor/7509: [ 339.526847][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.544392][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 339.563338][ T30] 2 locks held by syz-executor/7513: [ 339.569023][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.590499][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 339.604136][ T30] 2 locks held by syz-executor/7516: [ 339.614308][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.627463][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 339.644853][ T30] 2 locks held by syz-executor/7518: [ 339.650169][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.669417][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 339.683815][ T30] 2 locks held by syz-executor/7519: [ 339.699030][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.712087][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 339.730874][ T30] 1 lock held by syz-executor/7530: [ 339.737751][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 339.754064][ T30] 2 locks held by syz-executor/7532: [ 339.759755][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.778506][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 339.793937][ T30] 2 locks held by syz-executor/7534: [ 339.810766][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.822821][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 339.841099][ T30] 8 locks held by syz-executor/7538: [ 339.848052][ T30] #0: ffff88807ad06420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 339.864463][ T30] #1: ffff8880203e1488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 339.875573][ T30] #2: ffff888144bff3c8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 339.895584][ T30] #3: ffffffff8f56fea8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 339.914928][ T30] #4: ffff88807e2910e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 339.933996][ T30] #5: ffff88807e292250 (&devlink->lock_key#5){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 339.944578][ T30] #6: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 339.953788][ T30] #7: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 339.974746][ T30] 2 locks held by syz-executor/7540: [ 339.980070][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.996207][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 340.013465][ T30] [ 340.021818][ T30] ============================================= [ 340.021818][ T30] [ 340.037999][ T30] NMI backtrace for cpu 1 [ 340.042365][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 340.052885][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 340.062954][ T30] Call Trace: [ 340.066254][ T30] [ 340.069211][ T30] dump_stack_lvl+0x241/0x360 [ 340.073953][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.079175][ T30] ? __pfx__printk+0x10/0x10 [ 340.083799][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 340.088762][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 340.094240][ T30] ? _printk+0xd5/0x120 [ 340.098420][ T30] ? __pfx__printk+0x10/0x10 [ 340.103032][ T30] ? __wake_up_klogd+0xcc/0x110 [ 340.107991][ T30] ? __pfx__printk+0x10/0x10 [ 340.112599][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 340.117649][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 340.123652][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 340.129655][ T30] watchdog+0xff4/0x1040 [ 340.133921][ T30] ? watchdog+0x1ea/0x1040 [ 340.138369][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.143064][ T30] kthread+0x2f0/0x390 [ 340.147150][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.151846][ T30] ? __pfx_kthread+0x10/0x10 [ 340.156455][ T30] ret_from_fork+0x4b/0x80 [ 340.160892][ T30] ? __pfx_kthread+0x10/0x10 [ 340.165499][ T30] ret_from_fork_asm+0x1a/0x30 [ 340.170293][ T30] [ 340.174466][ T30] Sending NMI from CPU 1 to CPUs 0: [ 340.180394][ C0] NMI backtrace for cpu 0 [ 340.180408][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 340.180427][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 340.180436][ C0] RIP: 0010:nf_nat_inet_fn+0x1a6/0xd10 [ 340.180457][ C0] Code: bb 00 00 04 00 be 00 00 04 00 4c 21 f6 31 ff e8 c0 a6 ae f7 4c 21 f3 0f 85 da 00 00 00 e8 d2 a1 ae f7 4d 89 e6 4c 89 7c 24 40 <48> 8b 44 24 20 48 8d 98 f0 00 00 00 48 89 d8 48 c1 e8 03 48 b9 00 [ 340.180475][ C0] RSP: 0018:ffffc900001572c0 EFLAGS: 00000246 [ 340.180490][ C0] RAX: ffffffff89e64483 RBX: ffff888026e1e000 RCX: ffff88801ceb5a00 [ 340.180502][ C0] RDX: 0000000000000100 RSI: ffff888026e1e000 RDI: 0000000000000000 [ 340.180518][ C0] RBP: ffffc90000157410 R08: ffffffff89e6446a R09: ffffffff89e6cae3 [ 340.180530][ C0] R10: 0000000000000002 R11: ffff88801ceb5a00 R12: ffff888026e1e003 [ 340.180542][ C0] R13: 1ffff9200002ae64 R14: ffff888026e1e003 R15: ffff88806a560b40 [ 340.180554][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 340.180567][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.180578][ C0] CR2: 0000001b2c21bff8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 340.180592][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 340.180602][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 340.180612][ C0] Call Trace: [ 340.180617][ C0] [ 340.180624][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 340.180642][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 340.180664][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 340.180680][ C0] ? nmi_handle+0x2a/0x5a0 [ 340.180702][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 340.180721][ C0] ? nmi_handle+0x14f/0x5a0 [ 340.180740][ C0] ? nmi_handle+0x2a/0x5a0 [ 340.180756][ C0] ? nf_nat_inet_fn+0x1a6/0xd10 [ 340.180771][ C0] ? default_do_nmi+0x63/0x160 [ 340.180788][ C0] ? exc_nmi+0x123/0x1f0 [ 340.180805][ C0] ? end_repeat_nmi+0xf/0x53 [ 340.180821][ C0] ? nf_nat_ipv4_local_in+0x123/0x770 [ 340.180837][ C0] ? nf_nat_inet_fn+0x10a/0xd10 [ 340.180851][ C0] ? nf_nat_inet_fn+0x123/0xd10 [ 340.180865][ C0] ? nf_nat_inet_fn+0x1a6/0xd10 [ 340.180880][ C0] ? nf_nat_inet_fn+0x1a6/0xd10 [ 340.180895][ C0] ? nf_nat_inet_fn+0x1a6/0xd10 [ 340.180910][ C0] [ 340.180915][ C0] [ 340.180925][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 340.180945][ C0] ? ipt_do_table+0x312/0x1860 [ 340.180966][ C0] nf_nat_ipv4_local_in+0x210/0x770 [ 340.180987][ C0] ? __pfx_nf_nat_ipv4_local_in+0x10/0x10 [ 340.181002][ C0] nf_hook_slow+0xc3/0x220 [ 340.181021][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 340.181037][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 340.181053][ C0] NF_HOOK+0x29e/0x450 [ 340.181070][ C0] ? NF_HOOK+0x9a/0x450 [ 340.181084][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 340.181101][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 340.181120][ C0] ? ip_rcv_finish+0x406/0x560 [ 340.181137][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 340.181152][ C0] NF_HOOK+0x3a4/0x450 [ 340.181167][ C0] ? __lock_acquire+0x1384/0x2050 [ 340.181187][ C0] ? NF_HOOK+0x9a/0x450 [ 340.181202][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 340.181216][ C0] ? ip_rcv_core+0x801/0xd10 [ 340.181232][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 340.181251][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 340.181267][ C0] __netif_receive_skb+0x2bf/0x650 [ 340.181286][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 340.181305][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 340.181321][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 340.181340][ C0] ? __pfx_lock_release+0x10/0x10 [ 340.181360][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 340.181384][ C0] process_backlog+0x662/0x15b0 [ 340.181403][ C0] ? process_backlog+0x33b/0x15b0 [ 340.181424][ C0] ? __pfx_process_backlog+0x10/0x10 [ 340.181441][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 340.181461][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.181482][ C0] __napi_poll+0xcb/0x490 [ 340.181500][ C0] net_rx_action+0x89b/0x1240 [ 340.181532][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 340.181551][ C0] ? sched_clock+0x4a/0x70 [ 340.181575][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.181599][ C0] handle_softirqs+0x2c5/0x980 [ 340.181620][ C0] ? run_ksoftirqd+0xca/0x130 [ 340.181640][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 340.181657][ C0] ? preempt_schedule+0xe1/0xf0 [ 340.181679][ C0] run_ksoftirqd+0xca/0x130 [ 340.181697][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 340.181717][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 340.181736][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 340.181754][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 340.181771][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 340.181790][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 340.181807][ C0] smpboot_thread_fn+0x544/0xa30 [ 340.181826][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 340.181846][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 340.181864][ C0] kthread+0x2f0/0x390 [ 340.181879][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 340.181897][ C0] ? __pfx_kthread+0x10/0x10 [ 340.181911][ C0] ret_from_fork+0x4b/0x80 [ 340.181929][ C0] ? __pfx_kthread+0x10/0x10 [ 340.181944][ C0] ret_from_fork_asm+0x1a/0x30 [ 340.181970][ C0] [ 340.754215][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 340.761214][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 340.771737][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 340.781813][ T30] Call Trace: [ 340.785104][ T30] [ 340.788044][ T30] dump_stack_lvl+0x241/0x360 [ 340.792743][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.797961][ T30] ? __pfx__printk+0x10/0x10 [ 340.802574][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 340.808585][ T30] ? vscnprintf+0x5d/0x90 [ 340.812937][ T30] panic+0x349/0x880 [ 340.816856][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 340.823030][ T30] ? __pfx_panic+0x10/0x10 [ 340.827469][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 340.832856][ T30] ? __irq_work_queue_local+0x137/0x410 [ 340.838423][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 340.843817][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 340.849998][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 340.856176][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 340.862361][ T30] watchdog+0x1033/0x1040 [ 340.866714][ T30] ? watchdog+0x1ea/0x1040 [ 340.871156][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.875891][ T30] kthread+0x2f0/0x390 [ 340.880062][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.884846][ T30] ? __pfx_kthread+0x10/0x10 [ 340.889453][ T30] ret_from_fork+0x4b/0x80 [ 340.893981][ T30] ? __pfx_kthread+0x10/0x10 [ 340.898588][ T30] ret_from_fork_asm+0x1a/0x30 [ 340.903384][ T30] [ 340.906670][ T30] Kernel Offset: disabled [ 340.910993][ T30] Rebooting in 86400 seconds..